Manual Dslam Huawei

May 1, 2018 | Author: OrFeO14 | Category: Radius, Command Line Interface, Network Protocols, Network Architecture, Wide Area Network
Share
Report this link


Comments



Description

SmartAX MA5600/MA5603 Multi-service Access Module V300R003Configuration Guide Issue Date Part Number 04 2007-11-30 31500234 Huawei Technologies Proprietary Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. For any assistance, please contact our local office or company headquarters. Huawei Technologies Co., Ltd. Address: Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China http://www.huawei.com [email protected] Website: Email: Copyright © 2007 Huawei Technologies Co., Ltd. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are the property of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but the statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Huawei Technologies Proprietary SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents Contents About This Document.....................................................................................................................1 1 Managing the License................................................................................................................1-1 1.1 Overview of the License.................................................................................................................................1-2 1.2 License Principles...........................................................................................................................................1-2 1.3 Configuration Example of the License Application........................................................................................1-3 1.4 Configuring the License Server.......................................................................................................................1-6 1.5 Configuring the ESN.......................................................................................................................................1-7 2 Configuring the Maintenance Terminal ...............................................................................2-1 2.1 Overview.........................................................................................................................................................2-2 2.2 Configuring the Terminal Through the Local Serial Port...............................................................................2-3 2.3 Configuring the Terminal Through the Remote Serial Port............................................................................2-7 2.4 Configuring the Terminal Through the Outband Management Channel .....................................................2-12 2.5 Configuring the Terminal Through the Inband Management Channel.........................................................2-15 2.6 Configuring the Terminal Through SSH.......................................................................................................2-19 3 Getting Started With CLI..........................................................................................................3-1 3.1 Overview.........................................................................................................................................................3-2 3.2 CLI Characteristics..........................................................................................................................................3-2 3.2.1 Command Modes...................................................................................................................................3-3 3.2.2 Intelligent Matching...............................................................................................................................3-5 3.2.3 Edit Characteristics................................................................................................................................3-6 3.2.4 Interaction Characteristics......................................................................................................................3-7 3.2.5 Parameter Prompt...................................................................................................................................3-7 3.2.6 Display Characteristics...........................................................................................................................3-8 3.2.7 Saving and Showing History Commands...............................................................................................3-9 3.2.8 CLI Error Prompts................................................................................................................................3-10 3.3 Basic Operations Through CLI.....................................................................................................................3-10 3.3.1 Obtaining Online Help Information.....................................................................................................3-11 3.3.2 Enabling Interactive Command Execution...........................................................................................3-13 3.3.3 Enabling CLI Trap Reporting..............................................................................................................3-13 3.3.4 Switching Terminal Language.............................................................................................................3-14 3.3.5 Setting System Time............................................................................................................................3-15 3.3.6 Setting System Name...........................................................................................................................3-16 Issue 04 (2007-11-30) Huawei Technologies Proprietary i Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3.3.7 Setting Terminal Type..........................................................................................................................3-16 3.3.8 Setting Timeout Exit Time...................................................................................................................3-17 3.3.9 Locking the Terminal...........................................................................................................................3-18 3.3.10 Clearing Terminal Screen...................................................................................................................3-18 3.3.11 Showing Version................................................................................................................................3-19 3.3.12 Showing CPU Usage..........................................................................................................................3-19 3.3.13 Showing the Memory Usage..............................................................................................................3-20 3.3.14 Testing Network State........................................................................................................................3-20 4 Configuring the Network Management................................................................................4-1 4.1 Overview.........................................................................................................................................................4-2 4.2 Basic Concepts................................................................................................................................................4-2 4.3 Configuration Example of an Outband NMS..................................................................................................4-3 4.4 Configuration Example of an Inband NMS....................................................................................................4-5 4.5 SNMP Agent Configuration............................................................................................................................4-8 4.5.1 Setting the SNMP Version.....................................................................................................................4-9 4.5.2 Adding a Community Name and Setting Its Read/Write Authorities..................................................4-10 4.5.3 Enabling Trap Sending.........................................................................................................................4-11 4.5.4 Setting the IP address of a Destination Host of Traps..........................................................................4-11 4.5.5 Setting the Source Interface for Sending Traps....................................................................................4-12 4.5.6 Setting the System Contact Information..............................................................................................4-13 4.5.7 Setting the System Location Information.............................................................................................4-13 4.5.8 Configuring an SNMP V3 User...........................................................................................................4-14 4.5.9 Configuring an SNMP V3 Group.........................................................................................................4-15 4.5.10 Configuring an SNMP MIB View.....................................................................................................4-16 4.5.11 Configuring the Local SNMP Engine ID...........................................................................................4-17 4.5.12 Enabling the Handshake Function between the MA5600 and the N2000.........................................4-18 4.5.13 Setting the Handshake Interval..........................................................................................................4-19 4.6 Configuring the IP Address of the Outband NMS Interface.........................................................................4-20 4.7 Configuring an NMS Route..........................................................................................................................4-21 4.8 Configuring the IP Address of the Inband NMS Interface............................................................................4-22 5 Configuring the Log Host.........................................................................................................5-1 5.1 Overview.........................................................................................................................................................5-2 5.2 Configuration Example of a Log Host............................................................................................................5-2 5.3 Configuring a Log Host...................................................................................................................................5-3 5.4 Deleting a Log Host........................................................................................................................................5-4 5.5 Deactivating a Log Host..................................................................................................................................5-5 5.6 Querying Logs.................................................................................................................................................5-6 6 Managing Users..........................................................................................................................6-1 6.1 Overview.........................................................................................................................................................6-2 6.2 Adding a User Profile......................................................................................................................................6-2 6.3 Adding a User..................................................................................................................................................6-5 ii Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 6.4 Modifying the User Attributes........................................................................................................................6-7 6.4.1 Modifying the Profile Bound with a User..............................................................................................6-7 6.4.2 Modifying a User Level.........................................................................................................................6-8 6.4.3 Changing a User Password.....................................................................................................................6-9 6.4.4 Modifying the Permitted Reenter Number...........................................................................................6-10 6.4.5 Modifying the Appended Information.................................................................................................6-11 6.5 Disconnecting an Online User.......................................................................................................................6-12 6.6 Deleting a User..............................................................................................................................................6-13 7 Managing the Device.................................................................................................................7-1 7.1 Overview.........................................................................................................................................................7-2 7.2 Setting the Description of a Shelf...................................................................................................................7-3 7.3 Resetting the Control Boards..........................................................................................................................7-3 7.4 Adding a Service Board Offline......................................................................................................................7-4 7.5 Confirming a Service Board............................................................................................................................7-6 7.6 Deleting a Service Board.................................................................................................................................7-6 7.7 Resetting a Service Board...............................................................................................................................7-7 7.8 Prohibiting a Service Board............................................................................................................................7-7 7.9 Managing a Subboard......................................................................................................................................7-8 8 Configuring the Remote User Authentication.....................................................................8-1 8.1 Overview.........................................................................................................................................................8-2 8.2 Related Concepts.............................................................................................................................................8-2 8.2.1 Introduction to AAA..............................................................................................................................8-2 8.2.2 Introduction to RADIUS........................................................................................................................8-3 8.2.3 Introduction to SSH................................................................................................................................8-3 8.3 Configuration Example of Remote User Authentication................................................................................8-4 8.4 Configuring RADIUS.....................................................................................................................................8-7 8.4.1 Overview................................................................................................................................................8-7 8.4.2 Specifying the RADIUS Server Template.............................................................................................8-8 8.4.3 Setting the IP Address and Port Number of a RADIUS Server.............................................................8-9 8.4.4 Setting the Shared Key of the RADIUS Server...................................................................................8-10 8.4.5 Setting the Response Timeout Interval of a RADIUS Server..............................................................8-11 8.4.6 Setting the Maximum Retransmit Count of RADIUS Request Packets..............................................8-12 8.4.7 Setting the RADIUS Server Type........................................................................................................8-13 8.4.8 Configuring an NAS Port and Its ID Format.......................................................................................8-14 8.4.9 Setting the Format of User Name Sent to a RADIUS Server..............................................................8-14 8.5 Configuring AAA..........................................................................................................................................8-16 8.5.1 Configuring an Authentication Scheme...............................................................................................8-16 8.5.2 Creating a Domain...............................................................................................................................8-17 8.5.3 Specifying the RADIUS Server Template...........................................................................................8-18 8.5.4 Specifying the Authentication Scheme................................................................................................8-19 8.6 Configuring SSH...........................................................................................................................................8-21 8.6.1 Creating the Local RSA Key Pair........................................................................................................8-21 Issue 04 (2007-11-30) Huawei Technologies Proprietary iii Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8.6.2 Configuring the SSH User Public Key.................................................................................................8-22 8.6.3 Configuring an SSH User.....................................................................................................................8-24 9 Configuring the VLAN ............................................................................................................9-1 9.1 Overview.........................................................................................................................................................9-3 9.2 Configuration Example of a Standard VLAN.................................................................................................9-5 9.3 Configuration Example of a Smart VLAN..................................................................................................... 9-5 9.4 Configuration Example of a MUX VLAN......................................................................................................9-7 9.5 Configuration Example of the Super VLAN...................................................................................................9-9 9.6 Creating a VLAN..........................................................................................................................................9-13 9.7 Configuring the VLAN Attribute..................................................................................................................9-15 9.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLAN.................................................9-16 9.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN..................................................9-17 9.10 Adding an Upstream Port to a VLAN.........................................................................................................9-17 9.11 Adding a Service Port to a VLAN..............................................................................................................9-18 9.12 Adding Service Ports in Batches.................................................................................................................9-20 9.13 Setting the Description of a Service Port....................................................................................................9-22 10 Configuring the DHCP Relay..............................................................................................10-1 10.1 Overview.....................................................................................................................................................10-3 10.2 Configuration Example of DHCP Standard Mode......................................................................................10-4 10.3 Configuration Example of DHCP Option60 Mode.....................................................................................10-6 10.4 Configuration Example of DHCP MAC Address Segment Mode..............................................................10-9 10.5 Creating a DHCP Server Group................................................................................................................10-12 10.6 Setting Working Mode of a DHCP Server................................................................................................10-13 10.7 Setting DHCP Relay Mode.......................................................................................................................10-14 10.8 Binding a DHCP Server Group with a VLAN Interface...........................................................................10-15 10.9 Creating an Option60 Domain..................................................................................................................10-16 10.10 Binding a DHCP Server Group with a DHCP Option60 Domain..........................................................10-17 10.11 Configuring the Gateway of a DHCP Option60 Domain.......................................................................10-17 10.12 Creating a DHCP MAC Address Segment.............................................................................................10-18 10.13 Setting the Range of a DHCP MAC Address Segment..........................................................................10-19 10.14 Binding a DHCP Server Group with a DHCP MAC Address Segment.................................................10-20 10.15 Configuring the Gateway of a DHCP MAC Address Segment..............................................................10-21 11 Configuring the ARP & ARP Proxy....................................................................................11-1 11.1 Overview.....................................................................................................................................................11-2 11.2 Configuration Example of the ARP Proxy..................................................................................................11-2 11.3 Adding a Static ARP Entry.........................................................................................................................11-5 11.4 Enabling the ARP Proxy.............................................................................................................................11-6 12 Configuring the Routing Protocol......................................................................................12-1 12.1 Routing Protocol Configuration..................................................................................................................12-3 12.2 Configuration Example of the Static Route................................................................................................12-3 12.3 Configuration Example of RIP....................................................................................................................12-6 iv Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 12.4 Configuration Example of OSPF................................................................................................................12-9 12.5 Configuration Example of a Route Policy................................................................................................12-13 12.6 Adding a Static Route...............................................................................................................................12-16 12.7 Configuring RIP........................................................................................................................................12-17 12.7.1 Enabling RIP Process.......................................................................................................................12-18 12.7.2 Setting the RIP Version....................................................................................................................12-19 12.7.3 Configuring Zero Field Check for RIP-I Packets.............................................................................12-20 12.7.4 Setting the Cost of the Default Route...............................................................................................12-21 12.7.5 Enabling Route Summarization.......................................................................................................12-22 12.7.6 Specifying Default Routing Metric..................................................................................................12-23 12.7.7 Importing Routes of Other Protocols...............................................................................................12-24 12.7.8 Disabling Receiving Host Routes....................................................................................................12-25 12.7.9 Configuring the RIP Preference.......................................................................................................12-26 12.7.10 Configuring the Route Filtering Policy..........................................................................................12-27 12.7.11 Verifying the Source IP Address of a RIP Route Update..............................................................12-28 12.7.12 Resetting RIP..................................................................................................................................12-29 12.7.13 Clearing RIP Process Statistics......................................................................................................12-30 12.7.14 Disabling RIP Packet Transmission on an Interface......................................................................12-30 12.7.15 Configuring the IP Address of a Peer Router.................................................................................12-31 12.7.16 Configuring a Summary Route IP Address....................................................................................12-32 12.7.17 Enabling an Interface to Receive/Transmit RIP Packets................................................................12-32 12.7.18 Enabling the Split Horizon Function..............................................................................................12-33 12.7.19 Enabling the Poison Reverse Function...........................................................................................12-34 12.7.20 Configuring the RIP-2 Authentication Mode.................................................................................12-35 12.7.21 Configuring the Additional Metric of a Route...............................................................................12-35 12.7.22 Configuring the RIP Timer............................................................................................................12-36 12.7.23 Enabling the Transparent Transmission function of the RIP Packet Based on the VLAN............12-37 12.8 Configuring OSPF.....................................................................................................................................12-38 12.8.1 Enabling OSPF Process....................................................................................................................12-39 12.8.2 Configuring DR Priority...................................................................................................................12-40 12.8.3 Setting an OSPF Router ID..............................................................................................................12-40 12.8.4 Entering OSPF Area Config Mode..................................................................................................12-41 12.8.5 Configuring Subnets for an Area.....................................................................................................12-42 12.8.6 Configuring the OSPF Stub Area.....................................................................................................12-43 12.8.7 Configuring an NBMA Adjacent Router.........................................................................................12-43 12.8.8 Setting OSPF Preference..................................................................................................................12-44 12.8.9 Disabling OSPF Packet Transmission on an Interface.....................................................................12-45 12.8.10 Configuring the Maximum OSPF Route Count.............................................................................12-46 12.8.11 Enabling OSPF Logging Function.................................................................................................12-47 12.8.12 Setting the VLAN-Based Transparent Transmission for OSPF Packets.......................................12-47 12.9 Configuring OSPF on a VLAN Interface..................................................................................................12-48 12.9.1 Configuring the Network Type on an OSPF Interface.....................................................................12-48 Issue 04 (2007-11-30) Huawei Technologies Proprietary v Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12.9.2 Configuring OSPF Cost...................................................................................................................12-49 12.9.3 Configuring OSPF Packet Authentication.......................................................................................12-50 12.9.4 Configuring the MTU of the DD Packet..........................................................................................12-50 12.10 Configuring OSPF Timer........................................................................................................................12-51 12.10.1 Setting the Interval for Sending the Hello Packets........................................................................12-52 12.10.2 Setting the Dead Time Between Adjacent Routers........................................................................12-52 12.10.3 Setting the Hello Packet Poll Interval............................................................................................12-53 12.10.4 Setting the LSA Transmit Delay....................................................................................................12-54 12.10.5 Setting the LSA Retransmit Interval between Adjacent Routers...................................................12-55 12.10.6 Setting the SPF Calculation Interval for OSPF..............................................................................12-55 12.11 Configuring Route Summarization.........................................................................................................12-56 12.11.1 Configuring Route Summarization Between Areas.......................................................................12-56 12.11.2 Configuring the Summarization of Routes Imported by OSPF.....................................................12-57 12.12 Configuring OSPF Route Import............................................................................................................12-58 12.12.1 Importing Routes from Other Protocols into OSPF.......................................................................12-58 12.12.2 Setting the Default Parameters of OSPF Imported Routes............................................................12-59 12.13 Configuring a Route Policy.....................................................................................................................12-60 12.13.1 Defining a Route Policy.................................................................................................................12-60 12.13.2 Defining the if-match Clause of a Route Policy............................................................................12-62 12.13.3 Defining the apply Clause of a Route Policy.................................................................................12-63 13 Configuring MSTP.................................................................................................................13-1 13.1 Overview.....................................................................................................................................................13-3 13.2 Enabling the MSTP Function......................................................................................................................13-3 13.3 Setting the Working Mode of MSTP..........................................................................................................13-5 13.4 Setting the MST Region Parameters...........................................................................................................13-6 13.4.1 Setting the MD5-Key for the MD5 Encryption Algorithm Configured on the MST Region............13-7 13.4.2 Configuring the MST Region Name..................................................................................................13-8 13.4.3 Mapping the Specified VLAN to the Specified MSTP Instance........................................................13-9 13.4.4 Mapping All VLANs to the MSTP Instances by Modular Arithmetic............................................13-10 13.4.5 Setting the MSTP Revision Level....................................................................................................13-11 13.4.6 Restoring the Default Settings for All Parameters of the MST Region...........................................13-13 13.5 Activating the Configuration of the MST Region.....................................................................................13-13 13.6 Specifying the Device as a Root Bridge or a Backup Root Bridge...........................................................13-14 13.7 Setting the Priority of the Device in the Specified Spanning Tree Instance.............................................13-15 13.8 Setting the Maximum Hop of the MST Region........................................................................................13-17 13.9 Setting the Diameter of the Switching Fabric...........................................................................................13-18 13.10 Setting the Calculation Standard for the Path Cost.................................................................................13-19 13.11 Setting the Time Parameters of the Specified Network Bridge..............................................................13-20 13.11.1 Setting the Forward Delay of the Specified Network Bridge........................................................13-21 13.11.2 Setting the Hello Time of the Specified Network Bridge..............................................................13-22 13.11.3 Setting the Max Age of the Specified Network Bridge..................................................................13-23 13.11.4 Setting the Timeout Time Factor of the Specified Network Bridge..............................................13-25 vi Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 13.12 Setting the Parameters of the Specified Port...........................................................................................13-26 13.12.1 Setting the Maximum Transmission Rate of the Specified Port....................................................13-26 13.12.2 Setting the Specified Port as an Edge Port.....................................................................................13-27 13.12.3 Setting the Path Cost of the Port in the Specified Spanning Tree Instance....................................13-28 13.12.4 Setting the Priority of the Specified Port.......................................................................................13-30 13.12.5 Setting the Point-to-Point Link Connection of the Specified Port.................................................13-31 13.13 Setting the mCheck Variable...................................................................................................................13-32 13.14 Configuring the Device Protection Function..........................................................................................13-33 13.14.1 Enabling the BPDU Protection Function of the Device.................................................................13-33 13.14.2 Enabling the Loop Protection Function of the Device...................................................................13-34 13.14.3 Enabling the Root Protection Function of the Device....................................................................13-35 13.15 Clear the MSTP Protocol Statistics.........................................................................................................13-36 14 Configuring NTP....................................................................................................................14-1 14.1 Overview.....................................................................................................................................................14-3 14.2 Configuration Example of NTP Broadcast Mode.......................................................................................14-3 14.3 Configuration Example of NTP Multicast Mode........................................................................................14-6 14.4 Configuration Example of NTP Server/Client Mode..................................................................................14-9 14.5 Configuration Example of NTP Peer Mode..............................................................................................14-13 14.6 Configuring the NTP ID Authentication...................................................................................................14-16 14.7 Configuring the NTP Master Clock..........................................................................................................14-18 14.8 Configuring NTP Broadcast Mode...........................................................................................................14-19 14.8.1 Configuring NTP Broadcast Server Mode.......................................................................................14-19 14.8.2 Configuring NTP Broadcast Client Mode........................................................................................14-20 14.9 Configuring the NTP Multicast Mode......................................................................................................14-21 14.10 Configuring NTP Server/Client Mode....................................................................................................14-23 14.11 Configuring NTP Peer Mode..................................................................................................................14-24 14.12 Configuring the Authority of Access to a Local Device's NTP Service.................................................14-25 14.13 Configuring an Interface for Transmitting/Receiving NTP Packets.......................................................14-26 15 Configuring MAC Address..................................................................................................15-1 15.1 Overview.....................................................................................................................................................15-2 15.2 Adding a Static MAC Address....................................................................................................................15-2 15.3 Setting the Maximum MAC Address Number Learned by a Service Port.................................................15-3 15.4 Configuring the Aging Time of a Dynamic MAC Address........................................................................15-4 15.5 Binding the MAC Address..........................................................................................................................15-5 15.6 Configuring MAC Address Filtering..........................................................................................................15-5 15.7 Configuring the MAC Address Pool...........................................................................................................15-6 16 Configuring TCP/IP Connection.........................................................................................16-1 16.1 Overview.....................................................................................................................................................16-2 16.2 Basic Concepts............................................................................................................................................16-2 16.3 Configuring the Synwait Timer...................................................................................................................16-2 16.4 Configuring the Finwait Timer...................................................................................................................16-3 Issue 04 (2007-11-30) Huawei Technologies Proprietary vii Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 16.5 Configuring the Socket Buffer....................................................................................................................16-3 16.6 Enabling the TCP Debugging.....................................................................................................................16-4 16.7 Enabling the IP Packets Debugging............................................................................................................16-5 17 Configuring ACL....................................................................................................................17-1 17.1 Overview.....................................................................................................................................................17-3 17.2 Related Concepts.........................................................................................................................................17-6 17.3 Configuring the Basic ACL.......................................................................................................................17-10 17.4 Configuring the Advanced ACL...............................................................................................................17-11 17.5 Configuring the Layer 2 ACL...................................................................................................................17-13 17.6 Configuration Example of the Customized ACL......................................................................................17-15 17.7 Creating an ACL.......................................................................................................................................17-16 17.8 Configuring a Time Range........................................................................................................................17-18 17.9 Setting the Step..........................................................................................................................................17-19 17.10 Creating a Basic ACL Rule.....................................................................................................................17-20 17.11 Creating an Advanced ACL Rule............................................................................................................17-21 17.12 Creating a Layer 2 ACL Rule.................................................................................................................17-22 17.13 Creating a Customized ACL Rule...........................................................................................................17-23 17.14 Activating an ACL..................................................................................................................................17-25 18 Configuring the QoS.............................................................................................................18-1 18.1 Overview.....................................................................................................................................................18-2 18.2 Configuring the Traffic Entry.....................................................................................................................18-2 18.3 Configuring the Queue Scheduling.............................................................................................................18-5 18.3.1 Configuring the Queue Scheduling....................................................................................................18-6 18.4 Managing the Traffic Based on the ACL Rule............................................................................................18-7 18.4.1 Restricting the Traffic That Matches the ACL Rule..........................................................................18-8 18.4.2 Adding a Priority Tag to the Traffic That Matches the ACL Rule....................................................18-9 18.4.3 Measuring the Traffic That Matches the ACL Rule.........................................................................18-10 18.4.4 Mirroring the Traffic That Matches the ACL Rule..........................................................................18-11 18.4.5 Redirecting the Traffic That Matches the ACL Rule.......................................................................18-12 18.5 Setting the Rate Limit for an Upstream Port.............................................................................................18-13 19 Configuring User Security....................................................................................................19-1 19.1 Overview.....................................................................................................................................................19-3 19.2 Enabling the PITP.......................................................................................................................................19-3 19.3 Setting the RAIO Working Mode...............................................................................................................19-4 19.4 Setting the Ethernet Encapsulation Type....................................................................................................19-5 19.5 Enabling the DHCP Option82 Function......................................................................................................19-6 19.6 Setting the Maximum Length of DHCP Packets........................................................................................19-7 19.7 Binding the IP Address...............................................................................................................................19-8 19.8 Binding the MAC Address..........................................................................................................................19-9 19.9 Enabling Anti MAC Spoofing...................................................................................................................19-10 19.10 Enabling Anti IP Spoofing......................................................................................................................19-11 viii Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 20 Configuring System Security...............................................................................................20-1 20.1 Overview.....................................................................................................................................................20-3 20.2 Enabling Anti DoS Attack...........................................................................................................................20-3 20.3 Enabling Anti IP Attack..............................................................................................................................20-4 20.4 Enabling Anti ICMP Attack........................................................................................................................20-5 20.5 Enabling Source Route Filtering.................................................................................................................20-5 20.6 Configuring MAC Address Filtering..........................................................................................................20-6 20.7 Setting the Time to Detect Exceptional Disconnection of the PPPoE/DHCP Users..................................20-7 20.8 Configuring the Black List..........................................................................................................................20-8 20.9 Configuring the Firewall Function..............................................................................................................20-9 20.10 Configuring an Accessible Address Segment.........................................................................................20-11 20.11 Configuring the Inaccessible Address Segment......................................................................................20-12 21 Configuring the ADSL2+ Service.......................................................................................21-1 21.1 Overview.....................................................................................................................................................21-3 21.2 Configuration Example of the ADSL2+ PPPoE/IPoE Service...................................................................21-4 21.3 Configuration Example of the ADSL2+ IPoA Service...............................................................................21-8 21.4 Configuration Example of the ADSL2+ PPPoA Service..........................................................................21-13 21.5 Adding an ADSL2+ Line Profile..............................................................................................................21-18 21.6 Adding an Extended ADSL2+ Line Profile..............................................................................................21-25 21.7 Adding an ADSL2+ Alarm Profile...........................................................................................................21-28 21.8 Activating an ADSL2+ Port......................................................................................................................21-33 21.9 Configuring the Port Rate Measurement Thresholds for an ADSL2+ Port..............................................21-35 21.10 Configuring IPoA/IPoE Protocol Conversion.........................................................................................21-36 21.10.1 Enabling IPoA Protocol Conversion..............................................................................................21-36 21.10.2 Setting the Aging time of IPoA Forwarding Entry........................................................................21-37 21.10.3 Setting the Default Gateway of the IPoA User..............................................................................21-38 21.10.4 Configuring the Encapsulation Type of the IPoA User.................................................................21-38 21.11 Configuring PPPoA/PPPoE Protocol Conversion...................................................................................21-40 21.11.1 Enabling PPPoA Protocol Conversion...........................................................................................21-40 21.11.2 Configuring the Encapsulation Type of the PPPoA User..............................................................21-41 21.11.3 Enabling PPPoA/PPPoE MRU Negotiation...................................................................................21-42 21.12 Querying an ADSL2+ Port......................................................................................................................21-43 21.13 Enabling the Auto PVC Configuration of an ADSL Modem.................................................................21-44 22 Configuring the SHDSL Service.........................................................................................22-1 22.1 Overview.....................................................................................................................................................22-3 22.2 Configuration Example of the SHDSL IPoE/PPPoE Service.....................................................................22-4 22.3 Configuration Example of the SHDSL IPoA Service.................................................................................22-9 22.4 Configuration Example of the SHDSL PPPoA Service............................................................................22-15 22.5 Adding an SHDSL Line Profile................................................................................................................22-21 22.6 Adding an SHDSL Alarm Profile.............................................................................................................22-24 22.7 Binding an SHDSL Alarm Profile............................................................................................................22-27 22.8 Configuring the SHDSL Multi-Pair Binding............................................................................................22-28 Issue 04 (2007-11-30) Huawei Technologies Proprietary ix Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22.9 Configuring the SHDSL EFM Multi-port Binding...................................................................................22-29 22.10 Activating an SHDSL Port......................................................................................................................22-30 22.11 Querying an SHDSL Port........................................................................................................................22-31 22.12 Configuring the Clock Mode...................................................................................................................22-32 23 Configuring the VDSL2 Service..........................................................................................23-1 23.1 Overview.....................................................................................................................................................23-3 23.2 Configuration Example of the VDSL2 PPPoE/IPoE Service.....................................................................23-3 23.3 Configuration Example of the VDSL2 IPoA Service...............................................................................23-10 23.4 Configuration Example of the VDSL2 PPPoA Service............................................................................23-17 23.5 Adding a VDSL2 Line Profile..................................................................................................................23-24 23.6 Adding a VDSL2 Channel Profile............................................................................................................23-31 23.7 Adding a VDSL2 Line Template..............................................................................................................23-35 23.8 Adding a VDSL2 Line Alarm Profile.......................................................................................................23-37 23.9 Adding a VDSL2 Channel Alarm Profile.................................................................................................23-40 23.10 Adding a VDSL2 Alarm Template.........................................................................................................23-43 23.11 Binding an VDSL2 Alarm Template......................................................................................................23-45 23.12 Activating a VDSL2 Port........................................................................................................................23-46 23.13 Querying a VDSL2 port..........................................................................................................................23-47 24 Configuring Protection for Upstream Link.......................................................................24-1 24.1 Overview.....................................................................................................................................................24-2 24.2 Configuration Example of the Upstream Link Protection...........................................................................24-3 24.3 Configuring a Protection Group..................................................................................................................24-5 24.4 Configuring the Protection Group Weight..................................................................................................24-6 25 Configuring Device Subtending.........................................................................................25-1 25.1 Overview.....................................................................................................................................................25-3 25.2 Configuration Example of the Ethernet Access Service.............................................................................25-3 25.3 Configuration Example of the Subtended Network Through the SCU Board............................................25-5 25.4 Configuration Example of Subtending Device Through the ETHA Board................................................25-7 25.5 Configuring the Working Mode of the ETH Board....................................................................................25-9 25.6 Configuring the Physical Attributes of an Ethernet Port...........................................................................25-10 25.6.1 Setting the Auto-negotiation Mode of an Ethernet Port...................................................................25-10 25.6.2 Setting the Duplex Mode of an Ethernet Port..................................................................................25-11 25.6.3 Setting the Rate of an Ethernet Port.................................................................................................25-12 25.6.4 Setting the Network Cable Type of an Ethernet Port.......................................................................25-13 25.7 Enabling the Flow Control on an Ethernet Port........................................................................................25-13 25.8 Enabling the Traffic Suppression..............................................................................................................25-14 25.9 Enabling the Ethernet Port Aggregation...................................................................................................25-16 25.10 Mirroring an Ethernet Port......................................................................................................................25-17 25.11 Adding an Ethernet Port to a VLAN.......................................................................................................25-18 25.12 Configuring the Outer QinQ VLAN of the Ethernet Port.......................................................................25-19 25.13 Setting the Native VLAN for an Ethernet Port.......................................................................................25-20 x Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 26 Configuring ATM-DSLAM Access....................................................................................26-1 26.1 Overview.....................................................................................................................................................26-2 26.2 Configuration Example of the ATM-DSLAM Access...............................................................................26-3 26.3 Setting the OPTIC Port Mode.....................................................................................................................26-6 26.4 Setting the OPTIC Port Type......................................................................................................................26-7 26.5 Adding an IMA Group................................................................................................................................26-8 26.6 Setting the IMA Group Mode...................................................................................................................26-10 26.7 Adding an IMA Link.................................................................................................................................26-12 26.8 Setting the Line Type for an E3 Port.........................................................................................................26-13 26.9 Setting the E3 Port Type...........................................................................................................................26-14 26.10 Setting the Tx Clock of an E3 Port.........................................................................................................26-15 26.11 Clearing the Statistics of an E3 Port........................................................................................................26-16 27 Configuring MPLS Access....................................................................................................27-1 27.1 Overview.....................................................................................................................................................27-2 27.2 Configuration Example of MPLS - Based on Binding the PVC with the PW Profile................................27-2 27.3 Configuration Example of MPLS- Based on Binding the VLAN with the PW Profile..............................27-6 27.4 Basic Configuration of MPLS...................................................................................................................27-10 27.4.1 Configuring the LSR ID...................................................................................................................27-10 27.4.2 Enabling MPLS................................................................................................................................27-11 27.5 Static LSP Configuration..........................................................................................................................27-12 27.5.1 Overview..........................................................................................................................................27-12 27.5.2 Configuring the Ingress LSR of the Static LSP...............................................................................27-13 27.5.3 Configuring the Egress LSR of the Static LSP................................................................................27-14 27.5.4 Configuring the LSP CAR...............................................................................................................27-14 27.6 MPLS LDP Configuration........................................................................................................................27-15 27.6.1 Overview..........................................................................................................................................27-16 27.6.2 Enabling the MPLS LDP..................................................................................................................27-16 27.6.3 Configuring Parameters of the LDP Basic Discovery.....................................................................27-17 27.6.4 Configuring Parameters of the LDP Extended Discovery...............................................................27-19 27.6.5 Configuring Parameters of the LDP Basic Session..........................................................................27-20 27.6.6 Configuring Parameters of the LDP Extended Session...................................................................27-21 27.6.7 Configuring the LDP LSP Triggering Policy...................................................................................27-22 27.6.8 Configuring the LDP Label Retention Mode...................................................................................27-23 27.6.9 Configuring the LDP Loopback Detection......................................................................................27-24 27.6.10 Configuring the LDP MD5 Authentication....................................................................................27-25 27.6.11 Enable the LDP MTU Signaling Function.....................................................................................27-27 27.7 PW Configuration.....................................................................................................................................27-28 27.7.1 Enable the MPLS L2VPN................................................................................................................27-28 27.7.2 Configuring a PW Template............................................................................................................27-29 27.7.3 Binding a PVC with a PW Template...............................................................................................27-30 27.7.4 Binding a VLAN with a PW Template............................................................................................27-31 28 Configuring MPLS RSVP-TE..............................................................................................28-1 Issue 04 (2007-11-30) Huawei Technologies Proprietary xi Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28.1 Overview.....................................................................................................................................................28-2 28.2 Configuration Example for Establishing an MPLS TE Tunnel by Using RSVP-TE..................................28-2 28.3 Configuring Basic MPLS TE Capability....................................................................................................28-5 28.3.1 Enabling MPLS TE Feature...............................................................................................................28-6 28.3.2 Creating an MPLS TE Tunnel............................................................................................................28-7 28.4 Configuring an MPLS TE Tunnel by Using Dynamic Signaling...............................................................28-8 28.4.1 Configuring Bandwidth of Links.......................................................................................................28-9 28.4.2 Enabling OSPF TE...........................................................................................................................28-10 28.4.3 Configuring the MPLS TE Explicit Path.........................................................................................28-11 28.4.4 Configuring Constraints of an MPLS TE Tunnel............................................................................28-12 28.4.5 Configuring CSPF............................................................................................................................28-13 28.4.6 Establishing an MPLS TE Tunnel by Using RSVP-TE...................................................................28-15 28.5 Configuring Advanced RSVP-TE Features..............................................................................................28-16 28.5.1 Configuring RSVP Hello Extension................................................................................................28-16 28.5.2 Configuring RSVP Resource Reservation Style..............................................................................28-18 28.5.3 Configuring RSVP Timers...............................................................................................................28-19 28.5.4 Enabling RSVP Message Transmission Reliability.........................................................................28-21 28.5.5 Enabling RSVP-TE Srefresh Function.............................................................................................28-22 28.5.6 Enabling RSVP-TE Reservation Confirmation Mechanism............................................................28-23 28.5.7 Enabling RSVP Authentication........................................................................................................28-24 28.6 Tuning the Establishment of CR-LSP.......................................................................................................28-25 28.6.1 Configuring Tie-Breaking of CSPF.................................................................................................28-26 28.6.2 Configuring Route Pinning of CSPF................................................................................................28-27 28.6.3 Configuring Administrative Group and Affinity Property...............................................................28-28 28.6.4 Configuring Reoptimization for CR-LSP........................................................................................28-30 28.7 Tuning the Establishment of an MPLS TE Tunnel...................................................................................28-31 28.7.1 Configuring Loop Detection............................................................................................................28-32 28.7.2 Configuring the Route Record and the Label Record......................................................................28-33 28.7.3 Configuring Parameters of Tunnel Reestablishment.......................................................................28-34 28.7.4 Configuring Tunnel Priority.............................................................................................................28-35 29 Configuring the VLAN Stacking Wholesale Service......................................................29-1 29.1 Overview.....................................................................................................................................................29-2 29.2 Configuration Example of the Wholesale Service......................................................................................29-2 30 Configuring the QinQ VLAN Leased Line Service.........................................................30-1 30.1 Overview.....................................................................................................................................................30-2 30.2 Configuration Example of the QinQ VLAN Leased Line Service.............................................................30-2 30.3 Enabling Transparent Transmission of BPDUs..........................................................................................30-5 31 Configuring the Multicast Service......................................................................................31-1 31.1 Overview.....................................................................................................................................................31-3 31.2 Configuration Example of IGMP Proxy Multicast Service........................................................................31-3 31.3 Configuration Example of IGMP Snooping................................................................................................31-6 xii Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 31.4 Configuration Example of Multicast Service in Subtending Mode..........................................................31-10 31.5 Configuring Multicast Service in MSTP Networking...............................................................................31-15 31.6 Setting the IGMP Mode............................................................................................................................31-23 31.7 Configuring an IGMP Upstream Port.......................................................................................................31-24 31.8 Specifying a Subtending Port....................................................................................................................31-25 31.9 Configuring a Program for a Static Subtending Port................................................................................31-26 31.10 Configuring IGMP Global Parameters....................................................................................................31-27 31.10.1 Enabling the IGMP Proxy Authorization.......................................................................................31-28 31.10.2 Setting the Robustness Variable.....................................................................................................31-30 31.10.3 Setting the General Query Interval.................................................................................................31-31 31.10.4 Setting the Maximum Response Time to the General Query.........................................................31-32 31.10.5 Setting the Number of Specific Queries.........................................................................................31-33 31.10.6 Setting the Specific Query Interval................................................................................................31-35 31.10.7 Setting the Maximum Response Time to the Specific Query........................................................31-36 31.10.8 Setting the Unsolicited Report Interval..........................................................................................31-37 31.10.9 Setting the TTL for a V2 Router....................................................................................................31-38 31.10.10 Setting the Preview Recognition Time.........................................................................................31-39 31.10.11 Enabling the User Action Report Function..................................................................................31-41 31.10.12 Enabling the Proxy of the IGMP Report Packet..........................................................................31-42 31.10.13 Enabling the Proxy of the IGMP Leave Packet...........................................................................31-43 31.10.14 Set the Permitted Encapsulation Mode of IGMP Packets............................................................31-44 31.10.15 Enabling IGMP Echo Function....................................................................................................31-45 31.11 Adding a Program...................................................................................................................................31-46 31.12 Managing Multicast Bandwidth..............................................................................................................31-48 31.12.1 Enabling the Bandwidth Management Function............................................................................31-48 31.12.2 Setting Upstream Port Bandwidth..................................................................................................31-50 31.12.3 Setting User Bandwidth.................................................................................................................31-50 31.13 Configuring an Authority Profile............................................................................................................31-51 31.13.1 Setting the Authority Mode............................................................................................................31-52 31.13.2 Modifying an Authority Profile......................................................................................................31-53 31.13.3 Renaming an Authority Profile......................................................................................................31-54 31.14 Configuring Multicast Users...................................................................................................................31-55 31.14.1 Adding a BTV User........................................................................................................................31-55 31.14.2 Modifying the Attributes of a User................................................................................................31-56 31.14.3 Blocking a BTV User.....................................................................................................................31-57 31.14.4 Binding a User with an Authority Profile......................................................................................31-58 31.14.5 Granting Program Authorities to a User........................................................................................31-59 31.14.6 Enabling the Function of Monitoring the BTV User.....................................................................31-60 31.15 Configuring the Preview Function..........................................................................................................31-61 31.15.1 Enabling the Preview Function......................................................................................................31-61 31.15.2 Setting the Preview Parameters......................................................................................................31-62 31.15.3 Setting the Preview Auto Reset Time............................................................................................31-63 Issue 04 (2007-11-30) Huawei Technologies Proprietary xiii Contents SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31.15.4 Clearing the Preview Records Manually........................................................................................31-65 31.16 Configuring the Logging Function..........................................................................................................31-66 31.16.1 Enabling the Logging Function......................................................................................................31-66 31.16.2 Setting the Logging Interval...........................................................................................................31-67 31.16.3 Configuring Log Reporting............................................................................................................31-69 31.16.4 Collecting Log Statistics................................................................................................................31-70 32 Configuring the Triple Play Service...................................................................................32-1 32.1 Overview.....................................................................................................................................................32-2 32.2 Configuration Example of Triple Play - Multiple PVCs for Multiple Services..........................................32-3 32.3 Configuration Example of Triple Play - Based on the User-Side VLAN...................................................32-9 32.4 Configuration Example of Triple Play - Based on 802.1p........................................................................32-14 32.5 Configuration Example of the Triple Play Service - Based on the Service Encapsulation Type.............32-20 33 Configuring the Ethernet OAM..........................................................................................33-1 33.1 Overview.....................................................................................................................................................33-3 33.2 Configuration Example of Ethernet OAM..................................................................................................33-3 33.3 Creating an MD...........................................................................................................................................33-6 33.4 Creating an MA...........................................................................................................................................33-7 33.5 Creating an MEP.........................................................................................................................................33-8 33.6 Creating an RMEP...................................................................................................................................... 33-9 33.7 Enabling the CFM Globally......................................................................................................................33-10 33.8 Enabling the CFM Alarm Globally...........................................................................................................33-11 33.9 Enabling the Administration Function of an MEP....................................................................................33-12 33.10 Enabling the CC Transmission of an MEP.............................................................................................33-13 33.11 Enabling the Global Detection Function of an RMEP............................................................................33-14 33.12 Enabling RMEP Detection Function.......................................................................................................33-15 33.13 Configuring Priorities for Transmitting CCMs/LTMs ...........................................................................33-16 33.14 Configuring the Interval for an MA to Transmit a CC...........................................................................33-17 33.15 Configuring the Base Address of Multicast Destination MAC Addresses of CCMs/LTMs..................33-18 33.16 Configuring Loop Detection Function....................................................................................................33-19 33.17 Configuring Linktrace Function..............................................................................................................33-20 34 Configuring the MPLS OAM...............................................................................................34-1 34.1 Overview.....................................................................................................................................................34-2 34.2 Configuration Example of Detection of MPLS OAM for Static LSP Connectivity...................................34-2 34.3 Configuration Example of MPLS OAM Protection Switchover................................................................ 34-6 34.4 Configuring the MPLS OAM Function of the Ingress..............................................................................34-11 34.5 Configuring the MPLS OAM Function of the Egress...............................................................................34-12 34.6 Configuring the Tunnel Protection Group................................................................................................34-13 34.7 Switching Over Protection Group Manually.............................................................................................34-14 34.8 Enabling the Protection Group to Output the Debugging Information.....................................................34-15 35 Configuring the Environment Monitoring.......................................................................35-1 35.1 Overview.....................................................................................................................................................35-2 xiv Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Contents 35.2 Configuration Example of an EMU............................................................................................................35-4 35.2.1 Data Plan............................................................................................................................................35-4 35.2.2 Configuration Flowchart....................................................................................................................35-5 35.2.3 Procedure for Configuring an H303ESC...........................................................................................35-5 35.2.4 Verification for Configuring an H303ESC........................................................................................35-6 35.2.5 Procedure for Configuring a DIS EMU.............................................................................................35-7 35.2.6 Procedure for Configuring POWER4845 EMU.................................................................................35-8 35.3 Adding an EMU..........................................................................................................................................35-8 35.4 Configuring the H303ESC/H304ESC EMU.............................................................................................35-10 35.5 Configuring an H561ESC EMU...............................................................................................................35-12 35.6 Configuring a POWER4845 EMU............................................................................................................35-13 35.7 Configuring the FAN Alarm Report ........................................................................................................35-16 35.8 Setting the FAN Speed Adjustment Mode................................................................................................35-17 35.9 Configuring the FAN Speed......................................................................................................................35-18 36 MSTP Networking Example................................................................................................36-1 36.1 Networking..................................................................................................................................................36-2 36.2 Data Plan.....................................................................................................................................................36-3 36.3 Configuring MA5600-1...............................................................................................................................36-6 36.4 Configuring MA5600-2.............................................................................................................................36-12 36.5 Configuring MA5600-3.............................................................................................................................36-19 36.6 Configuring MA5600-4.............................................................................................................................36-24 36.7 Configuring MA5600-5.............................................................................................................................36-29 36.8 Verification................................................................................................................................................36-32 37 Subtending Networking Example......................................................................................37-1 37.1 Networking..................................................................................................................................................37-2 37.2 Data Plan.....................................................................................................................................................37-3 37.3 Configuring MA5600-1...............................................................................................................................37-6 37.4 Configuring MA5600-2.............................................................................................................................37-12 37.5 Configuring MA5600-3.............................................................................................................................37-19 37.6 Configuring MA5600-4.............................................................................................................................37-24 37.7 Verification................................................................................................................................................37-27 A Acronyms and Abbreviations................................................................................................A-1 Index.................................................................................................................................................i-1 Issue 04 (2007-11-30) Huawei Technologies Proprietary xv ..............................................................................2-6 Figure 2-5 Setting ASCII code..............................................2-3 Figure 2-2 Flowchart for configuring the MA5600 through the local serial port..........................................................2-20 Figure 2-19 Setting up the SSH configuration environment in LAN inband mode......................................................2-18 Figure 2-17 Setting up the SSH configuration environment in LAN outband mode.....................2-17 Figure 2-16 Running the telnet application..................................................................................................2-28 Figure 2-26 Interface for connecting to the system.................................................................................................................................................................................................................................................2-19 Figure 2-18 Setting up the SSH configuration environment in WAN outband mode.................................2-12 Figure 2-10 Connection between a WAN and the maintenance network port of the control board......................................................2-23 Figure 2-22 Interface of the key generator.................................................................................................................2-21 Figure 2-21 Flowchart for configuring in SSH mode.........2-25 Figure 2-23 Generating the client key.........................2-16 Figure 2-14 Networking for the maintenance through the GE port over a WAN......................................2-29 Figure 3-1 Switching over among the command modes......................2-21 Figure 2-20 Setting up the SSH configuration environment in WAN inband mode........................................................................................................................4-4 Figure 4-3 Sample network for configuring the inband NMS...2-8 Figure 2-7 Flowchart for configuring the MA5600 through the remote serial port....................................2-29 Figure 2-27 Interface for logging in the SSH client........................................................................................................................................................................................................................................1-5 Figure 2-1 Networking for configuring the MA5600 through the local serial port.............................2-8 Figure 2-8 Setting the parameters of the HyperTerminal..............4-3 Figure 4-2 Flowchart for configuring the outband NMS.........................................................................................................................................2-26 Figure 2-24 Interface of converting the client public key into the RSA public key...........................................................................................2-11 Figure 2-9 Networking for local configuration through a LAN..........................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figures Figures Figure 1-1 Sample network for configuring the license application.................................................................................................................................................................................2-4 Figure 2-3 Setting parameters of the terminal..........................................................2-5 Figure 2-4 Setting the terminal emulation type......................2-27 Figure 2-25 Interface of the SSH client software.....1-4 Figure 1-2 Flowchart for configuring the license application...................................................................2-16 Figure 2-15 Flowchart for configuring the MA5600 through the inband management channel.........................2-13 Figure 2-11 Flowchart for configuring the MA5600 through the outband management channel..4-6 Issue 04 (2007-11-30) Huawei Technologies Proprietary xvii .......................................................................................................2-14 Figure 2-12 Running the telnet application........................................................3-4 Figure 4-1 Sample network for configuring the outband NMS.2-7 Figure 2-6 Networking for configuring the MA5600 through the remote serial port....................................................2-15 Figure 2-13 Networking for the maintenance through the GE port over a LAN............................................................................................................................................. .........................................................................12-13 Figure 12-8 Flowchart for configuring the route policy................................................................................................14-10 Figure 14-6 Flowchart for configuring NTP server/client mode...............9-9 Figure 9-5 Sample network for configuring a super VLAN.................................................................................17-11 Figure 17-2 Flowchart for configuring an advanced ACL..........12-7 Figure 12-4 Flowchart for configuring RIP...........................................................................................................12-11 Figure 12-7 Sample network for configuring the route policy.........................5-2 Figure 8-1 Sample network for configuring the remote user authentication.....................................................9-6 Figure 9-2 Flowchart for configuring a smart VLAN.............................................................................................................................................................................................................................................................................................................................................................................................10-8 Figure 10-6 Sample network for configuring MAC address segment mode.................................................................................................................................................................................................................................................................................................................................................................14-13 Figure 14-8 Flowchart for configuring NTP peer mode.....................................................................................................................................8-23 Figure 9-1 Sample network for configuring a smart VLAN...................................................................................................10-11 Figure 11-1 Sample network for configuring the ARP proxy.......9-8 Figure 9-4 Flowchart for configuring a MUX VLAN................................14-7 Figure 14-4 Flowchart for configuring NTP multicast mode..............................................10-7 Figure 10-5 Flowchart for configuring the DHCP option60 mode.17-16 Figure 17-5 First 64 bytes of a layer 2 frame...........................12-14 Figure 14-1 Sample network for configuring the NTP broadcast mode.........................................................................12-10 Figure 12-6 Flowchart for configuring OSPF.............14-14 Figure 14-9 Flowchart for configuring the NTP server/client mode with ID authentication....9-10 Figure 9-6 Flowchart for configuring a super VLAN..............................................................................................10-9 Figure 10-7 Flowchart for configuring MAC address segment mode.........................................8-5 Figure 8-2 Flowchart for configuring the remote user authentication.........................................17-12 Figure 17-3 Flowchart for configuring a layer 2 ACL..8-6 Figure 8-3 Flowchart for configuring the SSH user public key..............................................................................12-5 Figure 12-3 Sample network for configuring RIP.............................................................................................................................10-5 Figure 10-4 Sample network for configuring DHCP option60 mode...........................................................................................................................................................................10-3 Figure 10-2 Sample network for configuring DHCP standard mode.................14-11 Figure 14-7 Sample network for configuring NTP peer mode...............................................................................10-4 Figure 10-3 Flowchart for configuring DHCP standard mode.............17-23 xviii Huawei Technologies Proprietary Issue 04 (2007-11-30) ....................4-7 Figure 5-1 Sample network for configuring a log host........................................................................................................9-7 Figure 9-3 Sample network for configuring a MUX VLAN.......................................................................................12-8 Figure 12-5 Sample network for configuring OSPF.....11-4 Figure 12-1 Sample network for configuring the static route...................................................14-8 Figure 14-5 Sample network for configuring NTP server/client mode...............................................................................................................11-3 Figure 11-2 Flowchart for configuring the ARP proxy...................................................................................................................................................................9-12 Figure 10-1 MA5600 DHCP relay.................................................................................14-5 Figure 14-3 Sample network for configuring NTP multicast mode..............................................14-4 Figure 14-2 Flowchart for configuring NTP broadcast mode.......................................................14-16 Figure 17-1 Flowchart for configuring a basic ACL..............Figures SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 4-4 Flowchart for configuring the inband NMS...................................................................................................................................................12-4 Figure 12-2 Flowchart for configuring the static route...................17-14 Figure 17-4 Flowchart for configuring a customized ACL...................................................................... ..................................21-16 Figure 21-7 Flowchart for configuring an ADSL2+ line profile-1........22-7 Figure 22-3 Sample network for configuring the SHDSL IPoA service.....................................................................22-25 Figure 22-9 Inter-conversion between the SHDSL port states............................................25-8 Figure 25-6 Flowchart for configuring subtending devices.........................................................................................................................................................................................................22-5 Figure 22-2 Flowchart for configuring the SHDSL IPoE/PPPoE service................................21-21 Figure 21-9 Flowchart for adding an ADSL2+ alarm profile................................................................................................23-4 Figure 23-2 Flowchart for configuring the VDSL2 PPPoE/IPoE service...............................................25-7 Figure 25-5 Sample network for subtending devices......23-41 Figure 23-11 Inter-conversion between these states..........................................................22-12 Figure 22-5 Sample network for configuring the SHDSL PPPoA service............................21-43 Figure 22-1 Sample network for configuring the SHDSL IPoE/PPPoE service.......................................................................................................23-38 Figure 23-10 Flowchart for adding a VDSL2 channel alarm profile............................................................23-18 Figure 23-6 Flowchart for configuring the VDSL2 PPPoA service................................................................................................................................................23-13 Figure 23-5 Sample network for configuring the VDSL2 PPPoA service.....................................21-4 Figure 21-2 Flowchart for configuring the ADSL2+ PPPoE/IPoE service...................................................26-2 Figure 26-2 Sample network for configuring the ATM-DSLAM access.........................................................25-5 Figure 25-3 Sample network for configuring the subtended network..............................................................................................................23-32 Figure 23-9 Flowchart for adding a VDSL2 line alarm profile...25-9 Figure 26-1 Sample network of the ATM-DSLAM access......................21-11 Figure 21-5 Sample network for configuring the ADSL2+ PPPoA service..........................................................21-14 Figure 21-6 Flowchart for configuring the ADSL2+ PPPoA service.................................................................................................................................20-10 Figure 21-1 Sample network for configuring the ADSL2+ PPPoE/IPoE service............21-30 Figure 21-10 Status conversion of the ADSL2+ port.............................................................................................................22-18 Figure 22-7 Flowchart for adding an SHDSL line profile...................................................................................................................................................................................................................................................................22-10 Figure 22-4 Flowchart for configuring the SHDSL IPoA service......................................................24-3 Figure 24-2 Flowchart for configuring the upstream link protection.............................23-25 Figure 23-8 Flowchart for adding a VDSL2 channel profile......................................................................21-6 Figure 21-3 Sample network for configuring the ADSL2+ IPoA service.................23-47 Figure 24-1 Sample network for configuring the upstream link protection........................................22-22 Figure 22-8 Flowchart for adding an SHDSL alarm profile................................................................................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figures Figure 20-1 Flowchart for configuring the firewall function..............................................................25-4 Figure 25-2 Flowchart for configuring the Ethernet access service...........................................................................................25-6 Figure 25-4 Flowchart for configuring the subtended network................................................ 21-9 Figure 21-4 Flowchart for configuring the ADSL2+ IPoA service..........................22-16 Figure 22-6 Flowchart for configuring the SHDSL PPPoA service..............23-6 Figure 23-3 Sample network for configuring the VDSL2 IPoA service.................................................................................23-20 Figure 23-7 Flowchart for adding a VDSL2 line profile............................. 26-4 Issue 04 (2007-11-30) Huawei Technologies Proprietary xix ...............................................................................22-32 Figure 23-1 Sample network for configuring the VDSL2 PPPoE/IPoE service...................................................................24-4 Figure 25-1 Sample network for configuring the Ethernet access service...........................23-11 Figure 23-4 Flowchart for configuring the VDSL2 IPoA service.........................21-20 Figure 21-8 Flowchart for configuring an ADSL2+ line profile-2....................................................................................................................................................26-3 Figure 26-3 Flowchart for configuring the ATM-DSLAM access........ .30-4 Figure 31-1 Sample network of the IGMP proxy application................31-13 Figure 31-8 Sample network of the multicast service in MSTP networking....................................................................................................................................................................31-13 Figure 31-7 Flowchart for configuring multicast service in subtending mode (MA5600_B)..........................................................................................................32-6 Figure 32-3 Sample network for configuring the triple play service ..........................32-10 Figure 32-4 Flowchart for configuring the triple play service ..........................................................................34-8 Figure 35-1 Flowchart for configuring an EMU.................................................................33-3 Figure 33-2 Flowchart for configuring Ethernet OAM.................................27-3 Figure 27-2 Flowchart for configuring the MPLS based binding the PVC with the PW profile.............................34-2 Figure 34-2 Flowchart for detection of MPLS OAM for static LSP connectivity.................27-4 Figure 27-3 Sample network of the MPLS based on binding the VLAN with the PW template...............................................27-6 Figure 27-4 Flowchart for configuring the MPLS based on binding the VLAN with the PW profile...........................................................33-5 Figure 34-1 Sample network of detection of MPLS OAM for static LSP connectivity.............................................................................................................................................................................................................................29-5 Figure 30-1 Sample network for configuring the QinQ VLAN leased line service.......................................32-23 Figure 33-1 Sample network for configuring Ethernet OAM............37-3 xx Huawei Technologies Proprietary Issue 04 (2007-11-30) .........................30-3 Figure 30-2 Flowchart for configuring the QinQ VLAN leased line service..............................32-21 Figure 32-8 Flowchart for configuring the triple play service ..............................................................single PVC for multiple services (based on the service encapsulation type)..........31-19 Figure 32-1 Sample network for configuring the triple play service -multiple PVCs for multiple services.......................36-3 Figure 37-1 Sample subtended network of the MA5600..................31-7 Figure 31-4 Flowchart for configuring the IGMP snooping.............................................................................................................................................................................27-8 Figure 28-1 Sample network for establishing an MPLS TE tunnel by using RSVP-TE..........31-4 Figure 31-2 Flowchart for configuring IGMP proxy...........................................31-5 Figure 31-3 Sample network for configuring the IGMP snooping........................................................31-16 Figure 31-9 Flowchart for configuring multicast service in MSTP networking on MA5600_A.............................32-17 Figure 32-7 Sample network for configuring the triple play service ...........................................35-5 Figure 36-1 Sample MSTP network of the MA5600..........34-6 Figure 34-4 Flowchart for configuring MPLS OAM protection switchover......................................................................31-19 Figure 31-10 Flowchart for configuring multicast service in MSTP networking on MA5600_D............................................................31-11 Figure 31-6 Flowchart for configuring multicast service in subtending mode (MA5600_A).............32-4 Figure 32-2 Flowchart for configuring the triple play service-multiple PVCs for multiple services..................28-3 Figure 28-2 Flowchart for establishing an MPLS TE tunnel..............28-4 Figure 29-1 Sample network for configuring the wholesale service..........single PVC for multiple services......................................................... MA5600_B and MA5600_C.................................................................................................................................................................................32-12 Figure 32-5 Sample network for configuring the triple play service by means of single PVC for multiple services ........................31-9 Figure 31-5 Sample network for configuring the subtended multicast service.........................................................................34-4 Figure 34-3 Sample network of MPLS OAM protection switchover..............................................................single PVC for multiple services (based on the service encapsulation type)............32-15 Figure 32-6 Flowchart for configuring the triple play service-single-PVC for multi-service................................single PVC for multiple services....................................Figures SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 27-1 Sample network for configuring the MPLS based on binding the PVC with the PW profile..........29-3 Figure 29-2 Flowchart for configuring the wholesale service................................................................. .............2-21 Table 2-9 Data plan for the network ............................................................................................................................4-6 Table 4-3 Related operation for setting the SNMP version.............................................3-9 Table 3-5 Common CLI error prompts.....................................................3-15 Table 3-10 Related operation for setting the timeout exit time...................1-4 Table 1-2 Related operation for configuring the license server......................................................................2-22 Table 3-1 Features of the interface config modes...........................................4-4 Table 4-2 Data plan for configuring the inband NMS...........................................................................................................................................................................................................................................................................................................................................................................................................................................3-18 Table 4-1 Data plan for configuring the outband NMS......................................2-14 Table 2-4 Data plan for the network...........................4-10 Table 4-5 Related operation for enabling traps sending.........................................................3-4 Table 3-2 Edit functions.............3-7 Table 3-4 Options for viewing information displayed on multiple screens.........................................................................................................................................................................................................................................................................................................................3-6 Table 3-3 Meaning of the CLI characters supported by the MA5600.............................................................3-13 Table 3-8 Related operation for enabling or disabling CLI trap reporting................................................. 4-12 Table 4-7 Related operation for setting the source interface for traps sending............................................................................................................................................................................................................................2-19 Table 2-7 Data plan for the network................................................................................................4-13 Table 4-9 Related operation for setting the system location information..................................................3-12 Table 3-7 Related operation for enabling or disabling interactive command execution.......................1-7 Table 1-3 Related operation for configuring the ESN for the device..............2-16 Table 2-5 Data plan for the network...................................................................4-11 Table 4-6 Related operation for setting the IP address of a destination host of traps............2-13 Table 2-3 Data plan for the network ..............................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Tables Table 1-1 Data plan for configuring the license application....3-17 Table 3-11 Related operation for locking the terminal.......................................................3-10 Table 3-6 Related operation for obtaining online help information................................................................................................................2-17 Table 2-6 Data plan for the network...............................................................2-2 Table 2-2 Data plan for the network .............4-15 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxi ...................3-14 Table 3-9 Related operation for switching the terminal language...............................................................4-10 Table 4-4 Related operation for adding a community and setting its read/write authorities.........................4-13 Table 4-8 Related operation for setting the system contact information................................................................................1-8 Table 2-1 Features of the different maintenance modes................................................................................................................................................................................................... 4-14 Table 4-10 Related operation for configuring an SNMP V3 user....................................................................................2-20 Table 2-8 Data plan for the network............................................................................................................................................................. ......................6-9 Table 6-8 Related operations for changing a user password.........................................................6-13 Table 6-12 Related operations for deleting a user..5-5 Table 6-1 User authorities..................................................................................................8-10 Table 8-4 Related operation for setting the response timeout interval of a RADIUS server.....8-21 Table 8-10 Related operation for creating a local RSA key pair............................................6-14 Table 7-1 Service board status........................................................................................................................................................................................................................................................................................................................................4-21 Table 4-17 Related operation for configuring an NMS route....7-6 Table 7-6 Related operation for prohibiting a service board.........................................8-24 xxii Huawei Technologies Proprietary Issue 04 (2007-11-30) ..4-19 Table 4-15 Related operation for setting the handshake interval............................6-3 Table 6-3 Related operations for adding a user profile............5-5 Table 5-4 Related operations for deactivating a log host..6-2 Table 6-2 Parameter descriptions of a user profile...............................................................................................................................................................4-22 Table 4-18 Related operation for configuring the IP address of the inband NMS interface..4-23 Table 5-1 Data plan for configuring a log host........................................................................................................................................6-6 Table 6-5 Related operations for adding a user.........................................................................................................................5-4 Table 5-3 Related operations for configuring a log host...............................5-3 Table 5-2 Related operations for configuring a log host.................................................................................6-8 Table 6-7 Related operations for modifying a user level.........................................7-4 Table 7-4 Related operation for adding a service board offline.................................................................................................................................................................................................................................................6-5 Table 6-4 User Attributes...................................................................................................................................................................................................................................................................................................................6-12 Table 6-11 Related operation for disconnection an online user.............................................................................................................................................................................................................................................................................................................8-18 Table 8-8 Related operation for specifying the RADIUS server template........................................................................................7-5 Table 7-5 Related operation for confirming a service board...............................................................................................................................................................................4-17 Table 4-13 Related operations for configuring the local SNMP engine ID...............................................7-3 Table 7-3 Related operations for resetting the control boards..........Tables SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 4-11 Related operation for configuring an SNMP V3 group................................6-11 Table 6-10 Related operations for modifying the appended information....................................................................................................8-9 Table 8-3 Related operation for setting the IP address and port number of a server...................4-18 Table 4-14 Related operations for enabling the handshake function between the MA5600 and the N2000 .................................................................................7-2 Table 7-2 Related operation for setting the description of a shelf.......................7-10 Table 8-1 Data plan for configuring the remote user authentication......4-16 Table 4-12 Related operation for configuring an SNMP MIB view............8-5 Table 8-2 Related operation for specifying the RADIUS server template.....................................8-17 Table 8-7 Related operations for creating a domain....................6-7 Table 6-6 Related operations for modifying the profile bound with a user.............................................................................................................4-20 Table 4-16 Related operation for configuring the IP address of the outband NMS interface..................................................................8-12 Table 8-5 Related operation for setting the maximum retransmit count of the RADIUS request packets.........................................8-22 Table 8-11 Related operations for configuring an SSH user......................................................................................................................8-19 Table 8-9 Related operations for specifying the authentication scheme.......................................................................7-8 Table 7-7 Related operation for managing a subboard....8-13 Table 8-6 Related operations for configuring an authentication scheme.............................6-10 Table 6-9 The related operations for modifying the permitted reenter number.................................... .....................................12-25 Table 12-13 Related operation for disabling receiving host routes............................12-17 Table 12-6 Related operation for enabling RIP process.........................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Table 9-1 VLAN types and applications.............10-21 Table 10-13 Related operations for configuring the gateway of a DHCP MAC address segment.............................................10-4 Table 10-2 Data plan for configuring DHCP option60 mode...................................................................................................................................................................................................................................12-27 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxiii ...............................9-3 Table 9-2 VLAN attributes...10-13 Table 10-5 Related operations for setting working mode of a DHCP server..............................12-21 Table 12-9 Related operation for setting the cost of the default route.......................................................................................................................12-14 Table 12-5 Related operation for adding a static route.........................12-19 Table 12-7 Related operation for setting the RIP version...................................12-7 Table 12-3 Data plan for configuring OSPF..........................................10-15 Table 10-7 Related operations for creating a DHCP option60 domain....................................................9-10 Table 9-6 Related operations for creating a VLAN.....................................................................................................9-22 Table 10-1 Data plan for configuring DHCP standard mode...............................................................................................................10-17 Table 10-9 Related operation for configuring the gateway of a DHCP option60 domain............................................................................................................................................................................................................................................................................................................................................................9-16 Table 9-8 Related operation for adding an upstream port to a VLAN......................................................12-20 Table 12-8 Related operation for configuring zero field check for RIP-1 packets.........................................................................................................................10-10 Table 10-4 Related operation for creating a DHCP server group............................................................................................................................................10-22 Table 11-1 Data plan for configuring the ARP proxy.....................10-20 Table 10-12 Related operations for binding a DHCP server group with a DHCP MAC address segment....................12-4 Table 12-2 Data plan for configuring RIP.....................12-10 Table 12-4 Data plan for configuring the route policy...................................9-21 Table 9-11 Related operation for setting the description of a service port..........................................................................................................9-8 Table 9-5 Data plan for configuring a super VLAN........................................12-23 Table 12-11 Related operation for specifying default routing metric...........12-24 Table 12-12 Related operation for importing routes of other protocols.....................................................................................................................................................................10-18 Table 10-10 Related operations for creating a DHCP MAC address segment....................................................................................11-3 Table 11-2 Related operations for adding a static ARP entry.............................................................10-14 Table 10-6 Related operations for binding a DHCP server group with a VLAN interface........................................................10-19 Table 10-11 Related operation for setting the range of a DHCP MAC address segment.............9-6 Table 9-4 Data plan for configuring a MUX VLAN.....12-22 Table 12-10 Related operation for enabling route summarization..............................................................................................................11-7 Table 12-1 Data plan for configuring the static route at the user side............11-6 Table 11-4 Related operation for enabling the ARP proxy......9-15 Table 9-7 Related operation for configuring the VLAN attribute.....................................9-4 Table 9-3 Data plan for configuring a smart VLAN..............................................................10-7 Table 10-3 Data plan for configuring MAC address segment mode......................................................12-26 Table 12-14 Related operation for configuring the RIP preference.................................................................................................................................................9-19 Table 9-10 Related operations for adding service ports in batches..................................................................................................................................................................................10-16 Table 10-8 Related operations for binding a DHCP server group with a DHCP option60 domain..........................11-6 Table 11-3 Data plan of the ARP proxy............................9-18 Table 9-9 Related operations for adding a service port to a VLAN........ .............................................................. 12-55 Table 12-46 Related operation for setting the SPF calculation interval for OSPF...............................12-47 Table 12-36 Description of the network types....12-49 Table 12-38 Related operation for configuring OSPF cost.............................................................................................................................................12-46 Table 12-34 Related operation for configuring the maximum OSPF route count.....................................................................................12-50 Table 12-40 Related operation for configuring the MTU of the DD packet.....12-45 Table 12-33 Related operation for prohibiting an interface from transmitting OSPF packets....................................12-29 Table 12-17 Related operation for disabling RIP packet transmission on an interface.................12-59 Table 12-50 Related operations for setting parameters for OSPF to import external routes.12-57 Table 12-48 Related operation for configuring summarization of routes imported by OSPF..............................................12-28 Table 12-16 Related operation for verifying the source IP address of a RIP route update.................................... 12-60 Table 12-51 Parameters for defining a route policy.... 12-39 Table 12-27 Related operation for setting an OSPF router ID...........12-55 Table 12-45 Related operation for setting LSA retransmit interval between adjacent routers...........................................................................................................................................................12-33 Table 12-21 Related operation for enabling the split horizon function................................................. 12-48 Table 12-37 Related operation for configuring the network type on an OSPF interface.12-61 Table 12-52 Related operation for configuring a route policy..........12-41 Table 12-28 Related operation for entering OSPF area config mode............................................................................................ 12-46 Table 12-35 Related operation for enabling the OSPF logging function.......................................................... 12-63 Table 12-54 Related operation for modifying the attributes of the filtered route...........................12-32 Table 12-19 Related operation for configuring a summary route IP address...........................................12-34 Table 12-23 Related operation for configuring the RIP-2 authentication mode..................Tables SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 12-15 Related operation for configuring the route filtering policy..................................................13-4 Table 13-2 Related operation for setting the working mode of MSTP...............................................................................................12-56 Table 12-47 Related operation for configuring route summarization between areas............................................................................................................................................12-43 Table 12-30 Related operations for configuring a Stub area........................................................................................................................... 12-58 Table 12-49 Related operation for importing routes from other protocols into OSPF..................................................12-54 Table 12-44 Related operation for setting the LSA transmit delay....................................................................................................................12-51 Table 12-41 Related operation for setting the interval for sending Hello packets................ 12-42 Table 12-29 Related operation for configuring subnets for an area.............................................................................................................................................12-50 Table 12-39 Related operation for configuring OSPF packet authentication.......12-31 Table 12-18 Related operation for configuring the IP Address of a Peer router............12-53 Table 12-43 Related operation for setting the Hello packet poll interval..........12-36 Table 12-25 Related operation for configuring the RIP timer............................12-37 Table 12-26 Related operation for enabling OSPF.....................................................................................12-35 Table 12-24 Related operation for configuring the additional metric of a route............................................12-62 Table 12-53 Related operation for defining the route policy matching rule.........................12-43 Table 12-31 Related operation for configuring an NBMA adjacent router....................................................................12-32 Table 12-20 Related operation for enabling an interface to receive and transmit RIP packets.......... 12-64 Table 13-1 Related operations for enabling the MSTP function......................................................12-52 Table 12-42 Related operation for setting the dead time between adjacent routers...................................................................12-44 Table 12-32 Related operation for setting OSPF preference........................................................................................12-34 Table 12-22 Related operation for enabling the poison reverse function.......................................................................................13-6 xxiv Huawei Technologies Proprietary Issue 04 (2007-11-30) ..... ......................................................13-8 Table 13-4 Related operations for configuring the MST region name..............................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Table 13-3 Related operation for setting the MD5-Key for the MD5 encryption algorithm configured on the MST region............................13-10 Table 13-6 Related operations for mapping all VLANs to the MSTP instances.............14-26 Table 14-13 Related operations for configuring an interface for transmitting or receiving NTP packets..........................................................................13-32 Table 13-23 Related operation for enabling the BPDU protection function of the device...13-17 Table 13-11 Related operation for setting the maximum hop of the MST region................14-21 Table 14-9 Related operations for configuring the NTP multicast mode............................................13-34 Table 13-24 Related operations for enabling the loop protection function of the device................................................................14-27 Table 15-1 Related operation for adding a static MAC address......................................................................................................................13-18 Table 13-12 Related operation for setting the diameter of the switching fabric...13-11 Table 13-7 Related operations for setting the MSTP revision level of the device....................................................13-23 Table 13-16 Related operations for setting the Max Age of the specified network bridge...............................................................................................................................................................................................16-3 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxv .................................................................................................14-23 Table 14-10 Related operations for configuring NTP server/client mode................................................................................................................................................................................................................................................................................14-13 Table 14-5 Related operations for configuring NTP ID authentication..................................................................................13-14 Table 13-9 Related operation for specifying the device as a root bridge or a backup root bridge.......................................................................................13-15 Table 13-10 Related operations for setting the priority of the device in the specified spanning tree instance .......15-3 Table 15-2 Related operation for configuring MAC address filtering.....14-24 Table 14-11 Related operation for configuring NTP peer mode..........................14-20 Table 14-8 Related operations for configuring NTP broadcast client mode...15-6 Table 16-1 Related operation for configuring the synwait timer.13-36 Table 14-1 Data plan for configuring NTP broadcast mode.......14-25 Table 14-12 Related operations for configuring the authority of access to a local device's NTP service....................................................13-20 Table 13-14 Related operations for setting the Forward Delay of the specified network bridge....................................13-19 Table 13-13 Related operation for setting the calculation standard for the path cost......16-3 Table 16-2 Related operation for configuring the finwait timer..............................................13-28 Table 13-20 Related operation for setting the path cost of the port in the specified spanning tree instance...............................13-22 Table 13-15 Related operations for setting the Hello Time of the specified network bridge........................................................................14-17 Table 14-6 Related operation for configuring the NTP master clock....................................14-19 Table 14-7 Related operations for configuring NTP broadcast server mode........................................................................................................13-31 Table 13-22 Related operation for setting the point-to-point link connection of the specified port............................................................................................13-9 Table 13-5 Related operations for mapping the specified VLAN to the specified MSTP instance...........................13-30 Table 13-21 Related operation for setting the priority of the specified port.........13-35 Table 13-25 Related operations for enabling the root protection function of the device.......................14-10 Table 14-4 Data plan for configuring NTP peer mode.......................... ....................................................14-4 Table 14-2 Data plan for configuring NTP multicast mode...................................................................................................13-27 Table 13-19 Related operation for setting the specified port as an edge port......................................................13-12 Table 13-8 Related operation for activating the configuration of the MST region....13-26 Table 13-18 Related operations for setting the maximum transmission rate of the specified port......................................................................................................................14-7 Table 14-3 Data plan for configuring NTP server/client mode............13-25 Table 13-17 Related operation for setting the timeout time factor of the specified network bridge......................... ...........................17-7 Table 17-3 Description of traffic classes.18-9 Table 18-5 Related operation for adding a priority tag to the traffic that matches the ACL rule............................ 19-11 Table 20-1 Related operations for enabling anti DoS attack............................17-13 Table 17-7 Data plan for configuring the customized ACL..................................................................................................16-4 Table 16-4 Related operations for enabling the IP packets debugging..................................................................................18-6 Table 18-3 Related operations for setting the queue scheduling....................................................................................................................................................16-5 Table 16-5 Related operations for enabling the IP packets debugging......................................................................................17-20 Table 17-12 Related operation for creating an advanced ACL rule.................................17-24 Table 17-16 Related operation for activating the ACL of a port....................................................................................17-22 Table 17-14 Description of letters and their offset values...19-7 Table 19-3 Related operation for binding the IP address......................................................20-12 xxvi Huawei Technologies Proprietary Issue 04 (2007-11-30) ..................................................................................................................................17-21 Table 17-13 Related operation for creating a layer 2 ACL rule.........................................20-7 Table 20-6 Related operations for configuring the firewall black list function.................................................................17-17 Table 17-9 Related operations for creating an ACL..................................................................................................16-6 Table 17-1 ACL types.............................................................18-7 Table 18-4 Related operation for configuring the traffic restriction....................................18-13 Table 19-1 Related operation for setting the Ethernet encapsulation type.....................................................................18-12 Table 18-8 Related operation for redirecting the traffic that matches the ACL rule...20-11 Table 20-8 Related operations for configuring an accessible address segment..........................17-3 Table 17-2 Mapping between the traffic classes and parameters.............................................................................20-5 Table 20-4 Related operation for enabling the function of source route filtering....................................................................................................................................................17-23 Table 17-15 Related operation for creating a used defined ACL rule...........................................17-17 Table 17-10 Related operation for setting the step.................... 18-10 Table 18-6 Related operation for collecting the statistics of the traffic that matches the ACL rule.........................................................17-19 Table 17-11 Related operation for creating a basic ACL rule.....19-6 Table 19-2 Related operations for enabling the DHCP option82......................................................................................................................................................................................................................................................................17-12 Table 17-6 Data plan for configuring the layer 2 ACL.........................................................17-10 Table 17-5 Data plan for configuring the advanced ACL.......20-4 Table 20-2 Related operation for enabling the function of anti IP attack...............................................................................................................................................17-25 Table 18-1 Related operations for configuring the traffic entry........................................................ 19-10 Table 19-5 Related operations for enabling anti MAC spoofing..............................................................................................................................................................................20-9 Table 20-7 Related operation for configuring the firewall function......................18-13 Table 18-9 Related operation for setting the rate limit for an upstream port........................19-9 Table 19-4 Related operations for enabling anti MAC spoofing.............................................18-11 Table 18-7 Related operation for configuring the traffic mirroring................................................................................18-5 Table 18-2 Relationship between the weight values and the actual queues.......20-5 Table 20-3 Related operation for enabling the function of anti ICMP attack..................................................................................17-15 Table 17-8 ACL number range............................................................Tables SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 16-3 Related operation for configuring the socket buffer.....................................................................17-8 Table 17-4 Data plan for configuring the basic ACL.....................................................................................................................................20-6 Table 20-5 Related operation for configuring MAC address filtering................................................................ 20-11 Table 20-9 Related operations for configuring the inaccessible address segment................................... ...................................................................................................................................................................21-5 Table 21-3 Data plan for configuring the ADSL2+ IPoA service.............21-9 Table 21-4 Data plan for configuring the ADSL2+ PPPoA service..............................................................................................................23-39 Table 23-11 Related operations for adding a VDSL2 line alarm profile....23-31 Table 23-6 Parameters of a VDSL2 channel profile............23-37 Table 23-10 Parameters of a VDSL2 line alarm profile...................................................................................................................................................................................................................................................................................................................................................................................................................................................21-37 Table 21-12 Related operation for setting the aging time of IPoA forwarding entry.................22-26 Table 22-7 Related operations for adding an SHDSL alarm profile.............22-3 Table 22-2 Data plan for configuring the SHDSL IPoE/PPPoE service................23-28 Table 23-5 Related operations for adding a VDSL2 line profile........................................................................................................................................23-36 Table 23-9 Related operations for configuring a VDSL2 line template......................................................23-34 Table 23-8 Parameters of a VDSL2 line template..23-11 Table 23-3 Data plan for configuring the VDSL2 PPPoA service..............................................................................................22-16 Table 22-5 Parameters of an SHDSL line profile..................21-44 Table 21-17 Related operation for enabling an ADSL modem to automatically configure the PVC.............................22-11 Table 22-4 Data plan for configuring the SHDSL PPPoA service...............................................................................................................................................................................................23-44 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxvii .............................................................................22-31 Table 23-1 Data plan for configuring the VDSL2 PPPoE/IPoE service..............................23-42 Table 23-13 Related operations for adding a VDSL2 channel alarm profile.................................................................................................21-35 Table 21-11 Related operations for enabling IPoA protocol conversion..............................21-38 Table 21-14 Related operations for enabling PPPoA protocol conversion....................................................23-19 Table 23-4 Parameters of a VDSL2 line profile.....................................................................................................................23-40 Table 23-12 Parameters of VDSL2 channel alarm profile.................21-3 Table 21-2 Data plan for configuring the ADSL2+ PPPoE/IPoE service.............................22-29 Table 22-9 Related operation for configuring the SHDSL EFM multi-port binding..................................................................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Table 21-1 Encapsulation mode mapping between the MA5600 and the modem............................23-4 Table 23-2 Data plan for configuring the VDSL2 IPoA service................................................................................................................................21-28 Table 21-8 Parameters of an ADSL2+ alarm profile..............................................22-27 Table 22-8 Related operation for configuring the SHDSL multi-pair binding...........................................................21-23 Table 21-6 Related operations for adding an ADSL2+ line profile....................22-30 Table 22-10 Related operations for activating an SHDSL port................................23-42 Table 23-14 Parameters for configuring a VDSL2 alarm template..................................................................21-31 Table 21-9 Related operations for adding an ADSL2+ alarm profile.........21-45 Table 22-1 Encapsulation type mapping between the MA5600 and the modem.......................................21-14 Table 21-5 Parameters of an ADSL2+ line profile.....21-33 Table 21-10 Related operations for activating an ADSL2+ port...................21-38 Table 21-13 Related operations for setting the default gateway of the IPoA user...............................................................22-23 Table 22-6 Parameters of an SHDSL alarm profile..................................................................................................................................................23-34 Table 23-7 Related operations for adding a VDSL2 channel profile.........................21-41 Table 21-15 Related operation for enabling PPPoA/PPPoE MRU negotiation.......................................21-25 Table 21-7 Related operations for adding an extended ADSL2+ line profile..21-43 Table 21-16 Related operations for querying an ADSL2+ port........22-5 Table 22-3 Data plan for configuring the SHDSL IPoA service..............................................23-44 Table 23-15 Related operations for adding a VDSL2 alarm template................................................................................................. ...........................27-28 Table 27-19 Related operation for enabling the MPLS L2VPN...........26-7 Table 26-3 Related operation for setting the OPTIC port type.................................................................................................................25-20 Table 26-1 Data plan for configuring the ATM-DSLAM access.........27-21 Table 27-13 Related operations for configuring parameters of the LDP extended session.......................................................................................................................................26-10 Table 26-6 Related operations for setting the IMA group mode......................................................................................................................................................................26-14 Table 26-9 Related operation for setting the E3 port type.............................................................................................................................................................................26-13 Table 26-8 Related operations for setting the line type of an E3 port...........................................................26-8 Table 26-4 Parameters of an IMA group.................................................................................................................................................................26-16 Table 27-1 Data plan for configuring the MPLS based on binding the PVC with the PW profile..........................25-4 Table 25-3 Related operation for enabling the flow control of an Ethernet port..............27-27 Table 27-18 Related operation for enabling the LDP MD5 MTU signaling function.....................................................................................................................................23-47 Table 23-17 Related operations for querying a VDSL2 port...........................................................................................................................................................27-24 Table 27-16 Related operations for configuring the LDP loopback detection................27-29 Table 27-20 Related operations for binding a PVC with a PW template..................27-3 Table 27-2 Data plan for configuring the MPLS based on binding the VLAN with the PW profile..27-23 Table 27-15 Related operations for configuring the LDP label retention mode.....................27-13 Table 27-7 Related operations for configuring egress LSR of the static LSP...................24-4 Table 24-2 Related operation for configuring a protection group....................................27-21 Table 27-14 Related operations for configuring the LDP LSP triggering policy.27-14 Table 27-8 Related operations for configuring LSP CAR.........26-12 Table 26-7 Related operations for adding an IMA link.......................................................................27-11 Table 27-4 Related operations for enabling MPLS....................................................27-19 Table 27-11 Related operations for configuring the parameters of the LDP extended discovery........................................25-18 Table 25-7 Related operation for adding an Ethernet Port to a VLAN.....25-17 Table 25-6 Related operation for enabling the mirroring function of an Ethernet port.......26-9 Table 26-5 Related operations for adding an IMA group........................................27-13 Table 27-6 Related operations for configuring ingress LSR of the static LSP...............................................27-15 Table 27-9 Related operations for enabling the MPLS LDP............................................26-15 Table 26-10 Related operations for setting the Tx clock of an E3 port...................................................24-6 Table 25-1 Ethernet ports of the MA5600................................................................................27-25 Table 27-17 Related operations for configuring the LDP MD5 authentication.27-6 Table 27-3 Related operations for configuring the LSR ID..............................................................................................................23-48 Table 24-1 Data plan for configuring the upstream link protection....................................................................25-19 Table 25-8 Related operation for configuring the outer QinQ VLAN of the Ethernet port................25-3 Table 25-2 Data plan for the Ethernet access service..............................................................................Tables SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 23-16 Related operations for activating a VDSL2 port........................................................................................27-20 Table 27-12 Related operations for configuring parameters of the LDP basic session...................................................................................26-3 Table 26-2 Related operation for setting the OPTIC port mode......................................................27-31 xxviii Huawei Technologies Proprietary Issue 04 (2007-11-30) ..25-16 Table 25-5 Related operation for enabling the Ethernet port aggregation...........................................25-14 Table 25-4 Related operations for enabling traffic suppression.........................................................27-17 Table 27-10 Related operations for configuring parameters of LDP basic discovery......................................................................................................27-12 Table 27-5 Related commands for configuring the static LSP................................................................................................. .....................................................................31-25 Table 31-6 Related operation for configuring a subtending port................................28-3 Table 28-2 Related operation for enabling MPLS TE feature.........28-34 Table 28-23 Related operations for configuring parameters of tunnel establishment..28-35 Table 28-24 Related operation for configuring tunnel priority............................................................................................................................................................................28-27 Table 28-18 Related operation for configuring route pining.........................28-10 Table 28-5 Related operations for enabling OSPF TE...................................................................................................................................31-33 Table 31-12 Related operation for setting the number of specific queries................31-31 Table 31-10 Related operation for setting the general query interval....................28-23 Table 28-15 Related operation for enabling RSVP-TE reservation confirmation mechanism..........................28-14 Table 28-9 Related operation for establishing an MPLS TE tunnel by using RSVP-TE......................................................................................28-13 Table 28-8 Related operations for configuring CSPF of an MPLS............................28-24 Table 28-16 Related operation for enabling RSVP authentication.................28-12 Table 28-7 Related operations for configuring constraints for an MPLS TE tunnel........................................27-31 Table 28-1 Data plan for establishing an MPLS TE tunnel by using RSVP-TE.....................................................................................................28-22 Table 28-14 Related operation for enabling RSVP-TE Srefresh...................................................................... 31-17 Table 31-5 Related operations for configuring the IGMP upstream port.......28-8 Table 28-4 Related operations for configuring bandwidth of links........... 28-19 Table 28-12 Related operations for configuring RSVP timers................................................................................31-34 Table 31-13 Related operation for setting the specific query interval......................... 28-33 Table 28-22 Related operation for configuring route record and label record..................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Table 27-21 Related operations for binding a VLAN with a PW template...............28-20 Table 28-13 Related operations for configuring RSVP message transmission reliability ...... 28-25 Table 28-17 Related operation for configuring tie-breaking of CSPF...........28-31 Table 28-21 Related operation for configuring loop detection.................................30-6 Table 31-1 Data plan for configuring IGMP proxy.................................................................................................................................................................................................................................................31-4 Table 31-2 Data plan for configuring IGMP snooping..............31-27 Table 31-8 Related operation for enabling the IGMP proxy authorization.... 28-18 Table 28-11 Related operation for configuring the resource reservation style....................28-7 Table 28-3 Related operation for creating an MPLS TE tunnel..............................................31-11 Table 31-4 Data plan for the sample network of the multicast service in MSTP networking................31-37 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxix .....................................................................................................................................................................................31-36 Table 31-14 Related operation for setting the maximum response time for the specific query....................28-28 Table 28-19 Related operations for configuring administrative group and affinity property.....................................................................................................................................29-3 Table 30-1 Data plan for configuring the QinQ VLAN leased line service................................30-3 Table 30-2 Related operation for enabling transparent transmission of BPDUs...................................... 31-26 Table 31-7 Related operation for configuring a program for a static subtending port........... 28-30 Table 28-20 Related operation for configuring reoptimization of CR-LSP..................................31-29 Table 31-9 Related operation for setting the robustness variable..............................................31-7 Table 31-3 Data plan for configuring the subtended multicast service.............................31-32 Table 31-11 Related operation for setting the maximum response time to the general query.................................................................................................................................................................28-11 Table 28-6 Related operations for configuring the MPLS TE explicit path..........................................................28-15 Table 28-10 Related operations for configuring RSVP Hello extension......................................................................28-36 Table 29-1 Data plan for configuring the wholesale service................................................................................................................................................................... ................................................................33-4 Table 33-2 Related operation for creating an MD...........31-56 Table 31-25 Related operations for modifying the attributes of a user..................................................................................single PVC for multiple services......................................33-10 Table 33-6 Related operation for enabling the CFM globally..............................................33-17 Table 33-13 Related operation for configuring the interval for an MA to transmit a CC..........................................................................................................................31-57 Table 31-26 Related operation for blocking a BTV user..............33-7 Table 33-3 Related operations for creating an MA........................................31-64 Table 31-31 Related operation for resetting the preview record................................................................................................................................................................................................31-69 Table 31-34 Related operations for configuring log reporting.......................................33-9 Table 33-5 Related operation for creating an RMEP.single PVC for multiple services (based on the service encapsulation type)...............................................................................................31-66 Table 31-32 Related operations for enabling the logging function..................................................31-67 Table 31-33 Related operation for setting the logging interval...............31-39 Table 31-17 Related operation for setting the preview recognition time.....................................................................................................................................................................................................................................................................................................31-40 Table 31-18 Related operation for enabling the user action report function..........33-11 Table 33-7 Related operation for enabling CFM alarm globally....................................................................................................................Tables SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-15 Related operation for setting the unsolicited report interval.......................................................................................................................33-21 Table 34-1 Data plan for detection of MPLS OAM for static LSP connectivity...............................................................................31-54 Table 31-24 Related operations for adding a BTV user.......................................33-16 Table 33-12 Related operation for configuring the priorities for transmitting CCMs/LTMs of an MEP...............................................33-18 Table 33-14 Related operations for configuring loop detection function..........................................................................33-20 Table 33-15 Related operations for configuring Linktrace function..........................................................................................................................................32-4 Table 32-3 Data plan for configuring the triple play service ....31-48 Table 31-22 Related operation for enabling the bandwidth management function..........................................................................34-3 xxx Huawei Technologies Proprietary Issue 04 (2007-11-30) .......................................................................................................................32-10 Table 32-4 Data plan for configuring the triple play service by means of single PVC for multiple services .................33-12 Table 33-8 Related operation for enabling the administration function of an MEP...................................................................................33-8 Table 33-4 Related operation for creating an MEP......................................................32-21 Table 33-1 Data plan for configuring Ethernet OAM..........33-13 Table 33-9 Related operation for enabling the CC transmission of an MEP.................31-58 Table 31-27 Related operation for binding a user with an authority profile...........31-50 Table 31-23 Related operation for modifying an authority profile.....33-15 Table 33-11 Related operation for enabling detection function of the RMEP......................32-16 Table 32-5 Data plan for configuring the triple play service ..........31-43 Table 31-20 Related operation for enabling the proxy of the IGMP leave packet......................................................................................31-70 Table 32-1 Modes to provide the triple play service..........31-38 Table 31-16 Related operation for setting the TTL for a V2 router................................33-14 Table 33-10 Related operation for enabling the global detection function of an RMEP.........................................31-61 Table 31-29 Related operation for enabling the preview function..............................................................................................................................31-44 Table 31-21 Related operations for adding a program....................................31-59 Table 31-28 Related operation for enabling the function of monitoring BTV users..........31-62 Table 31-30 Related operation for setting the preview auto reset time...............................................................................................................32-2 Table 32-2 Data plan for configuring the triple play service -multiple PVCs for multiple services.......31-42 Table 31-19 Related operation for enabling the proxy of the IGMP report packet.......................................... ...............................................35-19 Table 36-1 Data plan for the sample MSTP network...................... 35-12 Table 35-9 Related operations for configuring an H561ESC EMU........... 34-13 Table 34-5 Related operations for configuring the tunnel protection group..........................35-3 Table 35-3 Correspondence between the FAN DIP switch and the slave node number.....................................35-3 Table 35-2 Correspondence between the H801ESC DIP switch and the slave node number.................35-17 Table 35-13 Related operations for setting the fan speed adjustment mode.........................................................................35-4 Table 35-4 Data plan for EMU configuration................................................................35-13 Table 35-10 Commands for configuring a POWER4845 EMU..............................................................35-4 Table 35-5 Related operations for adding an EMU.....................................34-7 Table 34-3 Related operations for configuring the MPLS OAM function of the ingress........................................................................SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tables Table 34-2 Data plan for the MPLS OAM protection switchover.......................................................................35-18 Table 35-14 Related operations for setting the FAN speed.................................................................................................34-12 Table 34-4 Related operations for configuring the MPLS OAM function of the egress.......34-16 Table 35-1 Correspondence between the POWER4845 DIP switch and the slave node number...........................35-9 Table 35-6 Commands for configuring the H303ESC/H304ESC EMU.......35-12 Table 35-8 Commands for configuring an H561ESC EMU..........34-15 Table 34-7 Related operations for enabling the protection group to output the debugging information.................................37-4 Issue 04 (2007-11-30) Huawei Technologies Proprietary xxxi ...........................................................................35-10 Table 35-7 Related operations for configuring the H303ESC/H304ESC EMU.................................................................................................................................................................................................35-14 Table 35-11 Related operations for configuring a POWER4845 EMU...36-4 Table 37-1 Data plan for the sample subtended network.............34-14 Table 34-6 Related operation for switching over the protection group manually..............................................35-16 Table 35-12 Related operations for configuring the FAN alarm report............................................................................................................................................................................................................ . The description covers the following topics: l l l l l l l l Purpose Networking Data plan Prerequisite(s) Note Configuration flowchart Configuration procedure Result This document helps users to know the configuration of various services on the MA5600/ MA5603. although their hardware is different. Product Name MA5600/MA5603 N2000 BMS Version V300R003 V200R011 This document uses the MA5600 as an example since the MA5600 and the MA5603 support the same software functions. Related Versions The following table lists the product versions related to this document.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide About This Document About This Document Purpose This document describes the configuration of various services supported by the MA5600/ MA5603. Intended Audience The intended audience of this document is: Issue 04 (2007-11-30) Huawei Technologies Proprietary 1 . Particular description for the MA5603 is not provided here. How to configure the maintenance terminal The basic CLI operations on the MA5600 How to configure the network management system How to configure the log host User levels and user management operations How to configure the hardware of the MA5600 How to configure the remote users authentication How to configure various VLANs. smart VLAN. Chapter… 1 Managing the License 2 Configuring the Maintenance Terminal 3 Getting Started With CLI 4 Configuring the Network Management 5 Configuring the Log Host 6 Managing Users 7 Managing the Device 8 Configuring the Remote User Authentication 9 Configuring the VLAN 10 Configuring the DHCP Relay 11 Configuring the ARP & ARP Proxy 12 Configuring the Routing Protocol 13 Configuring MSTP 14 Configuring NTP 15 Configuring MAC Address 16 Configuring TCP/IP Connection 17 Configuring ACL 18 Configuring the QoS Describes… The license feature and its configuration process. MUX VLAN and super VLAN How to configure DHCP relay to obtain IP addresses dynamically How to configure ARP and ARP proxy How to configure the static and dynamic routing protocols supported by the MA5600 How to configure MSTP How to configure the four NTP modes How to configure MAC addresses and the MAC address pool How to configure TCP and IP connections ACL and how to configure ACL on the MA5600 QoS and how to configure QoS on the MA5600 2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . including standard VLAN.About This Document l l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Installation and commissioning engineers System maintenance engineers Data configuration engineers Organization This document consists of the following chapters and is organized as follows. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide About This Document Chapter… 19 Configuring User Security 20 Configuring System Security 21 Configuring the ADSL2+ Service 22 Configuring the SHDSL Service 23 Configuring the VDSL2 Service 24 Configuring Protection for Upstream Link 25 Configuring Device Subtending 27 Configuring MPLS Access 28 Configuring MPLS RSVP-TE 29 Configuring the VLAN Stacking Wholesale Service 30 Configuring the QinQ VLAN Leased Line Service 31 Configuring the Multicast Service 32 Configuring the Triple Play Service 33 Configuring the Ethernet OAM 34 Configuring the MPLS OAM 35 Configuring the Environment Monitoring 36 MSTP Networking Example 37 Subtending Networking Example A Acronyms and Abbreviations Describes… How to configure user security on the MA5600 How to configure system security on the MA5600 The ADSL2+ technology and how to configure the ADSL2 + access service on the MA5600 The SHDSL technology and how to configure the SHDSL access service on the MA5600 The VDSL2 technology and how to configure the VDSL2 access service on the MA5600 The service protection on the upstream port of the MA5600 The Ethernet technology and how to subtend MA5600 devices MPLS applications to the MA5600. MPLS RSVP-TE applications to the MA5600 How to configure the wholesale service on the MA5600 How to configure the private line service on the MA5600 How to configure the multicast service on the MA5600 How to configure the triple play service on the MA5600 Applications of Ethernet OAM to the MA5600 Applications of MPLS OAM to the MA5600 The EMUs supported by the MA5600 and how to configure them How to configure the integrated networking of MSTP How to configure subtending integrated networking Acronyms and abbreviations used in the document Issue 04 (2007-11-30) Huawei Technologies Proprietary 3 . About This Document SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Conventions Symbol Conventions The symbols that may be found in this document are defined as follows. Indicates a hazard with a medium or low level of risk which. Provides additional information to emphasize or supplement important points of the main text. Items (keywords or arguments) in square brackets [ ] are optional. if not avoided. Names of files. Terminal display is in Courier New. General Conventions Convention Times New Roman Boldface Italic Courier New Description Normal paragraphs are in Times New Roman. log in as user root. if not avoided. Indicates a tip that may help you solve a problem or save time. For example. could cause equipment damage. and performance degradation. Book titles are in italics. Huawei Technologies Proprietary Issue 04 (2007-11-30) 4 . Command Conventions Convention Boldface Italic [] Description The keywords of a command line are in boldface. will result in death or serious injury. and users are in boldface. directories. data loss. Command arguments are in italic. or unexpected results. Indicates a potentially hazardous situation that. Symbol Description Indicates a hazard with a high level of risk which. folders. if not avoided. could result in minor or moderate injury. Alternative items are grouped in braces and separated by vertical bars. choose File > Create > Folder. press Enter and press Tab.. pressing Alt.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide About This Document Convention { x | y | . click OK. Press the primary mouse button twice continuously and quickly without moving the pointer. Multi-level menus are in boldface and separated by the “>” signs. One or none is selected. For example. Press the keys concurrently. Key 2 Description Press the key. Mouse Operation Action Click Double-click Drag Description Select and release the primary mouse button without moving the pointer. Press the keys in turn. ] { x | y | . One is selected. } * Description Alternative items are grouped in braces and separated by vertical bars. Keyboard Operation Format Key Key 1+Key 2 Key 1. Optional alternative items are grouped in square brackets and separated by vertical bars. pressing Ctrl+Alt +A means the three keys should be pressed concurrently. and dialog titles are in Boldface.. A minimum of one or a maximum of all can be selected. For example. window... A means the two keys should be pressed in turn. tabs. For example. For example. Press and hold the primary mouse button and move the pointer to a certain position. parameters. GUI Conventions Convention Boldface > Description Buttons.. For example. Issue 04 (2007-11-30) Huawei Technologies Proprietary 5 . menus.. } [ x | y | . The following chapters are modified or added: l l l l l MSTP Configuration 23 Configuring the VDSL2 Service Protection Configuration for Upstream Link MPLS OAM Configuration Ethernet OAM Configuration Updates in 01 (2006-07-18) This is the first release. the latest document version contains all updates made to previous versions. Updates in 04 (2007-11-30) This is the fourth release.About This Document SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Update History Updates between document versions are cumulative.1 Overview:The NTP automatically adjusts the local time through time zone settings 12. Therefore. The following contents are modified: l l 31 Configuring the Multicast Service 32.12 Setting the VLAN-Based Transparent Transmission for OSPF Packets:VLAN-based transparent transmission of OSPF multicast packets 9.bis line The following contents are modified: l l 14. 6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .Multiple PVCs for Multiple Services Updates in 03 (2007-10-18) This is the third release.1 Overview:Service ports support standard VLANs for L2 interconnection 21.6 Adding an Extended ADSL2+ Line Profile:The ADSL2+ extended line profile supports L2 low-consumption mode l l Updates in 02 (2007-01-10) This is the second release.8.2 Configuration Example of Triple Play . The following contents are added: l l License management SHDSL. 5 Configuring the ESN This operation enables you to configure the equipment serial number (ESN) for the device. 1.3 Configuration Example of the License Application This operation enables you to configure the license application. 1.2 License Principles This section describes the function principle and implementation principle of the license. The ESN uniquely identifies the device on the license server.4 Configuring the License Server This operation enables you to configure the IP address of the license server and configure the TCP port number used for the communication between the MA5600 and the license server.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1 Managing the License 1 About This Chapter Managing the License This chapter describes the license feature and its configuration process. 1. 1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 1-1 .1 Overview of the License This section describes the license function and its application to the MA5600. 1. 1 Overview of the License This section describes the license function and its application to the MA5600. l 1. The controllable function entries supported by the MA5600 include: l l l l l l The ETH OAM function The G. deploy one license server in the network. consider the deployment of the license server in data planning.1 Managing the License SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1.SHDSL. Service Specifications The control entries of the license function include function entries and resource entries.2 License Principles This section describes the function principle and implementation principle of the license. the license server performs license control on the function entries and resource entries supported by the MA5600 and provides individualized services for customers. A function entry refers to the entry whose license is controlled based on the function. Service Description With the license function enabled. It is recommended to install the license server on a same computer with the network management system (NMS) server.bis function The G. If no NMS server exists. 1-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The controllable resource entries supported by the MA5600 include: l l l l l l BTV user count BTV program count Count of conversion from xPOA to xPOE Count of ADSL2+/SHDSL/VDSL2 port Count of ADSL2+ port using the Annex M feature Count of ADSL2+ port using the INP+ feature NOTE l If you need to use the license function supported by the MA5600.SHDSL binding function The illegal access control function of the broadband metropolitan area network (MAN) The MPLS function The port rate measurement function A resource entry refers to the entry whose license is controlled based on the count. each product has one license file. In each management range of the license server. if the function entries are not authorized. the system prompts you that the functions are not authorized. the system allows you to continue the service configuration. The license server is installed on the same computer as the NMS server (N2000 BMS). If the resource entries are not overloaded or the function entries are authorized. That is. Each digital subscriber line access multiplexer (DSLAM) device functions as a license client. – l For license-controlled resource entries. All boards of the MA5600 are normal. When you configure a service module through the command line or NMS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1 Managing the License License Function Principle l The MA5600 adopts the network license scheme. The two servers are different components. For a license-controlled resource entry. each service module must register their controlled resource entries and function entries. the device checks whether the resource entries of the service module are overloaded or the function entries of the service module are authorized. The license server can be also installed on a separated server. Since one license server can manage multiple products. Networking Figure 1-1 shows the sample network for configuring the license application. if the service entries are overloaded. the management module of a license client obtains the authorization information about the license controlling entries of the license client from the license server according to the registration information. Prerequisite l l l The network devices and lines are in the normal state. After the system runs in the normal state. The license server manages the licenses of all the clients in a centralized manner. the license resource applied for the service module is released in deleting the service configuration. a management range can be a district or a city. l License Implementation Principle l In the system initialization process of the MA5600. In general. The license function is enabled on the MA5600. The license function is enabled. – – – 1.3 Configuration Example of the License Application This operation enables you to configure the license application. multiple license files can be stored on one license server. the license server is deployed in the network. the system terminates the service configuration and prompts that the license resources are insufficient. The license server can be installed on a same computer with the NMS server. The license file defines the resource entries of the product. The license file is stored on the license server. The license management tool installed on the N2000 Issue 04 (2007-11-30) Huawei Technologies Proprietary 1-3 . For license-controlled function entries. 1-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1 Managing the License SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide client configures and manages the license file.60. Figure 1-1 Sample network for configuring the license application N2000 BMS&License server 100.2/24 60. This section takes the configuration of MA5600_A as an example.2/24 NOTE l l The configuration at the MA5600 side is the same.60.1/24 Internet N2000 client Router 60. Table 1-1 Data plan for configuring the license application Item License server Data IP address: 100. For how to configure the license server. MA5600_A MA5600_B MA5600_N Data Plan Table 1-1 lists the data plan for configuring the license application.60.100. refer to the related configuration manual of the license server.100... MA5600_A communicates with the license server through port 0/7/0.60.60.60.. The TCP port number is 10010.100.1/24 TCP port number: 10010 MA5600_A Uplink port: 0/7/0 VLAN ID: 10 IP address of the layer 3 interface: 60.1/24 . This section describes only the configuration at the device side.60.1/24 Router IP address of the port connecting to MA5600_A: 60..60.100.. 1. huawei(config)#license server ipaddress 100. Configure the layer 3 interface. huawei(config)#save ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 1-5 .60. huawei(config-if-vlanif10)#quit huawei(config)#license esn 60.1 Step 3 Specify the license server.100.60.1 24 Step 2 Configure the equipment serial number (ESN).SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1 Managing the License Configuration Flowchart Figure 1-2 shows the flowchart for configuring the license application. Figure 1-2 Flowchart for configuring the license application Start Configure the interface communicating with the license server Configute the device ESN Specify the license server Save the data End Procedure Step 1 Configure the interface that is for communicating with the license server.100.1 tcpport 10010 Step 4 Save the data. huawei(config-if-scu-0/7)#quit huawei(config)#interface vlanif 10 huawei(config-if-vlanif10)#ip address 60.60. huawei(config)#port vlan 10 0/7 0 huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 10 3. huawei(config)#vlan 10 smart Configure the uplink port. Create a VLAN. 2.60. new controlled resources can be configured and controlled functions can be enabled within the management range of the license.10. In this case.55. that of license server 2 as 20. Context l The IP address of the license server and the TCP port number must be consistent with the data in the actual network plan. The license status of the license client is registered. ----End Example To configure the IP address of license server 1 as 10.1 20.1.20. run the display license info command to check whether the communication between the device and the license server is normal. you need to re-configure the device. and TCP port number as 1024. the communication status of the license client is abnormal.1 IP address of the second server: 20. each service module can register the controlled resource entries or function entries in the normal state. no controlled resource can be configured and no controlled function can be enabled. the communication status of the license client is normal. In this case. MA5600_A is initialized. When the related configuration is complete in the network.192 IP address of the first server: 10.1 Managing the License SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Result After the configuration.10.4 Configuring the License Server This operation enables you to configure the IP address of the license server and configure the TCP port number used for the communication between the MA5600 and the license server.1 TCP port number: 1024 Communication status: abnormal License status: unregistered NOTE l When the upper layer device is not connected. When the IP address of the license server and the TCP port number change.1.10. Two IP addresses of the license server can be configured at the device side.20. l l Procedure Step 1 Run the license server command to configure the license server. l 1-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .20. The two IP addresses must be different from each other.20.20.10. do as follows: huawei(config)#license server ipaddress 10. Only one TCP port number can be configured at the device side.10. The license status of the license client is unregistered.10. 1.71. Step 2 Run the display license info command to query the license basic information.1 tcpport 1024 huawei(config)#display license info License switch: enable ESN: 10.20. Table 1-2 Related operation for configuring the license server To. Context The ESN must be the IP address of the port connecting to the license server.200.1 IP address of the second server: 200.100. To configure the ESN for the device. Configure the ESN Query the features controlled by the license and the information about the features Run the Command. Then run the ip address command to configure the IP address of the maintenance network port..60. When the IP address of the port connecting to the license server changes.60.60.1... huawei(config)#license esn 60.200.100.5 Configuring the ESN This operation enables you to configure the equipment serial number (ESN) for the device..60.1 IP address of the first server: 100.1 TCP port number: 1024 Communication status: abnormal License status: unregistered Issue 04 (2007-11-30) Huawei Technologies Proprietary 1-7 .60.60. you should re-configure the ESN for the device. The IP address of the maintenance network port is 60.1 huawei(config)#display license info License switch: enable ESN: 60. Procedure Step 1 Run the license esn command to configure the ESN for the device. The ESN uniquely identifies the device on the license server. do as follows: NOTE Run the interface meth command to enter the MEth mode. license esn display license feature 1. ----End Example Assume that the device connects to the license server through the maintenance network port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1 Managing the License Related Operation Table 1-2 lists the related operation for configuring the license server. Step 2 Run the display license info command to query the license basic information. When the related configuration is complete in the network.1 Managing the License NOTE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l When the upper layer device is not connected. no controlled resource can be configured and no controlled function can be enabled. new controlled resources can be configured and controlled functions can be enabled within the management range of the license. license server display license feature 1-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the communication status of the license client is normal. In this case. Configure the license server Query the features controlled by the license and the information about the features Run the Command. The license status of the license client is registered. l Related Operation Table 1-3 lists the related operation for configuring the ESN for the device..... In this case. the communication status of the license client is abnormal. Table 1-3 Related operation for configuring the ESN for the device To. The license status of the license client is unregistered. 2.6 Configuring the Terminal Through SSH This operation enables you to connect the maintenance terminal to the MA5600 over a LAN or a WAN and configure the MA5600 through SSH. 2. and configure the MA5600 through the outband management channel. 2.5 Configuring the Terminal Through the Inband Management Channel This operation enables you to configure the MA5600 through the inband management channel.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal 2 Configuring the Maintenance Terminal About This Chapter This chapter describes the different maintenance modes of the MA5600 through a maintenance terminal and features of the features of the maintenance modes. 2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-1 .2 Configuring the Terminal Through the Local Serial Port This operation enables you to log in to and configure the MA5600 using the HyperTerminal of the Windows operating system.3 Configuring the Terminal Through the Remote Serial Port This operation enables you to log in to and configure the MA5600 through the remote serial port.4 Configuring the Terminal Through the Outband Management Channel This operation enables you to connect the maintenance terminal to the MA5600 over a local area network (LAN) or a wide area network (WAN). 2. 2.1 Overview This section describes the different maintenance modes of the MA5600 through the maintenance terminal and features of the different maintenance modes. Disadvantage: An extra network device is required to set up the maintenance channel. l l 2-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . without needing extra networking device.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2. Table 2-1 Features of the different maintenance modes Maintenance mode Local serial port Description Uses the HyperTerminal of the operating system for configuration. Advantages: It provides reliable device management channel. thus saving networking cost Disadvantages: The maintenance work cannot be carried out if the service channel fails. Uses the service channel of the MA5600 to manage the network device. It connects modems at both the MA5600 side and the maintenance terminal side. The configuration of a maintenance terminal involves: l l l l l 2. l Remote serial port Inband management channel Advantages: It adopts flexible networking. You can maintain the SmartAX MA5600 Multi-service Access Module (the MA5600 for short) through a maintenance terminal in command line interface (CLI) mode. The fault can be located in time even if the managed device fails.1 Overview This section describes the different maintenance modes of the MA5600 through the maintenance terminal and features of the different maintenance modes.2 Configuring the Terminal Through the Local Serial Port 2. Feature No network management software is needed.3 Configuring the Terminal Through the Remote Serial Port 2.6 Configuring the Terminal Through SSH Table 2-1 lists the features of the different maintenance modes. l Outband management channel Uses the maintenance network port (ETH) of the control board (SCU) of the MA5600 to manage the system. Uses the HyperTerminal of the operating system for configuration.4 Configuring the Terminal Through the Outband Management Channel 2.5 Configuring the Terminal Through the Inband Management Channel 2. SSH protects the MA5600 from malicious events such as IP address spoofing and clear text password interception.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Maintenance mode SSH mode Description Uses the service channel of the MA5600. 2. Figure 2-1 Networking for configuring the MA5600 through the local serial port RS-232 cable CON ETH MON Serial port PC SCU MA5600 Configuration Flowchart Figure 2-2 shows the flowchart for configuring the MA5600 through the local serial port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-3 . Networking Figure 2-1 shows the networking for configuring the MA5600 through the local serial port. or the maintenance network port of the SCU board to manage the system.2 Configuring the Terminal Through the Local Serial Port This operation enables you to log in to and configure the MA5600 using the HyperTerminal of the Windows operating system. When a user telnets to the MA5600 from an insecure network. encryption and identification functions. Feature Secure Shell (SSH) ensures network security by the authentication. Set up a connection. set the serial port parameters in the dialog box as shown in Figure 2-3. click OK. The parameters are set as follows: l l Bits per second: 9600 Data bits: 8 Huawei Technologies Proprietary Issue 04 (2007-11-30) 2-4 . In Step 2. as shown in Figure 2-1. Select the standard character terminal or PC terminal serial port that is actually connected to the MA5600 (assuming it to be serial COM2). Step 2 Start the HyperTerminal. Click OK. Configure the serial port. Click OK. Then. Use a RS-232 serial port cable to connect the serial port of the PC to the CON port of the SCU board. 1. Input the name that is to be connected to the MA5600.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-2 Flowchart for configuring the MA5600 through the local serial port Start Connect the serial port cable Run the HyperTerminal Set the HyperTerminal parameters Define the terminal type Set ASCII code Log in to the system End Procedure Step 1 Connect the serial port cable. 2. Choose Start > Programs > Accessories > Communication > HyperTerminal to start the HyperTerminal and set up a serial port connection. Step 3 Set the parameters of the terminal. the baud rate of the serial port is 9600 bit/s. Figure 2-3 Setting parameters of the terminal Click OK. as shown in Figure 2-4. This is usually due to baud rate inconsistency between the HyperTerminal and the system. In this case. Select VT100 or Auto Detection as the type of terminal emulation. 19200 bit/s. make sure the baud rate of the HyperTerminal is consistent with that of the serial port. Select File > Properties in the HyperTerminal interface. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-5 . By default. There may be illegible characters in the input information after you log in to the system. 38400 bit/s. use a different baud rate to log in to the system. The system supports the baud rates of 9600 bit/s. 57600 bit/s and 115200 bit/s. Click the Settings tab. Step 4 Define the terminal emulation type.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l l l 2 Configuring the Maintenance Terminal Parity: None Stop bits: 1 Flow control: None NOTE l l When setting the baud rate. 2-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . as shown in Figure 2-5. NOTE When you paste text to the HyperTerminal. Click ASCII Setup. Set the line delay and character delay as 200 ms. A too short delay leads to the loss of characters. and line delay controls the interval of sending every line. you can modify the setting. When the pasted text is displayed abnormally. character delay controls the character transmit speed.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-4 Setting the terminal emulation type Step 5 Set ASCII code. and then try again.3 Configuring the Terminal Through the Remote Serial Port This operation enables you to log in to and configure the MA5600 through the remote serial port. and wait till the command line prompt (MA5600>) appears. return to the previous steps to check the parameter settings and physical connections. The modem at the PC side is referred to as the calling modem. the super user name is root and password is admin). you can set up a remote connection between the PC and the MA5600 through modem dialup. 2. Huawei Technologies Proprietary 2-7 l Issue 04 (2007-11-30) .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-5 Setting ASCII code ----End Result In the HyperTerminal interface. If you still fail to log in. and then the Dial icon. Prerequisite Before using a serial port for remote maintenance. requesting you to enter the user name. press Enter. The called modem must be an external modem. The modem at the MA5600 side is referred to as the called modem. The modems shall meet the following requirements: l Both the calling and called modems comply with the related standards. connect a modem at both the MA5600 and the PC sides. Enter the user name and password for user registration (by default. click the Hang-up icon first. The system displays a message. In this way. If the login fails. and support AT command set. l Networking Figure 2-6 shows the networking for configuring the MA5600 through the remote serial port. In actual applications. Figure 2-6 Networking for configuring the MA5600 through the remote serial port Serial port cable Telephone line Modem PSTN CON ETH MON Telephone line SCU Serial port cable Modem PC MA5600 Configuration Flowchart Figure 2-7 shows the flowchart for configuring the MA5600 through the remote serial port. you can configure the modem by referring to the related AT command set. you are recommended to adopt an external modem made by the vendor of the called modem. For better compatibility and the ease of status monitoring. Figure 2-7 Flowchart for configuring the MA5600 through the remote serial port Start Set the called Modem parameters Set the calling Modem parameters Set up the configuration environment Start the HyperTerminal for dialup Log in to the system End 2-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The following configuration is based on modems of the same type.2 Configuring the Maintenance Terminal l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The calling modem can be either a built-in modem or an external modem. Step 3 Set up the configuration environment. If necessary. RD and SG. Installing a driver is not required at this step. To prevent an extremely high bit rate on the line between the two modems. 1. This is because the display function of the modem is disabled at the previous configuration operation. entering the AT command disables the echo function of the terminal and prohibits it from displaying the execution results. In the HyperTerminal. 1. shield the handshake signals and flow control signals of the modem before the connection. Issue 04 (2007-11-30) Connect the called modem. if you connect the maintenance terminal with the modem using a standard cable. before connecting the modem with the MA5600. and power on the system. Observe if the screen displays "OK". AT&D //Ignore DTR signals. Connect the serial port of the modem with that of the maintenance terminal using the dedicated cable for the modem. a baud rate of 9600 bit/s or 19200 bit/s is recommended for the serial port of the MA5600. 8 for data bits. Set the serial port parameters as follows: 9600 bit/s for baud rate. Only three signal lines. Step 2 Set the calling modem parameters. None for flow control. The configuration of a modem needs an intelligent terminal. To enable the terminal to display input and output information. 1 for stop bits. None for parity. Therefore. run the AT&F command to restore the default settings and press Enter. 3. NOTE 2. enter the following commands: ATS0=1 //Enable the auto replay function (ringing sound). In the HyperTerminal. Figure 2-6 shows the configuration environment. you can run the baudrate command to modify the baud rate of the serial port of the MA5600. After power-on. AT&R1 //Ignore the RTS signals. AT&K0 //Disable the flow control function. are used for connecting the MA5600 and the modem. enter the AT&F command to restore the default settings of the modem.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Procedure Step 1 Set the called modem parameters. However. shield the handshake signals and flow control signals of the modem. you may find that the terminal cannot display anything. Due to the limitation of the bit rate of the modem. For details on this shield operation. and select Direct to COM2 in the column of Connect using in the dialog box that appears. NOTE After the execution of the last command. 4. Huawei Technologies Proprietary 2-9 . the calling modem can function in the normal state without any configuration. ATEQ1&W //Disable the modem’s response to the command while executing the command and saving the configurations. If yes. AT&S0 //Set DSR as high level. namely SD. Start the HyperTerminal. the modem is normal. you can set AT$MB=9600 (or another value) before running the ATEQ1&W command. The following modem configuration is based on the HyperTerminal operating under Windows. Assume that the modem is connected to COM2 port. Check the modem. After the connection. refer to the settings of the called modem parameters. and power on the modem. 19200 bit/s. you only need to plug the telephone line into the LINE port of the calling modem. the baud rate of the serial port is 9600 bit/s. 2. and power on the modem. Step 4 Start the HyperTerminal. 2. In the above Step 2. Select the standard character terminal or PC terminal serial port that is actually connected to the MA5600 (assuming serial port COM2). try to use another baud rate to log in to the system. After login. For a built-in modem. 57600 bit/s and 115200 bit/s. illegible characters may be found among the input information. 1. connect the serial port of the calling modem with that of the maintenance terminal using dedicated cable for the modem. set the serial port parameters in the dialog box as shown in Figure 2-8. Step 5 Set the parameters of the HyperTerminal. Choose Start > Programs > Accessories > Communication > HyperTerminal to start the HyperTerminal and input the name. This is usually caused by baud rate inconsistency between the HyperTerminal and the system. Click OK. Set up a new connection. Then. For an external modem. Click OK. By default. The system supports the baud rates of 9600 bit/s. 2-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Configure the serial port. The parameters are set as follows: l l l l l Baud rate: 9600 bit/s Data bits: 8 Parity: None Stop bits: 1 Flow control: None NOTE l l When setting the baud rate. plug the telephone line into the LINE port of the calling modem. make sure that the baud rate of the HyperTerminal is consistent with that of the serial port. Connect the calling modem. Connect the serial port of the called modem with the maintenance port CON of SCU board on the MA5600 using the dedicated serial port cable for the MA5600. 38400 bit/s. click OK. In this case.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Plug the telephone line into the LINE port of the called modem. you can enter the AT command for dialup. refer to the AT command set. Select the modem from the Connect using drop down list. for example ATDTXXXXXXXX. 1. The modem generates a kind of sound. and then dial the telephone number of 020XXXXXXXX. from the Connect using drop down list in the HyperTerminal. rather than a modem. For an external modem. Select Bring up terminal window after dialing in the Options tab of the properties setting interface. select a serial port. After the connection is set up. the "OH" and "RI" LEDs on the modem connecting to the PC turn on. For details about the dialup commands. In the HyperTerminal interface. Click Configure in the properties setting interface to set the modem properties. follow the steps below: To set up a connection with an external modem. The HyperTerminal interface appears.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-8 Setting the parameters of the HyperTerminal Click OK. the two modem CD LEDs (for carrier detection) turn on. 2. and the HyperTerminal Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-11 . which indicates the progress of the connection. Click Dial to proceed with the dialing. Wait for the dialing tone from the exchange. XXXXXXXX represents the telephone number of the line connected with the remote modem. the procedure is as follows: Run the HyperTerminal. ATDT0 W 020XXXXXXXX means to dial "0" for connection with the external line. Set the called number. ----End Result After dialup. For a built-in modem. Step 6 Dial up on the HyperTerminal. You need not use any ATDT commands for dialing. Click OK to confirm the setting. Figure 2-9 Networking for local configuration through a LAN CON ETH MON SCU LAN MA5600 PC PC PC 2-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Otherwise. l 2. WARNING l In the process of modem connection setup. modems of a certain model may remain online all the time. causing failure in the next dialup connection. After configuring the MA5600. If "NO CARRIER" is displayed. Press Enter until the login interface appears. After a remote maintenance operation.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide interface displays "CONNECT9600 (or 19200)". the connection fails. you need to disconnect the line. pressing any key in the keyboard will interrupt the ongoing call. This indicates that the inter-modem connection is set up successfully. rather than merely shutting down the HyperTerminal. Networking-LAN Figure 2-9 shows the networking for local configuration through a LAN. run the hang-up command of the HyperTerminal to break the connection. and configure the MA5600 through the outband management channel.4 Configuring the Terminal Through the Outband Management Channel This operation enables you to connect the maintenance terminal to the MA5600 over a local area network (LAN) or a wide area network (WAN). Check the hardware connections and the telephone line. 1/24 NOTE You can also use a crossover cable to connect the network port of the maintenance terminal with the maintenance network port of the control board to maintain the MA5600.20. Table 2-2 Data plan for the network Item maintenance network port of the MA5600 PC used for maintaining the MA5600 Data IP address: 10.2/24 IP address: 10. Make sure that the IP address of the maintenance network port of the control board and that of the PC used for maintaining the MA5600 are located in the same subnet. NOTE You can also use a crossover cable to connect the network port of the maintenance terminal with the maintenance network port of the control board to maintain the MA5600.20.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Use a straight through cable to connect the MA5600 with the LAN.10. Figure 2-10 Connection between a WAN and the maintenance network port of the control board PC LAN WAN Router CON ETH MON PC PC SCU MA5600 Data Plan-WAN Table 2-3 lists the data plan for the network. Networking-WAN Figure 2-10 shows the connection between a WAN and the maintenance network port of the control board.10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-13 . Data Plan-LAN Table 2-2 lists the data plan for the network. Figure 2-11 Flowchart for configuring the MA5600 through the outband management channel Start Set up the configuration environment Set the IP address of the ETH port Add a route for the NMS Run Telnet Log in to the system End Procedure Step 1 Set up the configuration environment.20.20. Figure 2-9 and Figure 2-10 show the sample networks for configuring the MA5600 through the outband management channel.1 24 Step 3 Add a route for the network management system (NMS).10.10.254/24 Configuration Flowchart Figure 2-11 shows the flowchart for configuring the MA5600 through the outband management channel.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 2-3 Data plan for the network Item maintenance network port of the MA5600 PC used for maintaining the MA5600 Router port connecting to the MA5600 Data IP address: 10.21.1/24 IP address: 10.20.10.1/24 IP address: 10.10. You can set up the environment as required. Step 2 Set the IP address of the maintenance network port. 2-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#interface meth 0 huawei(config-if-meth0)#ip address 10. 10.10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 2 Configuring the Maintenance Terminal If you set up the WAN configuration environment as shown in Figure 2-9.5 Configuring the Terminal Through the Inband Management Channel This operation enables you to configure the MA5600 through the inband management channel.. By default. followed by the IP address of the maintenance network port of the MA5600 in the Open field. 2. no route needs to be added. Ltd. you can perform the configuration successfully. Copyright (C) Huawei Technologies Co.0 24 10. the super user uses root as the user name and admin as the password. as shown in Figure 2-12. add a next hop route to the NMS.254 Step 4 Run the telnet application. If you set up the WAN configuration environment as shown in Figure 2-10. Huawei MA5600 Multi-service Access Module. Click OK to run the telnet application. Choose Start > Run on the PC.20. 2002-2007. Figure 2-12 Running the telnet application Step 5 Log in to the system. Enter the telnet command. >>User name:root >>User password: ----End Result After you log in to the system. All rights reserved. l huawei(config)#ip route-static 10. Networking-LAN Figure 2-13 shows the networking for the maintenance through the GE port over a LAN. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-15 .21. 20. Table 2-4 Data plan for the network Item Inband management interface of the MA5600 PC used for maintaining the MA5600 Data IP address: 10.3/24 Networking-WAN Figure 2-14 shows the networking for the maintenance through the GE port over a WAN. Figure 2-14 Networking for the maintenance through the GE port over a WAN CON ETH MON IP PC Router SCU GE 0/7/0 MA5600 Data Plan-WAN Table 2-5 lists the data plan for the network.10. 2-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1/24 IP address: 10.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-13 Networking for the maintenance through the GE port over a LAN CON ETH MON GE 0/7/0 SCU MA5600 LAN PC PC PC Data Plan-LAN Table 2-4 lists the data plan for the network.10.20. 1/24 IP address: 10.10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Table 2-5 Data plan for the network Item GE port of the MA5600 PC used for maintaining the MA5600 Router port connecting to the MA5600 Data IP address: 10.10. Figure 2-15 Flowchart for configuring the MA5600 through the inband management channel Start Set up the configuration environment Create an NMS VLAN Set the IP address of the VLAN interface Set the inband NMS route Run the Telnet Log in to the system End Procedure Step 1 Set up the configuration environment.21.10.20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-17 .20.1/24 IP address: 10.254/24 Configuration Flowchart Figure 2-15 shows the flowchart for configuring the MA5600 through the inband management channel. huawei(config)#vlan 30 standard huawei(config)#port vlan 30 0/7 0 Step 3 Set the IP address of the VLAN layer 3 interface. By default. the system prompts the following Huawei MA5600 Multi-service Access Module. Run the vlan command to create an NMS VLAN.0 24 10. If the configuration environment is set up as shown in Figure 2-14. Choose Start > Run on the PC. huawei(config-if-vlanif30)#quit huawei(config)#ip route-static 10. Copyright (C) Huawei Technologies Co.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-13 and Figure 2-14 show the sample network for configuring the MA5600 through the inband management channel. followed by the IP address of the maintenance network port of the SCU board in the Open field. huawei(config)#interface vlanif 30 huawei(config-if-vlanif30)#ip address 10.0 Step 4 Set inband NMS route.10.20. Step 2 Create an NMS VLAN and add the upstream port to it. When you log in. no route needs to be configured.21.255. If the configuration environment is set up as shown in Figure 2-13. Ltd.10.10. Enter the telnet command.255.20. All rights reserved. Figure 2-16 Running the telnet application Step 6 Log in the system.. Click OK to run the telnet application as shown in Figure 2-16.254 Step 5 Run the telnet application. add the route of next hop.1 255. 2002-2007. You can set up the environment based on your own conditions. the Super user uses root and admin as the user name and password. Run the ip address command to set the IP address and subnet mask of the MA5600 VLAN layer 3 interface. >>User name:root >>User password: ----End 2-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . you can configure the terminal for maintenance.10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-19 .exe.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Result After login. Figure 2-17 Setting up the SSH configuration environment in LAN outband mode CON ETH MON SCU LAN MA5600 PC PC PC Data Plan-LAN Table 2-6 lists the data plan for the network.exe NOTE You can search and download the client software from the Internet.10.20. sshkey. 2. Networking-LAN Figure 2-17 shows the connection for setting up the SSH configuration environment in LAN outband mode. PuTTYGen.6 Configuring the Terminal Through SSH This operation enables you to connect the maintenance terminal to the MA5600 over a LAN or a WAN and configure the MA5600 through SSH.1/24 Client software: PuTTY.exe.2/24 User name: huawei User authentication mode: RSA public key authentication PC used for maintaining the MA5600 IP address: 10.20. Table 2-6 Data plan for the network Item MA5600 Data IP address of the maintenance network port: 10. 2-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . sshkey.exe.10.21.10.10. Table 2-7 Data plan for the network Item MA5600 Data IP address of the maintenance network port: 10.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Networking-WAN Figure 2-18 shows the connection for setting up the SSH configuration environment in WAN outband mode. Figure 2-18 Setting up the SSH configuration environment in WAN outband mode PC LAN WAN Router CON ETH MON PC PC SCU MA5600 Data Plan-WAN Table 2-7 lists the data plan for the network. PuTTYGen.1/24 Client software: PuTTY Password conversion tool: PuTTY.2/24 User name: huawei User authentication mode: RSA public key authentication PC used for maintaining the MA5600 IP address: 10.20.exe NOTE You can search and download the client software from the Internet.20.254/24 Networking-LAN Figure 2-19 shows the connection for setting up the SSH configuration environment in LAN inband mode.exe. Router port connecting to the MA5600 IP address: 10. Table 2-8 Data plan for the network Item MA5600 Data IP address of the VLAN layer 3 interface: 10.1/24 Client software: PuTTY.10. Networking-WAN Figure 2-20 shows the connection for setting up the SSH configuration environment in WAN inband mode.exe. Figure 2-20 Setting up the SSH configuration environment in WAN inband mode CON ETH MON IP PC Router SCU GE 0/7/0 MA5600 Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-21 .10.exe NOTE You can search and download the client software from the Internet. sshkey.exe. PuTTYGen.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-19 Setting up the SSH configuration environment in LAN inband mode CON ETH MON GE 0/7/0 SCU MA5600 LAN PC PC PC Data Plan-LAN Table 2-8 lists the data plan for the network.20.20.2/24 User name: huawei User authentication mode: RSA public key authentication PC used for maintaining the MA5600 IP address: 10. " 2-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1/24 Client software: PuTTY Password conversion tool: PuTTY.6 Configuring SSH. Table 2-9 Data plan for the network Item MA5600 Data IP address of VLAN layer-3 interface: 10. sshkey.exe.254/24 Configuration Flowchart Figure 2-21 shows the flowchart for configuring the SSH environment.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Data Plan-WAN Table 2-9 lists the data plan for the network. PuTTYGen.10.10.exe.exe NOTE You can search and download the client software from the Internet. Router port connecting to the MA5600 IP address: 10.20.10. refer to "8.20.21.2/24 User name: huawei User authentication mode: RSA public key authentication PC used for maintaining the MA5600 IP address: 10. For details on configuration. password-public key authentication modes Set authentication mode for the SSH user passwordauthentication mode Create the key pair for the SSH server Generate the RSA public key Generate the public key for the SSH user Authorize the public key to the SSH user Use the SSH software to log in to the system End Procedure Step 1 Set up the configuration environment. do as follows: Huawei Technologies Proprietary 2-23 Issue 04 (2007-11-30) . l To set the IP address of the maintenance network port. You can set up the configuration environment shown in Figure 2-17. Figure 2-19 and Figure 2-20. all.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-21 Flowchart for configuring in SSH mode Start Set the IP address of the maintenance network port/VLAN layer 3 interface Add a route for the NMS Create a user rsa. Figure 2-18. Step 2 Set the IP address of the maintenance network port/VLAN layer 3 interface. To set up a LAN configuration environment based on Figure 2-17 or Figure 2-19.. Operator 3...++++++++++++ . do as follows: huawei(config)#interface vlanif 30 huawei(config-if-vlanif30)#ip address 10... To create a user of operator level with user name and password huawei and reenter log times 4. Input the bits in the modulus[default = 512]: Generating keys. Select the rsa authentication mode....++++++++++++ .20.++++++++ Step 7 Generate the RSA public key..2 255..EXE Huawei Technologies Proprietary Issue 04 (2007-11-30) ... huawei(config)#ssh user huawei authentication-type rsa Step 6 Create the key pair for the SSH server..0 l To set the IP address of the VLAN layer 3 interface.0 24 10... To set up a WAN configuration environment based on Figure 2-18 or Figure 2-20.... NOTES: If the key modulus is greater than 512.255. 1.20.++++++++ . 2-24 Run the key generator PUTTYGEN.10.. Administrator:2 Permitted Reenter Number(0--4):4 User's Appended Info(<=30 chars): This user has been added Repeat this operation? (y/n)[n]:n Step 5 Set authentication mode for the SSH user..255......10.2 255... Be sure to complete the "rsa local-key-pair create" operation and create the local key pair before further SSH configurations.10. CAUTION The first step after you succeed in logging in to the SSH is to configure and create the local RSA key pair. do as follows: huawei(config)#terminal user name User Name(<=15 chars):huawei User Password(<=15 chars):huawei Confirm Password(<=15 chars): huawei User's Level: 1..10.....20. It will take a few minutes.....254 Step 4 Create a user..0 Step 3 Add a route for the NMS. ... you must add a route of next hop for the NMS as follows: huawei(config)#ip route-static 10...255.. Common User 2.255. you need not add any route for the NMS.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#interface meth 0 huawei(config-if-meth0)#ip address 10...21. huawei(config)#rsa local-key-pair create The key name will be: huawei_Host The range of public key size is (512 ~ 2048). Move the mouse over the blank area to generate the client key. as shown in Figure 2-22.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Open the key generator PUTTYGEN.EXE. Figure 2-22 Interface of the key generator 2. as shown in Figure 2-23. Select SSH-2 RSA as the key type under Parameters. Generate the client key. Click Generate. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-25 . save public key and private key. Run sshkey.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-23 Generating the client key After generating the client key. Generating the RSA public key. to convert the client public key into the RSA public key. the client software for converting keys. 3.exe. as shown in Figure 2-24. 2-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#ssh user huawei assign rsa-key key Step 10 Log in to the System. 1. Select the file for the private key and click OK. return last view with "public-key-code end". copy the RSA public key to the server in configrsa-key-code command line mode.EXE. as shown in Figure 2-25. In global config mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-24 Interface of converting the client public key into the RSA public key Step 8 Generate the public key for the SSH user. Run the client software. To generate the public key for the SSH user. Run the SSH client software PUTTY. Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-27 . to authorize the public key to the SSH user huawei. Click Browse. Click Auth in the directory tree and assign a file for the RSA private key. huawei(config)#rsa peer-public-key key 1 huawei(config-rsa-public-key)#public-key-code begin Enter "RSA key code" view. huawei(config-rsa-key-code)#30818602 81805A01 625279EF 5E4CD503 916C9DB5 huawei(config-rsa-key-code)#C901D4CA 207C77D3 4EF25B04 9897BD24 997BF61B huawei(config-rsa-key-code)#F82B6F06 55ACCDB9 F7DC1474 9E6518EE B1A543FF huawei(config-rsa-key-code)#111BD11C 683A023B A4295550 DA13F6BE 3190A2A8 huawei(config-rsa-key-code)#4FBAA365 F6E796A0 B02CB6F9 8491A373 9B4A0876 huawei(config-rsa-key-code)#BBA2C7BA E1974104 AD165E98 18CF0201 25 huawei(config-rsa-key-code)#public-key-code end huawei(config-rsa-public-key)#peer-public-key end 0233CF58 DFB9A73C 9147150B 3BFCB158 4B3189B4 Step 9 Authorize the public key to the SSH user. Type in the IP address of the MA5600 in the Host Name (or IP address) text box.2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 2-25 Interface of the SSH client software 2. Click Session in the directory tree. Click Open to log in to the system. 2-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Log in to the system. the system will prompt message.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 Configuring the Maintenance Terminal Figure 2-26 Interface for connecting to the system. Because the user authentication mode is RSA. Figure 2-27 Interface for logging in the SSH client Issue 04 (2007-11-30) Huawei Technologies Proprietary 2-29 . as shown in Figure 2-27. 2 Configuring the Maintenance Terminal SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Enter the correct user name to log in to the system according to the prompt. ----End Result After you log in to the system. 2-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . you can perform the configuration successfully. 3 Basic Operations Through CLI This section describes how to perform the basic operations on the MA5600 through the CLI.1 Overview This chapter describes the command line interface (CLI) operation mode and how to apply it for maintaining the MA5600. 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI 3 About This Chapter Getting Started With CLI This chapter describes the CLI basic operations of the MA5600.2 CLI Characteristics This section describes the CLI characteristics of the MA5600. 3. Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-1 . 3. Service Description You can maintain the MA5600 through two modes: network management system (NMS) and CLI.8 CLI Error Prompts This section describes the CLI error prompts. 3. and the CLI provides the command line interface for the same purpose. 3. 3. You can maintain the MA5600 through the CLI easily.4 Interaction Characteristics This section describes the interaction function of the CLI. 3.2.2.2. After reading this chapter.2 Intelligent Matching This section describes the intelligent matching of the CLI. the feature and the switchover among command modes.2 CLI Characteristics This section describes the CLI characteristics of the MA5600.1 Overview This chapter describes the command line interface (CLI) operation mode and how to apply it for maintaining the MA5600.2.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3. 3. For this purpose. 3.1 Command Modes This section describes the CLI command mode.2.7 Saving and Showing History Commands The CLI provides a function like Doskey to automatically save history commands. 3. l Service Specification This chapter describes some basic CLI operations. you can run the HyperTerminal or the telnet program of the Windows operating system to log in to the MA5600 to maintain it through the CLI.2.2. l The NMS provides a graphical user interface (GUI) for easy operations. 3. you can perform the basic configurations for the MA5600 through the CLI. 3. By this function.5 Parameter Prompt This section describes the parameter prompt function of the CLI.6 Display Characteristics This section describes the display characteristics of the CLI. you can obtain history commands saved in the CLI and execute them repeatedly.2.3 Edit Characteristics This section describes the edit characteristics of the CLI. 3-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 2.1 Command Modes This section describes the CLI command mode.  Mode Switching Figure 3-1 shows how to switch over among the command modes. the system can prevent any unauthorized access. and the executable commands for these users are also different even though they can enter the same mode. the command modes involved are different. All commands in user mode and privilege mode can be run in global config mode. For users at different levels. Classification The MA5600 provides various modes to realize hierarchical protection and avoid unauthorized access.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI 3. the feature and the switchover among command modes. The MA5600 provides the following command modes: l l l l l l l l l l User mode Privilege mode Global config mode Interface config Mode OSPF mode RIP mode MPLS-LDP mode Tunnel mode BTV mode Test mode Features l Downward compatibility All commands in user mode can be run in privilege mode. l Hierarchical protection Based on different command modes. Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-3 . Configure VDSL port parameters..)# OSPF mode huawei(config-ospf-. Configure EMU port parameters...)# BTV mode huawei(config-btv)# test quit Test mode huawei(config-test)# MPLS-LDP mode huawei(config-ospf-ldp)# return Table 3-1 lists the features of the interface config modes. Configure the parameters of the maintenance network port. Table 3-1 Features of the interface config modes Command Mode SCU ADSL SHDSL VDSL Meth Function Configure the control board.. Configure SHDSL port parameters. Prompt huawei(config-ifSCU-0/7)# huawei(config-ifadsl-0/2)# huawei(config-if-shl-0/5) # huawei(config-ifvdsl-0/2)# huawei(config-if-meth0) # Entry huawei(config) #interface SCU huawei(config) #interface adsl huawei(config) #interface shl huawei(config) #interface vdsl huawei(config) #interface meth 0 EMU huawei(config-ifpower4845/fan/h303esc/ h304esc/h561esc-0)# huawei(config) #interface emu 3-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Configure ADSL port parameters..3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 3-1 Switching over among the command modes ospf quit rip quit btv quit Login quit User mode huawei> enable Privilege mode huawei# disable config quit Global config mode huawei(config)# interface quit Interface config mode huawei(config-if-..)# RIP mode huawei(config-rip-. Configure tunnel interface parameters. The information in the bracket describes the current mode. By default. Configure MPLS LDP parameters. run the quit command. just type in en or ena. when you enter dip (for display). huawei#dip l The entered keyword conflicts with others.2. entering a space does not display the commands.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI Command Mode NULL Function Configure NULL interface parameters. For example. 3. Configure VLAN parameters. if the system does not return the commands. The system returns a list of matching keywords. run the return command. Configure OAM port parameters. In this case. for the command enable. you can type in an incomplete keyword. and then press the space bar. Function For ease of operation. it indicates that: l You have entered a wrong command. To exit from the current mode to privilege mode. For example. the command line prompt uses "MA5600" as its prefix. Configure MPLS parameters. Huawei Technologies Proprietary 3-5 Issue 04 (2007-11-30) . To exit from the privilege mode to user mode. You can modify the prompt by using the sysname command.2 Intelligent Matching This section describes the intelligent matching of the CLI. run the disable command. Notes On pressing the space bar. check the command and enter the correct one. Prompt huawei(config-if-null0)# Entry huawei(config) #interface null huawei(config) #interface vlanif huawei(config)#mpls huawei(config)#mpls ldp huawei(config) #interface tunnel huawei(config) #interface oam VLANIF MPLS MPLS-LDP Tunnel huawei(config-if-vlanif2) # huawei(config-mpls)# huawei(config-mpls-ldp) # huawei(config-iftunnel10)# huawei(config-ifoam-0/4)# OAM NOTE To exit from a command mode. 3 Edit Characteristics This section describes the edit characteristics of the CLI. Function The CLI provides basic command edit functions. Pressing this key will delete the character before the cursor and move the cursor backwards.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide For example. Move the cursor leftwards for the length of one character. number keys and mark keys. Move the cursor rightwards for the length of one character. It allows multi-line editing. with up to 255 bytes for each command. This is because there are two commands that start with dis: disable and display. Display history commands. For some terminals which do not support up/down arrow keys. Move the cursor to the end of the line. when you enter dis in privilege mode. 3. the system cannot find a matched keyword for it. Delete the characters before the current cursor and move the cursor to the beginning of the line. Specification Table 3-2 lists the edit functions. Table 3-2 Edit functions Key Common key <Backspace> Function If the edit buffer is not full. Left arrow key <←> or <Ctrl+A> Right arrow key <→> or <Ctrl+D> Up/Down arrow key <↑ ><↓> <Ctrl+U> <Ctrl+K> <Ctrl+F> <Ctrl+B> <ESC> NOTE Common keys refer to letter keys. Pressing this key twice will delete the current input. Search a string. When reaching the beginning of the command. you can use Ctrl+P to select the previous history command. 3-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the cursor stops.2. pressing such a key will move the cursor rightwards from its current position. Delete the characters after the current cursor and move the cursor to the end of the line. Specification Table 3-3 lists the meaning of the CLI characters supported by the MA5600.X> }: 10. do as follows: huawei#undo smart huawei#load program tftp ^ % Incomplete command. l To run the load program command after interactive mode is disabled. do as follows: huawei#switch ? --------------------------------------------Command of user Mode: --------------------------------------------language-mode Set language parameter 3. and error detected at '^' To query the command help after entering the switch command keyword by "?".X. Table 3-3 Meaning of the CLI characters supported by the MA5600 Character <K> <E> Issue 04 (2007-11-30) Meaning Keyword Enumeration.10.1>|frameid/slotid<S><3.2.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI 3. the CLI characters such as K and I are used to express the parameter types of a keyword. Items following it are the available options. Huawei Technologies Proprietary 3-7 .2. the system prompts you with the next keyword and its parameter type. do as follows: huawei#load program { xmodem<K>|tftp<K>|ftp<K> }: tftp { ServerIpAddress<I><X.15> }: 0/3 When interactive mode is disabled. when you type in an incomplete command.X.1 { frameid<U><0. Function In interactive mode.10. the system will prompt error.5 Parameter Prompt This section describes the parameter prompt function of the CLI.4 Interaction Characteristics This section describes the interaction function of the CLI. if you type in an incomplete command and press Enter. Examples l To run the load program command in interactive mode. Function In interactive mode. 3-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . l One screen here refers to the one screen displayed by the HyperTerminal software of a PC. Information following it is the range of the value to be entered. Function When you query information. you can use the pause function to view information displayed on multiple screens. The system supports that the screen scrolls upward automatically. that is. which contains 24 lines. The system shall support the input of "0x". By default. Run the scroll command to enable the auto-scroll function. The default setting is decimal number. the auto-scroll function is disabled. LONG. such as the mask of an IP address. Information following it is the range of the value to be entered. However. if you do not type in "0x" when entering a hexadecimal number. sometimes the CLI will fail to display the information on one screen because it is too much. run the undo scroll command to disable the auto-scroll function.2.6 Display Characteristics This section describes the display characteristics of the CLI. the displayed information cannot pause. Date Time NOTE The CLI supports the input of the hexadecimal number. Information following it is the range of the character string to be entered. 3. IP address MASK. Character string. l Specification Table 3-4 lists the options for viewing information displayed on multiple screens. the system considers the input number as a decimal one. MMAC address Hexadecimal number.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Character <U> <L> <S> <I> <M> <P> <H> <D><yyyy-mm-dd> <T><hh:mm:ss> Meaning ULONG. In this case. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI Table 3-4 Options for viewing information displayed on multiple screens Key Press Q or Ctrl+C when the display is frozen. After re-login. Continue to display the information on the next screen. Procedure Step 1 Run the history-command max-size command to set the number of history commands that can be saved in the command buffer. you can obtain history commands saved in the CLI and execute them repeatedly. the history commands are cleared. By default. run the history-command max-size command. Press Space when the display is frozen press Enter when the display is frozen Function Suspend the display and execution of the commands.7 Saving and Showing History Commands The CLI provides a function like Doskey to automatically save history commands. do as follows: huawei(config)#history-command max-size 20 huawei#display history-command -------------------------------------------------No. Command -------------------------------------------------10 interface ? 9 history-command max-size 8 mac-pool ? 7 display current-configuration 6 ? 5 quit 4 quit 3 radius-server ? Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-9 . The display history-command command can only show the commands executed by the current user. ----End Example To set the number of history commands that can be saved in the command buffer to 20.2. 3. up to 10 history commands can be saved for every user in the CLI. Step 2 Run the display history-command command to show history commands. By this function. Continue to display the information on the next line. Context To set the maximum number of history commands saved in the buffer. To restore the default setting. run the history-command max-size command. Table 3-5 Common CLI error prompts Error Prompt Unknown command Cause l l l l Such a command cannot be found.2 Enabling Interactive Command Execution This operation enables interactive command execution.2. Such a keyword cannot be found.8 CLI Error Prompts This section describes the CLI error prompts.3. 3. 3. the help list is empty. The parameter type is not correct.4 Switching Terminal Language This operation enables you to select a preferred language as the terminal display language.3. If the command fails to pass the check.5 Setting System Time This operation enables you to set the system time. 3. the system prompts an error.3. Function The system checks the syntax of each command you type in. 3. The parameters input are too many. Specification Table 3-5 shows the common CLI error prompts. Incomplete command Too many parameters Ambiguous command Parameter error The command input is incomplete. 3. The parameter is wrong and the cursor indicates the error location. The command input is ambiguous.3. The parameter value exceeds the threshold. If no help information is found.3. 3. 3-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .3 Enabling CLI Trap Reporting This operation enables you to enable CLI trap reporting when displaying alarm or progress information is needed during the execution of a command.1 Obtaining Online Help Information This operation enables you to obtain online help information.3 Basic Operations Through CLI This section describes how to perform the basic operations on the MA5600 through the CLI. and executes the command if it passes the check.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 ? 1 ? -------------------------------------------------- 3. the system will let the user exit from the system. you can obtain help information about all commands matching the keyword.3. During the time.12 Showing CPU Usage This operation enables you to show the CPU usage of a board. the help list is empty. When you input a complete keyword followed by a space and a question mark. 3. 3. and locate network faults. if the user fails to type in any information on the terminal.3.9 Locking the Terminal This operation enables you to lock the terminal to prevent others from accessing the terminal by using the current user name.10 Clearing Terminal Screen This operation enables you to clear the terminal screen.13 Showing the Memory Usage This operation enables you to check the memory usage of the control board. you can obtain help information about the current available commands. 3.1 Obtaining Online Help Information This operation enables you to obtain online help information.8 Setting Timeout Exit Time This operation enables you to set timeout exit time.14 Testing Network State This operation enables you to check the network connectivity and whether the host is reachable. such as display ?.3.11 Showing Version This operation enables you to show the system or board version.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI 3.3. 3.3. and check all gateways passed by data packets sent from a host to the destination. Context The CLI offers two ways for you to obtain online help: l Full help When you input ? following the prompt. such as display l?.7 Setting Terminal Type This operation enables you to set terminal type of the CLI system according to the type of the in-service terminal.3. 3.3.3. To show the help information about all available commands in global config mode. you can obtain help information about the commands matching the incomplete keyword.3.3. 3. so as to ensure correct command line editing. do as follows: huawei(config)#? --------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-11 . l Partial help When you input an incomplete keyword followed by a question mark. 3. If no help information is found. 3. 3.6 Setting System Name This operation enables an administrator to set system name to differentiate various MA5600s. Authorization.. do as follows: huawei(config)#d? --------------------------------------------Command of config Mode: --------------------------------------------debugging Enable system debugging functions default Configure default MAC pool defaultvlan Configure default VLAN type device-template Device template command dhcp <Group> dhcp command group dhcp-server Add DHCP server IP addresses --------------------------------------------Command of privilege Mode: --------------------------------------------debugging <Group> debugging command group diagnose Change into diagnose mode disable Turn off privileged mode commands display Display information duplicate <Group> duplicate command group --------------------------------------------Command of user Mode: --------------------------------------------display Display information Related Operation Table 3-6 lists the related operation for obtaining online help information.. Table 3-6 Related operation for obtaining online help information To… Obtain system help information Run the Command.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Command of config Mode: --------------------------------------------aaa AAA(Authentication.More ( Press 'Q' to break ) ---- To show help information about the commands matching an incomplete d.More ( Press 'Q' to break ) ---- To show help information about the commands matching an incomplete keyword display.Accounting) acl ACL status and configuration information adsl <Group> adsl command group alarm Display alarm related information arp <Group> arp command group authentication-scheme Authentication scheme ---. do as follows: huawei(config)#display ? --------------------------------------------Command of privilege Mode: --------------------------------------------aaa AAA(Authentication. help 3-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .Accounting) view acl Specify ACL configuration information adsl <Group> adsl command group arp <Group> ARP command group bind Bind IP/MAC board <Group> board command group ---.Authorization. do as follows: huawei>interactive huawei>display interactive Command confirmed function is enabled Related Operation Table 3-7 lists the related operation for enabling or disabling interactive command execution. if you type in a command and press Enter.2 Enabling Interactive Command Execution This operation enables interactive command execution. Table 3-7 Related operation for enabling or disabling interactive command execution To… Disable interactive command execution Run the Command… undo interactive 3.  Context l With interactive command execution enabled. are you sure to reboot system? (y/n)[n]: l With interactive command execution disabled. the unsaved data will lose if reboot system. the system executes the command directly. ----End Example To enable the interactive command execution. By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI 3.3. For example. Step 2 Run the display interactive command and you can find that the interactive command execution is enabled. the interactive command execution is enabled. l Procedure Step 1 Run the interactive command to disable interactive command execution. the system gives prompts to prevent wrong operations.3 Enabling CLI Trap Reporting This operation enables you to enable CLI trap reporting when displaying alarm or progress information is needed during the execution of a command. the system prompts the following: Please check whether data has saved.3. if you type in the reboot system command and then press Enter. Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-13 . if you type in a complete command and press Enter. 3-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . including English and Chinese. channel name:trapbuffer dropped messages 0. channel name : console Monitor: channel number : 1. channel name : logbuffer dropped messages 0.max buffer size 1024. channel number:3. current messages 36. Context The MA5600 supports the general language and the local language.3. Received messages = 37 IO Reg messages = 0 IO Sent messages = 0 Related Operation Table 3-8 lists the related operation for enabling or disabling CLI trap reporting. debug . channel number : 4. Step 2 Run the display info-center command and you can find that the CLI trap reporting is enabled. ----End Example To enable the CLI trap reporting function. overwrote messages 0 Trap buffer: enabled. Table 3-8 Related operation for enabling or disabling CLI trap reporting To… Disable CLI trap reporting Run the Command… undo info-center enable 3. trap .max buffer size 1024.date.date. channel name : snmpagent Log buffer: enabled.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the info-center enable command to enable the CLI trap reporting function. channel name : monitor SNMP Agent: channel number : 5.boot Sent messages = 37. current buffer size 512. English is the default language. do as follows: huawei(config)#info-center enable huawei(config)#display info-center Information Center:enabled Log host: Console: channel number : 0. overwrote messages 0 Information timestamp setting: log . current messages 0.4 Switching Terminal Language This operation enables you to select a preferred language as the terminal display language. current buffer size 256. the system checks the validity of the time. that is. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-15 . Step 2 Run the time command to set the system time. ----End Example To switch from one language to another.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI Procedure Run the switch language-mode command to switch from one language to another.5 Setting System Time This operation enables you to set the system time. Special attention shall be paid to the settings of leap year and leap month. ----End Example To set the current system time zone and time.3. this command is not available for the common user. Table 3-9 Related operation for switching the terminal language To… Display the terminal language Run the Command… display language Remarks In user mode. do as follows: huawei(config)#switch language-mode Related Operation Table 3-9 lists the related operation for switching the terminal language. Context l The system can synchronize the time of the NTP server based on the time zone where the MA5600 is located. The system can automatically set the local time based on the time zone where the MA5600 is located. Step 3 Run the display time command and you can find that the current system time has been set successfully. l l l Procedure Step 1 Run the timezone command to set the time zone where the device is located. 3. During the setting. hour: minute: second year-month-day. The setting takes effect at once. The time format is hh:mm:ss yyyy-mm-dd. 3-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To name the first MA5600 at the New York office in U. the command line prompt will change to the new name accordingly.3 Getting Started With CLI huawei#timezone GMT+ 8:00 huawei#time 09:00:00 2007-06-20 huawei#display time { <cr>|dst<K>|time-stamp<K> }: Command: display time 2007-06-20 09:00:00+08:00 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3. Context l l l By default.S.7 Setting Terminal Type This operation enables you to set terminal type of the CLI system according to the type of the in-service terminal. such as HyperTerminal. so as to ensure correct command line editing. Procedure Step 1 Run the terminal type command to set the terminal type. Some terminal tools. You can use the associated menu to set the terminal emulation type so that the type of the terminal tool is consistent with that of the terminal in the system.A. allow you to set the terminal types.3. telnet and neterm. do as follows: huawei(config)#sysname NY_MA5600_A 3. Procedure Run the sysname command to set the system name. Context l Different terminals feature different edit characteristics.3. namely: -Standard terminals (ANSI) -VT series terminals l l The default terminal type is ANSI.6 Setting System Name This operation enables an administrator to set system name to differentiate various MA5600s. the device name is MA5600. The new system name takes effect immediately after it is set. After the system is changed. the system divides terminals into two types. To make most terminals become mutually compatible. If there is no input from terminal during this time. During the time. the user will be disconnected Related Operation Table 3-10 lists the related operation for setting the timeout exit time. Step 2 Run the display idle-timeout command and you can find the timeout exit time has been set correctly. ----End Example To set the timeout exit time to 23 minutes.3. the system will let the user exit from the system. Procedure Step 1 Run the idle-timeout command to set the timeout exit time. if the user fails to type in any information on the terminal.8 Setting Timeout Exit Time This operation enables you to set timeout exit time.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI Step 2 Run the display terminal type command and you can find that the terminal type has been set correctly. do as follows: huawei>idle-timeout 23 huawei>display idle-timeout The timeout value is set to 23 minutes currently. Table 3-10 Related operation for setting the timeout exit time To… To set the timeout exit time to the default 120 minutes Run the Command… undo idle-timeout Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-17 . the system will let the user exit from the system as long as the user fails to type in any information on the terminal for 5 minutes. do as follows: huawei#terminal type vt100 huawei>display terminal type The terminal type: VT100 3. ----End Example To set the terminal type as VT 100. Context By default. Context The command will clear the screen output. ----End Example To lock the current CLI terminal and then unblock it.10 Clearing Terminal Screen This operation enables you to clear the terminal screen. ----End 3-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Procedure Run the terminal hold command to lock the terminal. Table 3-11 Related operation for locking the terminal To… Unlock the terminal Run the Command… undo terminal hold 3. Related Operation Table 3-11 lists the related operation for locking the terminal. Procedure Run the cls command to clear the terminal screen.3.3. and display the command prompt on the upper left of the screen. do as follows: huawei(config)#terminal hold Hold Password(<=15 chars): Confirm Password(<=15 chars): The user terminal has been held Hold Password(<=15 chars)://Press any key and the system will prompt you to enter the unblocking password. you can operate the terminal.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3. This command only clears what is displayed on the screen rather than those in the buffer. Context Once a terminal is locked. the system will prompts you to enter the password. huawei(config)# //Input the correct password.9 Locking the Terminal This operation enables you to lock the terminal to prevent others from accessing the terminal by using the current user name. if you press any button on the terminal. After entering the correct password. 12 Showing CPU Usage This operation enables you to show the CPU usage of a board.3. 4 second(s) huawei(config)#display version 0/7 Main Board: H561SCU --------------------------------------PCB Version: H561SCU VER G Base BIOS Version: 101 Extended BIOS Version: 101 Software Version: MA5600V300R003 Logic Version: (U13)103(U57)103(U66)104 MAB Version: 0002 SubBoard[0]: PCB Version: H531O2GS VER A MAB Version: 0001 SubBoard[1]: PCB Version: H561E4GFA VER 0 MAB Version: 0001 SubBoard: PCB Version: H511L24GA VER B CPLD Version: (U3)103 MAB Version: B0 3. 13 minute(s). Context The command cannot show the version of a faulty board.15>: Command: display version MA5600V300R003 RELEASE SOFTWARE Copyright (C) Huawei Technologies Co.3. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-19 . Procedure Run the display cpu command to display the CPU usage of a board. 2002-2007.. Ltd. Procedure Run the display version command to display the system or board version. do as follows: huawei>display version { spm<K>|<cr>|frameid/slotid<S><1. ----End To display the version information on the system. 0 hour(s).11 Showing Version This operation enables you to show the system or board version. All rights reserved. do as follows: huawei>cls 3. Uptime is 7 day(s).SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI Example To clear the screen. run the ping command.3. l tracert To send test packets from the transmit host to the destination host. ----End Example To query the memory usage of the control board. – 3-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The host sends a packet with the TTL of 2. The system also returns TTL timeout in the second hop.14 Testing Network State This operation enables you to check the network connectivity and whether the host is reachable. Context The commands used to test network state include ping and tracert. and locate network faults. you can check the connectivity of a network and locate faults in the network. The following gives the execution process of the tracert command: – – The host sends a packet with the Time to Live (TTL) of 1 to the destination. The process continues in this way until the packet reaches the destination. Procedure Run the display mem command to show the memory usage of the control board. and check all gateways passed by data packets sent from a host to the destination. With this command. During the first hop.3 Getting Started With CLI SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To show the CPU usage of the control board. do as follows: huawei>display cpu 0/7 CPU occupancy: 12% 3.13 Showing the Memory Usage This operation enables you to check the memory usage of the control board. do as follows: huawei>display mem 0/7 Memory occupancy: 47% 3.3. l ping To check the network connectivity and the host reachability. run the tracert command. Context You can query the memory usage of the control board only. the system returns an Internet Control Message Protocol (ICMP) packet to indicate the failure in sending the packet due to TTL timeout. 52.52. and provide a path along which an IP packet goes all the way to the destination.240: bytes=56 Sequence=2 ttl=64 time Reply from 10.11.52.62 2 * * * Request timed out.10. ----End To test the network connectivity using the ping command.11.106.52.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3 Getting Started With CLI By doing so.52.240: bytes=56 Sequence=0 ttl=64 time Reply from 10. press CTRL_C to break Reply from 10.240 Ping statistics --5 packets transmitted 5 packets received 0.240: 56 data bytes. 3 * * * Request timed out.11.240: bytes=56 Sequence=3 ttl=64 time Reply from 10. Procedure l l Run the ping command to test the network state.240: bytes=56 Sequence=4 ttl=64 time --.133 max hops 30 . do as follows: huawei#tracert 10.11.133 traceroute to 10.240 PING 10.240: bytes=56 Sequence=1 ttl=64 time Reply from 10. Run the tracert command to test the network state.11.11. the system can record the source address of each ICMP TTL timeout message.52.11.52. do as follows: huawei(config)#ping 10.133 Issue 04 (2007-11-30) Huawei Technologies Proprietary 3-21 .52.11.11.packet 40 bytes press CTRL_C to break 1 253 ms 476 ms 508 ms 10.11.11.106.11.00% packet loss round-trip min/avg/max = 10/10/13 ms = = = = = 10 10 13 10 10 ms ms ms ms ms To test the network connectivity using the tracert command.106.120. 4 4 ms 4 ms 5 ms 10. . 4 Configuration Example of an Inband NMS This operation enables you to connect the MA5600 to the N2000 through the GE port.6 Configuring the IP Address of the Outband NMS Interface This operation enables you to configure the IP address of the outband NMS interface (maintenance network port). Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-1 . 4. 4.7 Configuring an NMS Route This operation enables you to create a static route between the MA5600 and the manager.2 Basic Concepts This section describes the concepts involved in the network configuration. 4. Then.5 SNMP Agent Configuration This operation enables you to configure an SNMP agent when you want to maintain the MA5600 through the manager. 4. 4.8 Configuring the IP Address of the Inband NMS Interface This operation enables you to configure the IP address of the inband NMS interface.3 Configuration Example of an Outband NMS This operation enables you to connect the MA5600 to the N2000 through the maintenance network port. and the purpose of this chapter. you can maintain the MA5600 through an inband management channel. Then. 4. 4.1 Overview This section describes the network management protocols. 4.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management 4 Configuring the Network Management About This Chapter This chapter describes how to manage the MA5600 through the N2000 BMS and the related configuration. the NMS that the MA5600 supports. you can maintain the MA5600 through an outband management channel. the MA5600 communicates with the NMS through its network management interface. refer to the SmartAX MA5600 Multi-service Access Module Commissioning Guide.2 Basic Concepts This section describes the concepts involved in the network configuration. 4. The N2000 can manage and maintain the MA5600 through the network port of the MA5600. Service Description Based on Simple Network Management Protocol (SNMP). SNMP SNMP is a prevailing network management protocol. It eases up the administrator's following operations on any node of the network: l l l l l l Retrieving information Modifying information Locating a fault Diagnosing a fault Planning the capacity Generating a report Manager 4-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Service Specification This chapter describes the network configuration performed on the MA5600 to realize normal communication between the MA5600 and the N2000. The MA5600 uses traps to send the status information to the N2000 to report some urgent and important events. you must also perform configurations on the N2000. NOTE To realize normal communication between the MA5600 and the N2000. the NMS that the MA5600 supports.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4. Here. the iManager N2000 Fixed Network Integrated Management System (N2000) is used as the NMS. and the purpose of this chapter. For details.1 Overview This section describes the network management protocols. It includes two parts: l l Network management station (manager) Agent SNMP ensures normal transmission of administrative message between any two points. including outband NMS configuration and inband NMS configuration. you can maintain the MA5600 through an outband management channel. failure and fault recovery. warm start. When receiving request messages from the manager. Then. Agent An agent is the server software running on a network device. Networking Figure 4-1 shows a sample network for configuring the outband NMS. On the other hand. Generates and sends the response messages to the manager. 4. the agent: l l Reads or writes the management variables based on the message type. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-3 . It can send GetRequest. in case of device cold start. Figure 4-1 Sample network for configuring the outband NMS IP NMS Router CON ETH MON SCU MA5600 Data Plan Table 4-1 lists the data plan for configuring the outband NMS. GetNextRequest and SetRequest messages to the agent. the agent sends traps to report such events to the manager.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management A manager runs the client software. Trap Traps refer to the unsolicited messages sent from a managed device to the manager to report some urgent and important events.3 Configuration Example of an Outband NMS This operation enables you to connect the MA5600 to the N2000 through the maintenance network port. 21.21. you also need to configure the router.10.254/24 Configuration Flowchart Figure 4-2 shows the flowchart for configuring the outband NMS.10. If the telnet environment has been set up according to "2.4 Configuring the Terminal Through the Outband Management Channel ".2/24 Router port connecting to the MA5600 IP address: 10. To set up the network connection.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 4-1 Data plan for configuring the outband NMS Item Maintenance network port (ETH) of the MA5600 NMS Data IP address: 10.10.10.1/24 (Secondary) IP address: 10. 4-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . skip steps 1 and 2.20. Figure 4-2 Flowchart for configuring the outband NMS Start Set the IP address of the ETH port Add a route for the outband NMS Set the SNMP parameters Enable traps sending Set the IP address of the target host for traps Set the source address for traps sending Save the data End NOTE l l This section describes how to configure the MA5600 only.1/24 (Primary) IP address: 10.20. 20.2 securityname private Step 6 Set the IP address of the maintenance network port as the source address for traps sending. huawei(config)#snmp-agent target-host trap address 10. 4. Assume that the N2000 adopts SNMP V1.1 securityname private huawei(config)#snmp-agent target-host trap address 10.21.0 24 10. huawei(config)#interface meth 0 huawei(config-if-meth0)#ip address 10. huawei(config-if-meth0)#quit huawei(config)#ip route-static 10. huawei(config)#snmp-agent trap source meth 0 Step 7 Save the data.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Procedure Step 1 Set the IP address of the maintenance network port.254 Step 3 Set the SNMP parameters. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-5 .10. huawei(config)#snmp-agent sys-info version v1 Step 4 Enable trap sending.1 255. huawei(config)#save ----End Result After the configuration.255. Then.21.255.10. huawei(config)#snmp-agent trap enable standard Step 5 Set the IP address of the target host for traps.21.10. you can manage the MA5600 through the N2000. you can maintain the MA5600 through an inband management channel.20.10. Networking Figure 4-3 shows a sample network for configuring the inband NMS.0 Step 2 Add a route for the outband NMS.4 Configuration Example of an Inband NMS This operation enables you to connect the MA5600 to the N2000 through the GE port. l Creating the community name huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Setting the system contact huawei(config)#snmp-agent sys-info contact HW-075528780808 Setting the system location huawei(config)#snmp-agent sys-info location Shenzhen China Setting the SNMP version NOTE The setting of the MA5600 shall accord with that in the N2000.10. 2 Subnet mask: 255.0 SNMP Agent Version: V3 User name: user1 Group name: group1 View name: hardy Configuration Flowchart Figure 4-4 shows the flowchart for configuring the inband NMS.255.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 4-3 Sample network for configuring the inband NMS IP N2000 Router CON ETH MON GE 0/7/0 SCU MA5600 Data Plan Table 4-2 lists the data plan for configuring the inband NMS.21.2/24 Router port connecting to the MA5600 IP address: 10.20.10.21. 4-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .254 Subnet mask: 255.20.10.255.10.0 NMS (Primary) IP address: 10.255.255. Table 4-2 Data plan for configuring the inband NMS Item Inband NMS port of the MA5600 Data IP address: 10.1/24 (Secondary) IP address: 10.10. 10. If the telnet environment has been set up according to "2.0 Step 2 Add a route for the inband NMS.20.4 Configuring the Terminal Through the Outband Management Channel ".255. skip steps 1 and 2.254 Step 3 Set the SNMP parameters.255. To set up the network connection. you also need to configure the router. huawei(config)#ip route-static 10. Procedure Step 1 Set the IP address of the inband NMS port (GE port).0 24 10. l l l l Create an NMS VLAN huawei(config)#vlan 1000 standard Add the upstream port to the VLAN huawei(config)#port vlan 1000 0/7 0 Enter the VLAN interface mode huawei(config)#interface vlanif 1000 Set the IP address of the VLAN interface huawei(config-if-vlanif1000)#ip address 10.10.20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-7 .2 255.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Figure 4-4 Flowchart for configuring the inband NMS Start Set the IP address of the inband NMS port Add a route for the inband NMS Set the SNMP parameters Enable traps sending Set the IP address of the target host for traps Set the source address for traps sending Save the data End NOTE l l This section describes how to configure the MA5600 only.21.10. 5.5.5 Setting the Source Interface for Sending Traps This operation enables you to set the source interface for sending traps. huawei(config)#snmp-agent trap source vlanif 1000 Step 7 Save the data. 4. 4. 4. huawei(config)#snmp-agent group v3 group1 privacy read-view hardy write-view hardy l l l Set the SNMP view. 4.1 securityname private huawei(config)#snmp-agent target-host trap address 10. NOTE The setting of the MA5600 shall accord with that in the N2000. 4. huawei(config)#snmp-agent sys-info contact HW-075528780808 Set the device location information. Assume that the N2000 adopts SNMP V3. huawei(config)#snmp-agent usm-user v3 user1 group1 authentication-mode md5 authkey privacy-mode des56 prikey l Set the SNMP group.21.1 Setting the SNMP Version This operation enables you to set the version of the SNMP running in the system.10. 4. huawei(config)#snmp-agent mib-view hardy include ip Set the ID and contact information about the administrator.21. huawei(config)#snmp-agent sys-info version v3 l Set the SNMP user.2 securityname private Step 6 Set the IP address of the inband NMS as the source address for traps sending. huawei(config)#snmp-agent target-host trap address 10.5. huawei(config)#snmp-agent trap enable standard Step 5 Set the IP address of the target host for traps. huawei(config)#snmp-agent sys-info location Shenzhen China Step 4 Enable traps sending.2 Adding a Community Name and Setting Its Read/Write Authorities This operation enables you to add a community name and set its read/write authorities.5. huawei(config)#save ----End Result After the configuration you can manage the MA5600 successfully through the N2000.4 Configuring the Network Management l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Set the SNMP version.10.4 Setting the IP address of a Destination Host of Traps This operation enables you to set the IP address of a destination host of traps. 4-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) .3 Enabling Trap Sending This operation enables the MA5600 to send traps to the N2000.5.5 SNMP Agent Configuration This operation enables you to configure an SNMP agent when you want to maintain the MA5600 through the manager. 5. Procedure Step 1 Run the snmp-agent sys-info version command to set the SNMP version.12 Enabling the Handshake Function between the MA5600 and the N2000 This operation enables you to enable the handshake function between the MA5600 and the N2000. 4.13 Setting the Handshake Interval This operation enables you to set the handshake interval.7 Setting the System Location Information This operation enables you to set the system location information.5.5.5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management 4.9 Configuring an SNMP V3 Group This operation enables you to configure an SNMP V3 group.5. ----End Example To set the SNMP version as V1 and V2C. 4. 4. 4.8 Configuring an SNMP V3 User This operation enables you to add or modify an SNMP V3 user. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-9 . 4. 4.1 Setting the SNMP Version This operation enables you to set the version of the SNMP running in the system.5.6 Setting the System Contact Information This operation enables you to system contact information. 4. you can control the access authorities of all the users in the group. do as follows: huawei(config)#snmp-agent sys-info version v1 v2c huawei(config)#display snmp-agent sys-info version { <cr>|contact<K>|location<K> }: Command: display snmp-agent sys-info version SNMP version running in the system: SNMPv1 SNMPv2c Related Operation Table 4-3 lists the related operation for setting the SNMP version.5.10 Configuring an SNMP MIB View This operation enables you to configure an SNMP MIB view. 4.5. Step 2 Run the display snmp-agent sys-info version command to query the configured SNMP version.11 Configuring the Local SNMP Engine ID This operation enables you to configure an engine ID that uniquely identifies an SNMP entity. After a group is configured.5. and the read-write community name in the N2000 is private. The MA5600 supports up to 10 community names. Table 4-4 Related operation for adding a community and setting its read/write authorities To… Delete a community name Run the Command… undo snmp-agent community 4-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Context l The default read-only community name in the Huawei iManager N2000 BMS is public. ----End Example To add a read-only community named public.2 Adding a Community Name and Setting Its Read/Write Authorities This operation enables you to add a community name and set its read/write authorities. Step 2 Run the display snmp-agent community command to query a community name.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 4-3 Related operation for setting the SNMP version To… Delete the set SNMP version information Run the Command… undo snmp-agent sys-info version 4. l l Procedure Step 1 Run the snmp-agent community command to add a community name and set its read/write authorities. The read and write community names set in the MA5600 shall accord with those in the manager.5. do as follows: huawei(config)#snmp-agent community read public huawei(config)#display snmp-agent community read Community name: public Storage type: nonVolatile View name: ViewDefault Total number is 1 Related Operation Table 4-4 lists the related operation for adding a community and setting its read/write authorities. Step 2 Run the display snmp-agent trap enable command to check whether traps sending is enabled. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-11 . Context By default.5. Procedure Step 1 Run the snmp-agent target-host trap command to set the IP address of a destination host of traps.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management 4. the MA5600 is prohibited from sending traps to the N2000.4 Setting the IP address of a Destination Host of Traps This operation enables you to set the IP address of a destination host of traps. Procedure Step 1 Run the snmp-agent trap enable standard command to enable traps sending. Step 2 Run the display snmp-agent target-host command to query the destination host of traps. ----End Example To enable the MA5600 to send traps to the N2000.3 Enabling Trap Sending This operation enables the MA5600 to send traps to the N2000.5. Context The N2000 can receive traps only when the IP address of a destination host of traps is set correctly. Table 4-5 Related operation for enabling traps sending To… Disable traps sending Run the Command… undo snmp-agent trap enable standard 4. do as follows: huawei(config)#snmp-agent trap enable standard huawei(config)#display snmp-agent trap enable Trap is enabled Related Operation Table 4-5 lists the related operation for enabling traps sending. Table 4-6 Related operation for setting the IP address of a destination host of traps To… Delete the IP address of the destination host of traps Run the Command… undo snmp-agent target-host 4.71.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the IP address of the destination host of traps as 10. Procedure Step 1 Run the snmp-agent trap source command to set the source interface for sending traps.53. and run the community name “private”.108.108 Traphost portnumber: 162 Traphost securityname: private Traphost trapversion: v3 Total number is 1 Related Operation Table 4-6 lists the related operation for setting the IP address of a destination host of traps.71. do as follows: huawei(config)#snmp-agent target-host trap address 10.5.53. do as follows: huawei(config)#snmp-agent trap source vlanif 1000 huawei(config)#display snmp-agent trap-source Trap source interface name: vlanif1000 Related Operation Table 4-7 lists the related operation for setting the source interface for traps sending.5 Setting the Source Interface for Sending Traps This operation enables you to set the source interface for sending traps. 4-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .108 securityname private v3 huawei(config)#display snmp-agent target-host Traphost list: Traphost address: 10. Step 2 Run the display snmp-agent trap-source command to query the source interface for sending traps. ----End Example To set the source interface for traps sending as the layer 3 interface of VLAN 1000.71. Context The IP address of the interface for traps sending is the source IP address of the traps.53. Ltd.5. ----End Example To set the system contact information as HW-075528780808. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-13 . Table 4-8 Related operation for setting the system contact information To… Restore the default system contact information Run the Command… undo snmp-agent sys-info contact 4. do as follows: huawei(config)#snmp-agent sys-info contact HW-075528780808 huawei(config)#display snmp-agent sys-info contact { <cr>|location<K>|version<K> }: Command: display snmp-agent sys-info contact The contact person for this managed node: HW-075528780808 Related Operation Table 4-8 lists the related operation for setting the system contact information. system contact information is R&D Shenzhen. Procedure Step 1 Run the snmp-agent sys-info contact command to set the system contact information. Context By default.5. Huawei Technologies Co.7 Setting the System Location Information This operation enables you to set the system location information.6 Setting the System Contact Information This operation enables you to system contact information.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Table 4-7 Related operation for setting the source interface for traps sending To… Delete the source interface for sending traps Run the Command… undo snmp-agent trap source 4. Step 2 Run the display snmp-agent sys-info contact command to query the system contact information.. Step 2 Run the display snmp-agent sys-info location command to display the system location information. the system location information is Shenzhen China. Context l l The MA5600 supports up to 20 SNMP users. l Procedure Step 1 Run the snmp-agent usm-user command to configure an SNMP V3 user. Table 4-9 Related operation for setting the system location information To… Restore the default system location information Run the Command… undo snmp-agent sys-info location 4. do as follows: huawei(config)#snmp-agent sys-info location Shanghai China huawei(config)#display snmp-agent sys-info location { <cr>|contact<K>|version<K> }: Command: display snmp-agent sys-info location The physical location of this node: Shanghai China Related Operation Table 4-9 lists the related operation for setting the system location information.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context By default. Procedure Step 1 Run the snmp-agent sys-info location command to set the system location information. the user can access the equipment without authentication or encryption. If you do not enter the user authentication and encryption modes. 4-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) .8 Configuring an SNMP V3 User This operation enables you to add or modify an SNMP V3 user. ----End Example To set the system location information as Shanghai China.5. the system will update the configuration of the user. If the entered user name is an existing one. In this case. Privacy mode: des56 Storage type: nonVolatile User status: active Related Operation Table 4-10 lists the related operation for configuring an SNMP V3 user. A specified view can be a non-existing view. with the authentication mode of md5. If the corresponding groups have multiple security levels. the user will fail to access. If the entered group name is an existing one. the users in the group fail to access anywhere. A user can access views in three modes: – – – l l l With authentication and encryption With authentication but no encryption With no authentication or encryption l If the access mode level is lower than the security level of the configured group. you can control the access authorities of all the users in the group.5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Step 2 Run the display snmp-agent usm-user command to query the SNMP V3 user. Table 4-10 Related operation for configuring an SNMP V3 user To… Delete an SNMP V3 user Run the Command… undo snmp-agent usm-user v3 4. the authentication password of 1. the system has a read view named viewDefault with the range of internet subtree. and the encryption password of 2. By default. the system will update the configuration of the group. After a group is configured. belonging to a group named group. the encryption mode of des56. Context l l The MA5600 supports up to 20 SNMP V3 groups. ----End Example To add an SNMP V3 user named user. do as follows: huawei(config)#snmp-agent usm-user v3 user group authentication-mode md5 1 privacymode des56 2 huawei(config)#display snmp-agent usm-user user User name: user Engine ID: 800007DB0300E0FC995050 Group name: group Authentication mode: md5. the user can Huawei Technologies Proprietary 4-15 Issue 04 (2007-11-30) .9 Configuring an SNMP V3 Group This operation enables you to configure an SNMP V3 group. the write view and notify view are blank. and then access the view corresponding to the group. l Procedure Step 1 Run the snmp-agent mib-view command to configure an SNMP MIB view. Procedure Step 1 Run the snmp-agent group v3 command to configure an SNMP V3 group. ----End Example To configure a group named group. Step 2 Run the display snmp-agent mib-view command to query the SNMP MIB view.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide select the group with the highest security level. and with blank write and notify views. Step 2 Run the display snmp-agent group command to query the SNMP V3 group. ----End 4-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . with authentication but no encryption. The view named ViewDefault cannot be deleted or updated. Table 4-11 Related operation for configuring an SNMP V3 group To… Delete an SNMP V3 group Run the Command… undo snmp-agent group v3 4. the system has a read view named ViewDefault. with the read view of internet. By default. with the range of internet subtree view. Context l l The number of sub-trees of all the views cannot exceed 20.10 Configuring an SNMP MIB View This operation enables you to configure an SNMP MIB view. do as follows: huawei(config)#snmp-agent group v3 group authentication read-view internet huawei(config)#display snmp-agent group group Group name: group Security model: v3 AuthnoPriv Readview: internet Writeview: <no specified> Notifyview: <no specified> Storage type: nonvolatile Related Operation Table 4-11 lists the related operation for configuring an SNMP V3 group.5. Procedure Step 1 Run the snmp-agent local-engineid command to configure the local SNMP engine ID. do as follows: huawei(config)#snmp-agent mib-view view1 include ip huawei(config)#display snmp-agent mib-view view1 View name: view1 MIB subtree: ip Subtree mask: Storage type: nonVolatile View type: include View status: active Related Operation Table 4-12 lists the related operation for configuring an SNMP MIB view. including ip sub-tree.5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Example To configure a view named view1. ----End Example To configure the engine ID of the local SNMP entity as 010101011000. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-17 . the MA5600 will automatically initialize one at startup.11 Configuring the Local SNMP Engine ID This operation enables you to configure an engine ID that uniquely identifies an SNMP entity. all of user local-engineid changes to the modified one after system reset. Table 4-12 Related operation for configuring an SNMP MIB view To… Delete an SNMP MIB view Run the Command… undo snmp-agent mib-view 4. do as follows: huawei(config)#snmp-agent local-engineid 0101010110000 Command: snmp-agent local-engineid 01010101110000 Info: Modify the local-engineid will disable the configured SNMPv3 user. Step 2 Run the display snmp-agent local-engineid command to query the local SNMP engine ID. Context With no manually configured ID. proceed?[ Y/N]:y huawei(config)#display snmp-agent local-engineid SNMP local EngineID: 010101011000 Related Operation Table 4-13 lists the related operations for configuring the local SNMP engine ID. do as follows: huawei(config)#system handshake enable huawei(config)#display system handshake system handshake : enable system handshake interval : 300s ---------------------------------------------IP of NMS Status between NMS and device ---------------------------------------------10. 4-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) .12 Enabling the Handshake Function between the MA5600 and the N2000 This operation enables you to enable the handshake function between the MA5600 and the N2000.71.53. Procedure Step 1 Run the system handshake enable command to enable the handshake function between the MA5600 and the N2000.5. ----End Example To enable the handshake function between the MA5600 and the N2000. Step 2 Run the display system handshake command to query the handshake function between the MA5600 and the N2000. Context By default.108 in register ---------------------------------------------- Related Operation Table 4-14 lists the related operations for enabling the handshake function between the MA5600 and the N2000.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 4-13 Related operations for configuring the local SNMP engine ID To… Restore the default local SNMP engine ID Display the remote SNMP engine ID information Run the Command… undo snmp-agent local-engineid display snmp-agent remote-engineid 4. the handshake function between the MA5600 and the N2000 is disabled. 108 in register ---------------------------------------------- Related Operation Table 4-15 lists the related operation for setting the handshake interval. Context l l By default. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-19 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Table 4-14 Related operations for enabling the handshake function between the MA5600 and the N2000 To… Disable the handshake function between the MA5600 and the N2000 Set the handshake interval Run the Command… system handshake disable system handshake interval 4. – When the interval is short. When the interval is long. the N2000 will be over-tasked to handle increasing handshake packets.71. Step 2 Run the display system handshake command to query he handshake interval. and the MA5600 and the N2000 are disconnected. the N2000 will fail to find the fault in time. the handshake interval between the MA5600 and the N2000 is zero second. – l You can set an appropriate handshake interval according to actual conditions.53. Procedure Step 1 Run the system handshake interval command to set the handshake interval.13 Setting the Handshake Interval This operation enables you to set the handshake interval. The handshake interval between the MA5600 and the N2000 determines the handshake frequency.5. do as follows: huawei(config)#system handshake interval 10 huawei(config)#display system handshake system handshake : enable system handshake interval : 10s ---------------------------------------------IP of NMS Status between NMS and device ---------------------------------------------10. ----End Example To set the handshake interval to 10 seconds. and the number of network elements under the N2000 is large. 255.6 Configuring the IP Address of the Outband NMS Interface This operation enables you to configure the IP address of the outband NMS interface (maintenance network port).10.255.10.104.0.1/24 IP Sending Frames' Format is PKTFMT_ETHNT_2.10.0.1. do as follows: huawei(config)#interface meth 0 huawei(config-if-meth0)#ip address 10.10. and the subnet mask is 255.10. Context l By default.255. Hardware address is 00e0-fcaa-8516 Auto-duplex(Full). 14 packets/sec 5 minutes output rate 168 bytes/sec.0 huawei(config)#display interface meth 0 meth0 current state : UP Line protocol current state : UP Description : HUAWEI.255. keep the record for future reference.11. Step 3 Run the display interface meth command to query the IP address of the ETH port on the control board.10. MA5600 Series. 712283310 bytes 4-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Run the ip address command to set the IP address of the ETH port on the control board. 1 packets/sec 10508484 packets input. Make sure that the IP address of the ETH port is located in the same subnet as that of the gateway or the PC used for maintaining the MA5600.255. Auto-speed(100M) 5 minutes input rate 1549 bytes/sec.1 255. meth0 Interface The Maximum Transmit Unit is 1500 bytes Internet Address is 10.1 and the subnet mask as 255. 1472712535 bytes 2213003 packets output. l l Procedure Step 1 Run the interface meth command to enter meth mode. the IP address of the maintenance network port (ETH port on the control board) is 10. After setting the IP address.0.4 Configuring the Network Management SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 4-15 Related operation for setting the handshake interval To… Configure the handshake function between the MA5600 and the N2000 Run the Command… system handshake 4. ----End Example To the IP address of the ETH port as 10. 71.71.0.0.0 255.8.255. Step 2 Run the display ip routing-table command to query the current routing configuration.1 huawei(config)#display ip routing-table verbose Routing Table : Public Destinations : 3 Routes : 3 Destination: 10.0 BkInterface: NULL Tunnel ID: SecTunnel ID: Active Adv GotQ Age: 0 0 0 meth0 0.0.1 RelayNextHop: 0. Context l l The system supports up to 4096 static routes.71.0/24 Protocol: Direct Preference: 0 Process ID: 0 Cost: 0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-21 .0 Label: NULL BkNextHop: BkLabel: State: Tag: Process ID: Cost: Interface: Neighbour: Tunnel ID: SecTunnel ID: 0.71. Procedure Step 1 Run the ip route-static command to configure a static route.0. and the gateway as 10.0 (where the manager is located).7 Configuring an NMS Route This operation enables you to create a static route between the MA5600 and the manager.62. do as follows: huawei(config)#ip route-static 10.53.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management Related Operation Table 4-16 lists the related operation for configuring the IP address of the outband NMS interface.71.0.0.1.62.71. ----End Example To create a route to subnet 10. When the MA5600 and the N2000 are located in different subnets.0. Table 4-16 Related operation for configuring the IP address of the outband NMS interface To… Delete the IP address of the outband NMS interface Run the Command… undo ip address Remarks In meth mode.0.255.0 10.8.53. a route shall be configured for the gateway to forward IP packets.0/8 Protocol: Static Preference: 60 NextHop: 10.0 0x0 0x0 0x0 0x0 7d06h27m42s Destination: 10. 4. 255.0.255. To. do as follows: huawei(config)#vlan 1000 standard huawei(config)#interface vlanif 1000 huawei(config-if-vlanif1000)#ip address 10. ----End Example To set the IP address of the inband NMS interface as 10. Step 2 Run the interface vlanif command to enter VLAN interface mode.0.4 Configuring the Network Management NextHop: 10. Step 4 Run the display interface vlanif command to query the IP address of the VLAN interface. Table 4-17 Related operation for configuring an NMS route.0.2 255..0 BkLabel: NULL State: Active Adv Tag: 0 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Interface: Neighbour: Tunnel ID: SecTunnel ID: BkInterface: Tunnel ID: SecTunnel ID: Age: meth0 0.71.0. it is recommended that the standard VLAN be used as the NMS VLAN..10. Context l l The MA5600 realizes inband NMS through the Ethernet port on the control board.0 huawei(config)#display interface vlanif 1000 vlanif400 current state : UP Line protocol current state : UP Description : HUAWEI. Vlanif400 Interface The Maximum Transmit Unit is 1500 bytes Internet Address is 10. MA5600 Series.62.0.10...0 0x0 0x0 0x0 0x0 7d06h27m42s Related Operation Table 4-17 lists the related operation for configuring an NMS route.0. Step 3 Run the ip address command to set the IP address of the VLAN interface.10. undo ip route-static 4.2/24 4-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2 and the subnet mask as 255.36 RelayNextHop: 0.10. Delete an existing route Run the Command. To prevent login and access to the MA5600 from the user end.255.0.10.10.255.8 Configuring the IP Address of the Inband NMS Interface This operation enables you to configure the IP address of the inband NMS interface. Procedure Step 1 Run the vlan command to create an NMS VLAN.0 Label: NULL BkNextHop: 0. Table 4-18 Related operation for configuring the IP address of the inband NMS interface To… Delete the IP address of the existing inband NMS interface Run the Command… undo ip address Remarks In VLAN interface mode. Hardware address is 00e0-1240-4243 Related Operation Table 4-18 lists the related operation for configuring the IP address of the inband NMS interface. Issue 04 (2007-11-30) Huawei Technologies Proprietary 4-23 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 Configuring the Network Management IP Sending Frames' Format is PKTFMT_ETHNT_2. . that is.5 Deactivating a Log Host This operation enables you to deactivate a log host.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5 Configuring the Log Host 5 About This Chapter Configuring the Log Host This chapter describes the functions of the log host of theMA5600 and how to configure the log host. Issue 04 (2007-11-30) Huawei Technologies Proprietary 5-1 . 5.2 Configuration Example of a Log Host This example shows how to configure a log host. add and activate the log host.4 Deleting a Log Host This operation enables you to delete a log host.1 Overview This section describes the functions of the log and the application of the log to the MA5600. 5.6 Querying Logs This operation enables you to query logs. 5. 5.3 Configuring a Log Host This operation enables you to configure a log host. 5. 5. After the configuration. the logs reported by the MA5600 can be displayed on the log lost. you can query the executed commands and other important information recorded in logs. In the networking. PC 3 is installed with FTP or TFTP software. 2 and 3 connect to the GE port of the MA5600 over a LAN. Function Logs can serve as important references for system maintenance and troubleshooting. and can receive and save the logs reported by the MA5600.2 Configuration Example of a Log Host This example shows how to configure a log host. PCs 1. After the configuration. 5-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . l Networking Figure 5-1 shows a sample network for configuring a log host. In the MA5600. PC 3 works as the log host of the MA5600. l The related inband NMS configuration has been complete.5 Configuring the Log Host SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5. the logs reported by the MA5600 can be displayed on the log lost.1 Overview This section describes the functions of the log and the application of the log to the MA5600. Figure 5-1 Sample network for configuring a log host CON ETH MON GE 0/7/0 SCU MA5600 LAN PC1 PC2 PC3 Data Plan Table 5-1 lists the data plan for configuring a log host. 5. You can telnet to the MA5600 to maintain it through PC 1 and PC 2. Set the directory for saving the reported logs. add and activate the log host.10. and configure the directory for saving logs and the log file name to enable real-time reporting of logs.3 Configuring a Log Host This operation enables you to configure a log host.1 huawei Step 2 Activate the log host.1/24 Procedure Step 1 Add a log host.2/24 IP address: 10. Enable the syslog server function. Step 4 Configure the TFTP software of the log host. you need to enable the log host service of the log server. 2. Step 2 Run the loghost activate command to activate the log host. Issue 04 (2007-11-30) Huawei Technologies Proprietary 5-3 . ----End Result After the configuration: l l You can query the logs in the directory for saving the logs. 1. They are the same as those queried on the MA5600. that is. huawei(config)#loghost activate name huawei Step 3 Check the connectivity between the MA5600 and the log host to verify that the MA5600 can communicate with the log host smoothly.10.10. The logs record the operation commands executed on PCs 1 and 2 to the system. l Procedure Step 1 Run the loghost add command to add a log host.10. Context l The MA5600 can log important operations in the UNIX host (also referred to as the log server) of the internal network through the syslog mechanism.10.10. After configuring a log host. huawei(config)#loghost add 10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5 Configuring the Log Host Table 5-1 Data plan for configuring a log host Item Inband management interface (GE port) of the MA5600 PC 3 Data IP address: 10. 5. 1 Host name : huawei Terminal state : Normal Related Operation Table 5-2 lists the related operations for configuring a log host.1 huawei(config)#display loghost list ip 10. do as follows: huawei(config)#loghost delete ip 10.10.1.10.10. Table 5-2 Related operations for configuring a log host To… Deactivate a log host Delete a log host Set the source interface sending log Run the Command… loghost deactivate loghost delete syslog source 5.10.10. do as follows: huawei(config)#loghost add 10.5 Configuring the Log Host SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 3 Run the display loghost list command to display the log host.1 Failure: The log server not exist Related Operation Table 5-3 lists the related operations for configuring a log host. ----End Example To add log host named huawei with IP address of 10.10.10.10.10.10.10.1 huawei huawei(config)#loghost activate name huawei huawei(config)#display loghost list name huawei Log server configuration: IP address : 10. 5-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10. ----End Example To delete the log host with IP address 10.4 Deleting a Log Host This operation enables you to delete a log host.1. Procedure Step 1 Run the loghost delete command to delete a log host Step 2 Run the display loghost list command to display the log host. 5 Deactivating a Log Host This operation enables you to deactivate a log host.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5 Configuring the Log Host Table 5-3 Related operations for configuring a log host To… Add a log host Activate a log host Deactivate a log host Run the Command… loghost add loghost activate loghost deactivate 5.10. ----End Example To deactivate the log host with IP address 10.1 Host name : huawei Terminal state : Deactivate Related Operation Table 5-4 lists the related operations for deactivating a log host.10.10.1 huawei#display loghost list ip 10. Context The system sends log information only to the activated log hosts.10.1.1 Log server configuration: IP address : 10. Procedure Step 1 Run the loghost deactivate command to deactivate a log host.10.10. Step 2 Run the display loghost list command to display the log host. do as follows: huawei#loghost deactivate ip 10.10. Table 5-4 Related operations for deactivating a log host To… Activate a log host Add a log host Delete a log host Run the Command… loghost activate loghost add loghost delete Issue 04 (2007-11-30) Huawei Technologies Proprietary 5-5 .10. UserName Domain IP-Address 10 root -　 10. UserName Domain IP-Address 8 root -　 10. do as follows: huawei(config)#display log name root 2007-07-09 { <cr>|time1<T><hh:mm:ss>|-<K> }: Command: display log name root 2007-07-09 --------------------------------------------------------------------------No. Query and record the system logs at once in the case of system failure. UserName Domain IP-Address 9 root -　 10. Context l The MA5600 can keep logs of the latest 512 operations. l l l Procedure Run the display log command to query logs.70.70. The executed query commands cannot be recorded in the logs.70. the old records will be overwritten.41.41.41.70. When there are more than 512 records. Up to 512 logs can be stored in the system.163 Time: 2007-07-09 14:12:18 Cmd: enable --------------------------------------------------------------------------No. System administrators can query the latest executed operation commands through logs. To record the operation correctly.163 Time: 2007-07-09 13:06:53 Cmd: disable --------------------------------------------------------------------------No. make sure that the system time is correct before service configuration.6 Querying Logs This operation enables you to query logs. to avoid loss of logs that are helpful for fault locating.More ( Press 'Q' to break ) ---- 5-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .163 Time: 2007-07-09 13:06:12 Cmd: quit ---.5 Configuring the Log Host SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5. 2007.163 Time: 2007-07-09 14:12:20 Cmd: config --------------------------------------------------------------------------No. UserName Domain IP-Address 7 root -　 10. ----End Example To query the logs of operations performed by user "root" on July 9.41. Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-1 . 6. 6.1 Overview This section describes the definition of users and user levels and authorities supported by the MA5600. you need bind this user profile to manage operators.5 Disconnecting an Online User This operation enables you to disconnect an online user to prevent the user from logging in to the MA5600. authority. the permitted reenter number and the appended information.2 Adding a User Profile This operation enables you to add a user profile. 6. modify. 6. 6. To add a new user. password.6 Deleting a User This operation enables you to delete a user which is not permitted to log in to the MA5600. delete.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users 6 About This Chapter Managing Users This chapter describes the classification of users supported by the MA5600 and how to add.3 Adding a User This operation enables you to add a user who can log in to the MA5600 to maintain it. 6. such as user profile.4 Modifying the User Attributes You can modify the user attributes. or disconnect a user. while administrator has no authority to add a super user. you need bind this user profile to manage operators. Table 6-1 lists the authorities for users at all levels. Super user can create the administrator level account. MA5600 users can be divided into four levels: l l l l Common user Operator Administrator Super user Users at all levels can only add a user with lower levels than theirs. Common: l l Perform all operations. Maintain the MA5600 user accounts and user authority.6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6. Table 6-1 User authorities User Level Common user Operator Administrator and super user Authority Common users perform basic system operation and simple query operation. Service Description Users herein refer to persons who configure and maintain the MA5600 through CLI. To add a new user. Difference: l l l 6. while multi administrators in the system. Service Specification In terms of authority. Only one super user exists in the system.1 Overview This section describes the definition of users and user levels and authorities supported by the MA5600. 6-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The super user is of the highest level in the system.2 Adding a User Profile This operation enables you to add a user profile. Operator can configure the MA5600 and services. length of user name can be 6 to 15 alphanumeric characters and it must be equal to or longer than 6 alphanumeric characters. it is 30 days. length of password Validity period of the user name Validity period of the password Permitted start time of logon by a user Permitted end time of logon by a user For details. A user can log on to the system only in the permitted period. it specifies the permitted period for a user to log on to the system.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users Context l There exists one root profile in the system. If it is set to 0 day. operator and common user respectively. Validity period of the password Permitted start time of logon by a user Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-3 . Table 6-2 Parameter descriptions of a user profile Parameters Min. length of password can be 6 to 15 alphanumeric characters and it must be equal to or longer than 6 alphanumeric characters. To add a user profile. The system provides three default profiles whose levels are administrator. Up to 12 profiles can be added. The min. They are convenient for unified management and the operation of adding users. length of user name Min. refer to Table 6-2. Before three days of the expiration. The system checks the validity of passwords by day and when a user logs on to the system. the system generates an alarm informing the user of expiration day and asking the user to modify the password in time. it is 30 days. length of password Validity period of the user name Description The min. The system checks the validity of user names by day and when a user logs on to the system. It is not recommended to bind the root profile when you add a new user. length of user name Min. This profile disables restrictions on users so that root users can log in to the system smoothly after a system upgrade. Before three days of the expiration. Together with the parameter of permitted end time of logon by a user. By default. It ranges from 0 to 999 days. The validity period of the password should not be equal to or shorter than that of the user name. then the validity lasts forever. By default. The system generates an alarm informing the user of expiration once the system identifies the expiration of a user name. It ranges from 0 to 999 days. If it is set to 0 day. the system generates an alarm informing the user of expiration day. you need to configure the following parameters: – – – – – – – l l l Use profile name Min. then the validity lasts forever. length of password: 8 alphanumeric characters Validity period of the user name: 30 day Validity period of the password: 30 day Permitted start time of logon by a user: 09:00 Permitted end time of logon by a user: 19:00 To add the user profile. Procedure Step 1 Run the terminal user-profile add command to add a user profile. do as follows: huawei(config)#terminal user-profile add User profile name(<=15 chars):userprofile Min. length of user name : 8 Min. the system will force the user to log out and stop the user to configure the system. it specifies the permitted period for a user to log on to the system. Step 2 Run the display terminal user-profile command to query information on the user profile.6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameters Permitted end time of logon by a user Description Together with the parameter of permitted start time of logon by a user. length of user name(6--15)[6]:8 Min.15> }:userprofile Command: display terminal user-profile name userprofile --------------------------------------------------------------------------User profile name : userprofile Min. If a user logs on to the system at the permitted start time but does not log out at the permitted end time. A user can log on to the system only in the permitted period. ----End Example Assume that: l l l l l l l Use profile name: userprofile Min. length of user name: 8 alphanumeric characters Min. length of password(6--15)[6]:8 Validity period of the user name(0--999 days)[30]: Validity period of the password(0--999 days)[30]: Permitted start time of logon by a user(hh:mm):09:00 Permitted end time of logon by a user(hh:mm):19:00 Repeat this operation? (y/n)[n]: huawei(config)#display terminal user-profile { name<K>|all<K> }:name { profile_name<S><1. length of password : 8 Validity period of the user name : 30 Validity period of the password : 30 Permitted start time of logon by a user : 09:00 Permitted end time of logon by a user : 19:00 --------------------------------------------------------------------------- 6-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Delete a user profile terminal user-profile delete The default user profiles cannot be deleted. Up to 127 users can be added to the system.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users Related Operation Table 6-3 lists the related operations for adding a user profile. Context l The super user and the administrator can add a user with a lower level than theirs. Table 6-4 lists the user attributes.. The super user or administrator can add multiple users to the system at a time. l When adding a user..3 Adding a User This operation enables you to add a user who can log in to the MA5600 to maintain it. Modify a user profile Run the Command.. named root.. The default user profiles cannot be modified. terminal user-profile modify Remarks The user profile name cannot be modified. The bound user profiles cannot be deleted. That is: – – The super user can add an administrator. 6. the user account. Table 6-3 Related operations for adding a user profile To. Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-5 . - display terminal ip-address locked terminal unlock ip-address An administrator runs this command to disable an IP lock. authority and appended information. The bound user profiles cannot be modified. admin. named root. l l A user name is unique. If the root user counts. admin. permitted reenter number. Modify the profile bound with a user Query the IP address of a locked terminal Disable an IP lock terminal user user-profile This operation binds the user to another profile. The administrator can only add a operator and a common user. operator and common user. password. cannot be all or online. The system supports up to 10 terminal users online simultaneously. operator and common user. up to 128 users can be added. including the user profile. you need to configure the user attributes. operators and common users. ----End Example To add a common user named huawei with password of huawei. Step 2 Run the display terminal user command to query a user. A user name is unique. Administrator:1 Permitted Reenter Number(0--4):3 User's Appended Info(<=30 chars):user This user has been added Repeat this operation? (y/n)[n]:n huawei(config)#display terminal user all Name Level Status ReenterNum AppendInfo -------------------------------------------------------------------root Super Online 1 none huawei User Offline 3 user 6-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . A password consists of 0-15 characters. and appended information user. It is case sensitive and cannot be null. In terms of authority. Procedure Step 1 Run the terminal user name command to add a user. It is in the range of 0–4. Operator 3.6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 6-4 User Attributes User attribute User name Password Permitted reenter number Description A user name (or a user account) consists of 1-15 printable characters. reenter number of 3. The permitted reenter number means the concurrent logon count of a user account. the bound user profile root. Whether a user name can be used to log in to the MA5600 from several terminals at the same time depends on the permitted reenter number. case sensitive and cannot contain any space. Common User 2. It can be telephone number or address of a user. do as follows: huawei(config)#terminal user name User profile name(<=15 chars)[root]: User Name(<=15 chars):huawei User Password(<=15 chars):huawei //Not display on the terminal Confirm Password(<=15 chars):huawei //Not display on the terminal User's Level: 1. users can be divided into four levels: l l l l Authority Common user Operator Administrator Super user Append Information Append information is a kind of optional and supplementary information. and is generally set to 1. It consists of a chain of characters and its total length is limited to 30. User root cannot be deleted..4.1 Modifying the Profile Bound with a User This operation enables you to bind a user with a different profile. 6.3 Changing a User Password This operation enables you to change a user password to guarantee equipment security. such as user profile. authority. password. 6.4.4.2 Modifying a User Level This operation enables you to modify a user authority. you need to disconnect the user first. undo terminal user name Remarks l Only the super user and administrators can delete users at lower levels.. To delete an online user . That is.1 Modifying the Profile Bound with a User This operation enables you to bind a user with a different profile. 6.4 Modifying the Permitted Reenter Number This operation enables you to modify the permitted reenter number of a user to ensure the user authority. 6.. 6. the permitted reenter number and the appended information. 6.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-7 . An online user cannot be deleted.4. Multi users can be deleted at a time. 6.4. Delete a user Run the Command.4.5 Modifying the Appended Information This operation enables you to modify the appended information on a user to update user information in time.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users -------------------------------------------------------------------Total record(s) number: 2 Related Operation Table 6-5 lists the related operations for adding a user. Users cannot delete themselves. bind the user to another profile. Table 6-5 Related operations for adding a user To. l l l l Modify the user profile terminal user user-profile The administrator can run this command to modify the profile where the user is located.4 Modifying the User Attributes You can modify the user attributes. 2 Modifying a User Level This operation enables you to modify a user authority. Configure a user profile Modify levels of a user Modify the password of a user Modify the permitted times of logon by a user Modify the appended information on a user Run the Command. the binding operation fails... terminal user-profile terminal user level terminal user password terminal user reenter terminal user apdinfo 6. Procedure Step 1 Run the terminal user user-profile command to modify the bound profile of a user. do as follows: huawei(config)#terminal user user-profile User Name(<=15 chars):testuser Permitted user-profile[root]:admin Confirm user-profile:admin Configuration will take effect when the user logs on next time. or an administrator. The user name and password must satisfy the specification of the user profile to be bound. an operator.. Huawei Technologies Proprietary Issue 04 (2007-11-30) 6-8 . l The super user can modify the level of a user to that of a common user.4. Repeat this operation? (y/n)[n]: Related Operation Table 6-6 lists the related operations for modifying the profile bound with a user. Step 2 Run the display terminal user command to query the bound profile of the user.. Otherwise. ----End Example To modify the profile bound with the user named testuser to the default admin profile. Table 6-6 Related operations for modifying the profile bound with a user To. Context Only the super user and administrators can perform the operation for users at lower levels.6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l Administrators can modify the bound profile of themselves and users at lower level. terminal user password terminal user reenter terminal user apdinfo 6. Common User 2. do as follows: huawei(config)#terminal user level User Name(<=15 chars):huawei 1. Context l The super user and the administrator can change the passwords of users at lower levels (including themselves). The common user and the operator can only change their own password. Huawei Technologies Proprietary 6-9 l Issue 04 (2007-11-30) . When changing the passwords of users at lower levels..4..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 6 Managing Users Administrators can modify the level of a user to that of a common user.. Table 6-7 Related operations for modifying a user level To.3 Changing a User Password This operation enables you to change a user password to guarantee equipment security. or an operator. ----End Example To change a common user huawei to an operator.. Change the user password Modify the permitted reenter number of a user Modify the appended information on a user Run the Command.Administrator:2 User's Level:2 Confirm Level: 2 Information will take effect when this user logs on next time Repeat this operation? (y/n)[n]:n huawei(config)#display terminal user all --------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo --------------------------------------------------------------------------root Super Online 1 none huawei Operator Offline 3 user --------------------------------------------------------------------------Total record(s) number: 2 Related Operation Table 6-7 lists the related operations for modifying a user level. and need to input the old password. Operator 3. Step 2 Run the display terminal user command to query a user level. the super user and the administrator need not to input the old password. Procedure Step 1 Run the terminal user level command to modify a user level. Context l The super user and administrators can modify the permitted reenter number of users at lower levels. ----End Example To change the password of a common user huawei. terminal user level terminal user reenter terminal user apdinfo 6.4 Modifying the Permitted Reenter Number This operation enables you to modify the permitted reenter number of a user to ensure the user authority..4. l Procedure Step 1 Run the terminal user reenter command to modify the permitted reenter number of a user. ----End 6-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the terminal user password command to change a user password... Modify user level Modify the permitted reenter number of a user Modify the appended information on a user Run the Command. It is not allowed to modify the permitted reenter number of the super user. Step 2 Run the display terminal user command to query the permitted reenter number of a user. do as follows: huawei(config)#terminal user password User name (<=15 chars):huawei Old Password(<=15 chars):hw //Not display on the terminal New password(<=15 chars):huawei //Not display on the terminal Confirm Password(<=15 chars):huawei //Not display on the terminal Information takes effect Repeat this operation? (y/n)[n]:n Related Operation Table 6-8 lists the related operations for changing a user password.. Step 2 Log in to the equipment with the user old name and old password. Table 6-8 Related operations for changing a user password To. Context l The super user and administrators can modify their own appended information and that of users at lower levels.4. do as follows: huawei(config)#terminal user reenter User name (<=15 chars):huawei Permitted reenter number(0--4):1 Confirm Reenter Number(0--4):1 Information takes effect Repeat this operation? (y/n)[n]:n huawei(config)#display terminal user all --------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo --------------------------------------------------------------------------root Super Online 1 none huawei Operator Offline 1 user --------------------------------------------------------------------------Total record(s) number: 2 Related Operation Table 6-9 lists the related operations for modifying the permitted reenter number. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-11 ..5 Modifying the Appended Information This operation enables you to modify the appended information on a user to update user information in time. To. l Procedure Step 1 Run the terminal user apdinfo command to modify the appended information on a user. Step 2 Run the display terminal user command to query the appended information on a user. Table 6-9 The related operations for modifying the permitted reenter number...SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users Example To modify the permitted reenter number of the common user huawei to 1.. ----End Example To modify the appended information on the common user huawei. Modify the profile bound with a user Modify user level Change user password Modify the appended information on user Run the Command. Common users and operators can modify their own appended information. terminal user user-profile terminal user level terminal user password terminal user apdinfo 6. Step 2 Run the display client command to query an online user. ----End Example To disconnect user 2. do as follows: huawei#client kickoff 2 Are you sure to kick the user off?(y/n)[n]: y huawei#display client ----------------------------------------------------------------------------ID Client name Domain name IP Address Login Time ----------------------------------------------------------------------------- 6-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. Procedure Step 1 Run the client kickoff command to disconnect an online user. and then run the display client command to find the user has been disconnected.com Information takes effect Repeat this operation? (y/n)[n]:n huawei(config)#display terminal user all --------------------------------------------------------------------------Name Level Status ReenterNum Profile AppendInfo --------------------------------------------------------------------------root Super Online 1 root none huawei Operator Offline 1 root [email protected] Disconnecting an Online User This operation enables you to disconnect an online user to prevent the user from logging in to the MA5600.com --------------------------------------------------------------------------Total record(s) number: 2 Related Operation Table 6-10 lists the related operations for modifying the appended information. terminal user level terminal user password terminal user reenter 6.6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#terminal user apdinfo User name (<=15 chars):huawei User's Appended Info(<=30 chars):support@huawei.. Table 6-10 Related operations for modifying the appended information To. Context Only the super user and administrators can disconnect an online user at lower levels.. Modify the user level Change the user password Modify the permitted reenter number of a user Run the Command. Context l l l l Only the super user and administrators can delete the users at lower levels than themselves. l Procedure Step 1 Run the undo terminal user namecommand to delete users.. Multiple users can be deleted at a time. undo terminal user name 6. Step 2 Run the display terminal user command to verify that a user is deleted successfully. do as follows: huawei(config)#undo terminal user name User Name(<=15 chars):huawei Are you sure to delete the user?(y/n)[n]:y This user has been deleted Repeat this operation? (y/n)[n]:n huawei(config)#display terminal user all --------------------------------------------------------------------------Name Level Status ReenterNum AppendInfo --------------------------------------------------------------------------root Super Online 1 none --------------------------------------------------------------------------Total record(s) number: 1 Related Operation Table 6-12 lists the related operations for deleting a user Issue 04 (2007-11-30) Huawei Technologies Proprietary 6-13 . Table 6-11 Related operation for disconnection an online user To. User root cannot be deleted.60..100 2006-02-08 12:26:53 ----------------------------------------------------------------------------- Related Operation Table 6-11 lists the related operation for disconnecting an online user. An online user cannot be deleted. Delete a user Run the Command. To delete an online user... you need to disconnect the user first. ----End Example To delete a user named huawei.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 Managing Users 1 root -10. Users cannot delete themselves.71.6 Deleting a User This operation enables you to delete a user which is not permitted to log in to the MA5600. . Disconnect an online user Add a user Run the Command. client kickoff terminal user name 6-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) .6 Managing Users SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 6-12 Related operations for deleting a user To.... 7 Resetting a Service Board This operation enables you to reset a service board when it is unstable. 7. 7.6 Deleting a Service Board This operation enables you to delete a service board that is no longer in need. After the corresponding service board is inserted. 7. use this command. the board can start immediately. 7.4 Adding a Service Board Offline This operation enables you to add a required service board in an idle slot and configure data of the service board offline.3 Resetting the Control Boards This operation enables you to reset the control boards. 7. the rules of subboard combination and replacement. When you need to reset the control boards to run the newly-loaded program and database. Device management includes shelf management and board management. 7.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7 Managing the Device 7 About This Chapter Managing the Device This chapter describes how to manage the MA5600.2 Setting the Description of a Shelf This operation enables you to set the description for a shelf to differentiate it from other shelves. 7. Issue 04 (2007-11-30) Huawei Technologies Proprietary 7-1 .5 Confirming a Service Board This operation enables you to confirm a service board that has been discovered automatically. 7.8 Prohibiting a Service Board This operation enables you to prohibit a service board. 7.9 Managing a Subboard This section describes the operation purpose and specification of device management.1 Overview This section describes the contents of the chapter and the board status. Table 7-1 Service board status State Normal Failed Config Auto-find English Name Normal Failed Config Auto_find Remarks It indicates that the board is running in the normal state. but not confirmed yet. Issue 04 (2007-11-30) 7-2 Huawei Technologies Proprietary . It indicates that the board is just inserted. It indicates that the board is faulty.1 Overview This section describes the contents of the chapter and the board status.7 Managing the Device SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7. It indicates that the board is being configured. Service Description Device management involves: l Shelf management – – – Setting description of a shelf Querying description of a shelf Querying attributes of a shelf Resetting a control board Querying a control board Adding a service board offline Confirming a service board Deleting a service board Resetting a service board Prohibiting/Unprohibiting a service board Querying a service board Replacing a subboard Querying a subboard l Control board management – – l Service board management – – – – – – l Subboard management – – Board Status Table 7-1 lists the service board status. Table 7-2 Related operation for setting the description of a shelf To.. When you need to reset the control boards to run the newly-loaded program and database. the operation has no adverse impact on the ongoing services. do as follows: huawei(config)#frame set 0 desc adl huawei(config)#display frame desc 0 -------------------------------------------------------FrameID Frame description -------------------------------------------------------0 adl -------------------------------------------------------- Related Operation Table 7-2 lists the related operation for setting the description of a shelf.2 Setting the Description of a Shelf This operation enables you to set the description for a shelf to differentiate it from other shelves.3 Resetting the Control Boards This operation enables you to reset the control boards. display frame info 7. 7. Query the description of a shelf Run the Command.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7 Managing the Device State Prohibited English Name Prohibited Remarks It indicates that the board is prohibited.. Context l l The control boards include active control board and standby control board.. Huawei Technologies Proprietary 7-3 Issue 04 (2007-11-30) . Resetting an active control board leads to two results: – In the case of an active/standby configuration. Procedure Step 1 Run the frame set command to set the description of a shelf. Step 2 Run the display frame desc command to query the description of a shelf. use this command. ----End Example To set the description of shelf 0.. do as follows: huawei#reboot standby Please check whether data has saved. the system is reset after new application or database is loaded.. Therefore. the service boards reset simultaneously. 7-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . After the corresponding service board is inserted. run the save command to save the system data.7 Managing the Device – SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide In the case there is no standby control board. are you sure to reboot active board? (y/n)[n]:y To reset the standby control board. all service boards in the system are reset. In general. the board can start immediately.. The board reset command cannot be used to reset the control boards. reboot active will cause system reboot.. 7. are you sure to reboot standby board? (y/ n)[n]:y Related Operation Table 7-3 lists the related operations for resetting the control boards. Table 7-3 Related operations for resetting the control boards To. before the operation. the operation disconnects the control board from all the service boards. l l l Procedure Run the reboot command to reset the control board. l The reset operation may cause loss to unsaved data. As a result. are you sure to reboot active board? (y/n)[n]:y Standby board failure or not exist. that is.4 Adding a Service Board Offline This operation enables you to add a required service board in an idle slot and configure data of the service board offline. display board reboot system Remarks You can query the board type. ----End To reset the active control board. The reboot active command and the reboot standby command can be used to reset the active control board and standby control board respectively. board status and port information. This command is used to reset the active and standby control boards at the same time. Query a board Reboot system Run the Command. do as follows: huawei#reboot active Please check whether data has saved. Reset the system only when necessary. the unsaved data may lose if reboot active board.. Table 7-4 Related operation for adding a service board offline To. You can add a service board only in an idle slot.. If a service board of a different type is inserted. the board keep resetting because the board type is not matching. Only after a service board of the configured type is inserted into this slot. board confirm Remarks The service board that is identified automatically is in auto-find state. l Procedure Step 1 Run the board add command to add a service board. Issue 04 (2007-11-30) Huawei Technologies Proprietary 7-5 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7 Managing the Device Context l After the service board is added offline. the service board becomes faulty... ----End Example To add a service board in slot 3. Confirm a service board Run the Command. Step 2 Run the display board command to query the information on the board.. do as follows: huawei(config)#board add 0/3 adg huawei(config)#display board 0 ------------------------------------------------------------------------SlotID BoardName Status SubType0 SubType1 ------------------------------------------------------------------------0 1 H561SHEA Normal 2 H561AIUG Failed O1CTG 3 ADG Failed 4 5 H561ETHA Failed O4GS 6 7 8 H561SCU Active_normal O4GS 9 10 11 12 13 14 15 ------------------------------------------------------------------------- Related Operation Table 7-4 lists the related operation for adding a service board offline. and it can be used after it is confirmed. the board becomes normal. the system automatically identifies the board type. 7-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . To enable the board for normal service transmission. Context l l A service board with ongoing service cannot be deleted. do as follows: huawei(config)#board confirm 0/6 0 frame 6 slot board confirm successfully Related Operation Table 7-5 lists the related operation for confirming a service board. ----End Example To confirm board 0/6.5 Confirming a Service Board This operation enables you to confirm a service board that has been discovered automatically.6 Deleting a Service Board This operation enables you to delete a service board that is no longer in need. board add Remarks You can add a service board only to an idle slot. A service board in the auto-find state cannot be deleted. 7. Context After you insert a service board into an idle slot.. Procedure Step 1 Run the board confirm command to confirm a service board.. The automatically identified service board is in the auto-find state. Step 2 Run the display board command to query the confirmed service board. Procedure Step 1 Run the board delete command to delete a service board.. you need to confirm this board.7 Managing the Device SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7.. Table 7-5 Related operation for confirming a service board To. Add a service board offline Run the Command. . When the service boards are enabled after the board reset operation succeeds.7 Resetting a Service Board This operation enables you to reset a service board when it is unstable. the service boards report registration information to the control board so that the control board can configure their data to restore the services. Release resources dynamically. A service board in the auto-find state and unconfirmed cannot be prohibited. Huawei Technologies Proprietary 7-7 Issue 04 (2007-11-30) .8 Prohibiting a Service Board This operation enables you to prohibit a service board. do as follows: huawei(config)#board reset 0/6 Are you sure to reset board? (y/n)[n]:y 0 frame 1 slot reset board message sent successfully. Prohibiting a service board interrupts the services of the board. Context l The system will generate a fault alarm after the reset operation and a recovery alarm after the board recovers. l l l A control board cannot be prohibited.. ----End Example To delete service board 0/6. 7. do as follows: huawei(config)#board delete 0/6 are you sure to delete this board? (y/n)[n]:y Board delete successfully 7. l l Procedure Run the board reset command to reset a service board. you can: – – Suspend (but not delete) the service of the board. ----End Example To reset service board 0/6. Context l Through the operation. The system will generate the reset failure alarm if the control board does not receive the response from the service board for a long time after the reset command is delivered.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 7 Managing the Device Step 2 Run the display board command to query service board list. The upper subslot is numbered 0. and the lower subslot is numbered 1. – l Rules for replacing a subboard Huawei Technologies Proprietary Issue 04 (2007-11-30) 7-8 . The SCU control board or the ETH service board supports the replacement of the subboard. and insert the board to the slot again.. Among them. both optical and electrical subboards can be used at the same time. undo board prohibit 7. do as follows: huawei(config)#board prohibit 0/2 Prohibiting board will interrupt all services on this board. remove the board. the rules of subboard combination and replacement. Unprohibit a service board Run the Command. Table 7-6 Related operation for prohibiting a service board To.. Specification The MA5600 supports inserting subboards on the SCU. Rules of Subboard Combination and Replacement When inserting or replacing subboards on or from the SCU control board on the MA5600... Step 2 Run the display board command to query the service board status. comply with the following requirements: l Rules for inserting a subboard – The SCU board offers two subslots for the subboards. On a board. are you sure to prohibit board? (y/n)[n]:y Prohibited board successfully Related Operation Table 7-6 lists the related operation for prohibiting a service board. after you save the database. ETH and AIUG boards to provide multiple upstream interfaces.7 Managing the Device SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the board prohibit command to prohibit a service board. the board is in the normal state. ----End Example To prohibit service board 0/2. the AIUG board can provide E3 and IMA subtending function. replace the subboard.9 Managing a Subboard This section describes the operation purpose and specification of device management. That is. if you do not follow the mentioned rules when replacing the subboard. an FE electrical port and a GE optical port. comply with the related rules. if you do not follow the mentioned rules when replacing the subboard. the board cannot be found automatically. Meanwhile. the subboard can be inserted only in the first subboard slot and inserting a subboard in the second subboard slot is not allowed. and a GE electrical port and an FE optical port. l Related Operation Table 7-7 lists the related operation for managing a subboard. after you remove the board and replace the subboard. when the board is normal. Other exchanges between an electrical port and an optical port. For the service board. Issue 04 (2007-11-30) Huawei Technologies Proprietary 7-9 . When you use the subboard whose capacity is reduced in subboard combination. When no subboard is inserted in the first subboard slot. Degrading a GE electrical subboard to an FE electrical subboard is prohibited.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide – 7 Managing the Device Upgrading an FE optical subboard to a GE optical subboard is allowed. For the IMA subboard. It is allowed to add ports to a subboard. indicating the operation failure. When you use the subboard whose capacity is expanded in subboard combination. are prohibited. When you query the boards through the CLI. It is only allowed to change port type between a GE electrical port and a GE optical port. The number of subboard ports in the first subboard slot must be greater than or equal to that in the second subboard slot. comply with the following requirements: l For the 622M subboard. Service ports to be removed cannot carry any data. Degrading a GE optical subboard to an FE optical subboard is prohibited. the system displays the information about original subboards and the faulty status of the subboards. the system generates the alarm that the type of the subboard on the control board is changed. the subboard can be inserted only in the second subboard slot and inserting a subboard in the first subboard slot is not allowed. An FE optical subboard can be upgraded to a GE optical subboard only in the auto-negotiation mode. That is. – – – l Rule for expanding the capacity of a subboard – – l Rules for reducing the capacity of a subboard – – The AIUG board of the MA5600 does not support the replacement of the subboard. comply with the related rules. such as the exchange between an FE electrical port and an FE optical port. when inserting or replacing subboards on or from the AIUG board. NOTE l l l l l For the SCU control board. the board is in the failed state. An H561AIUG board can be attached with only one BITS subboard. It is prohibited to change port type between an electrical port and an optical port. Upgrading an FE electrical subboard to a GE electrical subboard is allowed. inserting a subboard in the second subboard slot is not allowed. 7-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) ... display board Remarks You can query the subboards used by the board...7 Managing the Device SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 7-7 Related operation for managing a subboard To. Querying a service board Run the Command. including creating the local RSA key pair. setting the IP address and port number of a RADIUS server.4 Configuring RADIUS This section describes RADIUS configuration. authorization. setting the response timeout interval of a RADIUS server. 8. configuring an NAS port and its ID format.2 Related Concepts This section describes concepts related to remote user authentication. 8. Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-1 . including configuring an authentication scheme. and setting the format of user name sent to a RADIUS server. configuring the SSH user public key and configuring an SSH user.6 Configuring SSH This section describes the SSH configuration. specifying the authentication scheme and specifying the RADIUS server template.5 Configuring AAA This section describes AAA configuration. setting the maximum retransmit count of RADIUS request packets.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication 8 About This Chapter Configuring the Remote User Authentication This chapter describes the remote user management supported by the MA5600. 8. including AAA. setting the RADIUS server type. including authentication.3 Configuration Example of Remote User Authentication This example shows how to configure the remote user authentication to prevent illegal access to the MA5600.1 Overview This section contains service description and service specification of remote user authentication on the MA5600. setting the shared key of the RADIUS server. and accounting. including creating a RADIUS server template. 8. creating a domain. 8. 8. RADIUS and SSH. 8. Service Specifications The MA5600 realizes remote user authentication.2.1 Overview This section contains service description and service specification of remote user authentication on the MA5600. The MA5600authenticates remote users in the following two ways: l AAA/RADIUS – In an authentication. 8. including AAA. – l SSH – 8. authorization and accounting (AAA)/Remote Authentication DialIn User Service (RADIUS) frame. As for the RADIUS server. The SSH protocol is based on a server-client mode.2 Related Concepts This section describes concepts related to remote user authentication. the MA5600 is a RADIUS client. When the AAA/RADIUS function is enabled.1 Introduction to AAA This section describes what is AAA and advantages of AAA. What Is AAA Authentication.2 Introduction to RADIUS This section describes what is RADIUS and principles of RADIUS.2.1 Introduction to AAA This section describes what is AAA and advantages of AAA. Authorization and Accounting (AAA) is a framework for network security management.2. the MA5600 forwards the user name and password of the login user to the RADIUS server for authentication. RADIUS and SSH. 8-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2.3 Introduction to SSH This section describes what is SSH and advantages of the SSH protocol. 8. Service Description Remote user authentication refers to the process of examining the remote users who want to log in to the MA5600. 8. Only authenticated users can log in to the MA5600 to manage and maintain it. using TCP for interconnection to realize secure remote access to insecure networks. the MA5600 serves as a network access server (NAS).8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8. The RADIUS configuration only defines the parameters related to the connections between the NAS and the RADIUS server. Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-3 .2. The RADIUS server authenticates the user account and password contained in the user data. To make these parameters take effect. and returns the data required data to the NAS. you must enter domain mode first. An RADIUS server manages a simple user database to provide AAA function for users and modify users' service information according to the service types and authorities. encryption. It is used to manage a large number of distributed dialup users. The users forward their AAA requests to the RADIUS server through a NAS. What Is RADIUS As a management framework. NOTE l l l The NAS and the RADIUS server also use a key to encrypt the data exchanged between them. RADIUS is a common one among them. What Is SSH SSH provides authentication. the NAS forwards the user data to the RADIUS server in line with the related mechanism defined by the RADIUS protocol. and then select the RADIUS AAA mode. The AAA framework has the following advantages: l l l l Excellent expansibility Standard authentication schemes Centralized user management Multi-system based security mechanism 8. and identification to guarantee network communication security.3 Introduction to SSH This section describes what is SSH and advantages of the SSH protocol.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Advantages of AAA Operating in the server-client model. AAA can be carried out by a number of protocols. specify a RADIUS scheme. RADIUS is an information exchange protocol with the distributed server-client model. SSH offers security guarantee and powerful authentication to protect the route against attacks such as IP address spoofing and interception of plain text password. When users telnet the router through an insecure network. Principles of RADIUS l When you receive a request from a user to access other network (or use some network resources). the data such as the password can be avoided being intercepted or stolen. the AAA framework uses the clients as managed objects and the server for storing user information.2. 8. In this case.2 Introduction to RADIUS This section describes what is RADIUS and principles of RADIUS. l l l l 8. SSH supports Data Encryption Standard (DES).3 Configuration Example of Remote User Authentication This example shows how to configure the remote user authentication to prevent illegal access to the MA5600.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide SSH RFC IETF defined SSH RFC document. both the user name and the password are encrypted to prevent the password from being intercepted. When the SSH server communicates with the SSH client. SSH supports the MD5 and SHA algorithms to identify the integrity of the session data to guarantee authenticity of the session data and prevent the data from being altered maliciously during the transfer process. This guarantees the whole secure process of sessions. 8-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SSH implements secure key exchange and authentication of the server by generating public and private keys. It enhances security and adds the file transfer function.5: SSHv1. SSH has the following features: l l l SSH supports the methods of using the password and RSA public key to authenticate clients. Compared with telnet. and AES to encrypt session data. In this mode. There are two versions of the SSH protocol: l SSHv1. At present. Networking Figure 8-1 shows a sample network for configuring the remote user authentication. l Advantages The SSH protocol is based on a client/server mode. SSH encrypts the data to guarantee the security and reliability during the transmission.5 was issued earlier than SSHv2. It uses TCP for interconnection to realize secure remote access through insecure networks. These keys are generated according to the encryption principle of the asymmetric encryption system. SSH supports authentication of a server. 3DES. SSH supports RSA authentication mode. a majority of SSHs support it.5. SSHv2: SSHv2 is more standard and precise than SSHv1. 10.2 Radius server Radius server MA5600 LAN PC PC PC Data Plan Table 8-1 lists the data plan for configuring the remote user authentication.10.10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Figure 8-1 Sample network for configuring the remote user authentication 10.1 Internet 10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-5 . The RADIUS configuration profile contains the IP address and port number of the RADIUS server.10. For configuration of the RADIUS server. refer to related documents. Configuration Flowchart Figure 8-2 shows the flowchart for configuring the remote user authentication.10.10.1 10. Table 8-1 Data plan for configuring the remote user authentication Item IP address of the primary RADIUS server IP address of the secondary RADIUS server Authentication port ID of the RADIUS server Data 10.2 1812 NOTE This chapter describes configuration of the MA5600 only.10. Configure other parameters such as RADIUS shared key and RADIUS server type according to the practice.10. huawei(config-radius-radius2005)#quit huawei(config)#aaa huawei(config-aaa)#authentication-scheme huawei Step 4 Select authentication mode.1 1812 huawei(config-radius-radius2005)#radius-server authentication 10.10.2 1812 secondary Step 3 Create the authentication scheme.10. huawei(config-radius-radius2005)#radius-server authentication 10. huawei(config)#radius-server template radius2005 Step 2 Bind the RADIUS server virtual profile with the authentication server.10.10. huawei(config-aaa-authen-huawei)#authentication-mode radius Step 5 Create a domain. huawei(config-aaa-authen-huawei)#quit huawei(config-aaa)#domain radius1 Step 6 Bind the domain with the authentication scheme. huawei(config-aaa-domain-radius1)#authentication-scheme huawei 8-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 8-2 Flowchart for configuring the remote user authentication Start Create RADIUS server virtual profile Bind virtual profile with server Create authentication scheme Select authentication mode Create domain Bind domain with authentication scheme Bind domain with RADIUS server virtual profile End Procedure Step 1 Create a RADIUS server virtual profile. 4. 8. 8. 8.4 Configuring RADIUS This section describes RADIUS configuration. setting the maximum retransmit count of RADIUS request packets. and setting the format of user name sent to a RADIUS server. configuring an NAS port and its ID format. log on to the MA5600 and type in the user name in the format of "userid@domain-name".9 Setting the Format of User Name Sent to a RADIUS Server This operation enables you to set the format of user name sent to a RADIUS server to specify if the user name contains the domain name.7 Setting the RADIUS Server Type This operation enables you to set the RADIUS server type.4. 8.5 Setting the Response Timeout Interval of a RADIUS Server This operation enables you to set the response timeout interval of a RADIUS server. If the RADIUS server contains the user name and domain configuration.4. including creating a RADIUS server template.6 Setting the Maximum Retransmit Count of RADIUS Request Packets This operation enables you to set the maximum retransmit count of RADIUS request packets to guarantee that server responds to the packets. 8. huawei(config-aaa-domain-radius1)#radius-server radius2005 ----End Result After the configuration on the RADIUS server is complete. the user can log on to it and manage the devices. 8.4. setting the IP address and port number of a RADIUS server. 8. 8.4.1 Overview This section describes RADIUS specification and notes for configuring RADIUS.3 Setting the IP Address and Port Number of a RADIUS Server This operation enables you to set the IP address and the port number of a new RADIUS server. setting the RADIUS server type. 8.4 Setting the Shared Key of the RADIUS Server This operation enables you to set the shared key of the RADIUS server to verify the legality of the packets from the peer end.8 Configuring an NAS Port and Its ID Format This operation enables you to configure an NAS port and its ID format to guarantee interoperability between the devices of Huawei. 8.4. 8.2 Specifying the RADIUS Server Template This operation enables you to specify the RADIUS server template for a domain.4. setting the response timeout interval of a RADIUS server.1 Overview This section describes RADIUS specification and notes for configuring RADIUS.4.4.4. setting the shared key of the RADIUS server.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Step 7 Bind the domain with the RADIUS server virtual profile. Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-7 . you need to quote the RADIUS server group in a domain.net". For details.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Specification For the MA5600. the RADIUS is configured on each RADIUS server group.4. One RADIUS server template can be used by multiple domains. a RADIUS server group can be: l l An independent RADIUS server A pair of primary/secondary RADIUS servers with the same configuration but different IP addresses The attributes of each RADIUS server profile include: l l l IP addresses of primary and secondary servers Shared key RADIUS server type Note The RADIUS configuration only defines the parameters used for data exchange between the MA5600 and the RADIUS server.0:0:LoopBack0 8-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . you need to configure a RADIUS server template. 8.0. To validate these parameters. ----End Example To specify "radius1" as the RADIUS server template of domain "huawei. Procedure Step 1 Run the radius-server template command to create RADIUS server template and enter the corresponding mode. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : standard Traffic-unit : B Shared-secret-key : huawei Timeout-interval(in second) : 5 Primary-authentication-server : 0.2 Specifying the RADIUS Server Template This operation enables you to specify the RADIUS server template for a domain.5 Configuring AAA". Step 3 Run the display radius-server configuration command to query the created RADIUS server template. Step 2 Run the quit command to quit RADIUS mode.0. In actual networking. Context l l Before this setting. refer to "8. 10.3 Setting the IP Address and Port Number of a RADIUS Server This operation enables you to set the IP address and the port number of a new RADIUS server. Context l The servers may include the primary and secondary servers.10. To ensure the normal communication between the MA5600 and the RADIUS server. By default.0. ----End Example To set the IP address and port number of the primary server as 10. Step 2 Run the radius-server authentication command to configure the primary authentication server.0.10. Step 4 Run the quit command to quit from the RADIUS config mode. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server authentication 10.0. before setting the IP address and port number of the server. Step 5 Run the display radius-server configuration command to query the IP address and port number of a RADIUS server.0. Step 3 Run the radius-server authentication secondary command to configure the secondary server.0.0:0:LoopBack0 Secondary-authentication-server : 0.4.0:0:LoopBack0 Retransmission : 3 Domain-included : YES ------------------------------------------------------------------- Related Operation Table 8-2 lists the related operation for specifying the RADIUS server template Table 8-2 Related operation for specifying the RADIUS server template To… Cancel the reference of a RADIUS server template Run the Command… undo radius-server template 8.0.10. make sure that the route between the MA5600 and the RADIUS server is normal.1 and 1812. the IP address of the primary or the secondary server is 0.0:0:LoopBack0 Secondary-accounting-server : 0.10.2 and 1812. Make sure that the port settings between the MA5600 and the server are consistent.0.0. and the IP address and port number of the secondary server as 10. l l Procedure Step 1 Run the radius-server template command to create a RADIUS server template and enter the corresponding RADIUS config mode.10.1 1812 Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-9 .0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Primary-accounting-server : 0. Procedure Step 1 Run the radius-server template command to create a RADIUS server template and enter the corresponding RADIUS config mode.2:1812:LoopBack-1 Secondary-accounting-server : 0. The RADIUS client (namely the MA5600) and the RADIUS server use MD5 algorithm to encrypt the packets exchanged between them.1:1812:LoopBack-1 Primary-accounting-server : 0. Step 4 Run the display radius-server configuration command to query the shared key of the RADIUS server. Table 8-3 Related operation for setting the IP address and port number of a server To… Delete the configured RADIUS server Run the Command… undo radius-server authentication 8. They respond to the received packets only when the keys at both ends are identical.0:0:LoopBack0 Secondary-authentication-server : 10.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-radius-radius1)#radius-server authentication 10.10. Step 2 Run the radius-server shared-key command to set the shared key of the RADIUS server. Context l l By default.4.0. Step 3 Run the quit command to quit from the RADIUS config mode.10.10. ----End 8-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the key is "huawei".0.10.0:0:LoopBack0 Retransmission : 3 Domain-included : YES ------------------------------------------------------------------- Related Operation Table 8-3 lists the related operation for setting the IP address and port number of a server.4 Setting the Shared Key of the RADIUS Server This operation enables you to set the shared key of the RADIUS server to verify the legality of the packets from the peer end.2 1812 secondary huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : standard Traffic-unit : B Shared-secret-key : huawei Timeout-interval(in second) : 5 Primary-authentication-server : 10.0.0.10.10. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Example To set the shared key of a RADIUS server as "radius2004".5 Setting the Response Timeout Interval of a RADIUS Server This operation enables you to set the response timeout interval of a RADIUS server.10.0:0:LoopBack0 Secondary-authentication-server : 10. Step 4 Run the display radius-server configuration command to query the response timeout interval of a RADIUS server.0. By default. Step 3 Run the quit command to quit from the RADIUS config mode.1:1812:LoopBack-1 Primary-accounting-server : 0. Step 2 Run the radius-server timeout command to set the response timeout interval of a RADIUS server. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server shared-key radius2004 huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : standard Traffic-unit : B Shared-secret-key : radius2004 Timeout-interval(in second) : 5 Primary-authentication-server : 10. l Procedure Step 1 Run the radius-server template command to create a RADIUS template and enter corresponding RADIUS config mode. the timeout interval is 5s. the MA5600 needs to resend these packets to the RADIUS server to make sure that the users can really obtain RADUS service.10.4.0. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server timeout 10 huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : standard Traffic-unit : B Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-11 .10.2:1812:LoopBack-1 Secondary-accounting-server : 0.10.0:0:LoopBack0 Retransmission : 3 Domain-included : YES ------------------------------------------------------------------- 8. if no response from the RADIUS server is received for a period of time. ----End Example To set the timeout interval of a RADIUS server as 10s.0.0. Context l After the MA5600 sends RADIUS request packets to the RADIUS server. 0. the MA5600 considers its connection with the RADIUS server as interrupted.10. You can modify the configuration only when the RADIUS profile is not referenced.1:1812:LoopBack-1 Primary-accounting-server : 0.10.0. the MA5600 resends the request packets to the RADIUS server.10. By default. ----End 8-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . When the retransmit count exceeds the specified maximum value. the maximum retransmit count of RADIUS request packets is 3.4. and turns to other RADIUS servers for requesting services.0. Step 2 Run the radius-server retransmit command to configure the retransmit time of the configured server.6 Setting the Maximum Retransmit Count of RADIUS Request Packets This operation enables you to set the maximum retransmit count of RADIUS request packets to guarantee that server responds to the packets. Table 8-4 Related operation for setting the response timeout interval of a RADIUS server To… Restore the default response timeout interval of a RADIUS server Run the Command… undo radius-server timeout 8.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Shared-secret-key : radius2004 Timeout-interval(in second) : 10 Primary-authentication-server : 10.0:0:LoopBack0 Secondary-authentication-server : 10. Step 4 Run the display radius-server configuration command to query the maximum count of RADIUS request packets.10. Context l If no response has been received from the RADIUS server within the timeout time specified by the timeout timer. Step 3 Run the quit command to quit from the RADIUS config mode.2:1812:LoopBack-1 Secondary-accounting-server : 0.0:0:LoopBack0 Retransmission : 3 Domain-included : YES ------------------------------------------------------------------- Related Operation Table 8-4 lists the related operation for setting the response timeout interval of a RADIUS server.0. l l Procedure Step 1 Run the radius-server template command to create a RADIUS server template and enter the corresponding RADIUS config mode. Step 4 Run the display radius-server configuration command to query the RADIUS server type.0:0:LoopBack0 Secondary-authentication-server : 10.10.10. Table 8-5 Related operation for setting the maximum retransmit count of the RADIUS request packets To… Recover the maximum retransmit count of RADIUS request packets to the default value Run the Command… undo radius-server retransmit 8.0.4.10. Step 2 Run the radius-server type command to set the RADIUS server type.0. Step 3 Run the quit command to quit from the RADIUS config mode.2:1812:LoopBack-1 Secondary-accounting-server : 0.10.0:0:LoopBack0 Retransmission : 5 Domain-included : YES ------------------------------------------------------------------- Related Operation Table 8-5 lists the related operation for setting the maximum retransmit count of the RADIUS request packets. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-13 .0. Context The MA5600 supports both standard RADIUS protocol and Portal of Huawei.1:1812:LoopBack-1 Primary-accounting-server : 0.0.7 Setting the RADIUS Server Type This operation enables you to set the RADIUS server type.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Example To set the maximum retransmit count of RADIUS request packets as 5. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server retransmit 5 huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : standard Traffic-unit : B Shared-secret-key : radius2004 Timeout-interval(in second) : 10 Primary-authentication-server : 10. Procedure Step 1 Run the radius-server template command to create a RADIUS server template and enter the corresponding RADIUS config mode. 10. and that of NAS port IDs as "new" for RADIUS server template "radius1". Step 2 Run the radius-server nas-port-format command to configure an NAS port of the RADIUS server. Step 3 Run the radius-server nas-port-id-format command to configure the ID format of the NAS port of the RADIUS server.1:1812:LoopBack-1 Primary-accounting-server : 0.10.9 Setting the Format of User Name Sent to a RADIUS Server This operation enables you to set the format of user name sent to a RADIUS server to specify if the user name contains the domain name.0. Procedure Step 1 Run the radius-server template command to create a RADIUS server profile and enter RADIUS config mode.4.0.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the RADIUS server type as "portal".0:0:LoopBack0 Retransmission : 5 Domain-included : YES ------------------------------------------------------------------- 8.0:0:LoopBack0 Secondary-authentication-server : 10.10.0. 8-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server nas-port-format new huawei(config-radius-radius1)#radius-server nas-port-id-format new 8. ----End Example To set the format of NAS ports as "new". do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server type portal huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : portal Traffic-unit : B Shared-secret-key : radius2004 Timeout-interval(in second) : 10 Primary-authentication-server : 10.2:1812:LoopBack-1 Secondary-accounting-server : 0.0.4.8 Configuring an NAS Port and Its ID Format This operation enables you to configure an NAS port and its ID format to guarantee interoperability between the devices of Huawei.10. Context The NAS port and its ID format are internal extended attributes of Huawei. 0. The part following "@" is the domain name. Otherwise. you can run the command to specify that the user name to be sent to a RADIUS server carries no domain name. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#radius-server user-name domain-included huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : portal Traffic-unit : B Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-15 .10. Step 4 Run the display radius-server configuration command to query format of the user name that is sent to the RADIUS server. You can modify the configuration only when the RADIUS server profile is not referenced.0:0:LoopBack0 Secondary-authentication-server : 10.1:1812:LoopBack-1 Primary-accounting-server : 0.0. The access users are generally named in the format of "userid@domain-name". the RADIUS server group shall not be used at the same time in two or more domains. l l l Procedure Step 1 Run the radius-server template command to create a RADIUS server template and enter the corresponding RADIUS config mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Context l l By default.0. Some earlier RADIUS servers reject user names with domain names. If a RADIUS server group does not allow user names carrying domain names.2:1812:LoopBack-1 Secondary-accounting-server : 0. the RADIUS server will mistake the users in different domains as the same user.10. Step 3 Run the quit command to quit RADIUS config mode. Step 2 Run the (undo)radius-server user-name domain-included command to set whether the user name sent to RADIUS server carries domain name.10. when receiving the same user names. In this case. ----End To specify that a user name to be sent to a RADIUS server carries no domain name.0.10. the user name of a RADIUS server has the domain name.0:0:LoopBack0 Retransmission : 5 Domain-included : NO ------------------------------------------------------------------- To specify that a user name to be sent to a RADIUS server carries domain name. do as follows: huawei(config)#radius-server template radius1 huawei(config-radius-radius1)#undo radius-server user-name domain-included huawei(config-radius-radius1)#quit huawei(config)#display radius-server configuration template radius1 ------------------------------------------------------------------Server-template-name : radius1 Protocol-version : portal Traffic-unit : B Shared-secret-key : radius2004 Timeout-interval(in second) : 10 Primary-authentication-server : 10. The MA5600 assigns users to different ISP domains based on their respective domain names. 10. 8.5.1 Configuring an Authentication Scheme This operation enables you to configure an authentication scheme to define the policy to authenticate users requesting for login.0:0:LoopBack0 Retransmission : 5 Domain-included : YES ------------------------------------------------------------------- 8.3 Specifying the RADIUS Server Template This operation enables you to specify the RADIUS server template for a domain.0. Context l l The MA5600 supports the authentication through the RADIUS server. After an authentication scheme is created and before you reference the scheme.0. specifying the authentication scheme and specifying the RADIUS server template.2:1812:LoopBack-1 Secondary-accounting-server : 0. Step 2 Run the authentication-scheme command to add an authentication scheme.5 Configuring AAA This section describes AAA configuration. Step 3 Run the display authentication-scheme command to query the newly configured authentication scheme.1:1812:LoopBack-1 Primary-accounting-server : 0.5.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Shared-secret-key : radius2004 Timeout-interval(in second) : 10 Primary-authentication-server : 10. including configuring an authentication scheme. ----End 8-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 8. reference it for setting a domain to bring it into play. 8.10.10.1 Configuring an Authentication Scheme This operation enables you to configure an authentication scheme to define the policy to authenticate users requesting for login.0. 8.4 Specifying the Authentication Scheme This operation enables you to specify the authentication scheme for all the users of an ISP.2 Creating a Domain This operation enables you to create a domain.5.0.5. 8. you need to configure RADIUS for the MA5600 and configure the related user information on the remote RADIUS server. After configuring an authentication scheme.5. l Procedure Step 1 Run the aaa command to enter AAA mode.10.0:0:LoopBack0 Secondary-authentication-server : 10. creating a domain. Context l l A domain is a group of users with the same attributes.5. Table 8-6 Related operations for configuring an authentication scheme To… Delete an authentication scheme Show AAA configuration Run the Command… undo authentication-scheme Remarks The default authentication scheme of the system cannot be deleted. display aaa configuration 8.net" following "@" is the domain name. Step 2 Run the domain command to create a domain. Procedure Step 1 Run the aaa command to enter AAA mode. do as follows: huawei(config)#aaa huawei(config-aaa)#authentication-scheme huawei huawei(config-aaa-authen-huawei)#authentication-mode radius huawei(config-aaa-authen-huawei)#quit huawei(config-aaa)#quit huawei(config)#display authentication-scheme { <cr>|string<S><1. For a user name in the form of "userid@domain-name". You can query the usage of the resources configured on the authentication scheme table.32> }: Command: display authentication-scheme --------------------------------------------------------------------------Authentication-scheme-name Authentication-method --------------------------------------------------------------------------default local huawei radius --------------------------------------------------------------------------Total 2. the "huawei. and the "userid" is used as the user name for identity authentication.net. such as huawei20041028@huawei. with the authentication mode of RADIUS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Example To add the authentication scheme "huawei".2 printed Related Operation Table 8-6 lists the related operations for configuring an authentication scheme.2 Creating a Domain This operation enables you to create a domain. Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-17 . You can query the usage of resources configured on the domain. ----End Example To create a domain named huawei.net huawei(config-aaa-domain-huawei.net)#quit huawei(config-aaa)#quit huawei(config)#display domain {<cr>|string<S><1.net Active 0 384 0 ----------------------------------------------------------------------Total 2.net. Step 5 Run the display domain command to query the domain." Procedure Step 1 Run the aaa command to enter AAA mode.5. you need to configure a RADIUS server template.2 printed Related Operation Table 8-7 lists the related operations for creating a domain. refer to "8.20> }: Command: display domain ----------------------------------------------------------------------DomainName State CAR Access-limit Online ----------------------------------------------------------------------default Active 0 384 0 huawei. For details. Step 4 Run the quit command to quit the AAA mode. Context Before this setting. 8.4 Configuring RADIUS.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 3 Run the quit command to quit the domain mode. 8-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) .3 Specifying the RADIUS Server Template This operation enables you to specify the RADIUS server template for a domain. do as follows: huawei(config)#aaa huawei(config-aaa)#domain huawei. Table 8-7 Related operations for creating a domain To… Delete a domain Query AAA configuration Run the Command… undo domain display aaa configuration Remarks The default domain cannot be deletedf. Table 8-8 Related operation for specifying the RADIUS server template To… Cancel the reference of a RADIUS server template Run the Command… undo radius-server Remarks Run the command in domain mode. Step 6 Run the display domain command to query the information on the domain.net ------------------------------------------------------------------Domain-name : huawei.net huawei(config-aaa-domain-huawei. Step 4 Run the quit command to quit the domain mode. Step 3 Run the radius-server command to create a RADIUS server template and enter the corresponding RADIUS config mode.flow) : 0.net)#radius-server radius1 huawei(config-aaa-domain-huawei. Step 5 Run the quit command to quit the AAA mode. do as follows: huawei(config)#aaa huawei(config-aaa)#domain huawei.4 Specifying the Authentication Scheme This operation enables you to specify the authentication scheme for all the users of an ISP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Step 2 Run the domain command to specify huawei as the current domain and enter domain mode. ----End Example To specify "radius1" as the RADIUS server template of domain "huawei. 60 User-priority : User-access-limit : 384 Online-number : 0 RADIUS-server-template : radius1 ------------------------------------------------------------------- Related Operation Table 8-8 lists the related operation for specifying the RADIUS server template.5.net". Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-19 .net)#quit huawei(config-aaa)#quit huawei(config)#display domain huawei. 8.net Domain-state : Active Authentication-scheme-name : huawei Accounting-scheme-name : default Authorization-scheme-name : default User-CAR : Next-Hop : Primary-DNS-IP-address : Second-DNS-IP-address : Primary-NBNS-IP-address : Second-NBNS-IP-address : Acl-Number : Idle-data-attribute (time. and then you can delete the reference of the RADIUS server template. Step 5 Run the quit command to quit the AAA mode.net ------------------------------------------------------------------Domain-name : huawei. you need to create it. do as follows: huawei(config)#aaa huawei(config-aaa)#domain huawei.net huawei(config-aaa-domain-huawei.net". Procedure Step 1 Run the aaa command to enter AAA mode. 60 User-priority : User-access-limit : 384 Online-number : 0 RADIUS-server-template : ------------------------------------------------------------------- Related Operation Table 8-9 lists the related operations for specifying the authentication scheme.net)#authentication-scheme huawei huawei(config-aaa-domain-huawei. Step 3 Run the authentication-scheme command to specify the authentication scheme. Step 2 Run the domain command to specify huawei as the current domain and enter domain mode. ----End Example To specify "huawei" as the authentication scheme of domain "huawei. 8-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 4 Run the quit command to quit the domain mode.flow) : 0.net)#quit huawei(config-aaa)#quit huawei(config)#display domain huawei.net Domain-state : Active Authentication-scheme-name : huawei Accounting-scheme-name : default Authorization-scheme-name : default User-CAR : Next-Hop : Primary-DNS-IP-address : Second-DNS-IP-address : Primary-NBNS-IP-address : Second-NBNS-IP-address : Acl-Number : Idle-data-attribute (time.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l An authentication scheme defines the policy to authenticate all the users of an ISP. Step 6 Run the display domain command to query the information on the domain. Before specifying a scheme. including creating the local RSA key pair. Context l The key size ranges from 512 bits to 2048 bits. you must run the rsa local-key-pair create command.1 Creating the Local RSA Key Pair This operation enables you to create the local RSA key pair.1 Creating the Local RSA Key Pair This operation enables you to create the local RSA key pair. 8. or 2048 bits as required.3 Configuring an SSH User This operation enables you to configure an SSH user. You can query the usage of resources configured on the domain. 1024. display aaa configuration 8. l l Procedure Step 1 Run the rsa local-key-pair create command to create the local RSA key pair. 8. do as follows: huawei(config)#rsa local-key-pair create The key name will be: huawei_Host Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-21 . Before using the SSH service for the first time. If you destroy the SSH server host public key pair and service key pair. By default. it is 512 bits. You can change it to 512. ----End Example To create a local RSA key pair.6.6. 8. you must create the new SSH server host key pair and service key pair.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Table 8-9 Related operations for specifying the authentication scheme To… Delete the specified authentication scheme Query AAA configuration Run the Command… undo authentication-scheme Remarks Delete the specified authentication scheme in domain mode.6.6. Step 2 Run the display rsa local-key-pair public command to query the local RSA key pair. 8.2 Configuring the SSH User Public Key This operation enables you to configure the SSH user public key.6 Configuring SSH This section describes the SSH configuration. configuring the SSH user public key and configuring an SSH user. .++++++ ..... 8-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 8-10 Related operation for creating a local RSA key pair To… Destroy the local RSA key pair Run the Command… rsa local-key-pair destroy 8........ NOTES: If the key modulus is greater than 512...... Input the bits in the modulus[default = 512]:1024 Generating keys................ ..... Confirm to replace them? [y/n]:y The range of public key size is (512 ~ 2048).6................... Configuration Flowchart Figure 8-3 shows the flowchart for configuring the SSH user public key...++++++ ..++++++++ ..2 Configuring the SSH User Public Key This operation enables you to configure the SSH user public key......8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide % RSA keys defined for MA5600_Host already exist... It will take a few minutes...++++++++ huawei(config)#display rsa local-key-pair public ===================================================== Time of Key pair created: 13:39:58 2006/2/10 Key name: huawei_Host Key type: RSA encryption Key ===================================================== Key code: 3047 0240 BF2B1846 14543312 785ABA61 595B1FA6 9B6D2A6D D0C5A771 07FE3692 CDEE3C8D 11EFB290 7247BC5B 6F28BBB0 8F0B9DC0 4247F4F0 0A38A5B3 A7E5BD5F 7330CB1D 0203 010001 ===================================================== Time of Key pair created: 13:40:0 2006/2/10 Key name: huawei_Server Key type: RSA encryption Key ===================================================== Key code: 3067 0260 B4830A71 7974B485 1365431A 0504081E C9D5A8AF 17AE7F6B A7E07227 3260B5DB 722F42F4 B1BD03D8 E6C527F3 B4403736 29E1A954 17AA56F9 50B3857B 21354F07 95F421C7 9468D159 75B72B27 EA79E33E 68C9D35C BF98B56D 9B880598 095EAB0D 0203 010001 Table 8-10 lists the related operation for creating a local RSA key pair. Step 5 Run the peer-public-key end command to quit to global config mode. Step 4 Run the public-key-code end command to quit public key edit mode. Step 3 Input the user public key. ----End Example To paste the conversed user public key in the current system. Step 2 Run the public-key-code begin command to enter public key edit mode. do as follows: huawei(config)#rsa peer-public-key key huawei(config-rsa-public-key)#public-key-code begin huawei(config-rsa-key-code)#30450240 B9FCE18E DA769883 7680F2B7 CE35415A 9AB5E63E huawei(config-rsa-key-code)#FD00ED66 B8B5E954 2B053A82 131B967C 8DDC1176 0746A8BB huawei(config-rsa-key-code)#C30DF3F0 83F6EA5A EF97E26B 783C940F 2791710F 020125 huawei(config-rsa-key-code)#public-key-code end huawei(config-rsa-public-key)#peer-public-key end huawei(config)#display rsa peer-public-key { <cr>|brief<K>|name<K> }: Command: display rsa peer-public-key ===================================== Key name: key ===================================== Key Code: 3045 0240 Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-23 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication Figure 8-3 Flowchart for configuring the SSH user public key Start Enter config-rsa-public-key mode Enter public key eidt mode Input the user public key Quit public key edit mode End Procedure Step 1 Run the rsa peer-public-key command to enter config-rsa-public-key mode. Step 6 Run the display rsa peer-public-key command to query the SSH user public key. and the authentication mode as RSA. all: indicates the password and RSA authentication.8 Configuring the Remote User Authentication SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide B9FCE18E DA769883 7680F2B7 CE35415A 9AB5E63E FD00ED66 B8B5E954 2B053A82 131B967C 8DDC1176 0746A8BB C30DF3F0 83F6EA5A EF97E26B 783C940F 2791710F 0201 25 8. l l l Procedure Step 1 Run the ssh user assign rsa-key command to set the RSA public key of SSH user.6. Context SSH user authentication falls into the following types: l password: indicates the common password authentication mode. do as follows: huawei(config)#ssh user huawei assign rsa-key key huawei(config)#ssh user huawei authentication-type rsa huawei(config)#display ssh user-information { <cr>|string<S><1. It is the default authentication type.0.3 Configuring an SSH User This operation enables you to configure an SSH user. password-publickey: indicates the password and public key authentication. ----End Example To set the RSA public key of the SSH user huawei as key. Table 8-11 Related operations for configuring an SSH user To… Delete the RSA public key of an SSH user 8-24 Run the Command… undo ssh user assign rsa-key Huawei Technologies Proprietary Issue 04 (2007-11-30) . which is applicable for SSHv2. Step 2 Run the ssh user authentication-type rsa command to set the RSA authentication mode of SSH user.16> }: Command: display ssh user-information Username Authentication-type User-public-key-name huawei rsa key Service-type stelnet Related Operation Table 8-11 lists the related operations for configuring an SSH user. rsa: indicates the RSA public key authentication. Step 3 Run the display ssh user-information command to query the authentication mode of SSH user. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 Configuring the Remote User Authentication To… Set the SSH user authentication mode Run the Command… ssh user authentication-type Issue 04 (2007-11-30) Huawei Technologies Proprietary 8-25 . . refer to "25. 9.6 Creating a VLAN This operation enables you to create a VLAN or VLANs of the same type in batches. 9.3 Configuration Example of the Subtended Network Through the SCU Board" or "25. 9.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLAN This operation enables you to set the inner and outer Ethernet protocol type of a stacking VLAN supports. 9.4 Configuration Example of Subtending Device Through the ETHA Board.1 Overview This section describes VLAN technology. 9. 9.5 Configuration Example of the Super VLAN This example shows how to configure the super VLAN to enable users whose services are isolated at layer 2 to communicate with each other at layer 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN 9 About This Chapter Configuring the VLAN This chapter describes the classification of VLANs supported by the MA5600 and how to configure a VLAN. types and attributes of VLAN supported by the MA5600.3 Configuration Example of a Smart VLAN This example shows how to configure a smart VLAN to realize ADSL2+ access.10 Adding an Upstream Port to a VLAN Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-1 . 9.2 Configuration Example of a Standard VLAN This example shows how to subtend two MA5600 devices through a standard VLAN." 9.4 Configuration Example of a MUX VLAN This example shows how to configure a MUX VLAN to realize ADSL2+ access. stacking or common. 9. For details. 9. as well as count.7 Configuring the VLAN Attribute This operation enables you to configure the VLAN attribute to QinQ.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN This operation enables you to set the inner VLAN priority of the service port in a stacking VLAN. 11 Adding a Service Port to a VLAN This operation enables you to add a service port to a VLAN. To run the multi-service-port from-vlan command to add multiple service ports on one or multiple ADSL2+/SHDSL boards to different MUX VLANs at a time. 9.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to add an upstream port to a VLAN. 9.13 Setting the Description of a Service Port This operation enables you to set the description of a service port.12 Adding Service Ports in Batches This operation enables you to add service ports in batches: To run the multi-service-port vlan command to add multiple service ports on an asymmetric digital subscriber line 2 plus (ADSL2+)/single-pair high-speed digital subscriber line (SHDSL) board to a smart VLAN or a standard VLAN. 9. 9-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . For details on the VLAN feature. l l Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-3 . as well as count. Applied in the network equipment management. and layer 2 interconnection between service ports. The service ports of the same VLANs on different service boards can realize the layer 2 interconnection. An Ethernet port in a standard VLAN is isolated from an Ethernet port in another standard VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN 9.1q in 1999. Service Specification The MA5600 supports up to 4000 VLANs. aiming at standardizing VLAN implementations. Service Description Virtual local area network (VLAN) is a technology used to form virtual workgroups by logically grouping the devices of a LAN. types and attributes of VLAN supported by the MA5600. refer to the chapter "VLAN" in the Feature Description VLAN. Ethernet ports in a standard VLAN can communicate with each other. The Institute of Electrical and Electronics Engineers (IEEE) issued draft IEEE 802. The standard VLAN with the common attribute can be configured as the service virtual port of the AIUG board to work with the MPLS subboard and realize the ATM uplink of the MPLS service. The MA5600 supports the following types of VLANs: l l l l Standard VLAN Smart VLAN MUX VLAN Super VLAN Table 9-1 lists the VLAN types and applications. Table 9-1 VLAN types and applications Type Standard VLAN Description l Application Used for Ethernet ports and service ports.1 Overview This section describes VLAN technology. subtending. The standard VLAN with the common attribute can also be configured as the service virtual port of the AIUG board for the ATM uplink of the MPLS service after mpls vlan is enabled. Table 9-2 VLAN attributes VLAN attribute Common Application A VLAN with this attribute can be used as a layer 2 VLAN. Traffic streams of different VLANs are isolated from each other. You can create a layer 3 virtual interface for it if necessary. The following lists the attributes of VLANs: l l l Common QinQ Stacking Table 9-2 lists the attributes of VLANs. A sub VLAN can be a smart VLAN or a MUX VLAN. A MUX VLAN can contain only one service port. a MUX VLAN can uniquely identify an access user. A super VLAN is a layer 3 based VLAN. A smart VLAN can serve multiple xDSL users. So. 9-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . It consists of multiple sub VLANs. such as residential areas to provide access to the Internet.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Type Smart VLAN Description A smart VLAN can contain multiple xDSL service ports. One-to-one mapping can be set up between a MUX VLAN and an access user. MUX VLAN Applied when users are distinguished by VLANs. Traffic streams of different VLANs are also isolated from each other. Super VLAN Applied to save IP addresses resources. Traffic streams of these ports in a smart VLAN are isolated from each other. thus saving VLAN resources. Application Applied to xDSL access. see the chapter "29 Configuring the VLAN Stacking Wholesale Service.3 Configuration Example of a Smart VLAN This example shows how to configure a smart VLAN to realize ADSL2+ access. For details about the QinQ VLAN. see the chapter "30 Configuring the QinQ VLAN Leased Line Service.2 Configuration Example of a Standard VLAN This example shows how to subtend two MA5600 devices through a standard VLAN. For details about the stacking VLAN. With this attribute. When standard VLANs are used to realize the interconnection between service ports. Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-5 . thus increasing the number of access users. For details.4 Configuration Example of Subtending Device Through the ETHA Board. the packet contains two VLAN tags: inner VLAN tag and outer VLAN tag allocated by the MA5600. Networking Figure 9-1 shows a sample network for configuring a smart VLAN." 9. set the attribute of the standard VLANs as QinQ." 9." Stacking When a packet is added with the tag of a VLAN with Stacking attribute.3 Configuration Example of the Subtended Network Through the SCU Board" or "25. refer to "25. The upper layer network working in layer 2 mode can forward packets based on the outer "VLAN+MAC" to provide the multi-ISP wholesale service. the upper layer BRAS can authenticate users based on the double VLAN tags. a layer 2 VPN tunnel can be set up to transparently transmit service data among private networks.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN VLAN attribute QinQ Application When a packet is added with the tag of a VLAN with QinQ attribute. the packet contains two VLAN tags: l l Inner VLAN tag from the private network Outer VLAN tag from the MA5600 Through the outer VLAN tag. The VPI/VCI of the modem is 0/35. All boards of the MA5600 are normal. Table 9-3 Data plan for configuring a smart VLAN Item ADSL2+ board Data ADSL2+ port: 0/2/0 VPI/VCI: 0/35 ADSL2+ board ADSL2+ port: 0/3/0 VPI/VCI: 0/35 Smart VLAN Upstream port VLAN ID: 10 0/7/0 Prerequisite l l l The network devices and lines are normal.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 9-1 Sample network for configuring a smart VLAN Router Internet A A D D G G E E CON ETH MON GE0/7/0 SCU MA5600 Modem Modem PC1 PC2 Data Plan Table 9-3 lists the data plan for configuring a smart VLAN. Configuration Flowchart Figure 9-2 shows the flowchart for configuring a smart VLAN. 9-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 9. huawei(config)#port vlan 10 0/7 0 Step 3 Add a service port to the VLAN. Start Create a smart VLAN Add the upstream port Add the virtual port Save the data End Procedure Step 1 Create a MUX VLAN.4 Configuration Example of a MUX VLAN This example shows how to configure a MUX VLAN to realize ADSL2+ access. Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-7 . The service port uses the default traffic profile 5. huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#service-port vlan 10 adsl 0/3/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 Step 4 Save the data.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Figure 9-2 Flowchart for configuring a smart VLAN. huawei#save ----End Result Both PC 1 and PC 2 can access to the IP network. huawei(config)#vlan 10 smart Step 2 Add an upstream port to the VLAN. Networking Figure 9-3 shows a sample network for configuring a MUX VLAN. but they cannot ping each other. 9-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . All the boards of the MA5600 are normal. Table 9-4 Data plan for configuring a MUX VLAN Item ADSL2+ board Data ADSL2+ port: 0/2/0 VPI/VCI: 0/35 VLAN ID: 20 ADSL2+ board ADSL2+ port: 0/2/1 VPI/VCI: 0/35 VLAN ID: 21 Upstream port 0/7/0 Prerequisite l l l The network devices and lines are normal.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 9-3 Sample network for configuring a MUX VLAN Router Internet A D G E CON ETH MON GE0/7/0 SCU MA5600 Modem Modem PC1 PC2 Data Plan Table 9-4 lists the data plan for configuring a MUX VLAN. The VPI/VCI of the modem is 0/35. Configuration Flowchart Figure 9-4 shows the flowchart for configuring a MUX VLAN. Networking Figure 9-5 shows a sample network for configuring a super VLAN. The service port uses the default traffic profile 5. huawei(config)#service-port vlan 20 adsl 0/2/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#service-port vlan 21 adsl 0/2/1 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 Step 4 Save the data. huawei(config)#port vlan 20 0/7 0 huawei(config)#port vlan 21 0/7 0 Step 3 Add a service port to the VLAN.5 Configuration Example of the Super VLAN This example shows how to configure the super VLAN to enable users whose services are isolated at layer 2 to communicate with each other at layer 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Figure 9-4 Flowchart for configuring a MUX VLAN Start Create a MUX VLAN Add the upstream port Add the virtual port Save the data End Procedure Step 1 Create a MUX VLAN. PC 1 can access the Internet. 9. huawei(config)#vlan 20 mux huawei(config)#vlan 21 mux Step 2 Add an upstream port to the VLAN. Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-9 . huawei#save ----End Result After the configuration. 254/24 Standard VLAN VLAN ID: 30 IP address of layer 3 interface: 10.0.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 9-5 Sample network for configuring a super VLAN Router Internet A A D D G G E E CON ETH MON GE0/7/0 SCU MA5600 Modem Modem PC1 PC2 Data Plan Table 9-5 lists the data plan for configuring a super VLAN.0.1. Table 9-5 Data plan for configuring a super VLAN Item ADSL2+ board Data ADSL2+ port: 0/2/0 VPI/VCI: 0/35 Sub VLAN ID: 20 ADSL2+ board ADSL2+ port: 0/3/0 VPI/VCI: 0/35 VLAN ID: 21 PC2 GPON port: GEM Port ID: 129 Upstream VLAN: 21 User-side VLAN: 101 Super VLAN VLAN ID: 100 IP address of layer 3 interface: 10.0.254/24 Upstream port: 0/7/0 9-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . A super VLAN cannot contain physical ports. A sub VLAN contains only physical ports. The VLAN can be a smart VLAN or a MUX VLAN. In this procedure. All the service boards are normal. The sub VLAN must exist already. Whether the layer 3 interface is up depends on whether the physical port of the up state exists in the contained sub VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Prerequisite l l l l l The network devices and lines are normal. l l Configuration Flowchart Figure 9-6 shows the flowchart for configuring a super VLAN. Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-11 . and the layer 3 interface cannot be established on the sub VLAN. The VPI/VCI of the modem is 0/35. PC 1 and PC 2 can obtain their IP addresses dynamically in the DHCP mode. it is a MUX VLAN. and the layer 3 interface can be established on the super VLAN. huawei(config)#vlan 100 super Step 2 Create sub VLANs and add them to the super VLAN. 9-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#vlan 20 mux huawei(config)#vlan 21 mux huawei(config)#port vlan 20 0/7 0 huawei(config)#port vlan 21 0/7 0 huawei(config)#supervlan 100 subvlan 20 huawei(config)#supervlan 100 subvlan 21 Step 3 Configure the service port of the sub VLAN.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 9-6 Flowchart for configuring a super VLAN Start Create a super VLAN Create sub VLANs and add them to the super VLAN Configure the service port of the sub VLAN Enable the global ARP Proxy Configure the layer 3 interface of the super VLAN Enable ARP Proxy for the layer 3 interface of the super VLAN Create the standard VLAN and add the upstream port to the VLAN Add the layer 3 interface of the standard VLAN End Procedure Step 1 Create a super VLAN. The service port uses the default traffic profile 5. 0. 9. both PC 1 and PC 2 can communicate with each other and access the Internet. huawei(config)#vlan 30 standard huawei(config)#port vlan 30 0/7 0 Step 8 Add the layer 3 interface of the standard VLAN. the service ports belonging to the same standard VLAN cannot be created on the two boards simultaneously. huawei(config-if-Vlanif30)#quit huawei(config)#save ----End Result After the configuration. Prerequisite The ID of the VLAN to be added does not exist in the system.6 Creating a VLAN This operation enables you to create a VLAN or VLANs of the same type in batches. Context l If the service ports belonging to the same smart VLAN are created on two boards.254 24 NOTE The IP address of the layer 3 interface of the super VLAN must be in the same subnet as the IP address obtained by the PC.254 24 Step 9 Save the data. The MA5600 supports up to 4000 VLANs and some VLANs are reserved for the system. huawei(config)#interface vlanif 30 huawei(config-if-Vlanif30)#ip address 10. Huawei Technologies Proprietary 9-13 l l Issue 04 (2007-11-30) .0. huawei(config-if-Vlanif100)#arp proxy enable Step 7 Create the standard VLAN and add the upstream port to the VLAN. Step 6 Enable ARP Proxy for the layer 3 interface of the super VLAN. huawei(config)#arp proxy enable Step 5 Configure the layer 3 interface of the super VLAN. the service ports belonging to the same smart VLAN cannot be created on the two boards simultaneously.1. huawei(config)#interface vlanif 100 huawei(config-if-Vlanif100)#ip address 10.0. If the service ports belonging to the same standard VLAN are created on two boards.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN huawei(config)#service-port vlan 20 adsl 0/2/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#service-port vlan 21 adsl 0/3/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 Step 4 Enable the global ARP Proxy. do as follows: huawei(config)#vlan 1000 to 1009 standard It will take several minutes.standard. and console may be timeout.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the vlan command to add a VLAN. 9-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Run the display vlan command to query VLAN information.smart. do as follows: huawei(config)#vlan 2 standard huawei(config)#display vlan 2 { <cr>|to<K> }: Command: display vlan 2 VLAN ID: 2 VLAN type: standard VLAN attribute: common Standard port number: 0 Service virtual port number: 0 To add 10 standard VLANs in batches with VLAN IDs ranging from 1000 to 1009. ----End To add a standard VLAN with the VLAN IDs of 2.super>|vlanattr<K> }: Command: display vlan all --------------------------------------------------------VLAN Type Attribute STND-Port NUM SERV-Port NUM --------------------------------------------------------1 MUX common 8 0 2 standard common 0 0 1000 standard common 0 0 1001 standard common 0 0 1002 standard common 0 0 1003 standard common 0 0 1004 standard common 0 0 1005 standard common 0 0 1006 standard common 0 0 1007 standard common 0 0 1008 standard common 0 0 1009 standard common 0 0 --------------------------------------------------------Total: 12 Note : STND-Port--standard port. SERV-Port--service virtual port Related Operation Table 9-6 lists the related operations for creating a VLAN. please use command idle-timeout to set time limit Are you sure to add VLANs? (y/n)[n]:y huawei#display vlan all { <cr>|vlantype<E><mux. There is no sub VLAN in the super VLAN. make sure: l There is no upstream port. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-15 . but not to stacking. The attribute of a VLAN cannot be changed from QinQ to stacking or from stacking to QinQ directly. ----End Example To configure the attribute of smart VLAN 10 to QinQ.7 Configuring the VLAN Attribute This operation enables you to configure the VLAN attribute to QinQ. l l l Procedure Step 1 Run the vlan attrib command to configure the VLAN attribute. When the attribute of a smart VLAN or a MUX VLAN is common. The VLAN is not the default VLAN (VLAN 1) l l Display VLAN count Display VLAN statistics Configure the start number of the reserved VLANs display vlan number display statistics vlan vlan reserve The traffic of VLAN service ports is measured. The attribute of a standard VLAN can be configured to QinQ. you can configure the attribute of the VLAN to QinQ or stacking. The attribute of a super VLAN cannot be configured to QinQ or stacking. L3 interface. Step 2 Run the display vlan command to display the VLAN attribute.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Table 9-6 Related operations for creating a VLAN To… Delete a VLAN Run the Command… undo vlan Remarks To delete a VLAN. - 9. or service port in the VLAN. stacking or common. Prerequisite The VLAN with its attribute to be configured already exists. Context l l The attribute of default VLAN1 cannot be configured to QinQ or stacking. That is.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#vlan attrib 10 q-in-q huawei(config)#display vlan 10 { <cr>|to<K> }: Command: display vlan 10 VLAN ID: 10 VLAN type: smart VLAN type: smart VLAN attribute: QinQ VLAN description: -----------------------------F/S /P Native VLAN State -----------------------------0/7/0 2 down -----------------------------Standard port number: 1 Service virtual port number: 0 Related Operation Table 9-7 lists the related operation for configuring the VLAN attribute.. Context l By default. run the stacking outer-ethertype command to set the outer Ethernet protocol type of a stacking VLAN. the inner and outer Ethernet protocol type of a stacking VLAN is 0x8100.1q VLAN Tag. Restore the VLAN attribute Run the Command… undo vlan attrib Remarks By default.8 Setting the Inner and Outer Ethernet Protocols Type of a Stacking VLAN This operation enables you to set the inner and outer Ethernet protocol type of a stacking VLAN supports. The protocol type to be set cannot be set as a value for other protocols. the Ethernet frame has a 802. 9.. run the display stacking outer-ethertype command to display the outer Ethernet protocol type of a stacking VLAN. ----End 9-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . such as 0x0800 (IP packets) or 0x0806 (ARP packets). the VLAN attribute is common. Step 2 Run the display stacking inner-ethertype command to display the inner Ethernet protocol type of a stacking VLAN. l Procedure Step 1 Run the stacking inner-ethertype command to set the inner Ethernet protocol type of a stacking VLAN. Table 9-7 Related operation for configuring the VLAN attribute To. ----End Example To set the inner VLAN priority of the service port in stacking VLAN 4000 as 5. Procedure Step 1 Run the port vlan command to add an upstream port. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-17 . Context The upstream port of a VLAN must be an Ethernet port. do as follows: huawei(config)#stacking outer-ethertype 0x8100 huawei(config)#display stacking outer-ethertype The outer Ethernet type in the system: 0x8100 9.10 Adding an Upstream Port to a VLAN This operation enables you to add an upstream port to a VLAN. do as follows: huawei(config)#stacking inner-ethertype 0x8100 huawei(config)#display stacking inner-ethertype The inner Ethernet type in the system: 0x8100 To set the outer Ethernet protocol type the stacking VLAN supports as 0x8100.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Example To set the inner Ethernet protocol type the stacking VLAN supports as 0x8100.9 Setting the Inner VLAN Priority of the Service Port in a Stacking VLAN This operation enables you to set the inner VLAN priority of the service port in a stacking VLAN. Prerequisite The VLAN to which an upstream port is to be added already exists. do as follows: huawei(config)#stacking inner-priority vlan 4000 5 9. Step 2 Run the display vlan command to query the upstream port number. ----End Example To add upstream port 0/7/0 to VLAN 10. Procedure Run the stacking inner-priority command to set the inner VLAN priority of the service port. 9 Configuring the VLAN huawei(config)#port vlan 10 0/7 0 huawei(config)#display vlan 10 {<cr>|to<K>}: Command: display vlan 10 VLAN ID: 10 VLAN type: MUX VLAN attribute: stacking -----------------------------F/S /P Native VLAN State -----------------------------0/7/0 1 up -----------------------------Standard port number: 1 Service virtual port number: 0 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 9-8 lists the related operation for adding an upstream port to a VLAN.11 Adding a Service Port to a VLAN This operation enables you to add a service port to a VLAN. If the service ports of the same smart VLAN are created on two service boards. l l The VLAN. already exists. the MA5600supports the traffic classification. If the VPI/VCI of the service port is auto-sensing. Context l l l An xDSL port can support up to eight service ports. When the service flow is classified by user VLAN. only one service port can be created on a port. The SHDSL service port supports only the ATM and PTM port encapsulation modes. The suitable traffic item already exists. That technology can be based on user VLAN. to which the service port is to be added. the service ports of the same standard VLAN cannot be created on the two service boards. service encapsulation mode on the user side and the priority of packets on the user side. and the VPIs/VCIs of the service ports are different. Huawei Technologies Proprietary Issue 04 (2007-11-30) l l l 9-18 . The VPI and VCI values of the service port must be the same as that of the xDSL modem connected to the port. The smart VLAN supports multiple service ports on the same port. the traffic classification can be performed on the untagged packet (the data packet without VLAN tag). Table 9-8 Related operation for adding an upstream port to a VLAN To… Delete the upstream port of a VLAN Run the Command… undo port vlan 9. When the service port needs to carry multiple services. The port is bound with an IP address or a MAC address. such as IMA group etc. l l l Display VLAN information Display VLAN statistics display vlan display statistics vlan - Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-19 . S--Slot. Table 9-9 Related operations for adding a service port to a VLAN To… Delete a service port Run the Command… undo service-port Remarks The service port cannot be deleted in the following cases:  l The port is encapsulated in PPPoA. The port serves for a BTV user. IPoA or Auto mode. ----End Example To add service port 0/2/0 with the VPI/VCI of 0/35 and the traffic profile of 5 to VLAN 10. do as follows: huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#display service-port port 0/2/0 { <cr>|sort-by<K>|autosense<K> }: Command: display service-port port 0/2/0 ---------------------------------------------------------------------------VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE LABEL PRI ID ATTR TYPE PARA ---------------------------------------------------------------------------10 common adl 0/2/0 0 35 vlan 100 6 6 up ---------------------------------------------------------------------------Total : 1 (Up/Down : 1/0) Note : F--Frame.) top--TDM over packet Related Operation Table 9-9 lists the related operations for adding a service port to a VLAN. Step 2 Run the display service-port vlan command to query service ports. P--Port(or virtual port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN Procedure Step 1 Run the service-port vlan command to add a service port. The port is configured with a static MAC address. l l l l l l Procedure Step 1 Run the multi-service-port vlan or the multi-service-port from-vlan command to add service ports. If the service ports of the same smart VLAN are created on two service boards.12 Adding Service Ports in Batches This operation enables you to add service ports in batches: To run the multi-service-port vlan command to add multiple service ports on an asymmetric digital subscriber line 2 plus (ADSL2+)/single-pair high-speed digital subscriber line (SHDSL) board to a smart VLAN or a standard VLAN. do as follows: huawei(config)#multi-service-port vlan 10 port 0/2 0-3 vpi 0 vci 35 rx-cttr 5 txcttr 5 huawei(config)#display service-port vlan 10 ------------------------------------------------------------------------VLAN ID VLAN-ATTR PORT-TYPE F/S /P VPI VCI RX TX STATE LABEL ------------------------------------------------------------------------10 common adl 0/2/0 0 35 2 2 up 10 common adl 0/2/1 0 35 2 2 up 10 common adl 0/2/2 0 35 2 2 up 10 common adl 0/2/3 0 35 2 2 up ------------------------------------------------------------------------Total : 4 (Up/Down : 4/0) Note : F--Frame. port 2 to VLAN 3. VLAN ID etc. An xDSL port can be configured with up to eight service ports. Context l The VPI/VCI of the service port must be the same as that of the xDSL modem connected to the port. and the VPIs/VCIs of the service ports are different. ports to MUX VLANs (to add port 1 to VLAN 2. ----End Example To add service ports 0/2/0-0/2/3 to smart VLAN 10.). The SHDSL service port supports only the ATM and PTM port encapsulation modes. The VLAN(s) to which the service ports are to be added already exist. such as IMA GROUP. the service ports of the same standard VLAN cannot be created on the two service boards. The smart VLAN supports multiple service ports on the same port. do as follows: huawei(config)#multi-service-port from-vlan 2 board 1-18 vpi 0 vci 35 rx-cttr 5 txcttr 5 9-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Run the display service-port vlan command to query service ports. P--Port(or Virtual Port. The suitable traffic item already exists. and so on). S--Slot. SHDSL.9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9. only one service port can be created on a port. If the VPI/VCI of the service port is auto-sensing. the VPI is access-end VLAN ID in vdsl port To add all ADSL2+. To run the multi-service-port from-vlan command to add multiple service ports on one or multiple ADSL2+/SHDSL boards to different MUX VLANs at a time. or VDSL. The port serves for a BTV user.. such as IMA group etc. The port is bound with the IP address or MAC address.. undo service-port Remarks The service port cannot be deleted in the following cases: l The port is encapsulated in PPPoA. l l l Display VLAN traffic statistics display statistics vlan - Issue 04 (2007-11-30) Huawei Technologies Proprietary 9-21 .. S--Slot. IPoA or Auto mode..act means activate and deact means deactivate. and console may timeout. the reason is that the service port to be added is already added to the mapping VLAN.) top--TDM over packet.dn is abbreviation of down. do as follows: huawei(config)#multi-service-port vlan 6 port 0/5 10-12 vpi 0 vci 35 rx-cttr 5 txcttr 5 It will take several minutes. Creating end: The number of total service virtual port which need be created: The number of total service virtual port which have been created: huawei(config)#display service-port vlan 6 { <cr>|sort-by<K>|autosense<K> }: Command: display service-port vlan 6 ----------------------------------------------------------------------------VLAN VLAN PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE LABEL PRI ID ATTR TYPE PARA ----------------------------------------------------------------------------6 QinQ shl 0/5 /10 0 35 5 5 act/up 6 QinQ shl 0/5 /11 0 35 5 5 act/up 6 QinQ shl 0/5 /12 0 35 5 5 act/up ----------------------------------------------------------------------------Total : 3 (Up/Down : 3/0) Note : F--Frame. NOTE 3 3 If adding a service port fails. The port is configured with a static MAC address. Table 9-10 Related operations for adding service ports in batches To… Delete a service port Run the Command.The characters precede / in the STATE column indicate the Admin-Status and characters behind the / indicate the Oper-Status of the service port. please use command idle -timeout to set time limit Are you sure to create service virtual port(s)? (y/n)[n]:y The number of total board in this operation: 1 The number of total service virtual port in this operation: 3 Creating start. P--Port(or virtual port. Related Operation Table 9-10 lists the related operations for adding service ports in batches.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9 Configuring the VLAN To add service ports 0/5/10-0/5/12 to standard VLAN 6. 9 Configuring the VLAN SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 9. Procedure Step 1 Run the service-port desc command to set the description of a service port.13 Setting the Description of a Service Port This operation enables you to set the description of a service port. ----End Example To set the description of service port 0/2/0 with VPI/VCI of 0/35. do as follows: huawei(config)#service-port desc 0/2/0 vpi 0 vci 35 description user0/2/0 huawei(config)#display service-port desc 0/2/0 {<cr>|autosense<K>|vpi<K>|user-vlan<K>|user-encap<K>}: Command: display service-port desc 0/2/0 -----------------------------------------------------------------------------PORT : adl F/S/P : 0/2/0 VPI : 0 VCI : 35 FLOWTYPE : FLOWPARA : DESCRIPTION : user0/2/0 ------------------------------------------------------------------------------ Related Operation Table 9-11 lists the related operation for setting the description of a service port. Step 2 Run the display service-port desc command to query the description of the service port. Table 9-11 Related operation for setting the description of a service port To… Delete the description of a service port Run the Command… undo service-port desc 9-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 11 Configuring the Gateway of a DHCP Option60 Domain This operation enables you to configure the gateway of a DHCP option60 domain.7 Setting DHCP Relay Mode This operation enables you to set DHCP relay mode. 10. 10. 10. 10.4 Configuration Example of DHCP MAC Address Segment Mode This example shows how to enable the PC to obtain the IP address automatically in DHCP MAC address segment mode. 10.8 Binding a DHCP Server Group with a VLAN Interface This operation enables you to bind a DHCP server group with a VLAN interface.3 Configuration Example of DHCP Option60 Mode This example shows how to enable PCs to obtain IP addresses automatically in DHCP option60 mode.10 Binding a DHCP Server Group with a DHCP Option60 Domain This operation enables you to bind a DHCP server group with a DHCP option60 domain.6 Setting Working Mode of a DHCP Server This operation enables you to set working mode of a DHCP server. 10. 10.5 Creating a DHCP Server Group This operation enables you to create a DHCP server group.9 Creating an Option60 Domain This operation enables you to create an option60 domain. 10. 10.2 Configuration Example of DHCP Standard Mode This example shows how to configure DHCP standard mode to obtain the IP address automatically.1 Overview This section describes the DHCP relay function and its application to the MA5600.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay 10 About This Chapter Configuring the DHCP Relay This chapter describes the principles of the DHCP relay function supported by the MA5600 and how to configure the DHCP relay function. 10. 10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-1 . 10.15 Configuring the Gateway of a DHCP MAC Address Segment This operation enables you to configure the gateway of a DHCP MAC address segment.14 Binding a DHCP Server Group with a DHCP MAC Address Segment This operation enables you to bind a DHCP server group with a DHCP MAC address segment. 10.12 Creating a DHCP MAC Address Segment This operation enables you to create a DHCP MAC address segment.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10.13 Setting the Range of a DHCP MAC Address Segment This operation enables you to set the range of a DHCP MAC address segment. 10-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 10. The DHCP packets can be relayed to the destination DHCP server (or client) across network segments. refer to the chapter "DHCP Relay" in the Feature Description. NOTE For the configuration of the DHCP Option82. refer to "19. In this way. DHCP adopts IP address renting management and IP address time division multiplexing." The MA5600 supports the following DHCP relay working modes: l l Standard mode Option60 mode Huawei Technologies Proprietary 10-3 Issue 04 (2007-11-30) . Initially.6 Setting the Maximum Length of DHCP Packets. greatly saving IP address resources. Figure 10-1 MA5600 DHCP relay LAN DHCP client Internet DHCP client MA5600 Switch DHCP client DHCP client DHCP server For details on DHCP. each subnet shall be equipped with a DHCP server. the DHCP clients on different networks can use the same DHCP server.1 Overview This section describes the DHCP relay function and its application to the MA5600. The DHCP relay serves as relay between the DHCP client and the server located on different subnets.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay 10. Figure 10-1 shows the principle of DHCP relay. That is obviously uneconomical. If the early DHCP is used to dynamically configure the host. The introduction of DHCP relay solves the mentioned problem. the DHCP was only suitable for applications where the DHCP client and server were located on the same subnet and could not work across a network segment. This is economical and convenient for centralized management. Service Description The Dynamic Host Configuration Protocol (DHCP) works in the client/server mode. The DHCP client can dynamically request configuration data and the DHCP server can provide the data for the client conveniently. Service Specification The MA5600 supports layer 2 and layer 3 DHCP relay as well as DHCP Option82 to guarantee DHCP security.5 Enabling the DHCP Option82 Function" and "19. 1.1.1. There shall be routing between the device and the DHCP server.2 In this network: l l DHCP server group 1 assigns IP addresses for the two PCs in VLAN 2. Figure 10-2 Sample network for configuring DHCP standard mode 10.2.1.1.2 DHCP server group 2 10-4 Remarks Issue 04 (2007-11-30) Primary IP address: 10.1.1.1/24 Secondary IP address: 10.1. Data Plan Table 10-1 lists the data plan for configuring DHCP standard mode.1.2 Configuration Example of DHCP Standard Mode This example shows how to configure DHCP standard mode to obtain the IP address automatically. DHCP server group 2 assigns IP addresses for the two PCs in VLAN 3.1/24 Huawei Technologies Proprietary .1. Networking Figure 10-2 shows a sample network for configuring DHCP standard mode.10 Configuring the DHCP Relay l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MAC address segment mode 10.1 VLAN 3 MA5600 DHCP Server group 2 10.1 DHCP Server group 1 VLAN 2 10.2.1. Prerequisite The primary IP address of the layer 3 interface of VLAN 2 shall be in the same network segment as that of the upper layer router.2 IP network 10.2. Table 10-1 Data plan for configuring DHCP standard mode Item DHCP server group 1 Data Primary IP address: 10. 2.2/24 0/7/0 0/2/0，0/2/1 Configuration Flowchart NOTE The configuration on VLAN 3 is the same as that on VLAN 2.2. Figure 10-3 Flowchart for configuring DHCP standard mode Start Select DHCP Relay mode Add aDHCP server group Add DHCP server group Set DHCP server mode (Optional) Add the upstream port and service port to the VLAN Configure the VLAN layer 3 interface Bind the port with a DHCP server group End Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-5 .2.1/24 Layer 3 IP address: 2.1. Figure 10-3 shows the flowchart for configuring DHCP standard mode.2.2/24 Remarks VLAN 2 binds with DHCP server group 1. This example only shows how to configure PCs of VLAN 2 to obtain IP addresses. VLAN 3 binds with DHCP server group 2.2.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Item Data Secondary IP address: 10. - VLAN 2 VLAN 3 Upstream port Service ports Layer 3 IP address: 2. 1 10. refer to "10.1 24 Step 6 Bind the interface with the DHCP server group.2. huawei(config-if-vlanif2)#quit huawei(config)#save ----End Result The PCs can obtain IP addresses dynamically. Prerequisite The primary IP address of the layer 3 of VLAN 2 shall be in the same network segment as that of the upper layer router.2 Step 3 Set the working mode of the DHCP server. 10." Step 4 Configure the VLAN upstream port and the service port. There shall be routing between the device and the DHCP server. NOTE For details on setting working mode of the DHCP server. The default load-sharing mode is applied and no configuration is needed. huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 5 Configure the IP address of the layer 3 interface. huawei(config)#dhcp-server 1 ip 10. 10-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Select the DHCP relay mode.1.2.1. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 2.3 Configuration Example of DHCP Option60 Mode This example shows how to enable PCs to obtain IP addresses automatically in DHCP option60 mode. huawei(config-if-vlanif2)#dhcp-server 1 Step 7 Save the data.1.6 Setting Working Mode of a DHCP Server. huawei(config)#dhcp mode layer-3 standard Step 2 Add a DHCP server group.1. Networking Figure 10-4 shows a sample network for configuring DHCP option60 mode. 10.10.1/24 Remarks The gateway IP address is the same as the IP address of the layer 3 interface. Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-7 .11 MA5600 Data Plan Table 10-2 lists the data plan for configuring DHCP option60 mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Figure 10-4 Sample network for configuring DHCP option60 mode 10.10.2. Context l The name of option60 domain must be configured according to the type of connected terminal device. the domain name must be msft.2. If Windows 98/2000/XP/NT series runs on the DHCP client.10.10.1.10/24 Secondary IP address: 10.10 VLAN 2 IP DHCP server group 2 10. The system selects the domain based on the option60 field in the packet. If there is no appropriate domain matched. l l Configuration Flowchart Figure 10-5 shows the flowchart for configuring the DHCP option60 mode.1/24 0/7/0 0/2/0 Domain: msft DHCP server group: DHCP server group 2 Gateway IP address: 10. Table 10-2 Data plan for configuring DHCP option60 mode Item DHCP server group 2 Data Primary IP address: 10.10.10.11/24 VLAN 2 Upstream port Service ports Domain Layer 3 interface IP address: 10.10. the default domain is used.1. huawei(config)#dhcp domain msft Step 5 Bind the domain with the DHCP server group. huawei(config)#dhcp-server 2 ip 10. huawei(config)#dhcp mode layer-3 option60 Step 2 Add a DHCP server group." Step 4 Define an option60 domain. refer to "10.10.10.6 Setting Working Mode of a DHCP Server.10.10. huawei(config-dhcp-domain-msft)#dhcp-server 2 10-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The default load-sharing mode is applied and no configuration is needed.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 10-5 Flowchart for configuring the DHCP option60 mode Start Select DHCP Relay mode Add a DHCP server group Set DHCP server mode Define a domain Bind the domain with the DHCP server group Add the upstream port and service port to the VLAN Configure the VLAN layer 3 interface Configure the domain gateway End Procedure Step 1 Select the DHCP relay mode.11 Step 3 Set the working mode of the DHCP server.10 10. NOTE For details on setting working mode of the DHCP server. 10. Networking Figure 10-6 shows a sample network for configuring MAC address segment mode. Figure 10-6 Sample network for configuring MAC address segment mode 10.10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-9 .10 VLAN 2 IP DHCP server group 2 10.4 Configuration Example of DHCP MAC Address Segment Mode This example shows how to enable the PC to obtain the IP address automatically in DHCP MAC address segment mode.2.1. There shall be routing between the device and the DHCP server.10.10.1 24 Step 8 Configure the domain gateway.11 MA5600 Data Plan Table 10-3 lists the data plan for configuring MAC address segment mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Step 6 Configure the VLAN upstream port and the service port. huawei(config-dhcp-domain-msft)#quit huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 7 Configure the IP address of VLAN layer 3 interface. huawei(config-if-vlanif2)#quit huawei(config)#save ----End Result The PCs can obtain IP addresses dynamically.1 Step 9 Save the data. 10. Prerequisite The primary IP address of the layer 3 interface of VLAN 2 shall be in the same network segment as that of the upper layer router.1.2. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 10. huawei(config-if-vlanif2)#dhcp domain msft gateway 10. 2.10.10.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 10-3 Data plan for configuring MAC address segment mode Function DHCP server group 2 Data Primary IP address: 10. 10-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10.2.1.1.1 The gateway IP address is the same as the IP address of the layer 3 interface.11/24 VLAN 2 Upstream port Service port MAC address segment Layer 3 interface IP address: 10.1/24 0/7/0 0/2/0 MAC address segment name: huawei Start range: 0000-0000-0001 End range: 0000-0000-0100 Gateway IP address: 10.10.10/24 Secondary IP address: 10. DHCP server group: DHCP server group 2 PC MAC address: 0000-0000-0010 Configuration Flowchart Figure 10-7 shows the flowchart for configuring MAC address segment mode. 10. huawei(config)#dhcp mode layer-3 mac-range Step 2 Create a DHCP server. The default load-sharing mode is applied and no configuration is needed.10. refer to "10." Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-11 .10.6 Setting Working Mode of a DHCP Server. NOTE For details of setting working mode of the DHCP server.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Figure 10-7 Flowchart for configuring MAC address segment mode Start Select DHCP Relay mode Add a DHCP server group Set DHCP server group mode Specify MAC address segment Specify MAC address segment range Bind the MAC address segment with DHCP server group Add the upstream port and service port to the VLAN Configure the VLAN layer 3 interface Configure the MAC address segment gateway End Procedure Step 1 Select the DHCP relay mode. huawei(config)#dhcp-server 2 ip 10.10 10.11 Step 3 Set working mode of the DHCP server.10. Step 2 Run the display dhcp-server command to query the information on the DHCP server group.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 4 Define the MAC address segment. it has to be added together with the primary server. l l Procedure Step 1 Run the dhcp-server command to create a DHCP server group. The secondary server cannot be added independently.1.2 respectively to DHCP server group 1. Up to 20 DHCP server groups (0–19) can be configured in the system. huawei(config-mac-range-huawei)#dhcp-server 2 Step 6 Configure the upstream port and the service port to the VLAN.1. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 10.1. The primary server or the secondary server is identified by its IP address.1. ----End Example To add the primary and secondary DHCP servers with IP addresses of 10.1. huawei(config-if-vlanif2)#dhcp mac-range huawei gateway 10. Context l To improve the reliability of a network.1 24 Step 8 Configure the gateway address of the MAC address segment. you can specify a primary DHCP server and a secondary one in a server group to form a DHCP server group. huawei(config-mac-range-huawei)#quit huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 7 Configure the IP address of the VLAN layer 3 interface.1. huawei(config)#dhcp mac-range huawei huawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100 Step 5 Bind the MAC address segment with the DCHP server group.1.1. Instead.1 10.2 10-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.1. huawei(config-if-vlanif2)#quit huawei(config)#save ----End Result The PCs can obtain IP addresses dynamically.2. 10. do as follows: huawei(config)#dhcp-server 1 ip 10.5 Creating a DHCP Server Group This operation enables you to create a DHCP server group.2.1 and 10.1 Step 9 Save the data. the system switches the standby DHCP server to the running DHCP server at the current time. backup: In this mode. the MA5600 sends DHCP messages to the DHCP server that is running at the current time.. Table 10-4 Related operation for creating a DHCP server group To. Step 2 Run the display dhcp config command to query the working mode of the DHCP server.. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-13 ..2 Messages from this server group: 0 Messages to this server group: 0 Messages from clients to this server group: 0 Messages from this server group to clients: 0 DHCP OFFER messages: 0 DHCP ACK messages: 0 DHCP NAK messages: 0 DHCP DECLINE messages: 0 DHCP DISCOVER messages: 0 DHCP REQUEST messages: 0 DHCP INFORM messages: 0 DHCP RELEASE messages: 0 Related Operation Table 10-4 lists the related operation for creating a DHCP server group. This mode can reduce the message load in the network.1.1. By default. Context The MA5600 supports two DHCP server working modes: l load-sharing: In this mode. undo dhcp-server 10.6 Setting Working Mode of a DHCP Server This operation enables you to set working mode of a DHCP server.. When the DHCP server does not reply OFFER message to the MA5600 within a specified period. l Procedure Step 1 Run the dhcp server mode command to set the working mode of a DHCP server. the system is in load-sharing mode. the MA5600 sends DHCP messages to both the active and standby DHCP servers. The system firstly takes the active DHCP server as the running DHCP server at the current time.1. Delete a DHCP server group Run the Command.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay huawei(config)#display dhcp-server 1 The primary IP address of DHCP server group 1: 10.1 The secondary IP address of DHCP server group 1: 10. . do as follows: huawei(config)#dhcp mode layer-2 huawei(config)#display dhcp config DHCP relay mode: layer-2 To set the DHCP relay mode as layer 3 DHCP option60. dhcp-server display dhcp-server 10.7 Setting DHCP Relay Mode This operation enables you to set DHCP relay mode. Step 2 Run the display dhcp config command to query DHCP working mode. Layer 3 DHCP relay includes: l DHCP standard mode: Select the DHCP server according to the IP address of the VLAN layer 3 interface for forwarding DHCP packets. do as follows: huawei(config)#dhcp server mode backup 50 100 huawei(config)#display dhcp server config DHCP server mode: backup DHCP server reply max time: 50 second DHCP server reply timeout max times: 100 Related Operation Table 10-5 lists the related operations for setting working mode of a DHCP server. do as follows: huawei(config)#dhcp mode layer-3 option60 10-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Context The MA5600 supports both layer 2 and layer 3 DHCP relay.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the DHCP server to backup mode. l l Procedure Step 1 Run the dhcp mode command to set DHCP working mode. Create a DHCP server Query information on a DHCP server Run the Command. ----End To set the DHCP relay mode as layer 2.. DHCP option60 mode: Select the DHCP server according to the DHCP optioni60 domain... the maximum response time to DISCOVER message to 50s and the maximum timeout times for responding to DISCOVER message to 100. DHCP MAC address segment mode: Select the DHCP server group according to the source MAC address segment of DHCP packets. Table 10-5 Related operations for setting working mode of a DHCP server To. all DHCP packets to be sent upstream through the VLAN layer 3 interface shall be forwarded to the DHCP server group bound with the VLAN interface. undo dhcp-server display dhcp config Remarks In VLAN interface mode. a VLAN interface is not bound with any DHCP server... Table 10-6 Related operations for binding a DHCP server group with a VLAN interface To.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display dhcp config DHCP relay mode: layer-3 DHCP server select mode: option60 10 Configuring the DHCP Relay 10. the new setting overwrites the old one. - Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-15 .. If a layer 3 interface has been bound with a DHCP server group.8 Binding a DHCP Server Group with a VLAN Interface This operation enables you to bind a DHCP server group with a VLAN interface. Step 3 Run the display dhcp-server interface vlanif command to query the DHCP server group that is bound with VLAN interface. ----End Example To bind DHCP server group 1 to VLAN interface 2. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-Vlanif2)#dhcp-server 1 huawei(config)#display dhcp-server interface vlanif 2 The DHCP server group of this interface is 1 Related Operation Table 10-6 lists the related operations for binding a DHCP server group with a VLAN interface. l l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode.. Unbind a VLAN interface from a DHCP server Show the settings of DHCP relay Run the Command. Step 2 Run the dhcp-server command to bind a DHCP server group. By default. Context l A VLAN layer 3 interface can be bound with only one DHCP server group. Prerequisite The DHCP server group has been created. Therefore. . Table 10-7 Related operations for creating a DHCP option60 domain To. Step 3 Run the display dhcp domain command to query the option60 domain. the system has a DHCP option60 domain named default. undo dhcp domain Remarks The domain named default cannot be deleted.9 Creating an Option60 Domain This operation enables you to create an option60 domain. Context l l The system supports up to 128 DHCP option60 domains. enter domain mode directly.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10. Step 2 Run the quit command to quit from domain mode.. Delete a DHCP option60 domain Run the Command.32> }: Command: display dhcp domain -------------------------------------------------------------------Index Name Server VLANIF Gateway -group -------------------------------------------------------------------0 default none none none 1 msft none none none -------------------------------------------------------------------Total: 2 Related Operation Table 10-7 lists the related operations for creating a DHCP option60 domain. do as follows: huawei(config)#dhcp domain msft huawei(config-dhcp-domain-msft)#quit huawei(config)#display dhcp domain { <cr>|string<s><1.. ----End Example To create domain msft. By default. Procedure Step 1 Run the dhcp domain command to create a domain. If the domain exists.. 10-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-17 . Table 10-8 Related operations for binding a DHCP server group with a DHCP option60 domain To… Delete a DHCP domain Unbind the DHCP server group from a DHCP domain Run the Command… undo dhcp domain undo dhcp-server Remarks In option60 domain mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay 10. Step 3 Run the display dhcp domain command to query the DHCP server group. Context Only one DHCP server group can be bound to a DHCP domain. 10.11 Configuring the Gateway of a DHCP Option60 Domain This operation enables you to configure the gateway of a DHCP option60 domain. do as follows: huawei(config)#dhcp domain msft huawei(config-dhcp-domain-msft)#dhcp-server 1 huawei(config-dhcp-domain-msft)#quit huawei(config)#display dhcp domain msft -------------------------------------------------------------------Index Name Server VLANIF Gateway -group -------------------------------------------------------------------1 msft 1 none none -------------------------------------------------------------------- Related Operation Table 10-8 lists the related operations for binding a DHCP server group with a DHCP option60 domain. Step 2 Run the dhcp-server command to bind a DHCP server group. ----End Example To bind DHCP server group 1 to DHCP domain msft. Procedure Step 1 Run the dhcp domain command to enter domain mode.10 Binding a DHCP Server Group with a DHCP Option60 Domain This operation enables you to bind a DHCP server group with a DHCP option60 domain. 1 huawei(config-if-Vlanif2)#quit huawei(config)#display dhcp domain msft -------------------------------------------------------------------Index Name Server VLANIF Gateway -group -------------------------------------------------------------------1 msft 1 2 10..1.1.. Step 3 Run the quit command to quit from VLAN interface mode. Step 4 Run the display dhcp domain command to query the DHCP server group. By default. l l l The DHCP server group has been created...2.1. Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode. Step 2 Run the dhcp domain gateway command to set the gateway address.1. 10.12 Creating a DHCP MAC Address Segment This operation enables you to create a DHCP MAC address segment.1 -------------------------------------------------------------------- Related Operation Table 10-9 lists the related operation for configuring the gateway of a DHCP option60 domain. the gateway address of a domain is the IP address of the VLAN layer 3 interface. ----End Example To set the gateway address of domain msft as 10. By default.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l A DHCP domain can be configured with only one gateway address. undo dhcp domain gateway Remarks In VLAN interface mode. The IP address of the VLAN layer 3 interface has been configured. the system has a MAC address segment named default. Huawei Technologies Proprietary Issue 04 (2007-11-30) 10-18 . Table 10-9 Related operation for configuring the gateway of a DHCP option60 domain To. Delete the gateway of a DHCP option60 domain Run the Command.2.2. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-Vlanif2)#dhcp domain msft gateway 10. The MAC address adopts the format of "H-H-H" ("H" is a 4-bit hexadecimal number).13 Setting the Range of a DHCP MAC Address Segment This operation enables you to set the range of a DHCP MAC address segment. undo dhcp mac-range Remarks The MAC address segment named default cannot be deleted. Delete a DHCP MAC address segment Run the Command. Step 2 Run the display dhcp mac-range command to query the MAC address segment. Procedure Step 1 Run the dhcp mac-range command to create a DHCP MAC address segment and enter MAC address segment mode. do as follows: huawei(config)#dhcp mac-range huawei huawei(config-mac-range-huawei)#quit huawei(config)#display dhcp mac-range { <cr>|string<S><1.. Huawei Technologies Proprietary 10-19 l Issue 04 (2007-11-30) ... Context l A MAC address segment is a consecutive MAC address array specified by a start MAC address and an end MAC address. 10. ----End Example To set a MAC address segment named huawei.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Context The system supports up to 128 MAC address segments. Table 10-10 Related operations for creating a DHCP MAC address segment To.32> }: Command: display dhcp mac-range -----------------------------------------------------------------------------Index Name Server VLAN Gateway -group -IF -----------------------------------------------------------------------------0 default none none none none none 1 huawei none none none none none -----------------------------------------------------------------------------Total: 2 MAC-start MAC-end Related Operation Table 10-10 lists the related operations for creating a DHCP MAC address segment.. Context A MAC address segment can be bound with only one DHCP server group. do as follows: huawei(config)#dhcp mac-range huawei huawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100 huawei(config)#display dhcp mac-range { <cr>|string<S><1.. Table 10-11 Related operation for setting the range of a DHCP MAC address segment To. ----End Example To set the range of MAC address segment huawei from 0000-0000-0001 to 0000-0000-0100. Step 2 Run the mac-range command to set the range of a MAC address segment. 10-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC address segment mode.14 Binding a DHCP Server Group with a DHCP MAC Address Segment This operation enables you to bind a DHCP server group with a DHCP MAC address segment..32> }: Command: display dhcp mac-range -----------------------------------------------------------------------------Index Name Server VLAN Gateway -group -IF -----------------------------------------------------------------------------0 default none none none none none 1 huawei 0000-0000-0001 0000-0000-0100 none none none -----------------------------------------------------------------------------Total: 2 MAC-start MAC-end Related Operation Table 10-11 lists the related operation for setting the range of a DHCP MAC address segment. Step 3 Run the quit command to quit from the MAC address segment mode. Step 4 Run the display dhcp mac-range command to query the range of the MAC address segment.. undo mac-range Remarks - 10. Cancel the range of a MAC address segment Run the Command.. ..32> }: Command: display dhcp mac-range -----------------------------------------------------------------------------Index Name Server VLAN Gateway -group -IF -----------------------------------------------------------------------------0 default none none none none none 1 huawei none none 100 none none -----------------------------------------------------------------------------Total: 2 MAC-start MAC-end Related Operation Table 10-12 lists the related operations for binding a DHCP server group with a DHCP MAC address segment. ----End Example To bind MAC address segment huawei with server group 1. Step 2 Run the dhcp-server command to bind a DHCP server group. Step 3 Run the display dhcp mac-range command to query the information on the MAC address segment.. Context A DHCP MAC address segment can be configured with only one gateway address. Table 10-12 Related operations for binding a DHCP server group with a DHCP MAC address segment To. do as follows: huawei(config)#dhcp mac-range huawei huawei(config-mac-range-huawei)#dhcp-server 100 huawei(config)#display dhcp mac-range { <cr>|string<S><1. Run the Command. Remarks 10. Issue 04 (2007-11-30) Huawei Technologies Proprietary 10-21 .15 Configuring the Gateway of a DHCP MAC Address Segment This operation enables you to configure the gateway of a DHCP MAC address segment.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 10 Configuring the DHCP Relay Procedure Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC address segment mode. 2.. Cancel the gateway of the MAC address segment on a VLAN interface Unbind the DHCP server group from a MAC address segment Run the Command.10 Configuring the DHCP Relay SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode. ----End Example To set the gateway address of MAC address segment huawei as 10. Step 3 Run the quit command to quit from VLAN interface mode.1..1. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-Vlanif2)#dhcp mac-range huawei gateway 10.1 huawei(config-if-Vlanif2)#quit huawei(config)#display dhcp mac-range huawei -----------------------------------------------------------------------------Index Name MAC-start MAC-end Server VLAN Gateway -group -IF -----------------------------------------------------------------------------0 huawei none none none 2 10. undo dhcp mac-range gateway undo dhcp-server Remarks - In MAC address segment mode.2.. 10-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2.1.. Step 4 Run the display dhcp mac-range command to query the information on the gateway address.1 ------------------------------------------------------------------------------ Related Operation Table 10-13 lists the related operations for configuring the gateway of a DHCP MAC address segment.1. Step 2 Run the dhcp mac-range gateway command to configure the gateway address. Table 10-13 Related operations for configuring the gateway of a DHCP MAC address segment To. 11.3 Adding a Static ARP Entry This operation enables you to add a static ARP entry to realize layer 3 interconnection with no dynamic ARP trigged.2 Configuration Example of the ARP Proxy This operation enables you to configure ARP proxy to enable users in different VLANs to communicate with each other. 11. 11. Issue 04 (2007-11-30) Huawei Technologies Proprietary 11-1 . 11.4 Enabling the ARP Proxy This operation enables you to enable the ARP proxy to implement layer 3 interconnection for users who are isolated at layer 2.1 Overview This chapter describes ARP proxy service description and service specification.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 11 Configuring the ARP & ARP Proxy 11 Configuring the ARP & ARP Proxy About This Chapter This chapter describes the principles of the ARP and ARP proxy supported by the MA5600 and how to configure the ARP and ARP proxy. 11. To send the data at the network layer to a destination host. refer to the chapter "ARP Proxy" in the Feature Description. they shall know each other's physical addresses. Networking Figure 11-1 shows a sample network for configuring the ARP proxy. Service Description Before two hosts in a network can communicate with each other. Through ARP proxy. 11-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This is why an IP address shall be translated into a MAC address. MAC addresses. Service Specification The MA5600 can maintain ARP entries both dynamically and manually. the source host must know the physical address of the destination host. The MA5600 supports the ARP protocol and maintains an ARP table for the mapping between the MAC addresses and the IP addresses. The IP address represents only the address of a host at the network layer. two PCs subject to layer 2 isolation can interconnect with each other at layer 3.11 Configuring the ARP & ARP Proxy SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 11. For details on the ARP proxy feature. The MA5600 can dynamically learn up to 3584 dynamic ARP entries.2 Configuration Example of the ARP Proxy This operation enables you to configure ARP proxy to enable users in different VLANs to communicate with each other. The MA5600 supports the manual configuration of up to 256 static ARP entries. It supports ARP proxy function. You can configure the static ARP entry manually. that is. Address Resolution Protocol (ARP) is used to translate an IP address into a MAC address.1 Overview This chapter describes ARP proxy service description and service specification. 1. PC2 (0/2/1) Sub VLAN VLAN ID: 20 VLAN type: MUX VLAN User: PC3 (0/3/0) Upstream port Port: 0/7/0 VLAN: standard VLAN 30 IP Address: 10.254/24 Prerequisite l The network equipment and line work in the normal state. VLAN 20 IP address: 10. Huawei Technologies Proprietary 11-3 Issue 04 (2007-11-30) .0.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 11 Configuring the ARP & ARP Proxy Figure 11-1 Sample network for configuring the ARP proxy IP network Router MA5600 PC1 PC2 PC3 Data Plan Table 11-1 lists the data plan for configuring the ARP proxy.0. Table 11-1 Data plan for configuring the ARP proxy Item Super VLAN Data VLAN ID: 100 Sub VLAN: VLAN 10.254/24 Sub VLAN VLAN ID: 10 VLAN type: smart VLAN User: PC1 (0/2/0). 11 Configuring the ARP & ARP Proxy l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Service boards work in the normal state. and add them to the super VLAN. Configuration Flowchart Figure 11-2 shows the flowchart for configuring the ARP proxy. Figure 11-2 Flowchart for configuring the ARP proxy Start Create a super VLAN Create Sub VLANs and add them to the super VLAN Configure the service ports of the sub VLANs Configure the upstream port Configure the layer 3 interface of the super VLAN Enable the ARP proxy function Save the data End Procedure Step 1 Create a super VLAN. huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#service-port vlan 10 adsl 0/2/1 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 huawei(config)#service-port vlan 20 adsl 0/3/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 Step 4 Configure the upstream port. huawei(config)#vlan 10 smart huawei(config)#vlan 20 mux huawei(config)#supervlan 100 subvlan 10 huawei(config)#supervlan 100 subvlan 20 Step 3 Configure the service ports of the sub VLANs. huawei(config)#vlan 100 super Step 2 Create sub VLANs 3 and 4. huawei(config)#vlan 30 standard huawei(config)#port vlan 30 0/7 0 11-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . VPI/VCI configured on the modem is 0/35. huawei(config-if-vlanif100)#arp proxy enable subvlan 10 NOTE Skip step 8 if you only want PCs in different VLANs to communicate with each other. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 11-5 . 1. Enable the ARP proxy function globally.0.0. huawei#save ----End Result After the global ARP proxy function and the ARP proxy function of the super VLAN interface are enabled. instead of the WAN. 3. Procedure Step 1 Run the arp command to add a static ARP entry.3 Adding a Static ARP Entry This operation enables you to add a static ARP entry to realize layer 3 interconnection with no dynamic ARP trigged. Context l l The ARP mapping list applies only to a LAN for address resolution. PC 1 and PC 3 in different VLANs can communicate with each other. 2.1.0. The system supports up to 256 static ARP entries.254 24 Step 5 Configure the layer 3 interface of the super VLAN. Step 2 Run the display arp static command and you can find that a static ARP entry has been added successfully. After the global ARP proxy function. PC 1 and PC 2 in the same VLAN can communicate with each other. the ARP proxy function of the super VLAN interface. and that of the sub VLAN interface are enabled. 11. huawei(config)#arp proxy enable Enable ARP proxy on the super VLAN interface.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 11 Configuring the ARP & ARP Proxy huawei(config)#interface vlanif 30 huawei(config-if-vlanif30)#ip address 10. Step 6 Enable the ARP proxy function. huawei(config-if-vlanif100)#arp proxy enable Enable ARP proxy on the sub VLAN interface.254 24 NOTE The IP address of the layer 3 interface of the super VLAN must be in the same subnet as that of the PC. Step 7 Save the data. huawei(config)#interface vlanif 100 huawei(config-if-vlanif100)#ip address 10. 102. passing through port 0/7/0 of VLAN 10.1 and the MAC address 00e0-fc01-0000.0. to achieve interconnection between PCs in the VLAN.1 00e0-fc01-0000 10 0/7/0Static --1 entry found --- Type Related Operation Table 11-2 lists the related operations for adding a static ARP entry. do as follows: huawei(config)#arp 129. you can clear all ARP entries. Table 11-3 lists the data plan of the ARP proxy. Table 11-3 Data plan of the ARP proxy Super VLAN VLAN 100 (Super VLAN) Sub VLAN VLAN 10 (Smart VLAN) PC PC A PC B VLAN 20 (MUX VLAN)） PC C For the topology as shown in. This section offers an example for the principles of applying of the ARP proxy.102. 11. You can clear a static ARP entry.0. Context Principles for applying the ARP Proxy are as follows: Hosts isolated at layer 2 can communicate with each other through the ARP proxy function of the MA5600. a dynamic ARP entry.102.1 00e0-fc01-0000 10 0/7/0 huawei(config)#display arp static IP Address MAC Address VLAN ID Port 129.0.4 Enabling the ARP Proxy This operation enables you to enable the ARP proxy to implement layer 3 interconnection for users who are isolated at layer 2. By entering the parameter all. the ARP proxy must be set as follows: 11-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . or ARP entries related to a port. Table 11-2 Related operations for adding a static ARP entry To… Delete an ARP entry Clear redundant information Run the Command… undo arp reset arp Remarks The system can delete both static and dynamic ARP entries.11 Configuring the ARP & ARP Proxy SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To add a static ARP entry to set up the mapping between the IP address 129. l Procedure Step 1 Run the arp proxy command to enable the global ARP proxy function. enable the global ARP proxy and the ARP proxy on super VLAN 2. do as follows: huawei(config)#interface vlanif 10 huawei(config-if-vlanif10)#arp proxy enable subvlan 10 huawei(config-if-vlanif10)#display arp proxy ARP proxy enable subvlan 10 Related Operation Table 11-4 lists the related operation for enabling the ARP proxy. Table 11-4 Related operation for enabling the ARP proxy To… Disable the ARP proxy Run the Command… arp proxy disable Issue 04 (2007-11-30) Huawei Technologies Proprietary 11-7 . do as follows: huawei(config)arp proxy enable huawei(config)#display arp proxy Global arp proxy is enabled To enable the ARP proxy of a layer 3 interface. ----End To enable the global ARP proxy. Step 2 Run the display arp proxy command and you can find that the ARP proxy has been enabled. enable the global ARP proxy and the ARP proxy on super VLAN 2 and sub VLAN 3. do as follows: huawei(config)#interface vlanif 100 huawei(config-if-Vlanif100)arp proxy enable huawei(config-if-vlanif100)#display arp proxy VLANIF 10 : Arp proxy is enabled To enable the ARP proxy of a Sub VLAN. For interconnection between PC A and PC C.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 11 Configuring the ARP & ARP Proxy For interconnection between PC A and PC B. . 11 Configuring Route Summarization Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-1 .8 Configuring OSPF This section describes how to configure OSPF.5 Configuration Example of a Route Policy This example shows how to configure a route policy for imported routes. 12. 12. 12.4 Configuration Example of OSPF This example shows how to configure OSPF on the MA5600.7 Configuring RIP This sections describes how to configure RIP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol 12 Configuring the Routing Protocol About This Chapter This chapter describes the routing protocols supported by the MA5600 and how to configure the routing protocols.2 Configuration Example of the Static Route This example shows how to configure the static route which enables users in different network segments to interconnect across different MA5600 devices. Through the RIP protocol.9 Configuring OSPF on a VLAN Interface This section describes how to configure OSPF on a VLAN interface. 12. 12. 12. This helps to realize layer 3 interconnection among network devices in different network segments. 12. 12.10 Configuring OSPF Timer This section describes how to configure OSPF timer. thus supporting the interconnection between the device and the managed network.6 Adding a Static Route This operation enables you to add a static route to the destination address.1 Routing Protocol Configuration This section describes the routing protocol and its application to the MA5600. 12. 12.3 Configuration Example of RIP This example shows how to configure the Routing Information Protocol (RIP). a route is established between the device and the managed network. 12. 12-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .13 Configuring a Route Policy This section describes how to configure a route policy.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This sections describes how to configure route summarization.12 Configuring OSPF Route Import This section describes how to configure OSPF route import. 12. 12. Routing Information Protocol (RIP): a routing protocol that is based on the Vector-Distance Algorithm (V-D).SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol 12. OSPF discovers and forwards routing information by collecting and forwarding the link status of an AS. the MA5600 can work as a router. Service Description This chapter describes the following routing protocols: l Static route: a special type of route that is configured manually by a network administrator. Static routes are used in small networks with a simple topology that is not expected to change frequently. refer to the chapter "Routing" in the Feature Description. The routing protocols supported by the MA5600 include: l l Static routing protocols Dynamic routing protocols such as RIP and OSPF 12. Service Specification With a routing protocol running. Networking Figure 12-1 shows a sample network for configuring the static route.1 Routing Protocol Configuration This section describes the routing protocol and its application to the MA5600.2 Configuration Example of the Static Route This example shows how to configure the static route which enables users in different network segments to interconnect across different MA5600 devices. l l For details on the routing protocol. Open Shortest Path First (OSPF): a dynamic routing protocol running inside an autonomous system (AS). Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-3 . 1/24 1.1.1.1.1. Table 12-1 Data plan for configuring the static route at the user side Item MA5600_A Data Primary IP address of the layer 3 interface: 1.1/24 MA5600_A.1.2/24 VLAN ID: 2 12-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.1/24 Secondary IP address of layer 3 interface: 1.5.2/24 MA5600_ A MA5600_ B 1. It is expected that after the configuration. and MA5600_C have the routing function.1.1.5.1.2/24 MA5600_ C 1.4.2.1. MA5600_B.1/24 Primary IP address of layer 3 interface: 1.1/24 Secondary IP address of the layer 3 interface: 1.2/24 Primary IP address of layer 3 interface: 1. Data Plan Table 12-1 lists the data plan for configuring the static route at the user side.1.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 12-1 Sample network for configuring the static route PC_C 1.3.1.1.2/24 1.2.1.1.1.1/24 1.4.5.2/24 VLAN ID: 2 Upstream port: 0/7/0 PC_A MA5600_B IP address: 1.2/24 Secondary IP address of layer 3 interface: 1.2.2/24 VLAN ID: 2 Upstream port: 0/7/0 PC_B MA5600_C IP address: 1.1/24 PC_B 1.1. any two PCs can communicate with each other.2/24 PC_A 1.2.1.1.1/24 Secondary IP address of layer 3 interface: 1.2/24 1.3.3.1.1.4.1.1.4.3.1/24 1. repeat the procedure.1. So. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-5 .1.1/24 Context Configure a native VLAN of the layer 3 interface of each MA5600 to ensure a normal communication among MA5600 devices. Figure 12-2 Flowchart for configuring the static route Start Configure layer 3 interface Configure static route Configure the default gateway of a host End NOTE The procedure shown in the above flowchart is for configuring static routes on one MA5600. NOTE The configurations are the same for the three MA5600 devices.2. here the configuration for the MA5600_A is taken for example.1.1 24 sub Step 2 Configure static routes. Configuration Flowchart Figure 12-2 shows the flowchart for configuring the static route. To configure static routes on multiple MA5600 devices. Procedure Step 1 Configure the IP address of the layer 3 interface.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Item Data Upstream port: 0/7/0 (connectingMA5600_A) and 0/7/1 (connecting MA5600_B) PC_C IP address: 1.2 24 huawei(config-if-vlanif2)#ip address 1.1. huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1.5. 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1. 2. 3. Configure static route for MA5600_A. huawei(config)#ip route-static 1.1.0.0 255.255.0.0 1.1.2.2 Configure static route for MA5600_B. huawei(config)#ip route-static 1.1.0.0 255.255.0.0 1.1.3.1 Configure static routes for MA5600_C. huawei(config)#ip route-static 1.1.1.0 255.255.255.0 1.1.2.1 huawei(config)#ip route-static 1.1.4.0 255.255.255.0 1.1.3.2 Step 3 Configure the host gateways. 1. 2. 3. Configure the default gateway of Host A to 1.1.1.2. Configure the default gateway of Host B to 1.1.4.2. Configure the default gateway of Host C to 1.1.5.2. Step 4 Save the data. huawei#save ----End Result After the configuration, an interconnection can be set up between all the hosts and between all the MA5600 devices. 12.3 Configuration Example of RIP This example shows how to configure the Routing Information Protocol (RIP). Through the RIP protocol, a route is established between the device and the managed network, thus supporting the interconnection between the device and the managed network. Networking Figure 12-3 shows a sample network for configuring RIP. MA5600_A uses port 0/7/1 to subtend with MA5600_B, uses port 0/7/0 for upstream service, and connects with the network in the management center over the MAN. RIP is enabled respectively on MA5600_A and MA5600_B. Users can access MA5600_A and MA5600_B through the RIP route to operate and maintain MA5600_A and MA5600_B. 12-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Figure 12-3 Sample network for configuring RIP MAN 192.13.24.5/22 GE 192.15.24.1/26 MA5600_A Loopback IP 192.13.2.1/24 Router Management center MA5600_B Loopback IP 192.13.2.2/24 192.15.24.2/26 Operation and maintenance Data Plan Table 12-2 lists the data plan for configuring RIP. Table 12-2 Data plan for configuring RIP Item MA5600_A Data Upstream port: 0/7/0 Management VLAN: 100 Type: smart IP address of the layer 3 interface of the management VLAN: 192.13.24.5/22 IP address of the loopback interface: 192.13.2.1/24 RIP version: V2 RIP route filtering policy: The system performs route filtering according to the IP address prefix list abc. Only the routing information of IP addresses 192.13.2.1 and 192.13.2.2 can be transmitted through the layer 3 interface of VLAN 100. Subtending port: 0/7/1 Subtending management VLAN: 10, type: smart IP address of the layer 3 interface of the subtending management VLAN: 192.15.24.1/26 MA5600_B Subtending port: 0/7/0 Management VLAN: 10, type: smart IP address of the layer 3 interface of the management VLAN: 192.15.24.2/26 IP address of the loopback interface: 192.13.2.2/24 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-7 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data RIP version: V2 RIP route filtering policy: The system performs route filtering according to the IP address prefix list abc. Only the routing information of IP address 192.13.2.2 can be transmitted through the layer 3 interface of VLAN 10. Configuration Flowchart Figure 12-4 shows the flowchart for configuring RIP. Figure 12-4 Flowchart for configuring RIP Start Configure the layer 3 interface Enable the RIP function Configure the RIP protocol parameters (optional) Configure the route filtering policy (optional) Save the data End Procedure l Configure MA5600_A. 1. Configure the layer 3 interface that supports RIP. huawei(config)#vlan 100 smart huawei(config)#port vlan 100 0/7 0 huawei(config)#interface vlanif 100 huawei(config-if-vlanif100)#ip address 192.13.24.5 22 huawei(config-if-vlanif100)#quit huawei(config)#interface loopBack 0 huawei(config-if-loopback0)#ip address 192.13.2.1 24 huawei(config-if-loopback0)#quit 2. Enable the RIP function. huawei(config)#rip 1 huawei(config-rip-1)#network 192.13.24.0 huawei(config-rip-1)#network 192.13.2.0 12-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-rip-1)#version 2 huawei(config-rip-1)#quit 12 Configuring the Routing Protocol 3. Configure the route filtering policy. huawei(config)#ip ip-prefix abc permit 192.13.2.1 32 huawei(config)#ip ip-prefix abc permit 192.13.2.2 32 huawei(config)#rip 1 huawei(config-rip-1)#filter-policy ip-prefix abc export vlanif 100 4. Configure the subtending port. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 1 huawei(config)#interface vlanif 10 huawei(config-if-vlanif10)#ip address 192.15.24.1 26 huawei(config-if-vlanif10)#quit 5. Enable the RIP function on the subtending port. huawei(config)#rip 1 huawei(config-rip-1)#network 192.15.24.0 huawei(config-rip-1)#quit 6. l Save the data. huawei(config)#save Configure MA5600_B. 1. Configure the layer 3 interface that supports RIP. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 huawei(config)#interface vlanif 10 huawei(config-if-vlanif10)#ip address 192.15.24.2 26 huawei(config-if-vlanif10)#quit huawei(config)#interface loopBack 0 huawei(config-if-loopback0)#ip address 192.13.2.2 24 huawei(config-if-loopback0)#quit 2. Enable the RIP function. huawei(config)#rip 1 huawei(config-rip-1)#network 192.15.24.0 huawei(config-rip-1)#network 192.13.2.0 huawei(config-rip-1)#version 2 huawei(config-rip-1)#quit 3. Configure the route filtering policy. huawei(config)#ip ip-prefix abc permit 192.13.2.2 32 huawei(config)#rip 1 huawei(config-rip-1)#filter-policy ip-prefix abc export vlanif 10 huawei(config-rip-1)#quit 4. ----End Save the data. huawei(config)#save Result You can log in to MA5600_A and MA5600_B from the maintenance terminal of the management center for operation and maintenance. 12.4 Configuration Example of OSPF This example shows how to configure OSPF on the MA5600. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-9 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Networking Figure 12-5 shows a sample network for configuring OSPF. Figure 12-5 Sample network for configuring OSPF MA5600_ A 1.1.1.1 DR 192.1.1.1/24 192.1.1.2/24 192.1.1.4/24 192.1.1.3/24 BDR MA5600_B 2.2.2.2 MA5600_C 3.3.3.3 MA5600_D 4.4.4.4 Data Plan Table 12-3 lists the data plan for configuring OSPF. Table 12-3 Data plan for configuring OSPF Item MA5600_A Data IP address of the layer 3 interface: 192.1.1.1/24 Priority: 100 VLAN ID: 2 Router ID: 1.1.1.1 MA5600_B IP address of the layer 3 interface: 192.1.1.2/24 Priority: 0 VLAN ID: 2 Router ID: 2.2.2.2 MA5600_C IP address of the layer 3 interface: 192.1.1.3/24 Priority: 2 VLAN ID: 2 Router ID: 3.3.3.3 MA5600_D IP address of the layer 3 interface: 192.1.1.4/24 Remarks - 12-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Item Data Priority: not configured VLAN ID: 2 Router ID: 4.4.4.4 Remarks Default: 1 - Context l In this example, the interfaces of all the MA5600 devices are in one VLAN. If they are not in one VLAN, configure a native VLAN to ensure a normal communication among them. The OSPF area IDs of the MA5600 devices must be consistent. l Configuration Flowchart Figure 12-6 shows the flowchart for configuring OSPF. Figure 12-6 Flowchart for configuring OSPF Start Configure layer 3 Iinterface Configure OSPF router ID Enable OSPF Set OSPF priority End NOTE The procedure shown in the above flowchart is for configuring OSPF on one MA5600. To configure OSFP on multiple MA5600 devices, repeat the procedure. Procedure Step 1 Configure MA5600_A. 1. Configure the IP address of the layer 3 interface. huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 192.1.1.1 24 huawei(config-if-vlanif2)#quit Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-11 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2. 3. Configure the OSPF Router ID. huawei(config)#router id 1.1.1.1 Enable OSPF. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255 huawei(config-ospf-1-area-0.0.0.0)#network 1.1.1.1 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit 4. Configure the OSPF priority. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf dr-priority 100 huawei(config-if-vlanif2)#quit 5. Save the data. huawei(config)#save Step 2 Configure MA5600_B. 1. Configure the IP address of layer 3 interface. huawei(config)#vlan 2 mux huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 192.1.1.2 24 huawei(config-if-vlanif2)#quit 2. 3. Configure the OSPF Router ID. huawei(config)#router id 2.2.2.2 Enable OSPF. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255 huawei(config-ospf-1-area-0.0.0.0)#network 2.2.2.2 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit 4. Configure the OSPF priority. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf dr-priority 0 huawei(config-if-vlanif2)#quit 5. Save the data. huawei(config)#save Step 3 Configure MA5600_C. 1. Configure the IP address of layer 3 interface. huawei(config)#vlan 2 mux huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 192.1.1.3 24 huawei(config-if-vlanif2)#quit 2. 3. Configure the OSPF Router ID. huawei(config)#router id 3.3.3.3 Enable OSPF. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255 huawei(config-ospf-1-area-0.0.0.0)#network 3.3.3.3 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit 4. 12-12 Configure the OSPF priority. Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf dr-priority 2 huawei(config-if-vlanif2)#quit 12 Configuring the Routing Protocol 5. Save the data. huawei(config)#save Step 4 Configure MA5600_D. 1. Configure the IP address of layer 3 interface. huawei(config)#vlan 2 mux huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 192.1.1.4 24 huawei(config-if-vlanif2)#quit 2. 3. Configure the OSPF Router ID. huawei(config)#router id 4.4.4.4 Enable OSPF. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255 huawei(config-ospf-1-area-0.0.0.0)#network 4.4.4.4 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit 4. Save the data. huawei#save ----End Result Run the display ip routing-table command and you can find the learnt route table. Hosts can communicate with each other. 12.5 Configuration Example of a Route Policy This example shows how to configure a route policy for imported routes. Networking Figure 12-7 shows a sample network for configuring the route policy. The MA5600_A and MA5600_B have the routing function. Figure 12-7 Sample network for configuring the route policy Static:20.0.0.1 30.0.0.1 40.0.0.1 Vlanif2 10.0.0.1/24 Vlanif2 10.0.0.2/24 MA5600_A 1.1.1.1 Area 0 MA5600_B 2.2.2.2 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-13 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Data Plan Table 12-4 lists the data plan for configuring the route policy. Table 12-4 Data plan for configuring the route policy Item MA5600_A Data IP address of layer 3 interface: 10.0.0.1/24 VLAN ID: 2 Router ID: 1.1.1.1 OSPF area: 0 Static routes: 20.0.0.1, 30.0.0.1, 40.0.0.1 MA5600_B IP address of layer 3 interface: 10.0.0.2/24 VLAN ID: 2 Router ID: 2.2.2.2 OSPF area: 0 Configuration Flowchart Figure 12-8 shows the flowchart for configuring the route policy. Figure 12-8 Flowchart for configuring the route policy Start Configure layer 3 interface Configure router ID Enable route fucntion Configure ACL Configure route policy End 12-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Procedure Step 1 Configuring MA5600_A. 1. Configure the IP address of layer 3 interface on MA5600_A. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 10.0.0.1 24 2. Enable OSPF on MA5600_A and specify the area ID to which the interface belongs. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 10.0.0.0 0.0.0.255 3. 4. Configure the OSPF router ID on the MA5600_A. huawei(config)#router id 1.1.1.1 Configure three static routes. huawei(config)#ip route-static 20.0.0.1 32 vlanif 2 huawei(config)#ip route-static 30.0.0.1 32 vlanif 2 huawei(config)#ip route-static 40.0.0.1 32 vlanif 2 5. 6. Import static routes. huawei(config-ospf-1)#import-route static Save the data. huawei(config)#save Step 2 Configuring MA5600_B. 1. Configure the IP address of layer 3 interface on MA5600_B. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 10.0.0.2 24 2. Configure the ACL. huawei(config)#acl 2000 huawei(config-acl-basic-2000)#rule deny source 30.0.0.0 0.255.255.255.0 huawei(config-acl-basic-2000)#rule permit source any huawei(config-acl-basic-2000)#quit 3. Enable OSPF on MA5600_B and specify the area id to which the interface belongs. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 10.0.0.0 0.0.0.255 4. 5. 6. Configure the OSPF router ID of MA5600_B. huawei(config)#router id 2.2.2.2 Filter imported routes. huawei(config-ospf-1)#filter-policy 2000 import Save the data. huawei(config)#save ----End Result 1. 2. MA5600_A and MA5600_B run OSPF successfully, and they can communicate well with each other. After a filter is configured on MA5600_B, parts of the three imported static routes are available while part of them is screened. That is, routes from segments 20.0.0.0 and 40.0.0.0 are available, while the route from segment 30.0.0.0 is screened. Huawei Technologies Proprietary 12-15 Issue 04 (2007-11-30) 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12.6 Adding a Static Route This operation enables you to add a static route to the destination address. This helps to realize layer 3 interconnection among network devices in different network segments. Prerequisite The IP address has been configured for the layer 3 service port. Context l l The system supports up to 4096 static routes. The following items are contained in a static route: – Destination address: It is used to label the destination address or destination network of an IP packet. Subnet mask: The subnet mask is comprised of consecutive "1"s, and expressed in dotted decimal format, or the count of consecutive "1"s. The mask is used with the destination address to identify the subnet address of the destination host or router. Output interface: It specifies the interface of a router for IP packet forwarding. Next hop IP address: It indicates the next router that an IP packet will pass through. Route priority: When there are multiple routes with different priorities to the same destination, the route with the highest priority (smallest value) will be the optimal one. The default priority of a static route is 60. – – – – l When configuring a static route, specify the transmit interface or the next hop IP address if necessary. For a port supporting ARP or connecting to a point-to-point network, the destination IP address is in the network that connects to the port directly. In this case, you need to specify the transmit interface. A route with both the destination IP address and network mask being 0.0.0.0 is the default route. If no matching route is found in the routing table for an IP packet, the packet is forwarded over the default route. l Procedure Step 1 Run the ip route-static command to add a static route. Step 2 Run the display ip routing-table command to query the routing table. ----End Example To set up a static route to the subnet 10.71.8.0 through gateway 10.71.53.1, do as follows: huawei(config)#ip route-static 10.71.8.0 255.255.255.0 10.71.53.1 huawei(config)#display ip routing-table protocol static { <cr>|inactive<K>|verbose<K> }: Command: display ip routing-table protocol static Total static routes configed in Public routing table: 3 12-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Public routing table : Static Destinations : 3 12 Configuring the Routing Protocol Routes : 3 Static routing table status : <Active> Destinations : 0 Routes : 0 Static routing table status : <Inactive> Destinations : 3 Routes : 3 Destination/Mask 10.71.8.0/24 10.71.53.0/24 10.71.54.0/24 Proto Pre Cost 0 0 0 NextHop 10.71.53.1 10.71.8.0 10.71.8.0 Interface Static 60 Static 60 Static 60 Related Operation Table 12-5 lists the related operation for adding a static route. Table 12-5 Related operation for adding a static route To... Delete a static route Run the Command... undo ip route-static 12.7 Configuring RIP This sections describes how to configure RIP. 12.7.1 Enabling RIP Process This operation enables RIP process. 12.7.2 Setting the RIP Version This operation enables you to set the RIP version. 12.7.3 Configuring Zero Field Check for RIP-I Packets This operation enables you to configure zero field check for RIP-1 packets. 12.7.4 Setting the Cost of the Default Route This operation enables you to set the cost of the default route. 12.7.5 Enabling Route Summarization This operation enables route summarization. 12.7.6 Specifying Default Routing Metric This operation enables you to specify the default routing metric. 12.7.7 Importing Routes of Other Protocols This operation enables you to import routes of other protocols. 12.7.8 Disabling Receiving Host Routes This operation prohibits the router from receiving host routes. 12.7.9 Configuring the RIP Preference This operation enables you to set RIP preference. 12.7.10 Configuring the Route Filtering Policy This operation enables you to configure the route filtering policy to filter unnecessary routes. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-17 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12.7.11 Verifying the Source IP Address of a RIP Route Update This operation enables you to verify the source IP address of a RIP route update. 12.7.12 Resetting RIP This operation enables you to restore the default settings of RIP. 12.7.13 Clearing RIP Process Statistics This operation enables you to clear RIP process statistics. 12.7.14 Disabling RIP Packet Transmission on an Interface This operation enables you to disable RIP packet transmission on an interface. 12.7.15 Configuring the IP Address of a Peer Router This operation enables you to configure the IP address of a peer router. 12.7.16 Configuring a Summary Route IP Address This operation enables you to configure the IP address of a summary route. 12.7.17 Enabling an Interface to Receive/Transmit RIP Packets This operation enables an interface to receive and transmit RIP packets. 12.7.18 Enabling the Split Horizon Function This operation enables the split horizon function. 12.7.19 Enabling the Poison Reverse Function This operation enables the poison reverse function. 12.7.20 Configuring the RIP-2 Authentication Mode This operation enables you to configure the RIP-2 authentication mode. 12.7.21 Configuring the Additional Metric of a Route This operation enables you to configure the additional metric of a route. 12.7.22 Configuring the RIP Timer This operation enables you to configure the RIP timer so as to improve the RIP running performance. 12.7.23 Enabling the Transparent Transmission function of the RIP Packet Based on the VLAN This operation enables the transparent transmission function of the RIP packet based on the VLAN. 12.7.1 Enabling RIP Process This operation enables RIP process. Context To configure the global parameters of RIP, you need to enable RIP first. However, you do not have to comply with this when configuring the interface related parameters. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the display rip command to query the RIP. ----End 12-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Example To enable RIP process 1, do as follows: huawei(config)#rip 1 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-1 compatibility Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Disabled Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-6 lists the related operation for enabling RIP process. Table 12-6 Related operation for enabling RIP process To... Disable RIP process Run the Command... undo rip 12.7.2 Setting the RIP Version This operation enables you to set the RIP version. Context l l The MA5600 supports packets in two formats: RIP-1 and RIP-2. The default is RIP-1. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the version command to set the RIP version. Step 3 Run the display rip command to query the RIP information. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-19 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the format of packets as RIP-2, do as follows: huawei(config)#rip 1 huawei(config-rip-1)#version 2 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Disabled Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-7 lists the related operation for setting the RIP version. Table 12-7 Related operation for setting the RIP version To... Restore the system default format of the RIP packets Run the Command... undo version 12.7.3 Configuring Zero Field Check for RIP-I Packets This operation enables you to configure zero field check for RIP-1 packets. Context If the field is not zero, RIP refuses to process the packet. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the checkzero command to configure zero field check for RIP-1 packets. Step 3 Run the display rip command to query the configuration information. ----End 12-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Example To configure zero field check for RIP-1 packets, do as follows: huawei(config)#rip 1 huawei(config-rip-1)#checkzero huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Disabled Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-8 lists the related operation for configuring zero field check for RIP-1 packets. Table 12-8 Related operation for configuring zero field check for RIP-1 packets To... Cancel zero field check for RIP-1 packets Run the Command... undo checkzero 12.7.4 Setting the Cost of the Default Route This operation enables you to set the cost of the default route. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the default-route originate command to create a default route and set its cost. Step 3 Run the display rip command to query the configured cost of the default route. ----End Example To create a default route and set its cost as 5, do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-21 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#rip 1 huawei(config-rip-1)#default-route originate cost 5 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-9 lists the related operation for setting the cost of the default route. Table 12-9 Related operation for setting the cost of the default route To... Delete the default route Run the Command... undo default-route originate 12.7.5 Enabling Route Summarization This operation enables route summarization. Context Route summarization is to combine routes of different subnets into one route. Route summarization helps to reduce the routing traffic on the network as well as the size of the routing table. Procedure Step 1 Run the rip command to start RIP process. Step 2 Run the summary command to enable route summarization. Step 3 Run the display rip command to query the configuration of default route summarization. ----End 12-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Example To enable the route summarization, do as follows: huawei(config)#rip 1 huawei(config-rip-1)#summary huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-10 lists the related operation for enabling route summarization. Table 12-10 Related operation for enabling route summarization To... Disable route summarization Run the Command... undo summary 12.7.6 Specifying Default Routing Metric This operation enables you to specify the default routing metric. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the default-cost command to specify the default routing metric. Step 3 Run the display rip command to query the configuration information on the default routing metric. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-23 .7. Restore the default routing metric Run the Command. Procedure Step 1 Run the rip command to start the RIP process. static routes and OSPF routes) of other protocols into the routing table at a certain metric. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#default-cost 10 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 10 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-11 lists the related operation for specifying default routing metric. This greatly improves the capability of RIP to obtain routes and enhances the performance of RIP. undo default-cost 12.7 Importing Routes of Other Protocols This operation enables you to import routes of other protocols...12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the default routing metric as 10. Table 12-11 Related operation for specifying default routing metric To. the MA5600 allows RIP to import routes (including direct route. Context To enhance the routing function.. 12-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . .8 Disabling Receiving Host Routes This operation prohibits the router from receiving host routes.. Table 12-12 Related operation for importing routes of other protocols To. By default. Context l In some special cases. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#import-route static Related Operation Table 12-12 lists the related operation for importing routes of other protocols.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Step 2 Run the import-route command to import static routes.. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#undo host-route huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-25 . receiving host routes is enabled. but consume vast amounts of network resources. ----End Example To set the system to refuse host routes. and these routes are of little help in route addressing. ----End Example To import static routes.7. Step 3 Run the display rip command to query the configuration information. Step 2 Run the undo host-route command to prohibit the router from receiving host routes. l Procedure Step 1 Run the rip command to start the RIP process. receiving host routes shall be disabled.. the router can receive a number of host routes from the same subnet. undo import-route 12. In this case. Stop importing routes of other protocols Run the Command. Step 2 Run the preference command to configure the RIP preference.9 Configuring the RIP Preference This operation enables you to set RIP preference.7. Table 12-13 Related operation for disabling receiving host routes To. Context l Each kind of IGP routing protocol has its own preference... the lower the preference. l l Procedure Step 1 Run the rip command to start the RIP process. The default RIP preference is 100..12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide RIP process : 1 RIP version : RIP-2 Preference : 100 Checkzero : Enabled Default-cost : 10 Summary : Enabled Hostroutes : Disabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-13 lists the related operation for disabling receiving host routes. The greater the preference value. Receive host routes Run the Command. ----End Example To set the RIP preference as 120. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#preference 120 huawei(config-rip-1)#quit 12-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 3 Run the display rip command to query the configuration of RIP preference. The route policy selects the route of the routing protocol with the highest preference as the optimal route. host-route 12.. do as follows: huawei(config)#rip 1 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-27 . ----End Example To filter the transmitted RIP routing updates based on the IP-prefix list abc. Routes which fail to meet the filtering criteria will not be received or sent.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: 12 Configuring the Routing Protocol display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 120 Checkzero : Enabled Default-cost : 10 Summary : Enabled Hostroutes : Disabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-14 lists the related operation for configuring the RIP preference. Restore the default RIP preference Run the Command.... Step 2 Run the filter-policy ip-prefix export static command to configure the route filtering policy.7.10 Configuring the Route Filtering Policy This operation enables you to configure the route filtering policy to filter unnecessary routes. undo preference 12. or the IPprefix of the VLAN interface. Procedure Step 1 Run the rip command to start the RIP process. Table 12-14 Related operation for configuring the RIP preference To. IP-prefix list of the system.. Context The route filtering can be performed based on the ACL. Delete the route filtering policy Run the Command.. undo filter-policy 12.11 Verifying the Source IP Address of a RIP Route Update This operation enables you to verify the source IP address of a RIP route update.7.... Context In general.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-rip-1)#filter-policy ip-prefix abc export static Related Operation Table 12-15 lists the related operation for configuring the route filtering policy. Step 3 Run the display rip command to query the configuration information. Table 12-15 Related operation for configuring the route filtering policy To. do not disable this function. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#verify-source huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-2 Preference : 120 Checkzero : Enabled Default-cost : 10 Summary : Enabled Hostroutes : Disabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : None Default routes : Enabled Default route cost : 5 Verify-source : Enabled Networks : None Configured peers : None 12-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To enable the RIP route verification function. Procedure Step 1 Run the rip command to start the RIP process. Step 2 Run the verify-source command to verify the source IP address of a RIP route update. Step 2 Run the reset command to restore the system configuration parameters of the RIP process. Step 3 Run the display rip command to query the system configuration parameters of the RIP process. Procedure Step 1 Run the rip command to enable the RIP process.. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#reset huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-1 compatibility Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 30 sec Age time : 180 sec Suppress time : 0 sec Garbage-collect time : 120 sec Silent interfaces : None Default routes : Disabled Verify-source : Enabled Networks : None Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-29 . ----End Example To restore the system configuration parameters of the RIP process.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 12 Configuring the Routing Protocol Related Operation Table 12-16 lists the related operation for verifying the source IP address of a RIP route update. undo verify-source 12.7. Disable the verification function Run the Command... Table 12-16 Related operation for verifying the source IP address of a RIP route update To.12 Resetting RIP This operation enables you to restore the default settings of RIP.. Context After the transmission is disabled on an interface. Step 3 Run the display rip command to query the configuration information.0 huawei(config-rip-1)#silent-interface vlanif 7 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-1 compatibility Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 30 sec Age time : 180 sec 12-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) .13 Clearing RIP Process Statistics This operation enables you to clear RIP process statistics. Procedure Step 1 Run the rip command to start the RIP process.1. do as follows: huawei#reset rip 1 statistics 12. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#network 192. the interface can still receive and process RIP packets from other routers.7. Step 2 Run the silent-interface command to disable RIP packet transmission on an interface.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12. Step 2 Run the reset rip statistics command to clear statistics of RIP process. ----End Example To disable VLAN interface 7 from sending RIP packets.0. ----End Example To clear statistics of RIP process 1.14 Disabling RIP Packet Transmission on an Interface This operation enables you to disable RIP packet transmission on an interface. Procedure Step 1 Run the rip command to start the RIP process.7. 1. ----End Example To configure the IP address of the peer router as 10.0.. If you want an interface to exchange routing information with a peer router in unicast mode. undo silent-interface 12. Table 12-17 Related operation for disabling RIP packet transmission on an interface To. RIP packets are forwarded in broadcast mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Suppress time : 0 sec Garbage-collect time : 120 sec Silent interfaces : vlanif7 Default routes : Disabled Verify-source : Enabled Networks : 192. So. it is recommended that you change the related interface on the router to silent mode.1. Specifying the peer router enables the peer router to receive the same packet in both multicast (broadcast) and unicast modes. Restore RIP packets transmission on a specified interface Run the Command.. run the peer command to specify the IP address of the peer router.. when configuring the IP address of the peer router. Step 2 Run the peer command to configure the IP address of a peer router.0.0..0 Configured peers : None Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-17 lists the related operation for disabling RIP packet transmission on an interface.7.1 Related Operation Table 12-18 lists the related operation for configuring the IP Address of a Peer router. l Procedure Step 1 Run the rip command to start the RIP process. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#peer 10. Context l Generally.15 Configuring the IP Address of a Peer Router This operation enables you to configure the IP address of a peer router. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-31 .0.0. ..255.. Table 12-19 Related operation for configuring a summary route IP address To. Procedure Step 1 Runt the interface vlanif command to enter VLAN interface mode.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 12-18 Related operation for configuring the IP Address of a Peer router To.0. That is..16 Configuring a Summary Route IP Address This operation enables you to configure the IP address of a summary route.17 Enabling an Interface to Receive/Transmit RIP Packets This operation enables an interface to receive and transmit RIP packets..0 Related Operation Table 12-19 lists the related operation for configuring a summary route IP address. With split horizon or poison reverse is enabled. Context By default.0.7. Context l l The summary address is valid only when the classful summarization is disabled. disable split horizon or poison reverse of the related interface. to transmit route summarization to neighbors. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip summary-address 10. Cancel the IP address of the specified peer router Run the Command. summary address and classful summarization will fail..7.255.0. undo peer 12.0 255. 12-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . undo rip summary-address 12.. an interface is enabled to receive and transmit RIP packets. Step 2 Runt the rip summary-address command to configure IP address of a summary route.. Cancel the specified summary route IP address Run the Command.0. ----End Example To configure the summary IP address of VLAN interface 2 as 10.0. .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Procedure Step 1 Run the interface vlanif command to enter VALN interface mode.. the split horizon function is enabled. undo rip output 12. ----End To allow VLAN interface 2 to receive RIP packets. Table 12-20 Related operation for enabling an interface to receive and transmit RIP packets To. RIP will not send the routing information learned from a neighbor to it again. Context l Once the function is enabled. This avoids the creation of routing loops. ----End Example To enable the RIP split horizon function.18 Enabling the Split Horizon Function This operation enables the split horizon function. Step 2 Run the rip input(rip output) command to enable an interface to receive/transmit RIP packets. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip input To allow VLAN interface 2 to transmit RIP packets. Step 2 Run the rip split-horizon command to enable the split horizon function.. The split horizon and poison reserve functions cannot be enabled at the same time. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip output Related Operation Table 12-20 lists the related operation for enabling an interface to receive and transmit RIP packets. By default.7. do as follows: huawei(config)#interface vlanif 2 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-33 . Prevent an interface from receiving or transmitting RIP packets Run the Command. l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode.. Table 12-22 Related operation for enabling the poison reverse function To. the route is configured as infinite. The poison reversal function avoids the creation of routing loops among multiple routers.. undo rip poison-reverse 12-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. Related Operation Table 12-22 lists the related operation for enabling the poison reverse function. Step 2 Run the rip poison-reverse command to enable the poison reverse function. Context You are not allowed to enable both the split horizon and poison reverse functions at the same time.. Disable the split horizon function Run the Command. ----End Example To enable the RIP poison reverse function. that is.. the routing metric is set as 16.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-if-vlanif2)#rip split-horizon Related Operation Table 12-21 lists the related operation for enabling the split horizon function... do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip poison-reverse NOTE Once the function is enabled. Table 12-21 Related operation for enabling the split horizon function To.. undo rip split-horizon 12. if a route breaks down but is still kept in RIP packets..19 Enabling the Poison Reverse Function This operation enables the poison reverse function.7.. Disable the poison reversal function Run the Command. .. Context RIP-2 supports two authentication modes: plain text authentication and MD5 encrypted text authentication. which is not encrypted.. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip authentication-mode simple huawei Related Operation Table 12-23 lists the related operation for configuring the RIP-2 authentication mode. Table 12-23 Related operation for configuring the RIP-2 authentication mode To. l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-35 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol 12.21 Configuring the Additional Metric of a Route This operation enables you to configure the additional metric of a route. Cancel the RIP authentication Run the Command.. ----End Example To configure the RIP-2 authentication mode as plain text mode and password as huawei. Step 2 Run the rip authentication-mode command to configure the RIP-2 authentication mode. l The plain text authentication does not ensure security. MD5 encrypted text authentication has two formats: one is a common packet format and the other is a non-standard packet format.7.7. Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. Context The default input metric is 0 while the default output metric is 1.20 Configuring the RIP-2 Authentication Mode This operation enables you to configure the RIP-2 authentication mode. MD5 encrypted text authentication ensures security in that the authentication key is encrypted and then sent. The authentication key. is sent together with the packet. undo rip authentication-mode 12. In general. Restore the default additional metric Run the Command.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 2 Run the rip metricin or rip metriout command to configure the added metric when the interface receives or transmits or the RIP packets. The suppression time is 0s. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip metricin 5 To configure the output metric added to a RIP route as 5. ----End Example To configure the input metric added to a RIP route as 5..7. Table 12-24 Related operation for configuring the additional metric of a route To. do not change the default values of the timer. Step 2 Run the timers rip command to configure the RIP timer..22 Configuring the RIP Timer This operation enables you to configure the RIP timer so as to improve the RIP running performance. undo rip metricin 12. Procedure Step 1 Run the rip command to start the RIP process... Step 3 Run the display rip route command to query configuration information on the RIP timer. Context By default: l l l l The update time as 30s. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#rip metriout 5 Related Operation Table 12-24 lists the related operation for configuring the additional metric of a route. ----End 12-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Garbage-collect time is 120s. The age time is 180s. suppression time as 0s and Garbage-collect time as 240s.0. do as follows: huawei(config)#rip 1 huawei(config-rip-1)#timers rip 35 170 0 240 huawei(config-rip-1)#quit huawei(config)#display rip 1 { route<K>|database<K>|interface<K>|<cr> }: Command: display rip 1 Public VPN-instance name : RIP process : 1 RIP version : RIP-1 compatibility Preference : 100 Checkzero : Enabled Default-cost : 0 Summary : Enabled Hostroutes : Enabled Maximum number of balanced paths : 1 Update time : 35 sec Age time : 170 sec Suppress time : 0 sec Garbage-collect time : 240 sec Silent interfaces : vlanif7 Default routes : Disabled Verify-source : Enabled Networks : 192.7. undo timers rip 12. Context By default.23 Enabling the Transparent Transmission function of the RIP Packet Based on the VLAN This operation enables the transparent transmission function of the RIP packet based on the VLAN. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-37 . Restore the default RIP timer configuration Run the Command.1...1 Triggered updates sent : 0 Number of route changes : 0 Number of replies to queries : 0 Related Operation Table 12-25 lists the related operation for configuring the RIP timer.0.0 Configured peers : 10.. the function is disabled. Table 12-25 Related operation for configuring the RIP timer To. age time as 170s.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Example To set the update time as 35s.0.. 12. 12.7 Configuring an NBMA Adjacent Router This operation enables you to manually configure a router adjacent to the NBMA interface.8.8. 12. 12. 12.2 Configuring DR Priority This operation enables you to configure the DR priority. 12.8.8. do as follows: huawei(config)#rip tunnel enable vlan 10 huawei(config)#display rip tunnel vlan 10 rip tunnel is enable 12. 12.8.1 Enabling OSPF Process This operation enables OSPF process.8.3 Setting an OSPF Router ID This operation enables you to configure the ID for a router. 12.6 Configuring the OSPF Stub Area This operation enables you to configure an area as an OSPF Stub area and set its attributes. Step 2 Run the display rip tunnel command to query the status of the function. To reduce the OSPF packet traffic in the network segment. 12.12 Setting the VLAN-Based Transparent Transmission for OSPF Packets 12-38 Huawei Technologies Proprietary Issue 04 (2007-11-30) .8 Configuring OSPF This section describes how to configure OSPF.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the rip tunnel command to enable the transparent transmission function of the RIP packet based on the VLAN. ----End Example To enable the transparent transmission function of the RIP packet based on VLAN 10.8. 12. so as to enhance the network adaptability of OSPF.8.8.8.8.10 Configuring the Maximum OSPF Route Count This operation enables you to configure the maximum OSPF route count. and reduce the consumption of system resources.8. 12.4 Entering OSPF Area Config Mode This operation enables you to enter OSPF area config mode.5 Configuring Subnets for an Area This operation enables you to configure the interface running OSPF and the area of the interface.9 Disabling OSPF Packet Transmission on an Interface This operation enables you to prohibit an interface from transmitting OSPF packets.8 Setting OSPF Preference This operation enables you to set OSPF preference. 12.11 Enabling OSPF Logging Function This operation enables OSPF logging function. a router is specified as the DR and another router is specified as the BDR according to the interface DR priority. 62. OSPF is disabled.27 OSPF Protocol Information RouterID: 10. Step 2 Run the display ospf command to query the OSPF process. To configure the related parameters. undo ospf Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-39 .. enable the function. Context l l By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol This operation enables you to set the VLAN-based transparent transmission for open shortest path first (OSPF) packets. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#quit huawei(config)#display ospf brief OSPF Process 1 with Router ID 10.1 Enabling OSPF Process This operation enables OSPF process.27 Border Router: Route Tag: 0 Multi-VPN-Instance is not enabled Spf-schedule-interval: 5 Default ASE parameters: Metric: 1 Tag: 1 Type: 2 Route Preference: 10 ASE Route Preference: 150 SPF Computation Count: 0 RFC 1583 Compatible Area Count: 0 Nssa Area Count: 0 ExChange/Loading Neighbors: 0 Related Operation Table 12-26 lists the related operation for enabling OSPF. ----End Example To enable OSPF process 1. If you require the transparent transmission for OSPF packets in a VLAN. 12.71. Disable OSPF Run the Command.. enable OSPF first.62. Table 12-26 Related operation for enabling OSPF To. Procedure Step 1 Run the ospf command to start the OSPF process..8.71.. 12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12.1 Interfaces Interface: 192.1 (vlanif2) Cost: 1 State: Down Type: Broadcast MTU: 1500 Priority: 8 Designated Router: 0.3 Setting an OSPF Router ID This operation enables you to configure the ID for a router. ----End 12-40 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 192.8.0 Backup Designated Router: 0. ----End Example To configure the DR priority 8 for interface vlanif2.168.1. Dead 40 . Retransmit 5 . Transmit Delay 1 12.0.0. p2mp network type do not need DR election. The interfaces of p2p.8. Procedure Step 1 Run the interface vlanif command to enter VALN interface mode.1.1. Step 2 Run the display ospf brief command to query the configured OSPF router ID.0 Timers: Hello 10 . which uniquely identifies a router in the AS.2 Configuring DR Priority This operation enables you to configure the DR priority.1. Context l l OSPF does not support configuring the DR priority for interface NULL.0. Step 2 Run the ospf dr-priority command to configure DR priority.0. The DR is for broadcast or NBMA type interfaces. Step 3 Run the display ospf interface command to query DR priority. a router is specified as the DR and another router is specified as the BDR according to the interface DR priority. To reduce the OSPF packet traffic in the network segment.1 24 huawei(config-if-vlanif2)#ospf dr-priority 8 huawei(config-if-vlanif2)#quit huawei(config)#display ospf interface vlanif 2 OSPF Process 1 with Router ID 192. Poll 120 . Context A router ID is a 32-bit unsigned integer. Procedure Step 1 Run the router-id command to set an OSPF router ID. Step 2 Run the area command to add an area and enter the configuration mode of the area.1. the MA5600 automatically converts the integer into an IP address.8..1 Warning: OSPF The new router id will be activated only after Reset Ospf Process huawei(config-ospf-1)#quit huawei(config)#reset ospf 1 process huawei(config)#display ospf brief OSPF Process 1 with Router ID 192. This helps to reduce the number of OSPF packets in the network. the system first creates the area and then enters area config mode. Table 12-27 Related operation for setting an OSPF router ID To.168.168.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Example To set the ID of a router as 192.1.168. Context l OSPF further divides the AS into different areas. thus improving the performance of OSPF. l l l Procedure Step 1 Run the ospf command to start the OSPF process.1 OSPF Protocol Information RouterID: 192. Disable the OSPF process Run the Command. If an area ID is an integer. An area ID is shown in the form of an IP address.1 Border Router: Route Tag: 0 Multi-VPN-Instance is not enabled Spf-schedule-interval: 5 Default ASE parameters: Metric: 1 Tag: 1 Type: 2 Route Preference: 10 ASE Route Preference: 150 SPF Computation Count: 0 RFC 1583 Compatible Area Count: 0 Nssa Area Count: 0 ExChange/Loading Neighbors: 0 Related Operation Table 12-27 lists the related operation for setting an OSPF router ID.168.1.1.. undo ospf 12.1. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-41 .. Routing information is transmitted between the areas through the ABRs which are located at the boarders of the areas.4 Entering OSPF Area Config Mode This operation enables you to enter OSPF area config mode. do as follows: huawei(config)#ospf router-id 192.. If the specified area does not exist. 1)# Related Operation Table 12-28 lists the related operation for entering OSPF area config mode.0 for the interface running OSPF. undo area 12.20.5 Configuring Subnets for an Area This operation enables you to configure the interface running OSPF and the area of the interface. Procedure Step 1 Run the ospf command to start the OSPF progress. do as follows: huawei(config)#ospf 100 huawei(config-ospf-100)#area 1 huawei(config-ospf-100-area-0. Table 12-28 Related operation for entering OSPF area config mode To..20.255 Related Operation Table 12-29 lists the related operation for configuring subnets for an area..0.0 0. "1" indicates the digit in the IP address is omitted and "0" indicates that the digit must be reserved. ----End Example To configure the subnet 131.0. Delete an area Run the Command.8. Step 2 Run the area command to add an area and enter the configuration mode of the area.2)#network 131. the mask of the IP address is reserved (0 changed to 1 and 1 changed to 0). Step 3 Run the network command to configure the interface running OSPF protocol and the area the interface belongs to.0.0.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To create area 1 and enter area config mode.108. that is. Context Wildcard-mask in the network command is the reverse of the IP address.0.108. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#area 1 huawei(config-ospf-1-area-0..0. 12-42 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. . Delete a Stub area Configure a Stub router Run the Command. the preference for NBMA interface adjacent router is 1.8..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Table 12-29 Related operation for configuring subnets for an area To. Since an NBMA interface on the network cannot discover the adjacent routers through broadcasting the Hello packets. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#area 1 huawei(config-ospf-1-area-0. you need to specify the adjacent routers. Context l l Up to 128 adjacent routers can be configured in a process.. undo network 12.1)#stub Related Operation Table 12-30 lists the related operations for configuring a Stub area.. Delete the interface running OSPF Run the Command. ----End Example To configure OSPF area 1 as a Stub area...6 Configuring the OSPF Stub Area This operation enables you to configure an area as an OSPF Stub area and set its attributes... undo stub (undo)stub-router 12. Huawei Technologies Proprietary 12-43 l Issue 04 (2007-11-30) . By default.0. Step 3 Run the stub command to configure the OSPF stub area. Procedure Step 1 Run the ospf command to start the OSPF process. Step 2 Run the area command to add an area and enter the configuration mode of the area.7 Configuring an NBMA Adjacent Router This operation enables you to manually configure a router adjacent to the NBMA interface.0.8. Table 12-30 Related operations for configuring a Stub area To. 1 and specify the DR priority as 120. The system defines a preference for each routing protocol. the route found by the routing protocol with the highest preference serves as the current effective route.. Step 2 Run the preference command to set OSPF preference. ----End Example To set the OSPF preference as 12.. undo peer 12. ----End Example To configure the IP address of the NBMA adjacent router as 1. l l Procedure Step 1 Run the ospf command to start the OSPF process. do as follows: 12-44 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The OSPF preference ranges from 1 to 255. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#peer 1.. Step 2 Run the peer command to configure an NBMA adjacent router.1 dr-priority 120 Related Operation Table 12-31 lists the related operation for configuring an NBMA adjacent router. Due to this reason.1.1. Table 12-31 Related operation for configuring an NBMA adjacent router To.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the ospf command to start the OSPF process. Context l Multiple dynamic routing protocols can run on one router at the same time. it is 10. By default.. When different routes are found by different protocols to the same destination.8. Cancel the configuration of the NBMA adjacent router Run the Command. Step 3 Run the display ospf brief command to query the OSPF preference.1.1.8 Setting OSPF Preference This operation enables you to set OSPF preference. the problem of route sharing and routing protocol selection occurs. . the OSPF Hello packets of the interface will be blocked. Context After the transmission is disabled on an interface.. the interface shall be in silent state. ----End Example To prohibit VLAN interface 7 from transmitting OSPF packets.2.3 Border Router: Route Tag: 0 Multi-VPN-Instance is not enabled Applications Supported: MPLS Traffic-Engineering Spf-schedule-interval: 5 Default ASE parameters: Metric: 1 Tag: 1 Type: 2 Route Preference: 12 ASE Route Preference: 150 SPF Computation Count: 2 Retransmission limitation is disabled Area Count: 0 Nssa Area Count: 0 ExChange/Loading Neighbors: 0 12 Configuring the Routing Protocol Related Operation Table 12-32 lists the related operation for setting OSPF preference. Procedure Step 1 Run the ospf command to start the OSPF process. so as to enhance the network adaptability of OSPF.0.8... Restore the default OSPF preference Run the Command.9 Disabling OSPF Packet Transmission on an Interface This operation enables you to prohibit an interface from transmitting OSPF packets. and reduce the consumption of system resources.2. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#silent-interface vlanif 7 Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-45 . undo preference 12. Step 2 Run the silent-interface command to prohibit an interface from transmitting OSPF packets. and no adjacency can be set up on the interface.3 OSPF Protocol Information RouterID: 192. However.0. Table 12-32 Related operation for setting OSPF preference To.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#ospf 1 huawei(config-ospf-1)#preference 12 huawei(config-ospf-1)#quit huawei(config)#display ospf brief OSPF Process 1 with Router ID 192. The interface can still advertise its direct route. ... Table 12-34 Related operation for configuring the maximum OSPF route count To. Allow an interface to send OSPF packets Run the Command. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#maximum-routes intra 500 Related Operation Table 12-34 lists the related operation for configuring the maximum OSPF route count. Restore the default setting Run the Command.. undo silent-interface Remarks By default. 12.. Context The default maximum route count is: l l l Intra-area routes: 10000 Inter-area routes: 10000 External routes: 10000 Procedure Step 1 Run the ospf command to start the OSPF process. Step 2 Run the maximum-routes command to configure the maximum OSPF route count..8.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 12-33 lists the related operation for prohibiting an interface from transmitting OSPF packets..10 Configuring the Maximum OSPF Route Count This operation enables you to configure the maximum OSPF route count. undo maximum-routes 12-46 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. the system allows an interface to send OSPF packets. ----End Example To configure the maximum count of OSPF routes as 500. Table 12-33 Related operation for prohibiting an interface from transmitting OSPF packets To. Procedure Step 1 Run the ospf tunnel command to set the VLAN-based transparent transmission for OSPF packets..8. If you require the transparent transmission for OSPF packets in a VLAN. Disable the logging function of OSPF Run the Command. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#enable log config Related Operation Table 12-35 lists the related operation for enabling the OSPF logging function.. ----End Example To enable the logging function of OSPF.. Step 2 Run the enable log command to query log information.8. Procedure Step 1 Run the ospf command to start the OSPF process. enable the function. Table 12-35 Related operation for enabling the OSPF logging function To.. undo enable log 12. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-47 .12 Setting the VLAN-Based Transparent Transmission for OSPF Packets This operation enables you to set the VLAN-based transparent transmission for open shortest path first (OSPF) packets.11 Enabling OSPF Logging Function This operation enables OSPF logging function.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol 12. the function is disabled. Step 2 Run the display ospf tunnel command to query the VLAN-based transparent transmission for OSPF packets. Context By default. 12. non-broadcast and multi-access.3 Configuring OSPF Packet Authentication This operation enables you to configure OSPF packet authentication. The default network type of an ATM interface is NBMA. 12.9. Point-to-Multipoint Point-to-Point Default The default network type of an Ethernet port is broadcast. By default.1 Configuring the Network Type on an OSPF Interface This operation enables you to configure the network type for an OSPF interface.9.9. Context OSPF divides networks into four types. The default network type of a serial port is P2P. For details. 12.9 Configuring OSPF on a VLAN Interface This section describes how to configure OSPF on a VLAN interface. see Table 12-36.9.4 Configuring the MTU of the DD Packet This operation enables you to configure the MTU of the DD packet.9. The ATM network is of this type. Table 12-36 Description of the network types Network type Broadcast NBMA Description The default network type. 12. 12.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To enable the transparent transmission for OSPF packets in VLAN 10. 12-48 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This type of network is fully connected. Non-Broadcast Multi-Access. do as follows: huawei(config)#ospf tunnel enable vlan 10 huawei(config)#display ospf tunnel vlan 10 ospf tunnel is enable 12.2 Configuring OSPF Cost This operation enables you to configure the cost of the interface running OSPF. the network type of an interface is determined by the physical interface.1 Configuring the Network Type on an OSPF Interface This operation enables you to configure the network type for an OSPF interface. p2mp p2p Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. . Step 2 Run the ospf cost command to configure the cost of the interface running OSPF. to configure the network type of the port 0/19/0 as P2P. ----End Example To configure the cost of the interface running OSPF as 5. do as follows: huawei(config)#interface vlanif 2 huawei(config-vlanif2)#ospf cost 5 Related Operation Table 12-38 lists the related operation for configuring OSPF cost. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-49 .. undo ospf network-type 12.. do as follows: huawei(config)#interface vlanif 2 huawei(config-vlanif-2)#ospf network-type p2p Related Operation Table 12-37 lists the related operation for configuring the network type on an OSPF interface. Restore the default network type of the OSPF interface Run the Command. ----End Example Presume that the Ethernet port 0/7/0 is in VLAN 2.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Step 2 Run the ospf network-type command to configure the network type.2 Configuring OSPF Cost This operation enables you to configure the cost of the interface running OSPF.9.. Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. Table 12-37 Related operation for configuring the network type on an OSPF interface To. the interface is not configured with any authentication mode. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf authentication-mode simple huawei Related Operation Table 12-39 lists the related operation for configuring OSPF packet authentication... Restore the default cost Run the Command.9. ----End Example To configure the OSPF authentication as plain text authentication and the authentication password as "huawei". undo ospf authentication-mode 12.4 Configuring the MTU of the DD Packet This operation enables you to configure the MTU of the DD packet. 12. undo ospf cost Remarks By default... Step 2 Run the ospf authentication-mode command to configure OSPF packet authentication. 12-50 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Delete the configured authentication mode and key Run the Command. Table 12-39 Related operation for configuring OSPF packet authentication To.3 Configuring OSPF Packet Authentication This operation enables you to configure OSPF packet authentication. Context l OSPF supports plain text authentication or MD5/HMAC-MD5 encrypted text authentication for adjacent routes to transmit OSPF packets...9.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 12-38 Related operation for configuring OSPF cost To. By default. l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. the system calculates the cost needed for the interface running OSPF according to the current baud rate of the interface... do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf mtu-enable Related Operation Table 12-40 lists the related operation for configuring the MTU of the DD packet. In other words. l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. Table 12-40 Related operation for configuring the MTU of the DD packet To. it considers the adjacent router as unavailable. the routers begin to transmit DD packets to each other to exchange the owned routing information. 12. ----End Example To configure interface vlanif2 to fill in the MTU field when transmitting DD packet. 12.3 Setting the Hello Packet Poll Interval This operation enables you to set the Hello packet poll interval. to maintain adjacency and elect the DR and BDR.10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Context l After the adjacency is set up between two routers. 12. undo ospf mtu-enable 12. 12.1 Setting the Interval for Sending the Hello Packets This operation enables you to set the interval for sending Hello packets.. Step 2 Run the ospf mtu-enable command to configure the MTU of the DD packet. By default. This period is called the dead time between adjacent routers..10. Restore the default setting for the interface when transmitting DD packets Run the Command. If a router fails to receive any Hello packet from an adjacent router for a certain period..10. the MTU field in the DD packets is 0.10 Configuring OSPF Timer This section describes how to configure OSPF timer.5 Setting the LSA Retransmit Interval between Adjacent Routers Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-51 . the interface does not fill in the MTU field while transmitting DD packets.10. The OSPF router transmits Hello packets periodically to find the adjacent router.2 Setting the Dead Time Between Adjacent Routers This operation enables you to set the dead time between adjacent routers. 12..10.4 Setting the LSA Transmit Delay This operation enables you to set the LSA transmit delay. Context l By default.6 Setting the SPF Calculation Interval for OSPF This operation enables you to set the SPF calculation interval for OSPF..12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to set the LSA retransmit interval between adjacent routers. Restore the default interval for sending Hello packets Run the Command. The OSPF router transmits Hello packets periodically to find the adjacent router. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf timer hello 15 Related Operation Table 12-41 lists the related operation for setting the interval for sending Hello packets. Hello interval of P2P and broadcast interfaces is 10s and that of P2MP and NBMA interfaces is 30s.. undo ospf timer hello 12. Table 12-41 Related operation for setting the interval for sending Hello packets To. ----End Example To set the interval for sending OSPF Hello packet as 15s. to maintain adjacency and elect the DR and BDR. 12.. This period is called the dead time between adjacent routers. 12-52 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The intervals for sending Hello packets of network neighbors should be consistent with each other.1 Setting the Interval for Sending the Hello Packets This operation enables you to set the interval for sending Hello packets. it considers the adjacent router as unavailable.10. 12. The interval for sending Hello packets should be in inverse proportion of route convergence speed and network load. Step 2 Run the ospf timer hello command to set the interval for sending Hello packets.. l l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode.10.10.2 Setting the Dead Time Between Adjacent Routers This operation enables you to set the dead time between adjacent routers. After the network type of the interface is modified. the interval for sending Hello packets restores the default value. If a router fails to receive any Hello packet from an adjacent router for a certain period. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-53 .. The Hello packet poll interval shall at least four times the interval for sending Hello packets. l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf timer dead 60 Related Operation Table 12-42 lists the related operation for setting the dead time between adjacent routers. a router transmits Hello packet to the failed router periodically with the Hello packet poll interval. Context l In the NBMA network.10.. the dead time between adjacent routers on a P2P and broadcast interfaces is 40s and that on P2MP and NBMA (non-broadcast) interfaces is 120s. undo ospf timer dead 12. the Hello packet poll interval is 120s.. after the adjacent router fails. Table 12-42 Related operation for setting the dead time between adjacent routers To. ----End Example To set the dead time of adjacent routers as 60s. Step 2 Run the ospf timer dead command to set the dead time of adjacent routers.3 Setting the Hello Packet Poll Interval This operation enables you to set the Hello packet poll interval. the dead time is restored to the default value.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Context l By default. The value of dead seconds must be 4 times that of hello seconds at least. l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. After the network type of the interface is modified. Restore the default dead time Run the Command. By default. Step 2 Run the ospf timer poll command to set the Hello packet poll interval.. LSA ages... Table 12-43 Related operation for setting the Hello packet poll interval To. undo ospf timer poll 12. 12-54 Huawei Technologies Proprietary Issue 04 (2007-11-30) .4 Setting the LSA Transmit Delay This operation enables you to set the LSA transmit delay. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf timer poll 60 Related Operation Table 12-43 lists the related operation for setting the Hello packet poll interval.. ----End Example To set LSA transmit delay as 10s.10. However. By default.. This configuration is very important for low speed networks. When saved in the LSDB of the local router. Restore the default poll interval Run the Command. the delay for sending link-state update is 1s. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf trans-delay 10 Related Operation Table 12-44 lists the related operation for setting the LSA transmit delay. Context l The Link State Advertise (LSA) describes the interface state and the adjacency state of a router. It is necessary to add LSA transmit delay to the expiration time before the transmission. LSA does not age in the process of network transmission. l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the Hello packet poll interval as 60s. Step 2 Run the ospf trans-delay command to set the LSA transmit delay. By default... Restore the default LSA transmit delay Run the Command. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ospf timer retransmit 8 Related Operation Table 12-45 lists the related operation for setting the LSA retransmit interval between adjacent routers..10. Table 12-45 Related operation for setting LSA retransmit interval between adjacent routers To. Step 2 Run the ospf timer retransmit command to set the LSA retransmit interval..6 Setting the SPF Calculation Interval for OSPF This operation enables you to set the SPF calculation interval for OSPF.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Table 12-44 Related operation for setting the LSA transmit delay To.. Context l When a router sends an LSA to its neighbors.. undo ospf timer retransmit 12.. ----End Example To set the LSA retransmit interval as 8s.10. Restore the default LSA retransmit interval between adjacent routers Run the Command.. the LSA retransmit interval between adjacent routers is 5s. A too small LSA retransmit interval on an interface may lead to unnecessary retransmission. undo ospf trans-delay 12. l l Procedure Step 1 Run the interface vlanif command to enter VALN interface mode. this LSA shall be resent. A too large LSA retransmit interval affects the flooding speed in case of packet loss. it shall wait for an ACK from them. If no ACK is received from the neighbors within the retransmit interval.5 Setting the LSA Retransmit Interval between Adjacent Routers This operation enables you to set the LSA retransmit interval between adjacent routers. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-55 . do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#spf-schedule-interval 10 Related Operation Table 12-46 lists the related operation for setting the SPF calculation interval for OSPF. ----End Example To set the interval of SPF recalculation as 10s. Calculating the shortest path upon any change consumes vast amounts of resources and affects the operation efficiency of the router. Adjusting the SPF calculation interval. the interval of SPF recalculation is 5s.11. 12... 12-56 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Run the spf-schedule-interval command to set the SPF calculation interval for OSPF.1 Configuring Route Summarization Between Areas This operation enables you to configure route summarization between areas. 12. however. l Procedure Step 1 Run the ospf command to start the OSPF process. 12. By default. Route summarization means that the ABR summarizes all routes with the same prefix to a route entry and then send it to other areas.11. Route summarization means that the ABR summarizes all routes with the same prefix to a route entry and then send it to other areas. can restrain the resource consumption due to frequent network changes. undo spf-schedule-interval 12. so as to reduce the broadcasted routing information.1 Configuring Route Summarization Between Areas This operation enables you to configure route summarization between areas. the SPF shall be recalculated. so as to reduce the broadcasted routing information.2 Configuring the Summarization of Routes Imported by OSPF This operation enables you to how to configure the summarization of routes imported by OSPF.. Table 12-46 Related operation for setting the SPF calculation interval for OSPF To..11. Restore the default SPF calculation interval Run the Command.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l Whenever the LSDB of OSPF changes.11 Configuring Route Summarization This sections describes how to configure route summarization. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Context l l l By default. The route summarization is valid when configured on an ABR.0 Related Operation Table 12-47 lists the related operation for configuring route summarization between areas.255 huawei(config-ospf-100-area-0.20.20.0..2 Configuring the Summarization of Routes Imported by OSPF This operation enables you to how to configure the summarization of routes imported by OSPF. undo abr-summary 12.0.0 in OSPF area as one route entry 20.1#abr-summary 20.0.20.0. the ABR does not summarize routes between areas. Disable the route summarization between areas Run the Command.0.20.0. Step 3 Run the network command to configure the interface running OSPF protocol and the area the interface belongs to. Procedure Step 1 Run the ospf command to start the OSPF progress.0. the summary of imported routes is disabled. By default.0 and send it to other areas.0.0 and 20.0 255.1)#network 20..10.20.0. One area can be configured with multiple summarization network segments. ----End Example To summarize the routes in the two network segments of 20.0. Context OSPF supports the summary of imported routes.10. do as follows: huawei(config)#ospf 100 huawei(config-ospf-100)#area 1 huawei(config-ospf-100-area-0.0 0.255..0.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-57 .0.1)#network 20.11. Step 2 Run the area command to add an area and enter the configuration mode of the area.20. Table 12-47 Related operation for configuring route summarization between areas To.20.255 huawei(config-ospf-100-area-0.0 0.20.0. Step 4 Run the abr-summary command to configure route summarization between areas. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#asbr-summary 10.12.0 Related Operation Table 12-48 lists the related operation for configuring the summarization of routes imported by OSPF.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the ospf command to start the OSPF process. Disable the summarization of routes imported by OSPF Run the Command.255.. Context l OSPF makes the routes found by other routing protocols to be processed as routes outside the AS.12 Configuring OSPF Route Import This section describes how to configure OSPF route import. direct routes and static routes.2 Setting the Default Parameters of OSPF Imported Routes This operation enables you to set the default parameters of OSPF imported routes.2. ----End Example To enable the summary of routes with the same prefix of 10. Table 12-48 Related operation for configuring summarization of routes imported by OSPF To. OSPF's importing routes from other protocols is disabled. 12-58 Huawei Technologies Proprietary Issue 04 (2007-11-30) .0.... 12. The protocol types of routes that OSPF can import are RIP.2. Step 2 Run the asbr-summary command to configure summary of routes with the same prefix. l Procedure Step 1 Run the ospf command to start the OSPF process.0. 12.0 255. 12. undo asbr-summary 12.12.1 Importing Routes from Other Protocols into OSPF This operation enables you to import routes from other protocols into OSPF. By default.1 Importing Routes from Other Protocols into OSPF This operation enables you to import routes from other protocols into OSPF.12. .2 Setting the Default Parameters of OSPF Imported Routes This operation enables you to set the default parameters of OSPF imported routes. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-59 . and the cost as 50. the route tag as 33.12. Context The default settings are: l l l Cost: 10 The type of imported route: 2 The upper limit of the imported external routes: 1000 at a time Procedure Step 1 Run the ospf command to start the OSPF process. undo import-route rip 12. Cancel the imported route from other protocols Run the Command.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Step 2 Run the import-route rip command to import routes from other protocols into OSPF. do as follows: huawei(config)#ospf 1 huawei(config-ospf-1)#import-route rip 40 type 2 tag 33 cost 50 Related Operation Table 12-49 lists the related operation for importing routes from other protocols into OSPF. ----End Example Assume that: l l l l The upper limit of the default imported external routes: 100 The default cost for OSPF to accept external routes: 8 The default tag for OSPF to accept external routes: 8 The default type of imported routes: Type-1 To set the OSPF imported routes... ----End Example To specify the imported RIP route as Type 2 external route. Table 12-49 Related operation for importing routes from other protocols into OSPF To.. Step 2 Run the default command to set the default parameters for OSPF to import external routes. 13... The node number is also the matching order.1 Defining a Route Policy This operation enables you to define a route policy.2 Defining the if-match Clause of a Route Policy This operation enables you to define the if-match clause of a route policy.3 Defining the apply Clause of a Route Policy This operation enables you to define the apply clause of a route policy. If one node passes the match test.. with each node as a unit for the match test. it means that the route policy passes the match test. Table 12-50 Related operations for setting parameters for OSPF to import external routes To.13.1 Defining a Route Policy This operation enables you to define a route policy. The relationship between nodes of a route policy is "or".13. Every node consists of if-match clause and apply clause: l l l 12-60 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 12. The system checks every node of a route policy. Context l Up to 1000 route policies can be defined in the system. Restore the default upper limit for OSPF to import external routes each time Restore the default cost for OSPF to import external routes Restore the default tag when OSPF imports external routes Restore the default type of the external routes to be imported Run the Command. 12.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#ospf 100 huawei(config-ospf-100)#default cost 8 type 1 tag 8 limit 100 Related Operation Table 12-50 lists related operations for setting parameters for OSPF to import external routes. undo default limit undo default cost undo default tag undo default type 12. and each route policy can be configured with up to 20 nodes.13.13 Configuring a Route Policy This section describes how to configure a route policy.. 12. 12. A route policy may consist of several nodes. it will go to next node for test. – Parameter Description Table 12-51 lists the parameters for defining a route policy. it will go to next node for test. apply clause specifies the action to be taken when node match test is conducted. it will not go to next node for test. If a route entry does not satisfy any ifmatch clause of a node. the match test can be considered as pass-through only when all if-match clauses of a node are satisfied. In this mode. that is. In other words. When a route entry satisfies all if-match clauses of a node. If the route entry fails to pass the filtering. Step 2 Run the display route-policy command to query the running status of the configured route policy. the system executes the apply clause of the node without the test by the next node.19> }:policy1 Command: display route-policy policy1 Route-policy : policy1 permit : 10 Related Operation Table 12-52 lists the related operation for configuring a route policy. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-61 . ----End Example To configure route policy 1 with node number of 10 and the matching mode "permit". deny Procedure Step 1 Run the route-policy command to create a route policy and the enter route policy configuration mode. Table 12-51 Parameters for defining a route policy Parameter permit Description It specifies the matching mode of a node as "permit". the apply clause of the node will not be executed. The relationship between two if-match clauses of a node is "and". do as follows: huawei(config)#route-policy policy1 permit node 10 huawei(config-route-policy)#quit huawei(config)#display route-policy { <cr>|string<S><1. set some attributes of the routes. It specifies the matching mode of a mode as "deny". When a route entry passes a node.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide – 12 Configuring the Routing Protocol if-match defines the matching order. 12.13. Delete a route policy Run the Command. ----End Example To set filtering the address prefix list p1 of destination address of route.. all routes can pass through the node. namely the preconditions for routes to pass the current route policy. The relationship between two if-match clauses of a node is "and".. If no if-match clause is specified.12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 12-52 Related operation for configuring a route policy To. By default.19> }:1 Command: display route-policy 1 Route-policy : 1 permit : 1 Match clauses : if-match ip-prefix p1 Related Operation Table 12-53 lists the related operation for defining the route policy matching rule. no route policy is defined. Step 2 Run the if-match ip command to set the filtering criteria of routing information. undo route-policy Remarks By default. Step 3 Run the display route-policy command to query the configuration information. The match test can be considered as pass-through only when all if-match clauses of a node are satisfied. no match action is taken. Context l The if-match clause defines the matching rules. 12-62 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#route-policy 1 permit node 1 huawei(config-route-policy)#if-match ip next-hop ip-prefix p1 huawei(config-route-policy)#quit huawei(config)#display route-policy { <cr>|string<S><1. based on the attributes of the routes.2 Defining the if-match Clause of a Route Policy This operation enables you to define the if-match clause of a route policy. The apply clause specifies the action to be taken when node match test is conducted... l l l Procedure Step 1 Run the route-policy command to create a route policy and enter route policy configuration mode. ----End Example To set the routing information tag of the filtered route as 100.. Context l The apply clause specifies the commands to be used for modifying the attributes of the routes when if-match clauses are satisfied.19> }:1 Command: display route-policy 1 Route-policy : 1 permit : 1 Match clauses : if-match ip-prefix p1 Apply clauses : apply tag 100 Related Operation Table 12-54 lists the related operation for modifying the attributes of the filtered route.3 Defining the apply Clause of a Route Policy This operation enables you to define the apply clause of a route policy.. Step 4 Run the display route-policy command to query the configured route policy. Delete the route policy matching rule Run the Command.13. no setting is available. Step 2 Run the if-match command to set the filtering criteria of routing information.. undo if-match ip 12. By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 12 Configuring the Routing Protocol Table 12-53 Related operation for defining the route policy matching rule To. Step 3 Run the apply tag command to set the tag of the route information. do as follows: huawei(config)#route-policy 1 permit node 1 huawei(config-route-policy)#if-match ip-prefix p1 huawei(config-route-policy)#apply tag 100 huawei(config-route-policy)#quit huawei(config)#display route-policy { <cr>|string<S><1.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 12-63 . l Procedure Step 1 Run the route-policy command to create a route policy and enter route policy configuration mode. Cancel the modification of the attributes of the filtered route Run the Command..12 Configuring the Routing Protocol SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 12-54 Related operation for modifying the attributes of the filtered route To. undo apply 12-64 Huawei Technologies Proprietary Issue 04 (2007-11-30) .... 2 Enabling the MSTP Function This operation enables the MSTP function on the MA5600. 13. The time parameters include Forward Delay. MAX Age.1 Overview This chapter describes the multiple spanning tree protocol (MSTP) and its applications to the MA5600. 13.4 Setting the MST Region Parameters This section describes how to set the parameters of the multiple spanning tree (MST) region.6 Specifying the Device as a Root Bridge or a Backup Root Bridge This operation enables you to specify the device as a root bridge or a backup root bridge.8 Setting the Maximum Hop of the MST Region This operation enables you to set the maximum hop of the MST region. 13.9 Setting the Diameter of the Switching Fabric This operation enables you to set the diameter of the switching fabric. 13.7 Setting the Priority of the Device in the Specified Spanning Tree Instance This operation enables you to set the priority of the device in the specified spanning tree instance. 13.10 Setting the Calculation Standard for the Path Cost This operation enables you to set the calculation standard for the path cost. 13. 13. and time factor.12 Setting the Parameters of the Specified Port Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-1 . 13.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13 About This Chapter Configuring MSTP This chapter describes how to configure the MSTP protocol on the MA5600.5 Activating the Configuration of the MST Region This operation enables you to activate the configuration of the MST region. 13.11 Setting the Time Parameters of the Specified Network Bridge This section describes how to set the time parameters of the specified network bridge. Hello Time.3 Setting the Working Mode of MSTP This operation enables you to set the working mode of MSTP. 13. 13. 13. 13 Setting the mCheck Variable This operation enables you to set the mCheck variable to force a port to work in MSTP mode.14 Configuring the Device Protection Function This section describes how to configure the device protection functions.13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This section describes how to set the parameters of the specified port. 13. 13-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 13. loopback protection and root protection. including BPDU protection.15 Clear the MSTP Protocol Statistics This operation enables you to clear the MSTP protocol statistics. 13. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13.1 Overview This chapter describes the multiple spanning tree protocol (MSTP) and its applications to the MA5600. Service Description MSTP applies to a redundant network. It makes up for the drawback of STP and RSTP. MSTP makes the network converge fast and the traffic of different VLANs distributed along their respective paths, which provides a better load-sharing mechanism. MSTP trims a loop network into a loop-free tree network. It avoids the proliferation and infinite cycling of the packets in the loop network. In addition, MSTP provides multiple redundant paths for VLAN data transmission to achieve the load-sharing purpose. For details on MSTP, refer to the chapter "MSTP" in the Feature Description. Service Specification The MA5600 supports MSTP, which is compatible with the STP and RSTP. It supports MSTP loop network to meet the various networking requirements. 13.2 Enabling the MSTP Function This operation enables the MSTP function on the MA5600. Context l l By default, the MSTP function is disabled. After the MSTP function is enabled, the device determines whether it works in STP compatible mode or MSTP mode based on the configured protocol. After the MSTP function is enabled, MSTP maintains dynamically the spanning tree of the VLAN based on the received BPDU packets. After the MSTP function is disabled, the MSTP device becomes a transparent bridge and does not maintain the spanning tree. l Procedure Step 1 Run the stp enable command or stp port enable command to enable the MSTP function of the bridge or the port. Step 2 Run the display stp command or display stp port command to query the MPLS state of the bridge or the port. ----End To enable the MSTP function of the bridge, do as follows: huawei(config)#stp enable Are you sure you will change global stp state?[Y/N][N]y huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-3 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 1 days :18m:27s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- To enable the MSTP function of port 0/7/0, do as follows: huawei(config)#stp port 0/7/0 enable huawei(config)#display stp port 0/7/0 ----[CIST][Port1(Down)]---Port Protocol :enabled Port Role :CIST Disabled Port Port Priority :128 Port Cost :Config=auto / Active=200000 Desg. Bridge/Port :32768.00e0-fc99-5050 / 128.1 Port Edged(Admin) :disabled Point-to-point :Config=auto / Active=false Transit Limit :3 packets/hello-time Protection Type :None Port Stp Mode :Stp PortTimes :Hello 2 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop 20 BPDU Sent :0 TCN: 0, Config: 0, RST: 0, MST: 0 BPDU Received :0 TCN: 0, Config: 0, RST: 0, MST: 0 Related Operation Table 13-1 lists the related operations for enabling the MSTP function. Table 13-1 Related operations for enabling the MSTP function To... Disable the MSTP function of the device Disable the MSTP function of the port Restore the default MSTP state of the device Restore the default MSTP state of the port Query the MSTP information Run the Command... stp disable stp port disable undo stp undo stp port undo stp port Remarks By default, it is disabled. By default, it is enabled. - 13-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13.3 Setting the Working Mode of MSTP This operation enables you to set the working mode of MSTP. Context l MSTP supports two working modes: – – MSTP mode STP mode l MSTP is compatible with STP. If the network bridge that runs STP exists in the switching fabric, MSTP automatically runs in MSTP/STP compatible mode. When the network condition is good, though the network bridge that runs STP in the subnet is removed, the port still runs in the STP compatible mode. In this case, run the stp mode mstp command to force the port to work in MSTP mode. l Procedure l The following section shows the procedure for setting the STP working mode. 1. 2. l 1. 2. ----End To set the STP working mode, do as follows: huawei(config)#stp mode stp huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE compatible Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 2 days :16m:14s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Run the stp mode stp command to set the STP working mode. Run the display stp command to query the working mode. Run the stp mode stp command to set the MSTP working mode. Run the display stp command to query the working mode. The following section shows the procedure for setting the RSTP working mode. Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- To set the MSTP working mode, do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-5 13 Configuring MSTP huawei(config)#stp mode mstp huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 2 days :16m:16s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- Related Operation Table 13-2 lists the related operation for setting the working mode of MSTP. Table 13-2 Related operation for setting the working mode of MSTP To... Restore the default working mode of MSTP Run the Command... undo stp mode Remarks By default, the device works in MSTP mode. 13.4 Setting the MST Region Parameters This section describes how to set the parameters of the multiple spanning tree (MST) region. 13.4.1 Setting the MD5-Key for the MD5 Encryption Algorithm Configured on the MST Region This operation enables you to set the MD5-Key for the MD5 encryption algorithm. 13.4.2 Configuring the MST Region Name This operation enables you to configure the MST region name. 13.4.3 Mapping the Specified VLAN to the Specified MSTP Instance This operation enables you to map the specified VLAN to the specified MSTP instance. 13.4.4 Mapping All VLANs to the MSTP Instances by Modular Arithmetic This operation enables you to map all VLANs to the MSTP instances by modular arithmetic. 13.4.5 Setting the MSTP Revision Level This operation enables you to set the MSTP revision level. 13.4.6 Restoring the Default Settings for All Parameters of the MST Region This operation enables you to restore the default settings for all parameters of the MST region. 13-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13.4.1 Setting the MD5-Key for the MD5 Encryption Algorithm Configured on the MST Region This operation enables you to set the MD5-Key for the MD5 encryption algorithm. Context l The purpose of setting the MD5-Key is for device security. Two devices in the same multiple spanning tree (MST) can communicate with each other when their MD5-Key values are the same. The MD5-Key value is a character string not longer than 32 bytes. In addition, its length must be a multiple of 2. By default, it is 0x13AC06A62E47FD 51F95D2BA243CD0346. l Procedure Step 1 Run the stp md5-key command to set the MD5-Key for the MD5 encryption algorithm configured on the MST region. Step 2 Run the display current-configuration command to query the configuration of the device. ----End Example To set the MD5-Key for the MD5 encryption algorithm as 0x11ed224466, do as follows: huawei(config)#stp md5-key 11ed224466 huawei(config)#display current-configuration section config [MA5600V300R003: 3002] # [config] <config> mpls vlan 10 mpls vlan 20 mpls vlan 500 mpls vlan 1000 mpls vlan 1001 # stp region-configuration region-name huawei instance 1 vlan 1000 instance 2 vlan 100 active region-configuration stp instance 0 priority 0 stp timer hello 1000 stp md5-key 11ED224466 stp port 0/7/0 root-protection enable stp enable # lacp priority 0 system lacp long-period 20 ---- More ( Press 'Q' to break ) ---- Related Operation Table 13-3 lists the related operation for setting the MD5-Key for the MD5 encryption algorithm configured on the MST region. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-7 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 13-3 Related operation for setting the MD5-Key for the MD5 encryption algorithm configured on the MST region To... Restore the default MD5-Key for the MD5 encryption algorithm Run the Command... undo stp md5-key 13.4.2 Configuring the MST Region Name This operation enables you to configure the MST region name. Context You can configure the parameters related to the MST regions, such as the name, revision level, and VLAN instance mapping table. The default values of the three parameters are as follows: l l l The name of the MST region is the management MAC address. All VLANs are mapped to common and internal spanning tree (CIST). The revision level of MSTP is 0. Procedure Step 1 Run the stp region-configuration command to switch over to MST region mode. Step 2 Run the region-name command to configure the name of the MST region. Step 3 Run the check region-configuration command to query the parameters of the current MST region. ----End Example To configure the name of the MST region as huawei-mstp-bridge, do as follows: huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name huawei-mstp-bridge huawei(stp-region-configuration)#check region-configuration Admin configuration Format selector Region name Revision level Instance 0 :0 :huawei-mstp-bridge :0 Vlans Mapped 1 to 4094 Related Operation Table 13-4 lists the related operations for configuring the MST region name. 13-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Table 13-4 Related operations for configuring the MST region name To... Restore the default name of the MST region Activate the configuration of the MST region Query the configuration of the MST region Run the Command... undo region-name active region-configuration display stp region-configuration 13.4.3 Mapping the Specified VLAN to the Specified MSTP Instance This operation enables you to map the specified VLAN to the specified MSTP instance. Context l l By default, all VLANs are mapped to CIST, that is, instance 0. One VLAN can be mapped to only one instance at one time. If you re-map a VLAN to another instance, the original mapping is disabled. A maximum of 10 VLAN sections can be configured for an MSTP instance. After the mapping, activate it to validate it. l l Procedure Step 1 Run the stp region-configuration command to switch over to MST region mode. Step 2 Run the instance vlan command to map the specified VLAN to the specified MSTP instance. Step 3 Run the check region-configuration command to query the parameters of the current MST region. ----End Example To map VLANs 2-10 and VLANs 12-16 to MSTP instance 3, do as follows: huawei(config)#stp region-configuration huawei(stp-region-configuration)#instance 3 vlan 2 to 10 12 to 16 huawei(stp-region-configuration)#check region-configuration Admin configuration Format selector :0 Region name :huawei-mstp-bridge Revision level :0 Instance 0 3 Vlans Mapped 1, 11, 2 to 17 10, to 12 4094 to 16 Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-9 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 13-5 lists the related operations for mapping the specified VLAN to the specified MSTP instance. Table 13-5 Related operations for mapping the specified VLAN to the specified MSTP instance To... Disable the VLAN mapping of the specified MSTP instance Activate the configuration of the MST region Query the configuration of the MST region Run the Command... undo instance vlan Remarks VLAN mapping in CIST (instance 0) cannot be disabled. - active region-configuration display stp regionconfiguration - 13.4.4 Mapping All VLANs to the MSTP Instances by Modular Arithmetic This operation enables you to map all VLANs to the MSTP instances by modular arithmetic. Context l l By default, all VLANs are mapped to CIST, that is, instance 0. On the MA5600, you can specify the VLAN to each MSTP instance rapidly by modular arithmetic. – When you map the VLAN to the MSTP instance by modular arithmetic, the ID of the mapped instance is (VLANID - 1) % module + 1. The modular value for the modular arithmetic ranges from 1 to 16. It indicates the number of the MSTP instances. – l This operation is used to map the VLANs to the MSTP instances rapidly. In actual application, you can run the instance vlan command to adjust the mappings as required. Activate the setting to make it take effect. l Procedure Step 1 Run the stp region-configuration command to switch over to MST region mode. Step 2 Run the vlan-mapping module command to map all VLANs to the MSTP instances by modular arithmetic. Step 3 Run the check region-configuration command to query the parameters of the current MST region. ----End 13-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Example To map all VLANs to the MSTP instances by modular arithmetic, with the modular value of 16, do as follows: huawei(config)#stp region-configuration huawei(stp-region-configuration)#vlan-mapping module 16 huawei(stp-region-configuration)#check region-configuration Admin configuration Format selector :0 Region name :huawei-mstp-bridge Revision level :0 Vlans Mapped 1, 17, 33, 49, 177, 193, 209, 225, 353, 369, 385, 401, 529, 545, 561, 577, 705, 721, 737, 753, 881, 897, 913, 929, 1057, 1073, 1089, 1105, 1233, 1249, 1265, 1281, 1409, 1425, 1441, 1457, 1585, 1601, 1617, 1633, 1761, 1777, 1793, 1809, 1937, 1953, 1969, 1985, 2113, 2129, 2145, 2161, 2289, 2305, 2321, 2337, 2465, 2481, 2497, 2513, 2641, 2657, 2673, 2689, 2817, 2833, 2849, 2865, 2993, 3009, 3025, 3041, 3169, 3185, 3201, 3217, 3345, 3361, 3377, 3393, 3521, 3537, 3553, 3569, 3697, 3713, 3729, 3745, 3873, 3889, 3905, 3921, 4049, 4065, 4081 2 2, 18, 34, 50, 178, 194, 210, 226, ---- More ( Press 'Q' to break ) ---Instance 1 65, 241, 417, 593, 769, 945, 1121, 1297, 1473, 1649, 1825, 2001, 2177, 2353, 2529, 2705, 2881, 3057, 3233, 3409, 3585, 3761, 3937, 66, 242, 81, 257, 433, 609, 785, 961, 1137, 1313, 1489, 1665, 1841, 2017, 2193, 2369, 2545, 2721, 2897, 3073, 3249, 3425, 3601, 3777, 3953, 82, 258, 97, 273, 449, 625, 801, 977, 1153, 1329, 1505, 1681, 1857, 2033, 2209, 2385, 2561, 2737, 2913, 3089, 3265, 3441, 3617, 3793, 3969, 98, 274, 113, 289, 465, 641, 817, 993, 1169, 1345, 1521, 1697, 1873, 2049, 2225, 2401, 2577, 2753, 2929, 3105, 3281, 3457, 3633, 3809, 3985, 114, 290, 129, 305, 481, 657, 833, 1009, 1185, 1361, 1537, 1713, 1889, 2065, 2241, 2417, 2593, 2769, 2945, 3121, 3297, 3473, 3649, 3825, 4001, 130, 306, 145, 321, 497, 673, 849, 1025, 1201, 1377, 1553, 1729, 1905, 2081, 2257, 2433, 2609, 2785, 2961, 3137, 3313, 3489, 3665, 3841, 4017, 146, 322, 161, 337, 513, 689, 865, 1041, 1217, 1393, 1569, 1745, 1921, 2097, 2273, 2449, 2625, 2801, 2977, 3153, 3329, 3505, 3681, 3857, 4033, 162, 338, Related Operation Table 13-6 lists the related operations for mapping all VLANs to the MSTP instances. Table 13-6 Related operations for mapping all VLANs to the MSTP instances To... Map all VLANs to CIST instance 0 Activate the configuration of the MST region Query the effective configuration of the MST region Run the Command... undo vlan-mapping module active region-configuration display stp region-configuration 13.4.5 Setting the MSTP Revision Level This operation enables you to set the MSTP revision level. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-11 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l By default, the revision level is 0. Activate the setting to make it take effect. NOTE l l When you configure the parameters related to the MST region, the current device is placed into a specified MST region. Two devices belong to a same MST region when they meet the following conditions: l l They have the same MST region name and the MSTP revision level. The VLAN mapping tables, which correspond to all the spanning tree instances, must be the same with each other. Procedure Step 1 Run the stp region-configuration command to switch over to MST region mode. Step 2 Run the revision-level command to set the MSTP revision level of the device. Step 3 Run the check region-configuration command to query the parameters of the current MST region. ----End Example To set the MSTP revision level as 100, do as follows: huawei(config)#stp region-configuration huawei(stp-region-configuration)#revision-level 100 huawei(stp-region-configuration)#check region-configuration Admin configuration Format selector :0 Region name :00e0fc995050 Revision level :100 Instance 0 Vlans Mapped 1 to 4094 Related Operation Table 13-7 lists the related operations for setting the MSTP revision level of the device. Table 13-7 Related operations for setting the MSTP revision level of the device To... Restore the MSTP revision level Activate the configuration of the MST region Query the configuration of the MST region Run the Command... undo revision-level active region-configuration display stp region-configuration 13-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13.4.6 Restoring the Default Settings for All Parameters of the MST Region This operation enables you to restore the default settings for all parameters of the MST region. Context By default, the name of the MST region is its management MAC address, all VLANs are mapped to instance 0, and the revision level of MSTP is 0. Procedure Step 1 Run the reset stp region-configuration command to restore the default settings to all parameters of the MST region. Step 2 Run the stp region-configuration command to switch over to MST region mode. Step 3 Run the display stp region-configuration command to query the configuration of the MST region. ----End Example To restore the default settings for all parameters of the MST region, do as follows: huawei(config)#reset stp region-configuration huawei(config)#stp region-configuration huawei(stp-region-configuration)#display stp region-configuration Oper configuration Format selector :0 Region name :00e0fc995050 Revision level :0 Instance 0 Vlans Mapped 1 to 4094 13.5 Activating the Configuration of the MST Region This operation enables you to activate the configuration of the MST region. Context When you configure the parameters related to the MST region, especially the VLAN mapping table, MSTP will recalculate the spanning tree. This results in an unstable network topology. To avoid it, MSTP will not recalculate the spanning tree immediately after you configure the parameters, unless the following conditions are met: l Run the active region-configuration command to activate the configuration of the MST region. Run the stp enable command to enable the MSTP function. Huawei Technologies Proprietary 13-13 l Issue 04 (2007-11-30) 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the stp region-configuration command to switch over to MST region mode. Step 2 Run the active region-configuration command to activate the configuration of the MST region. Step 3 Run the display stp region-configuration command to query the effective configuration of the MST region. ----End Example To activate the configuration of the MST region, do as follows: huawei(config)#stp region-configuration huawei(stp-region-configuration)#active region-configuration huawei(stp-region-configuration)#display stp region-configuration Oper configuration Format selector :0 Region name :huawei-mstp-bridge Revision level :100 Instance 0 Vlans Mapped 1 to 4094 Related Operation Table 13-8 lists the related operation for activating the configuration of the MST region. Table 13-8 Related operation for activating the configuration of the MST region To... Query the configuration of the current MST region Run the Command... check region-configuration 13.6 Specifying the Device as a Root Bridge or a Backup Root Bridge This operation enables you to specify the device as a root bridge or a backup root bridge. Context l l By default, the device is not used as a root bridge or a backup root bridge. After specifying the current bridge as a root bridge or a backup root bridge, you cannot modify the system priority of the root bridge. One spanning tree instance can be configured with only one root bridge, but more backup root bridges. – – l If the root bridge fails or is powered off, the backup root bridge is used as the root bridge. If multiple backup root bridges are configured, the root bridge with the smallest MAC address is used as the root bridge of the specified spanning tree instance. Huawei Technologies Proprietary Issue 04 (2007-11-30) 13-14 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Procedure Step 1 Run the stp root command to specify the device as a root bridge or a backup root bridge. Step 2 Run the display stp command to query the MSTP configuration of the device. ----End Example To specify the current device as the root bridge of MSTP instance 2, do as follows: huawei(config)#stp instance 2 root primary NOTE If you do not specify the parameter instance instance-id, the setting takes effect only to the CIST instance. huawei(config)#display stp instance 2 { <cr>|port<K> }: Command: display stp instance 2 The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 3 days :15m:52s ============================== Bridge Priority : 0 Hello Time: 2 sec IST Root Priority : 0 Hello Time: 2 sec Instance 2 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Related Operation Table 13-9 lists the related operation for specifying the device as a root bridge or a backup root bridge. Table 13-9 Related operation for specifying the device as a root bridge or a backup root bridge To... Cancel the operation of specifying the device as a root bridge or a backup root bridge Run the Command... undo stp root 13.7 Setting the Priority of the Device in the Specified Spanning Tree Instance This operation enables you to set the priority of the device in the specified spanning tree instance. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-15 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l The priority of the device ranges from 0 to 61440, with the step of 4096. By default, it is 32768. The priority of the device determines whether it can be selected as the root bridge of the spanning tree. A device with a smaller priority is likely to be selected as the root bridge of the spanning tree. The device that supports MSTP has different priorities in different spanning tree instances. If two devices have the same priority, then the device with the smaller MAC address is selected as the root bridge of the spanning tree. l l l Procedure Step 1 Run the stp priority command to set the priority of the device in the specified spanning tree instance. Step 2 Run the display stp command to query the MSTP configuration of the device. ----End Example To set the priority of the device in spanning tree instance 2 as 4096, do as follows: huawei(config)#stp instance 2 priority 4096 NOTE If you set the parameter instance instance-id as 0, the priority you set is used as the priority of the device in the CIST. huawei(config)#display stp instance 2 { <cr>|port<K> }: Command: display stp instance 2 The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 3 days :16m:20s ============================== Bridge Priority : 4096 Hello Time: 2 sec IST Root Priority : 4096 Hello Time: 2 sec Instance 2 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Related Operation Table 13-10 lists the related operations for setting the priority of the device in the specified spanning tree instance. 13-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Table 13-10 Related operations for setting the priority of the device in the specified spanning tree instance To... Restore the default priority of the device in the specified spanning tree instance Set the priority of the port in the specified spanning tree instance Run the Command... undo stp priority stp port port-priority 13.8 Setting the Maximum Hop of the MST Region This operation enables you to set the maximum hop of the MST region. Context l l By default, the maximum hop of the MST region is 20. The device takes the root device of the spanning tree in the MST region as a start point. When the configuration message in the region, that is, the BPDU packet, is forwarded by one device, the hop is reduced by 1. The device drops the packet with the hop of 0. In this case, the network scale in the region is restricted. If the current device becomes the root bridge device of the CIST or multiple spanning tree instance (MSTI) in the MST region, the maximum hop configured on the bridge device becomes the network diameter of the spanning tree. In this case, the spanning tree scale in the region is restricted. l Procedure Step 1 Run the stp max-hops command to set the maximum hop of the MST region. Step 2 Run the display stp command to query the MSTP configuration of the current device. ----End Example To set the maximum hop of the MST region as 10, do as follows: huawei(config)#stp max-hops 10 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 10 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 3 days :17m:39s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-17 13 Configuring MSTP Hello Time: 2 sec SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- Related Operation Table 13-11 lists the related operation for setting the maximum hop of the MST region. Table 13-11 Related operation for setting the maximum hop of the MST region To... Restore the default maximum hop of the device Run the Command... undo stp max-hops 13.9 Setting the Diameter of the Switching Fabric This operation enables you to set the diameter of the switching fabric. Context l l The setting takes effect only to CIST. The device takes the root of the spanning tree in the MST region as a start point. When the configuration message in the region, that is, the BPDU packet, is forwarded by one device, the hop is reduced by 1. The device drops the packet with the hop of 0. In this case, the network scale in the region is restricted. If the current device becomes the root bridge of the CIST or MSTI in the MST region, the maximum hop configured on the root bridge is the network diameter of the spanning tree. The parameters Hello Time, Forward Delay and Max Age are related to the network scale. When you set the diameter of the switching fabric, MSTP sets automatically the parameters Hello Time, Forward Delay and Max Age to a proper value based on the configured network diameter. By default, the diameter of the switching fabric is 7, the Forward Delay is 15, the Hello Time is 2s, and the Max Age is 20s. NOTE l l l l l The diameter of the switching fabric is the path with the most switching devices along it. The diameter is indicated by the number of the switching devices along the path. The larger the network diameter is, the larger the network scale is. Procedure Step 1 Run the stp bridge-diameter command to set the diameter of the switching fabric. Step 2 Run the display stp command to query the MSTP configuration of the device. ----End 13-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Example To set the diameter of the switching fabric as 6, do as follows: huawei(config)#stp bridge-diameter 6 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 3 days :17m:55s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 13 sec Max Age: 18 sec MAC Address : 00e0-fc99-5050 Forward Delay: 13 sec Max Age: 18 sec MAC Address : 00e0-fc99-5050 Forward Delay: 13 sec Max Age: 18 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- Related Operation Table 13-12 lists the related operation for setting the diameter of the switching fabric. Table 13-12 Related operation for setting the diameter of the switching fabric To... Restore the default diameter of the switching fabric Run the Command... undo stp bridge-diameter 13.10 Setting the Calculation Standard for the Path Cost This operation enables you to set the calculation standard for the path cost. Context l The MA5600 supports three kinds of calculation standards for the path cost: the IEEE 802.1d standard (dot1d), the IEEE 802.1t standard (dot1t), and the private standard of Huawei (legacy). By default, the private standard of Huawei (legacy) is used. After the calculation standard is set, the path cost of the device is calculated based on it automatically. Different calculation standards define different path cost values for the ports. If the set calculation standard is different from the current standard, all ports use the default path cost of the set calculation standard. l l Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-19 13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the stp pathcost-standard command to set the calculation standard for the path cost. Step 2 Run the display stp command to query the MSTP configuration of the device. ----End Example To set the calculation standard for the path cost as IEEE 802.1t, do as follows: huawei(config)#stp pathcost-standard dot1t huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : DOT1T BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 95 Time since last TC : 0 days : 0m: 4s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc00-0056 Forward Delay: 13 sec Max Age: 18 sec MAC Address : 00e0-fc00-0056 Forward Delay: 13 sec Max Age: 18 sec MAC Address : 00e0-fc00-0056 Forward Delay: 13 sec Max Age: 18 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------- More ( Press 'Q' to break ) ---- Related Operation Table 13-13 lists the related operation for setting the calculation standard for the path cost. Table 13-13 Related operation for setting the calculation standard for the path cost To... Restore the default calculation standard for the path cost Run the Command... undo stp pathcost-standard 13.11 Setting the Time Parameters of the Specified Network Bridge This section describes how to set the time parameters of the specified network bridge. The time parameters include Forward Delay, Hello Time, MAX Age, and time factor. 13.11.1 Setting the Forward Delay of the Specified Network Bridge This operation enables you to set the Forward Delay of the specified network bridge. 13-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) MSTP adjusts the Hello Time.0 second) ≥ Max Age ≥ 2 x (Hello Time + 1. 13. ----End Example To set the Forward Delay of the specified network bridge as 2000 centiseconds.11.3 Setting the Max Age of the Specified Network Bridge This operation enables you to set the Max Age of the specified network bridge. Procedure Step 1 Run the stp timer forward-delay command to set the Forward Delay of the specified network bridge. You are recommended to run the stp bridgediameter command to specify the network diameter of the switching fabric. when the port switches from discarding to forwarding state.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP 13. If the current device is a root bridge. Step 2 Run the display stp command to query the MSTP configuration of the device. 13. its state transition interval is specified by the Forward Delay. 13. In this case. and Max Age must comply with the following formula to guarantee network stability: 2 x (Forward Delay .11. The three time parameters. the temporary loop can be avoided. Context l For MSTP. Hello Time. the Forward Delay is 15 seconds. In this case. The other devices use the Forward Delay specified by the root bridge to perform state transition. NOTE l l l The time parameters of MSTP are related to the network scale.1. By default.2 Setting the Hello Time of the Specified Network Bridge This operation enables you to set the Hello Time of the specified network bridge.11. Forward Delay and Max Age to the proper values automatically based on the specified network diameter.0 second). do as follows: huawei(config)#stp timer forward-delay 2000 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : DOT1T BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 96 Time since last TC : 0 days : 1m:15s ============================== Instance 0 ================================== Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-21 .4 Setting the Timeout Time Factor of the Specified Network Bridge This operation enables you to set the timeout time factor of the specified network bridge. The Forward Delay of the root bridge specifies the interval of state transition. an intermediate state (Learning) is used if the rapid transition condition of the port state is not met.11.1 Setting the Forward Delay of the Specified Network Bridge This operation enables you to set the Forward Delay of the specified network bridge. Forward Delay. .More ( Press 'Q' to break ) ---- Related Operation Table 13-14 lists the related operations for setting the Forward Delay of the specified network bridge. it considers that the configuration packets are timed out and then recalculates the spanning tree.1. If the current device is a root bridge. Forward Delay and Max Age to the proper values automatically based on the specified network diameter. Restore the default Forward Delay Set the Hello Time of the specified network bridge Set the Max Age of the specified network bridge Run the Command. the configuration packets are sent at regular intervals specified by the Hello Time.11. 13-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. By default. The other devices use the Hello Time specified by the root bridge to send the configuration packets. undo stp timer forward-delay stp timer hello stp timer max-age 13.2 Setting the Hello Time of the Specified Network Bridge This operation enables you to set the Hello Time of the specified network bridge.13 Configuring MSTP Bridge IST Root CST Root Priority : 32768 Hello Time: 2 sec Priority : 32768 Hello Time: 2 sec Priority : 32768 Hello Time: 2 sec SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MAC Address : Forward Delay: MAC Address : Forward Delay: MAC Address : Forward Delay: 00e0-fc00-0056 20 sec Max Age: 18 sec 00e0-fc00-0056 20 sec Max Age: 18 sec 00e0-fc00-0056 20 sec Max Age: 18 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------.0 second). Hello Time..0 second) ≥ Max Age ≥ 2 x (Hello Time + 1. MSTP adjusts the Hello Time. NOTE l l l The time parameters of MSTP are related to the network scale. You are recommended to run the stp bridgediameter command to specify the network diameter of the switching fabric. The three time parameters. Table 13-14 Related operations for setting the Forward Delay of the specified network bridge To. In this case. Context l The device transmits the configuration packets at regular intervals specified by the Hello Time to keep the spanning tree stable. and Max Age must comply with the following formula to guarantee network stability: 2 x (Forward Delay .. the Hello Time is 2 seconds. If a device does not receive the configuration packets. Forward Delay. 3 Setting the Max Age of the Specified Network Bridge This operation enables you to set the Max Age of the specified network bridge. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-23 ..More ( Press 'Q' to break ) ---- Related Operation Table 13-15 lists the related operations for setting the Hello Time of the specified network bridge. ----End Example To set the Hello Time of the specified network bridge as 1000 centiseconds. Table 13-15 Related operations for setting the Hello Time of the specified network bridge To. Restore the default Hello Time Set the Forward Delay of the specified network bridge Set the Max Age of the specified network bridge Run the Command..11. undo stp timer hello stp timer forward-delay stp timer max-age 13.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Procedure Step 1 Run the stp timer hello command to set the Hello Time of the specified network bridge.. Step 2 Run the display stp command to query the MSTP configuration of the device.. do as follows: huawei(config)#stp timer hello 1000 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : DOT1T BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 96 Time since last TC : 0 days : 1m:15s ============================== Bridge Priority : 32768 Hello Time: 10 sec IST Root Priority : 32768 Hello Time: 10 sec CST Root Priority : 32768 Hello Time: 10 sec Instance 0 ================================== MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 18 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 18 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 18 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------. If the device is not a CIST root bridge. Step 2 Run the display stp command to query the MSTP configuration of the device. the device uses the Max Age to determine whether the configuration received by the port is out of date.0 second). On the CIST.1. MSTP adjusts the Hello Time. 13-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . You are recommended to run the stp bridgediameter command to specify the network diameter of the switching fabric. NOTE l l l The time parameters of MSTP are related to the network scale. ----End Example To set the Max Age of the specified network bridge as 3000 centiseconds.13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l The Max Age takes no effect to MSTI.More ( Press 'Q' to break ) ---- Related Operation Table 13-16 lists the related operations for setting the Max Age of the specified network bridge. recalculate the spanning tree instance. do as follows: huawei(config)#stp timer max-age 3000 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : DOT1T BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 96 Time since last TC : 0 days : 1m:15s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 10 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 30 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 30 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 30 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------. Procedure Step 1 Run the stp timer max-age command to set the Max Age of the specified network bridge. and Max Age must comply with the following formula to guarantee network stability: 2 x (Forward Delay .0 second) ≥ Max Age ≥ 2 x (Hello Time + 1. The three time parameters. If the configuration received by the port is out of date. it uses the Max Age to determine whether the configuration is out of date. Forward Delay. By default. If the device is a CIST root bridge. the Max Age is 20 seconds. it uses the Max Age set on the CIST root bridge to determine it. In this case. Forward Delay and Max Age to the proper values automatically based on the specified network diameter. Hello Time. By default.. You can avoid such an unnecessary calculation by the timeout time factor of the specified network bridge. ----End Example To set the timeout time factor of the specified network bridge as 6. do as follows: huawei(config)#stp time-factor 6 huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 6 Max Hops : 20 PathCost standard : DOT1T BPDU-Protection : disabled Time Factor : 6 TC or TCN received : 96 Time since last TC : 0 days : 1m:15s ============================== Instance 0 ================================== Bridge Priority : 32768 MAC Address : 00e0-fc00-0056 Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-25 . l l l Procedure Step 1 Run the stp time-factor command to set the timeout time factor of the specified network bridge.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Table 13-16 Related operations for setting the Max Age of the specified network bridge To. it considers the upstream device faulty and recalculates the spanning tree. the link problem can be resolved in time. By doing so. the network condition is good. Restore the default Max Age Set the Forward Delay of the specified network bridge Set the Hello Time of the specified network bridge Run the Command.11.. it checks whether the links are normal. In this case.4 Setting the Timeout Time Factor of the Specified Network Bridge This operation enables you to set the timeout time factor of the specified network bridge. Context l The device that supports MSTP sends Hello packets at regular intervals to the neighboring network bridges. the spanning tree may be recalculated.. undo stp timer max-age stp timer forward-delay stp timer hello 13.. Step 2 Run the display stp command to query the MSTP configuration of the device. the timeout time factor of the specified network bridge is 3. If the device does not receive the Hello packets from the upstream device within a triple Hello Time. Generally. If the upstream devices are busy. .1 Setting the Maximum Transmission Rate of the Specified Port This operation enables you to set the maximum transmission rate of the specified port. 13.12 Setting the Parameters of the Specified Port This section describes how to set the parameters of the specified port. An edge port is not connected with any switching device. 13.12.12. 13. Context l The maximum transmission rate of the port indicates the maximum MSTP packets transmitted by the port within one Hello Time.3 Setting the Path Cost of the Port in the Specified Spanning Tree Instance This operation enables you to set the path cost of the port in the specified spanning tree instance. 13-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) .13 Configuring MSTP Hello Time: 2 sec Priority : 32768 Hello Time: 10 sec Priority : 32768 Hello Time: 2 sec SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Forward Delay: 20 sec Max Age: 30 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 18 sec MAC Address : 00e0-fc00-0056 Forward Delay: 20 sec Max Age: 18 sec IST Root CST Root Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------.More ( Press 'Q' to break ) ---- Related Operation Table 13-17 lists the related operation for setting the timeout time factor of the specified network bridge.4 Setting the Priority of the Specified Port This operation enables you to set the priority of the specified port. 13.12.5 Setting the Point-to-Point Link Connection of the Specified Port This operation enables you to set the point-to-point link connection of the specified port.12.12...1 Setting the Maximum Transmission Rate of the Specified Port This operation enables you to set the maximum transmission rate of the specified port.12. 13. 13. undo stp time-factor 13.. Table 13-17 Related operation for setting the timeout time factor of the specified network bridge To.2 Setting the Specified Port as an Edge Port This operation enables you to set the specified port as an edge port. Restore the default timeout time factor of the specified network bridge Run the Command. When a port is set as a non-edge port. An edge port is not connected with any switching device. When a port is set as an edge port. after the port receives the BPDD packets.. the rapid transition of the port state can be implemented. set it as an edge port. If you specify a port as an edge port. even if the port is set as an edge port.14. By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 13 Configuring MSTP The port can transmit a maximum of 255 packets within one Hello Time. undo stp port transmit-limit 13.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-27 . This setting takes effect to all spanning tree instances. and the network security is guaranteed.2 Setting the Specified Port as an Edge Port This operation enables you to set the specified port as an edge port. Table 13-18 Related operations for setting the maximum transmission rate of the specified port To..1 Enabling the BPDU Protection Function of the Device. For more details. do as follows: huawei(config)#stp port 0/7/0 transmit-limit 16 Related Operation Table 13-18 lists the related operations for setting the maximum transmission rate of the specified port. Procedure Run the stp port transmit-limit command to set the number of packets transmitted by the port within the Hello Time.12. the rapid transition can be implemented if the port is transited from blocking to forwarding state. Context l You can set only the port connected to the terminal as an edge port. see the section "13. it works as an edge port on all spanning tree instances. ----End Example To set the maximum packets transmitted by the port within one Hello Time as 16." In this case. all ports are set as non-edge ports. The default number of packets transmitted is 3. Restore the default maximum number of packets transmitted by the port Run the Command. it still works as a non-edge port. and enable its BPDU protection function. NOTE l l For the port directly connected to the terminal.. it works as a non-edge port on all spanning tree instances. When the BPDU protection is disabled from the switching device. 12. stp port edged-port disable 13. do as follows: huawei(config)#stp port 0/7/0 edged-port enable huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 0 days : 2m:25s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 ----------------------------------------------------------------------------Port F/ S/ P Priority Cost Admin-State Role State Type ----------------------------------------------------------------------------1 0/7/ 0 128 200000 Disabled Disa Down Edge 3 0/7/ 2 128 200000 Enabled Disa Down None 17 0/ 2/ 0 0 200000 Enabled Disa Down None 18 0/ 2/ 1 128 200000 Enabled Disa Down None 19 0/ 2/ 2 128 200000 Enabled Disa Down None 20 0/ 2/ 3 128 200000 Enabled Disa Down None ----------------------------------------------------------------------------- Related Operation Table 13-19 lists the related operation for setting the specified port as an edge port.. 13-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To set port 0/7/0 as an edge port.13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the stp port edged-port enable command to set the port as an edge port. Step 2 Run the display stp command to query the MSTP global configuration. Set a port as a non-edge port Run the Command...3 Setting the Path Cost of the Port in the Specified Spanning Tree Instance This operation enables you to set the path cost of the port in the specified spanning tree instance. Table 13-19 Related operation for setting the specified port as an edge port To.. For the device that supports MSTP. In this case. NOTE l l Path cost is a parameter related to the rate of the link connected to the port. do as follows: huawei(config)#stp port 0/7/0 instance 2 cost 1024 NOTE If you do not specify the parameter instance instance-id. Therefore.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Context l l By default. the network bridge obtains the path cost of the port based on the link status. the VLAN load-sharing function is implemented. Setting the path cost of the Ethernet port results in the recalculation of the spanning tree. the setting takes effect only to the CIST instance. Procedure Step 1 Run the stp port cost command to set the path cost of the port in the specified spanning tree instance. the default path cost is recommended. ----End Example To set the path cost of the port in spanning tree instance 2 as 1024. the port has different path costs in different spanning tree instances. huawei(config)#display stp instance 0 { <cr>|port<K> }: Command: display stp instance 0 The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 0 days : 5m:27s ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 ----------------------------------------------------------------------------Port F/ S/ P Priority Cost Admin-State Role State Type ----------------------------------------------------------------------------1 0/7/ 0 128 1024 Disabled Disa Down Edge 3 0/7/ 2 128 200000 Enabled Disa Down None 17 0/ 2/ 0 0 200000 Enabled Disa Down None 18 0/ 2/ 1 128 200000 Enabled Disa Down None 19 0/ 2/ 2 128 200000 Enabled Disa Down None 20 0/ 2/ 3 128 200000 Enabled Disa Down None ----------------------------------------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-29 . Step 2 Run the display stp command to query the MSTP global configuration. Setting a proper path cost makes various VLAN traffic be forwarded along different physical links. Context l The priority of a port affects its role in the specified spanning tree instance. undo stp port cost 13. Step 2 Run the display stp command to query the MSTP global configuration. ----End Example To set the priority of the specified port as 64. do as follows: huawei(config)#stp port 0/7/0 instance 0 port-priority 64 NOTE If you do not specify the parameter instance instance-id. it is 128. The priority of the port ranges from 0 to 240. MSTP recalculates the role of the port and perform state transition.. If the priority of the port changes. with the step of 16. huawei(config)#display stp instance 0 { <cr>|port<K> }: Command: display stp instance 0 The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : disabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 0 days : 5m:57s ============================== Instance 0 ================================== 13-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) .4 Setting the Priority of the Specified Port This operation enables you to set the priority of the specified port.. In this case. To.. l l Procedure Step 1 Run the stp port port-priority command to set the priority of the specified port.12.. This makes various VLAN traffic be forwarded along different physical links.13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 13-20 lists the related operation for setting the path cost of the port in the specified spanning tree instance. Restore the default path cost of the specified port Run the Command. By default. the setting takes effect only to the CIST instance. the VLAN load-sharing function is implemented. Table 13-20 Related operation for setting the path cost of the port in the specified spanning tree instance. You can set different priorities for the same port on the different MSTIs. The default setting is recommended. MSTP checks whether the link connected to the specified port is a point-to-point link. The port state cannot be changed rapidly if the port is not connected to a point-to-point link.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Bridge IST Root CST Root Priority : 32768 Hello Time: 2 sec Priority : 32768 Hello Time: 2 sec Priority : 32768 Hello Time: 2 sec MAC Address : Forward Delay: MAC Address : Forward Delay: MAC Address : Forward Delay: 13 Configuring MSTP 00e0-fc99-5050 15 sec Max Age: 20 sec 00e0-fc99-5050 15 sec Max Age: 20 sec 00e0-fc99-5050 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 ----------------------------------------------------------------------------Port F/ S/ P Priority Cost Admin-State Role State Type ----------------------------------------------------------------------------1 0/7/ 0 64 1024 Disabled Disa Down Edge 3 0/7/ 2 64 200000 Enabled Disa Down None 17 0/ 2/ 0 0 200000 Enabled Disa Down None 18 0/ 2/ 1 128 200000 Enabled Disa Down None 19 0/ 2/ 2 128 200000 Enabled Disa Down None 20 0/ 2/ 3 128 200000 Enabled Disa Down None ----------------------------------------------------------------------------- Related Operation Table 13-21 lists the related operation for setting the priority of the specified port. Table 13-21 Related operation for setting the priority of the specified port To. the point-to-point parameter is set to auto mode. undo stp port port-priority 13. Restore the default priority of the specified port Run the Command.12. it can be set as connecting with the point-to-point link. If the port is set as connecting with the point-to-point link. the setting applies to all the spanning tree instances. but actually it is not connected with a point-to-point link. This setting takes effect to CIST and MSTI. if it is in full-duplex mode after the negotiation. Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-31 . NOTE l l l l l For an aggregated port.5 Setting the Point-to-Point Link Connection of the Specified Port This operation enables you to set the point-to-point link connection of the specified port. Assume that a port works in auto negotiation mode.. only the primary port can be set as connecting with the point-to-point link.. Context l By default.. When the port is set as connecting (or not connecting) with the point-to-point link.. the port is in loopback state. Table 13-22 Related operation for setting the point-to-point link connection of the specified port To. In this case. though the network bridge that runs STP in the subnet is removed. After that. do as follows: huawei(config)#stp port 0/7/0 point-to-point force-true Related Operation Table 13-22 lists the related operation for setting the point-to-point link connection of the specified port.. When the network condition is good. the type of the packets received by the port determines whether it works in MSTP or STP compatible mode. l This command takes effect only when the network bridge runs MSTP.. Procedure Run the stp port mcheck command to set the mCheck variable. Set the link connected to the port as the default state Run the Command. l If the network bridge that runs STP exists in the subnet where the port is connected. the port runs in MSTP/STP compatible mode automatically.13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Run the stp port point-to-point command to set whether the link that is connected to the port is a point-to-point link. ----End Example To transit port 0/7/0 to work in MSTP mode.13 Setting the mCheck Variable This operation enables you to set the mCheck variable to force a port to work in MSTP mode.. Context Run the stp port mcheck command to check whether there is any network bridge that runs STP in the subnet to which the current port is connected. ----End Example To set the link that is connected to port 0/7/0 as a point-to-point link.. undo stp port point-to-point 13. run the command to force the port to work in MSTP mode. do as follows: 13-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the port still runs in the STP compatible mode. Context l l By default.3 Enabling the Root Protection Function of the Device This operation enables the root protection function of the device.14. If the disabled port does not receive the BPDU packets within 180s. MSTP provides the BPDU protection function to prevent users from forging BPDU packets to attack the device maliciously.1 Enabling the BPDU Protection Function of the Device This operation enables the BPDU protection function of the device. do as follows: huawei(config)#stp bpdu-protection enable huawei(config)#display stp { <cr>|instance<K>|port<K> }: Command: display stp The bridge is executing the IEEE Multiple Spanning Tree Protocol Bridge Diameter : 7 Max Hops : 20 PathCost standard : LEGACY BPDU-Protection : enabled Time Factor : 3 TC or TCN received : 0 Time since last TC : 0 days : 6m:42s Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-33 . the BPDU protection function is disabled. 13. ----End Example To enable the BPDU protection function of device. including BPDU protection. l Procedure Step 1 Run the stp bpdu-protection enable command to enable the BPDU protection function of the device.1 Enabling the BPDU Protection Function of the Device This operation enables the BPDU protection function of the device. or connected to the file server. 13. such as a PC. 13.2 Enabling the Loop Protection Function of the Device This operation enables the loop protection function of the device. 13. This results in an unstable network topology.14. If the port of an access device is connected directly to the user terminal. loopback protection and root protection.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#stp port 0/7/0 mcheck 13 Configuring MSTP 13. the system sets the port as a nonedge port and recalculates the spanning tree.14. it is enabled automatically.14 Configuring the Device Protection Function This section describes how to configure the device protection functions.14. the port is usually set as an edge port to implement rapid state transition. If the BPDU protection function is enabled on the device. the system disables the edge port that receives the BPDU packets. Step 2 Run the display stp command to query the MSTP global configuration. When the port receives the BPDU packets. More ( Press 'Q' to break ) ---- Related Operation Table 13-23 lists the related operation for enabling the BPDU protection function of the device.. In this case... stp bpdu-protection disable 13.2 Enabling the Loop Protection Function of the Device This operation enables the loop protection function of the device..13 Configuring MSTP ============================== Bridge Priority : 32768 Hello Time: 2 sec IST Root Priority : 32768 Hello Time: 2 sec CST Root Priority : 32768 Hello Time: 2 sec SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Instance 0 ================================== MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec MAC Address : 00e0-fc99-5050 Forward Delay: 15 sec Max Age: 20 sec Path cost to IST root bridge is 0 Path cost to CST root bridge is 0 -------------------------------------------------------------------------------. Disable the BPDU protection function of the device Run the Command. ----End Example To enable the loop protection function of port 0/7/0. l l Procedure Step 1 Run the stp port loop-protection enable command to enable the loop protection function of the port. do as follows: huawei(config)#stp port 0/7/0 loop-protection enable huawei(config)#display stp port 0/7/0 ----[CIST][Port1(Down)]---Port Protocol :enabled Port Role :CIST Disabled Port 13-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the root port keeps its role. MSTP provides the loop protection function. By default. the loop protection function is disabled. Context l To avoid the switching fabric loop due to the link congestion or unidirectional link fault.14. After the loop protection function is enabled. Step 2 Run the display stp port command to query the MSTP configuration of the port. and the blocked port keeps its discarding state and does not forward any packets. the loop will not occur in the network. Table 13-23 Related operation for enabling the BPDU protection function of the device To. stp port loop-protection disable stp bpdu-protection stp port root-protection 13. which causes the network topology changed. it is only used as a specified port for all instances. MSTP provides the root protection function to avoid such a case. and will not forward the packets.. Table 13-24 Related operations for enabling the loop protection function of the device To. For the port that is enabled with the root protection function.1 :disabled :Config=auto / Active=false :3 packets/hello-time :Loop :Stp :Hello 10 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop :0 0. the port will be in the listening state. Disable the loop protection function of the device Enable the BPDU protection function of the device Enable the root protection function of the device Run the Command. In this case. By default.More ( Press 'Q' to break ) ---- Related Operation Table 13-24 lists the related operations for enabling the loop protection function of the device. RST: 0. l l Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-35 . MST: 0 :0 0. Config: 13 Configuring MSTP :128 :Config=auto / Active=200000 :0. RST: 0. MST: 0 ----[MSTI 2][Port1(Down)]---Port Role :Disabled Port Port Priority :128 Port Cost :Config=auto / Active=200000 ---.. the legal root bridge in the network might receive the configuration packets with a higher priority. the port will restore to the normal state. the root protection function of the port is disabled.. which sets the port as a non-specified port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Port Priority Port Cost Desg.. Once the port receives the configuration packets with a higher priority. the current root bridge becomes invalid. Context l Due to the incorrect configuration or malicious attacks.00e0-fc99-5050 / 128. Config: BPDU Received TCN: 0.3 Enabling the Root Protection Function of the Device This operation enables the root protection function of the device.14. When the port does not receive the configuration packets with a higher priority for a certain period. Bridge/Port Port Edged(Admin) Point-to-point Transit Limit Protection Type Port Stp Mode PortTimes 20 BPDU Sent TCN: 0. Table 13-25 Related operations for enabling the root protection function of the device To. Bridge/Port :0. RST: 0. stp port root-protection disable stp bpdu-protection stp port loop-protection 13. Step 2 Run the display stp port command to query the MSTP configuration of the port. MST: 0 ----[MSTI 2][Port1(Down)]---Port Role :Disabled Port Port Priority :128 Port Cost :Config=auto / Active=200000 ---. Disable the root protection function of the device Enable the BPDU protection function of the device Enable the loop protection function of the port Run the Command. do as follows: huawei(config)#stp port 0/7/0 root-protection enable huawei(config)#display stp port 0/7/0 ----[CIST][Port1(Down)]---Port Protocol :enabled Port Role :CIST Disabled Port Port Priority :128 Port Cost :Config=auto / Active=200000 Desg.More ( Press 'Q' to break ) ---- Related Operation Table 13-25 lists the related operations for enabling the root protection function of the device.15 Clear the MSTP Protocol Statistics This operation enables you to clear the MSTP protocol statistics.. ----End Example To enable the root protection function of port 0/7/0.. RST: 0.00e0-fc99-5050 / 128..13 Configuring MSTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the stp port root-protection enable command to enable the root protection function of the port.1 Port Edged(Admin) :disabled Point-to-point :Config=auto / Active=false Transit Limit :3 packets/hello-time Protection Type :Root Port Stp Mode :Stp PortTimes :Hello 10 s MaxAge 20 s FwDly 15 s Message Age 0 s RemHop 20 BPDU Sent :0 TCN: 0. 13-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) . MST: 0 BPDU Received :0 TCN: 0. Config: 0.. Config: 0. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 13 Configuring MSTP Context You can clear the device/port MSTP protocol statistics. Procedure Step 1 Run the reset stp statistics command to clear the MSTP protocol statistics. do as follows: huawei(config)#reset stp port 0/7/0 statistics Issue 04 (2007-11-30) Huawei Technologies Proprietary 13-37 . ----End To clear the MSTP protocol statistics on the MA5600. do as follows: huawei(config)#reset stp statistics To clear the MSTP protocol statistics on port0/7/0. Step 2 Run the reset stp port statistics command to clear the MSTP protocol statistics of a port. . 4 Configuration Example of NTP Server/Client Mode This operation enables you to configure NTP server/client mode on the MA5600.9 Configuring the NTP Multicast Mode This operation enables you to configure the NTP multicast server or client mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP 14 About This Chapter Configuring NTP This chapter describes the NTP protocol and how to configure it on the MA5600. so as to implement clock synchronization among network devices.10 Configuring NTP Server/Client Mode Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-1 . 14. 14. 14. 14. 14. so as to implement clock synchronization among network devices.3 Configuration Example of NTP Multicast Mode This operation enables you to configure NTP multicast mode on the MA5600.8 Configuring NTP Broadcast Mode This section describes how to configure the MA5600 as NTP broadcast server mode and NTP broadcast client mode.5 Configuration Example of NTP Peer Mode This operation enables you to configure NTP peer mode on the MA5600. so as to implement clock synchronization among network devices. 14. 14.7 Configuring the NTP Master Clock This operation enables you to configure the NTP master clock.1 Overview This section describes the NTP concepts and its specification on the MA5600. 14.2 Configuration Example of NTP Broadcast Mode This operation enables you to configure NTP broadcast mode on the MA5600.6 Configuring the NTP ID Authentication This operation enables you to configure NTP ID authentication so as to enhance network security and avoid unauthorized clock modification. so as to implement clock synchronization among network devices. 14. 14. 11 Configuring NTP Peer Mode This operation enables you to configure the MA5600 as the peer of a local device.12 Configuring the Authority of Access to a Local Device's NTP Service This operation enables you to configure the authority of access to a local device's NTP service. 14-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 14. and the local device as the client.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to define a remote server as the NTP server. 14. 14.13 Configuring an Interface for Transmitting/Receiving NTP Packets This operation enables you to configure an interface for transmitting or receiving NTP packets. such as the network management system and the network accounting system.1 Overview This section describes the NTP concepts and its specification on the MA5600. NTP is used to synchronize the time between the distributed time server and the client.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP 14. Service Description Network Time Protocol (NTP) is an application layer protocol in the TCP/IP protocol suite. For details on NTP. Prerequisite The time zone of the MA5600 is already configured. refer to the "3. Networking Figure 14-1 shows a sample network for configuring NTP broadcast mode.3.2 Configuration Example of NTP Broadcast Mode This operation enables you to configure NTP broadcast mode on the MA5600. The network devices that support NTP keep their time consistent by exchanging NTP packets to implement various service applications based on universal time. NTP can automatically set the local time according to the time zone of the MA5600. According to the time zone of the MA5600. In addition. For details. so as to implement clock synchronization among network devices. NTP can synchronize the time with the NTP server. Service Specification There are four NTP modes: l l l l Server/client Peer Broadcast Multicast The MA5600 supports all these modes. Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-3 .5 Setting System Time". refer to the chapter "NTP" in the Feature Description. 14. 1.2 Clock: Follows the clock of the broadcast server. and then synchronizes its clock with that of the server. Data Plan Table 14-1 lists the data plan for configuring NTP broadcast mode.255.1 Clock: Selects the local clock as the NTP master clock at stratum 2. Context l l The network devices and the line must be in the normal state. and periodically sends clock synchronization packets to destination 255.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 14-1 Sample network for configuring the NTP broadcast mode IP LSW VLAN interface 2 1. The clock stratum of the synchronizing device must be equal to or lower than that of the synchronized device. MA5600_B VLAN ID: 2 IP address of L3 interface 2: 1.1/24 VLAN interface 2 1. Configuration Flowchart Figure 14-2 shows the flowchart for configuring NTP broadcast mode. The other MA5600 serves as a client to intercept the broadcast packets from the server.255.1. clock synchronization fails.1.255.1.1.1. Table 14-1 Data plan for configuring NTP broadcast mode Item MA5600_A Data VLAN ID: 2 IP address of L3 interface 1: 1.1. Otherwise.1. 14-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2/24 MA5600_A MA5600_B An MA5600 serves as an NTP broadcast server. 1. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Figure 14-2 Flowchart for configuring NTP broadcast mode Start Configure layer 3 interface Configure broadcast server Configure broadcast client End Procedure l Configure the NTP broadcast server MA5600_A.2 24 3. huawei(config)#save Configure the NTP broadcast client MA5600_B. huawei(config)#ntp-service authentication enable huawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456 huawei(config)#ntp-service reliable authentication-keyid 88 3. huawei(config)#ntp-service refclock-master 2 Enable NTP authentication. Enable NTP authentication. Define the local clock of MA5600_A as the master NTP clock at stratum 2. 2. Add a layer 3 virtual port.1. Define the master NTP clock as the NTP broadcast server and specify the authentication ID. huawei(config)#save Huawei Technologies Proprietary 14-5 . huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1.1 24 4. huawei(config)#ntp-service authentication enable huawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456 huawei(config)#ntp-service reliable authentication-keyid 88 2.1. 1. Add a layer 3 virtual port. ----End Issue 04 (2007-11-30) Define MA5600_B as a broadcast client. 1. l Save the data. huawei(config-if-vlanif2)#ntp-service broadcast-client Save the data. 4.1. huawei(config-if-vlanif2)#ntp-service broadcast-server authentication-key 88 5. you can find that MA5600_B has been connected to MA5600_A.2BC286F8) According to the above configurations.1 nominal frequency: 100.3 Configuration Example of NTP Multicast Mode This operation enables you to configure NTP multicast mode on the MA5600. 14. Prerequisite The time zone of the MA5600 is already configured.3. and is synchronized with that of MA5600_A.9 note: 1 source(master). Networking Figure 14-3 shows a sample network for configuring NTP multicast mode. the clock of MA5600_B is at stratum of 3.00 ms root dispersion: 10.1 LOCAL(0) 2 376 64 27 991.2 source(peer). After synchronization.93 ms reference time: 12:10:10. huawei(config)#display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 1.3 selected.1.1.0 1.1 0.170 UTC May 14 2005(C6306922.45 ms peer dispersion: 10.5820 ms root delay: 0. show the state of MA5600_B. so as to implement clock synchronization among network devices.1. huawei(config)#display ntp-service sessions { <cr>|verbose<K> }: Command: display ntp-service sessions source reference stra reach poll now offset delay disper ****************************************************************************** ** [1234]1.0000 Hz clock precision: 2^17 clock offset: 996.5 configured By analyzing the sessions of MA5600_B. Display the sessions of MA5600_B. For details.5 Setting System Time".1.0000 Hz actual frequency: 100. 2. 14-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . refer to the "3.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Result Follow the steps below to verify the configuration: 1.4 candidate. 1.1.1.1.2/24 Clock: Follows the clock of the multicast server.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Figure 14-3 Sample network for configuring NTP multicast mode IP LSW VLAN interface 2 1. Otherwise. MA5600_B synchronizes with MA5600_A.1/24 VLAN interface 2 1. Configuration Flowchart Figure 14-4 shows the flowchart for configuring NTP multicast mode. Data Plan Table 14-2 lists the data plan for configuring NTP multicast mode. After receiving multicast packets from MA5600_A. the synchronization fails.2/24 MA5600_A MA5600_B MA5600_A sends multicast packets through VLAN interface 2 while MA5600_B intercepts multicast information from VLAN interface 2. MA5600_B IP address of L3 interface 2: 1.1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-7 .1/24 Clock: Selects the local clock as the NTP master clock at stratum 2.1. Table 14-2 Data plan for configuring NTP multicast mode Item MA5600_A Data IP address of L3 interface 2: 1.1.1. Context The stratum of the NTP server must be higher than or equal to that of the NTP client. 1. Configure the NTP authentication. Set MA5600_A as the multicast server and specify the authentication ID. 2. Add a layer 3 virtual port. Add a layer 3 virtual port.1.1. l Save the data. huawei(config)#ntp-service refclock-master 2 Configure the NTP authentication.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 14-4 Flowchart for configuring NTP multicast mode Start Configure layer 3 interface Configure multicast server Configure multicast client End Procedure l Configure the NTP multicast server MA5600_A. huawei(config)#save Configure the NTP multicast host MA5600_B. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1. 1. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1.2 24 3. huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)# ntp-service multicast-client 4.1. huawei(config-if-vlanif2)#ntp-service multicast-server authenticationkeyid 88 5. huawei(config)#ntp-service authentication enable huawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456 huawei(config)#ntp-service reliable authentication-keyid 88 2. Set MA5600_B as an NTP multicast client. Set the local clock as the master clock working in stratum 2.1 24 4. ----End 14-8 Save the data. huawei(config)#save Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#ntp-service authentication enable huawei(config)#ntp-service authentication-keyid 88 authentication-mode md5 123456 huawei(config)#ntp-service reliable authentication-keyid 88 3. 1. display the state of MA5600_B.1.0000 Hz clock precision: 2^17 clock offset: 996.3.0 1.1 LOCAL(0) 2 376 64 27 991.3 selected.45 ms peer dispersion: 10.4 Configuration Example of NTP Server/Client Mode This operation enables you to configure NTP server/client mode on the MA5600. 14. 2.2BC286F8) According to the above configurations.9 note: 1 source(master).00 ms root dispersion: 10. After synchronization.0000 Hz actual frequency: 100.170 UTC May 14 2005(C6306922. Prerequisite The time zone of the MA5600 is already configured.1 nominal frequency: 100.2 source(peer). For details. the clock of MA5600_B. so as to implement clock synchronization among network devices. huawei(config)#display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 1. refer to the "3.93 ms reference time: 12:10:10. you can find that MA5600_B has been connected to MA5600_A. huawei(config)#display ntp-service sessions { <cr>|verbose<K> }: Command: display ntp-service sessions source reference stra reach poll now offset delay disper ****************************************************************************** ** [1234]1. and is synchronized with that of MA5600_A.1. is at stratum of 3.1 0. Networking Figure 14-5 shows a sample network for configuring NTP server/client mode.5 Setting System Time". Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-9 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Result Follow the steps below to verify the configuration: 1.1.4 candidate.1.5 configured By analyzing the sessions of MA5600_B.5820 ms root delay: 0. Display sessions of MA5600_B. Data Plan Table 14-3 shows the data plan for configuring NTP server/client mode.1.1.1. Table 14-3 Data plan for configuring NTP server/client mode Item MA5600_A Data IP address of VLAN interface 2: 1.2/24 MA5600_A MA5600_B An MA5600 serves as an NTP broadcast server.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 14-5 Sample network for configuring NTP server/client mode IP LSW VLAN interface 2 1.1.1/24 VLAN interface 2 1. The client sends the clock synchronization request to the server and the server synchronizes the clock according to the request. MA5600_B IP address of VLAN interface 2: 1. 14-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.2/24 Clock: Selects MA5600_A as the NTP server. Otherwise.1. the synchronization fails.1. while the other MA5600 serves as a client. Context The stratum of the NTP server must be higher than or equal to that of the NTP client. Configuration Flowchart Figure 14-6 shows the flowchart for configuring NTP server/client mode.1.1/24 Clock: Selects the local clock as the NTP master clock at stratum 2. whether the layer 3 interface needs to be configured depends on the features of the device. huawei(config)#save Configure the client MA5600_B. Procedure l Configure the NTP server MA5600_A. If any other network device supporting NTP serves as a time server. the layer 3 interface needs to be configured. 1. Huawei Technologies Proprietary 14-11 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Figure 14-6 Flowchart for configuring NTP server/client mode Start Is there a clock reference? Yes No No Configure the NTP master clock Configure authentication? Yes Configure NTP authentication Configure a layer 3 interface? Yes Configure layer 3 interface No Configure NTP server/client mode End NOTE l l When the MA5600 functions as a time server. l Issue 04 (2007-11-30) Save the data. 2. Set the local clock as the master clock working in stratum 2.1.1 24 3. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1. huawei(config)#ntp-service refclock-master 2 Add a layer 3 virtual port.1. ----End Specify the IP address of MA5600_A and specify it as the server.2 source(peer). Before synchronization.1 Save the data.18 ms root dispersion: 0.00 ms root dispersion: 0.0000 Hz clock precision: 2^17 clock offset: 0.0000 Hz clock precision: 2^17 clock offset: 0.4 candidate. huawei(config)#display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 1. huawei(config)#display ntp-service sessions { <cr>|verbose<K> }: Command: display ntp-service sessions source reference stra reach poll now offset delay disper ************************************************************************** [12345]1.8 note: 1 source(master). huawei(config)#display ntp-service status clock status: unsynchronized clock stratum: 16 reference clock ID: none nominal frequency: 100. 3.1. is at stratum of 3.5 configured 14-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.0000 ms root delay: 8.1 nominal frequency: 100.0 6. the clock of MA5600.1. display the state of MA5600_B.0000 Hz actual frequency: 100.1.94 ms reference time: 11:06:39.1.15 ms peer dispersion: 10.00000000) 2.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1. By analyzing the sessions of MA5600_B. huawei(config)#ntp-service unicast-server 1.1. 3. and is synchronized with that of MA5600_A.1. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1.1 LOCAL(0) 2 177 64 62 -1. display the state of MA5600_B.3422EE41) According to the above configurations.2 24 huawei(config-if-vlanif2)#quit 2. After synchronization.3 selected. Display the sessions of MA5600_B. you can find that MA5600_B has been connected to MA5600_A.1. Add a layer 3 virtual port.00 ms reference time: 00:00:00.0000 Hz actual frequency: 100.203 UTC May 14 2005(C6305A3F.00 ms peer dispersion: 0. huawei(config)#save Result Follow the steps below to verify the configuration: 1.9 2.0000 ms root delay: 0.000 UTC Jan 1 1900(00000000. and then the passive peer responds to the request.1.1. MA5600_B Issue 04 (2007-11-30) IP address of VLAN interface 2: 1.1.2/24 MA5600_A MA5600_B One MA5600 serves as an NTP active peer. the peer with a higher clock stratum is synchronized by the peer with a lower clock stratum. Networking Figure 14-7 shows a sample network for configuring NTP peer mode.5 Setting System Time". The active peer sends a clock synchronization request to the passive peer. Figure 14-7 Sample network for configuring NTP peer mode IP LSW VLAN interface 2 1. refer to the "3.1.5 Configuration Example of NTP Peer Mode This operation enables you to configure NTP peer mode on the MA5600.1.1. Data Plan Table 14-4 lists the data plan for configuring NTP peer mode. In this case. so as to implement clock synchronization among network devices.2/24 Huawei Technologies Proprietary 14-13 . Prerequisite The time zone of the MA5600 is already configured.1/24 VLAN interface 2 1.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP 14. Table 14-4 Data plan for configuring NTP peer mode Item MA5600_A Data IP address of VLAN interface 2: 1.3.1.1/24 Clock: Selects the local clock as the NTP master clock at stratum 2. while the other MA5600 serves as the passive peer. For details. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 14-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Figure 14-8 Flowchart for configuring NTP peer mode Start Is there a clock reference? Yes No No Configure the NTP master clock Configure authentication? Yes Configure NTP authentication Configure a layer 3 interface? Yes Configure layer 3 interface No Configure NTP peer mode End Procedure l Configure the server MA5600_A. huawei(config)#ntp-service refclock-master 2 Add a layer 3 virtual port. 2. Set the local clock as the NTP master clock in stratum 2.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data Clock: Selects MA5600_B as the peer. Configuration Flowchart Figure 14-8 shows the flowchart for configuring NTP peer mode. 1. huawei(config)#display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 1. ----End Save the data.0000 Hz clock precision: 2^17 clock offset: 0.18 ms root dispersion: 0. huawei(config)#display ntp-service status clock status: synchronized clock stratum: 16 reference clock ID: none nominal frequency: 100. and the stratum of MA5600_B is 3. Add a layer 3 virtual port. huawei(config)#vlan 2 standard huawei(config)#port vlan 2 0/7 0 huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ip address 1. huawei(config)#ntp-service unicast-peer 1. 1. By default.1.1.1 nominal frequency: 100.15 ms peer dispersion: 10. and MA5600_B works in passive peer mode. an increase of 1 on that of MA5600_A.1. 4.1.0000 ms root delay: 8.2 Save the data.1.0000 Hz clock precision: 2^17 clock offset: 0. You can verify the configuration through the following steps: 1.94 ms reference time: 11:06:39. MA5600_B turns to MA5600_A for clock synchronization.94 ms reference time: 11:06:39.1.3422EE41) 2.1. Check the state of the MA5600_B before synchronization.0000 ms root delay: 8. so the clock of MA5600_B is at stratum 16. Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-15 . Therefore. MA5600_A and MA5600_B are defined as peers. l Set MA5600_B as the peer.1 24 huawei(config-if-vlanif2)#quit 14 Configuring NTP 3.203 UTC May 14 2005(C6305A3F. huawei(config)#save Configure the MA5600_B as the passive peer. huawei(config)#save Result According to the above configurations.3422EE41) MA5600_A has been synchronized with MA5600_B. Check the state of the MA5600_B after the synchronization.18 ms root dispersion: 0.15 ms peer dispersion: 10.0000 Hz actual frequency: 100. MA5600_A works in active peer mode. the system clock is at stratum 16.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-if-vlanif2)#ip address 1.1.0000 Hz actual frequency: 100.203 UTC May 14 2005(C6305A3F.2 24 huawei(config-if-vlanif2)#quit 2. The clock of MA5600_A is at stratum 2. l l l l Configuration Flowchart Figure 14-9 shows the flowchart for configuring the NTP server/client mode with ID authentication. the client can pass the authentication by the server. the client can turn to the server for clock synchronization. regardless of whether the NTP authentication is enabled on the server.6 Configuring the NTP ID Authentication This operation enables you to configure NTP ID authentication so as to enhance network security and avoid unauthorized clock modification. Figure 14-9 Flowchart for configuring the NTP server/client mode with ID authentication Start Enable ID authentication for NTP server Set an ID authentication key for the NTP server Define the key as a reliable key End Procedure Step 1 Run the ntp-service authentication enable command to enable the NTP ID authentication. the client does not synchronize the server. as long as the server is configured with the same key as that of the client. If NTP authentication is enabled. Context l If the NTP authentication is disabled on the client. The client synchronizes the server that provides the reliable key.14 Configuring NTP NOTE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Whether the active peer synchronizes with the passive peer or the passive peer synchronizes with active peer is determined by the clock stratum rather than the active or the passive state. 14-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . If the server provides an unreliable key. If NTP is enabled on the client. The configuration of the server shall be consistent with that of the client. a reliable key shall be configured. Step 2 Run the ntp-service authentication-keyid command to set a key for the ID authentication. regardless of whether NTP authentication is enabled on the server or its key is reliable. 14. 2 255.2.1...0.. ----End Example To enable NTP ID authentication.2 255.1. undo ntp-service authentication enable Huawei Technologies Proprietary 14-17 .2 nexthop 20.0.255.1 .2.0.2 ip route-static 2.2.2..2 nexthop 10.2.255. configure the NTP configuration key as aNiceKey with key number of 42.2 out-label 8200 static-lsp ingress tunnel-interface tunnel2 destination 2. do as follows: huawei(config)#ntp-service authentication enable huawei(config)#ntp-service authentication-keyid 42 authentication-mode md5 aNiceKey huawei(config)#ntp-service reliable authentication-keyid 42 huawei(config)#display current-configuration section post-system [MA5600V300R003: 3002] # [post-system] <post-system> ip route-static 0.2.255. Step 4 Run the display current-configuration section command to query the current configuration of the system.0 0.255. Table 14-5 Related operations for configuring NTP ID authentication To. Disable NTP ID authentication Issue 04 (2007-11-30) Run the Command.2.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Step 3 Run the ntp-service reliable authentication-keyid command to define the key as a reliable one.55.1 ip route-static 2.255 20.0 10.0.1.2 # static-lsp ingress tunnel-interface tunnel1 destination 2.255 10.1. and then define key 42 as a reliable key.1.1.1 .71.2.2 out-label 8210 # snmp-agent local-engineid 000007DB0300E0FC590001 snmp-agent sys-info version v1 v2c snmp-agent group v3 group authentication read-view internet snmp-agent usm-user v3 user group authentication-mode md5 5B35F3BA2B65CA9D4A35CC868E5963CF privacy-mode des56 B889728872508FA68D4C91595D092958 snmp-agent # ntp-service authentication enable ntp-service authentication-keyid 42 authentication-mode md5 X&9#$^U(!:[Q=^Q` MAF4<1!! ntp-service reliable authentication-keyid 42 # ssh user op authentication-type password ssh user user authentication-type password ssh user test authentication-type password # tunnel-policy policy10 # return Related Operation Table 14-5 lists the related operations for configuring NTP ID authentication. The clock at stratum 1 is of the highest accuracy...7 Configuring the NTP Master Clock This operation enables you to configure the NTP master clock. undo ntp-service authentication-keyid undo ntp-service reliable authentication-keyid display ntp-service status 14. l Procedure Step 1 Run the ntp-service refclock-master command to configure the NTP master clock.. Context l The IP address of the local reference lock is set to 127.1. in which: t ranges from 0 to 37 but is currently 1.10ADBC66) Related Operation Table 14-6 lists the related operation for configuring the NTP master clock.0 2 huawei(config)#display ntp-service status clock status: synchronized clock stratum: 2 reference clock ID: LOCAL(0) nominal frequency: 100. The clock stratum number ranges 1–15.0 serves as the NTP master clock.127. local clock 127.0. by default..127. 14-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) .0000 ms root delay: 0.00 ms peer dispersion: 10.065 UTC Feb 14 2006(C79C5C95.0000 Hz clock precision: 2^18 clock offset: 0. ----End Example To define the clock of a local device as the master NTP clock at stratum 2 and specify the IP address as 127.127. Clock stratum represents clock accuracy.1.t. u ranges from 0 to 3.u. the lower the clock accuracy. representing the NTP process number. l With no IP address specified. The larger the clock stratum number.127.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To. Remove the NTP authentication key Cancel a key as a reliable one Display the NTP service status Run the Command. Step 2 Run the display ntp-service status command to query the NTP status information. The initial value is 16 before it is configured. do as follows: huawei(config)#ntp-service refclock-master 127.00 ms reference time: 13:41:41.00 ms root dispersion: 0.127.0000 Hz actual frequency: 100. 1. Cancel the NTP master clock Run the Command.. 14. The local device operates in broadcast-server mode. and serves as a broadcast server to broadcast packets to its clients regularly.8. 14.0 mpls Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-19 .8. l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode.255. undo ntp-service refclock-master 14.. 14. Step 2 Run the ntp-service broadcast-server command to configure the NTP broadcast server mode.. Perform this operation on the interface where the NTP broadcast packets are to be transmitted. ----End Example To define VLAN interface 2 on a local device to transmit NTP broadcast packets which are encrypted by key 88. Step 3 Run the display current-configuration section command to query the current configuration of the system..1 Configuring NTP Broadcast Server Mode This operation enables you to configure the MA5600 as the NTP broadcast server.1 255.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Table 14-6 Related operation for configuring the NTP master clock To.1 Configuring NTP Broadcast Server Mode This operation enables you to configure the MA5600 as the NTP broadcast server.255.8. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ntp-service broadcast-server authentication-keyid 88 huawei(config-if-vlanif2)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif10> interface vlanif10 ip address 10.2 Configuring NTP Broadcast Client Mode This operation enables you to configure the MA5600 as the NTP broadcast client.8 Configuring NTP Broadcast Mode This section describes how to configure the MA5600 as NTP broadcast server mode and NTP broadcast client mode. Context l This task is to specify an interface on the local device to transmit NTP broadcast packets.1. . Step 2 Run the ntp-service broadcast-client command to configure NTP broadcast client mode. undo ntp-service broadcast-server display ntp-service trace Remarks Synchronize NTP server chain from the local device to the reference clock source. The local device then enters the broadcast client mode. it enters the client/server mode briefly to exchange packets with a remote server for estimating the network delay.. Perform this operation on the interface where the NTP multicast packets are to be transmitted. - Display the state of sessions maintained by NTP service Enable NTP debugging display ntp-service sessions debugging ntp-service 14. l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode. Cancel the broadcast server configuration Display NTP service trace Run the Command. Step 3 Run the display ntp-service status command to query the NTP information. When receiving the first broadcast packet. Context l The local device first detects the broadcast packets from the server. and display brief information on each NTP server.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide mpls te # <vlanif30> interface vlanif30 ntp-service broadcast-server authentication-keyid 88 # return Related Operation Table 14-7 lists the related operations for configuring NTP broadcast server mode.. and synchronizes the local clock according to the received broadcast packets.8.. continues detecting the broadcast packets.2 Configuring NTP Broadcast Client Mode This operation enables you to configure the MA5600 as the NTP broadcast client. Table 14-7 Related operations for configuring NTP broadcast server mode To. ----End 14-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 87 ms peer disper: 10.. When receiving the first multicast packet. The local device enters multicast client mode.66 ms root dispersion: 23.5847A17F) Related Operation Table 14-8 lists the related operations for configuring NTP broadcast client mode.344 UTC May 16 2003(C26EE107.95. and synchronizes the local clock according to the received multicast packets.83 ms reference time: 04:01:11.5809 ms root delay : 372. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ntp-service broadcast-client huawei(config)#display ntp-service status huawei#display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 212.4 nominal frequence: 100.9 Configuring the NTP Multicast Mode This operation enables you to configure the NTP multicast server or client mode. Cancel the broadcast client configuration Display NTP service trace Run the Command… undo ntp-service broadcast-client display ntp-service trace 14.1. it enters the client/server mode briefly to switch packets with a remote server for estimating the network delay.0.125.1. l Note that: Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-21 .0000 Hz actual frequence: 100. Table 14-8 Related operations for configuring NTP broadcast client mode To..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Example To specify a local device as a broadcast client to receive broadcast packets through VLAN interface 2.0000 Hz clock precision: 2^6 clock offset: 0. Working principles of NTP multicast client are as follows: l The local device first detects the multicast packets from the server. The client detects the multicast packets and synchronizes the local clock according to the packets. continues to detect the multicast packets. Context Working principle of NTP multicast server is as follows: l The multicast server sends clock synchronization packets to multicast destination IP address 224. 0000 Hz actual frequency: 100.244 UTC Sep 9 2006(C8ADB762.14 Configuring NTP l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The server and the client can be configured only on the interface where the NTP multicast packets are to be transmitted or received.89A7E308) Related Operation Table 14-9 lists the related operations for configuring the NTP multicast mode. ----End To define a local device as multicast server to transmit multicast packets through VLAN interface 2.0000 ms root delay: 0. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ntp-service multicast-server huawei(config)#display ntp-service status UA5000(config)#display ntp-service status clock status: synchronized clock stratum: 2 reference clock ID: LOCAL(0) nominal frequency: 100.94 ms peer dispersion: 10.00 ms reference time: 22:00:03. l Procedure Step 1 Run the interface vlanif command to enter the layer 3 interface mode. In multicast mode. 14-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The client must be synchronized by the clock of the server.0000 Hz clock precision: 2^18 clock offset: 0.00 ms root dispersion: 10.3E7CD035) To define a local device as multicast client to receive multicast packets through VLAN interface 2.0000 ms root delay: 0.537 UTC Sep 9 2006(C8ADB7E3.94 ms peer dispersion: 10.0000 Hz actual frequency: 100. Step 3 Run the display ntp-service status command to query the NTP status information.00 ms reference time: 21:57:54.00 ms root dispersion: 10. do as follows: huawei(config)#interface vlanif 2 huawei(config-if-vlanif2)#ntp-service multicast-client huawei(config)#display ntp-service status UA5000(config)#display ntp-service status clock status: synchronized clock stratum: 2 reference clock ID: LOCAL(0) nominal frequency: 100.0000 Hz clock precision: 2^18 clock offset: 0. the NTP configurations must be performed on both the server and the client. Step 2 Run the ntp-service multicast-server command to configure the NTP multicast mode. 10 Configuring NTP Server/Client Mode This operation enables you to define a remote server as the NTP server.0000 Hz clock precision: 2^18 clock offset: 0. ----End Example To specify the device with the IP address of 1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Table 14-9 Related operations for configuring the NTP multicast mode To.0. After receiving the request. l Procedure Step 1 Run the ntp-service unicast-server command to configure the NTP server/client mode. Cancel the multicast server configuration Cancel the multicast client configuration Display NTP service trace Run the Command… undo ntp-service multicast-server undo ntp-service multicast-client display ntp-service trace 14. In this mode.00 ms root dispersion: 0. Step 2 Run the display ntp-service status command to query the NTP status information. the server automatically works in server mode and then sends the response.1. Context l The client sends the clock synchronization request to the server.00000000) Related Operation Table 14-10 lists the related operations for configuring NTP server/client mode.0. and the local device as the client.00 ms reference time: 00:00:00. the client filters and selects the clock...11 as the NTP server and the version as 3for the client.0000 Hz actual frequency: 100.11 version 3 huawei(config)#display ntp-service status clock status: unsynchronized clock stratum: 16 reference clock ID: none nominal frequency: 100. Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-23 . and synchronizes the preferred server.00 ms peer dispersion: 0.1. while the remote server does not. After receiving the response from the server.0000 ms root delay: 0. do as follows: huawei(config)#ntp-service unicast-server 1. only the local client initiates the clock synchronization with the remote server.000 UTC Jan 1 1900(00000000. 32 as the peer of the local device. The peer with a higher clock stratum is synchronized by the peer with a lower clock stratum.000 UTC Jan 1 1900(00000000. ----End Example To specify the remote device with IP address of 3.00000000) Related Operation Table 14-11 lists the related operation for configuring NTP peer mode. l l Procedure Step 1 Run the ntp-service unicast-peer command to configure NTP peer mode..14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 14-10 Related operations for configuring NTP server/client mode To. After receiving the request.0000 Hz actual frequency: 100. In NTP peer mode.0000 Hz clock precision: 2^18 clock offset: 0.0000 ms root delay: 0. local session number Restore the default setting of maximum local sessions Run the Command. do as follows: huawei(config)#ntp-service unicast-peer 3.. 14-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the NTP configuration is performed only on the active peer.1.0. Both the active peer and the passive peer synchronize their clocks mutually.00 ms peer dispersion: 0.0. Step 2 Run the display ntp-service status command to query the NTP status information.. undo ntp-service unicast-server ntp-service max-dynamic-sessionsnumber undo ntp-service max-dynamic-sessions 14..32 huawei(config)#display ntp-service status clock status: unsynchronized clock stratum: 16 reference clock ID: none nominal frequency: 100. Context l The active peer sends the clock synchronization request to the passive peer.1. the other peer automatically works in passive peer mode and sends the response.00 ms reference time: 00:00:00. Cancel a specified NTP server Set the max.11 Configuring NTP Peer Mode This operation enables you to configure the MA5600 as the peer of a local device.00 ms root dispersion: 0. Step 2 Run the display current-configuration section command to query the current configuration of the system.1.55. ----End Example To configure the authority of access to a local device's NTP service as "peer".0.1.2.255.1.0.2 255. server: authority for server's access and query synchronization: authority for only the server's access Procedure Step 1 Run the ntp-service access command to configure the authority of access to a local device's NTP service.1 ip route-static 2. Context By default.0 10. and the ACL applied as 2000.0. The first matched authority will be granted.2 255.2. query.0.71.2 ip route-static 2.255.12 Configuring the Authority of Access to a Local Device's NTP Service This operation enables you to configure the authority of access to a local device's NTP service. With this configuration.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Table 14-11 Related operation for configuring NTP peer mode To. the request will be matched with peer...2.. do as follows: huawei(config)#ntp-service access peer 2000 huawei(config)#display current-configuration section post-system [MA5600V300R003: 3002] # [post-system] <post-system> ip route-static 0.255. server.2. when there is an access request. Cancel the specified NTP peer Run the Command. Prerequisite The ACL applied already exists.0 0.255. and synchronization in descending order. access to a local device's NTP service is not controlled. l l l l peer: authority for absolute access query: control and query authority.1.2 # snmp-agent local-engineid 000007DB0300E0FC590001 snmp-agent sys-info version v1 v2c Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-25 .255 10.. undo ntp-service unicast-peer 14.255 20. .13 Configuring an Interface for Transmitting/Receiving NTP Packets This operation enables you to configure an interface for transmitting or receiving NTP packets.14 Configuring NTP SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide snmp-agent group v3 group authentication read-view internet snmp-agent usm-user v3 user group authentication-mode md5 5B35F3BA2B65CA9D4A35CC868E5963CF privacy-mode des56 B889728872508FA68D4C91595D092958 snmp-agent # ntp-service authentication enable ntp-service access peer 2000 ntp-service authentication-keyid 42 authentication-mode md5 X&9#$^U(!:[Q=^Q`MAF4<1!! ntp-service reliable authentication-keyid 42 # ssh user op authentication-type password ssh user user authentication-type password ssh user test authentication-type password # tunnel-policy policy10 # return Related Operation Table 14-12 lists the related operations for configuring the authority of access to a local device's NTP service. 14-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Prerequisite The applied ACL has been existed. Table 14-12 Related operations for configuring the authority of access to a local device's NTP service To. Cancel the NTP access authority configuration Configure the maximum number of dynamic sessions that can be set up on a local device Cancel the configuration of maximum number of dynamic sessions that can be set up on a local device Run the Command… undo ntp-service access ntp-service max-dynamic-sessions [number] undo ntp-service max-dynamic-sessions 14.. . Cancel the local transmit or receive interface Disable an interface from receiving NTP packets Enable an interface to receive NTP packets Run the Command… undo ntp-service sourceinterface ntp-service in-interface disable undo ntp-service in-interface disable Remarks In corresponding interface config mode In corresponding interface config mode Issue 04 (2007-11-30) Huawei Technologies Proprietary 14-27 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 14 Configuring NTP Context l Once an interface is specified through the ntp-service source-interface command. do as follows: huawei(config)#ntp-service source-interface meth 0 Related Operation Table 14-13 lists the related operations for configuring an interface for transmitting or receiving NTP packets. this transmit interface prevails. ----End Example To specify interface MEth 0 for transmitting NTP packets. the IP address of the interface is also the IP address of the packets.. If the ntp-service unicast-server or ntp-service unicast-peer command also specifies a transmit interface. l Procedure Run the ntp-service source-interface command to specify an interface for transmitting NTP packets. Table 14-13 Related operations for configuring an interface for transmitting or receiving NTP packets To. . 2 Adding a Static MAC Address This operation enables you to add a static MAC address. 15. 15.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 15 Configuring MAC Address 15 About This Chapter Configuring MAC Address This chapter describes how to configure the MAC address and MAC address pool on the MA5600. 15.7 Configuring the MAC Address Pool This operation enables you to configure the MAC address pool.5 Binding the MAC Address This operation enables you to bind a service port with a MAC address. Issue 04 (2007-11-30) Huawei Technologies Proprietary 15-1 .3 Setting the Maximum MAC Address Number Learned by a Service Port This operation enables you to set the maximum MAC address number learned by a service port. This helps to restrict the number of users connected to the port. 15.6 Configuring MAC Address Filtering This operation enables you to configure the function of MAC address filtering to filter the packets with the source MAC address as the specified one.4 Configuring the Aging Time of a Dynamic MAC Address This operation enables you to configure the aging time of a dynamic MAC address.1 Overview This chapter describes MAC address and its application to the MA5600. 15. 15. 15. If the source MAC address of a packet does not exist in the list.2 Adding a Static MAC Address This operation enables you to add a static MAC address. but the total number of configurable MAC addresses cannot exceed 1024. the MA5600 supports the MAC address lists and the MAC address pool. so as to convert ATM cells to Ethernet frames. Service Description To meet the needs of bearing multiple services. The MA5600 deletes the associated address items of a device that has not sent any packet with this source MAC address for a certain period. A static MAC address cannot be added if there exists a same static MAC address in the system. In IP over ATM (IPoA) or PPP over ATM (PPPoA) access. The MAC address lists of the MA5600 is capable of learning new MAC addresses. You can run the display mac-pool command to check it. the MA5600 needs to convert the IPoA/PPPoA packets into IP over Ethernet (IPoE)/PPP over Ethernet (PPPoE) packets. the dynamic MAC address is overwritten by the static MAC address. the MAC address pool of the MA5600 needs to allocate MAC addresses to users. and add ATM cells with the MAC address. The MA5600 supports up to 16384 MAC addresses including the dynamic MAC addresses and static MAC addresses. Service Specification The MA5600 supports up to 1024 static MAC addresses.1 Overview This chapter describes MAC address and its application to the MA5600. Dynamic MAC addresses in the MAC address list also features the aging function. that is. 15-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The configured static MAC address must be excluded from the MAC address pool.15 Configuring MAC Address SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 15. In this case. Context l When you add a static MAC address and there exists the same dynamic MAC address in the specified service channel or the upstream port of a specified VLAN. 15. source MAC addresses (SMAC). the MA5600 can add the source MAC address and the port number of the received packet to the list as a new item. An upstream port which is included in different VLANs can be configured with the same static MAC address. l l Procedure Step 1 Run the mac-address static command to add a static MAC address. The MA5600 supports up to 20 MAC address pools. the maximum MAC address number learned by a service port is 255. Table 15-1 Related operation for adding a static MAC address To. Context l l By default. undo mac-address static 15. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 15-3 . Procedure Step 1 Run the mac-address max-mac-count command to set the maximum MAC address number learned by a service port.IMA GROUP or VLAN ID etc..3 Setting the Maximum MAC Address Number Learned by a Service Port This operation enables you to set the maximum MAC address number learned by a service port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 15 Configuring MAC Address Step 2 Run the display mac-address static command to query the configured static MAC address.. Delete a static MAC address Run the Command. S--Slot. the VPI is access-end VLAN ID in vdsl/eau port or PON ID in gpon port Related Operation Table 15-1 lists the related operation for adding a static MAC address.UP-Link Port. P--Port(xDSL Port. do as follows: huawei(config)#mac-address static adsl 0/2/0 vpi 0 vci 32 1010-1010-1010 huawei(config)#display mac-address static --------------------------------------------------------------------------Type MAC MAC Type F/S /P VPI VCI FLOWTYPE FLOWPARA VLANID --------------------------------------------------------------------------adl 1010-1010-1010 static 0/2/0 0 32 3 --------------------------------------------------------------------------Total: 1 Note : F--Frame. Step 2 Run the display mac-address max-mac-count command to query the configured maximum MAC address number learned by the service port. This helps to restrict the number of users connected to the port. The maximum MAC address number learned by a service port does not include the configured static MAC addresses..).. ----End Example To configure the MAC address of ADSL2+ port 0/2/0 (with VPI/VCI of 0/32) as 1010-1010-1010. UP-Link Port. Step 2 Run the display mac-address timer command to query the configured aging time of the dynamic MAC address. The address aging function is only effective to dynamic MAC addresses. packets with new MAC addresses are directly discarded due to failure to find the destination address. do as follows: huawei(config)#mac-address timer 500 huawei(config)#display mac-address timer MAC aging time: 500s 15-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Context l To effectively realize the aging function of dynamic MAC addresses. In general.15 Configuring MAC Address SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the maximum MAC address number learned by service port 0/2/0 with VLAN ID of 10 at the user side as 10. If a device has not transmitted any packet during the period which is the one to double of the aging time. the VPI is access-end VLAN ID in vdsl/eau port or PON ID in gpon port 15. if the aging time is set too long. On the other hand. the aging time is 300s.IMA GROUP or VLAN ID etc. the default value is recommended. l l l l Procedure Step 1 Run the mac-address timer command to configure the aging time of a dynamic MAC address. Consequently. As a result.). ----End To set the aging time of a dynamic MAC address as 500s. the MA5600 deletes the MAC address of the device from the MAC address list.4 Configuring the Aging Time of a Dynamic MAC Address This operation enables you to configure the aging time of a dynamic MAC address. if the number of MAC addresses learnt on the specified port reaches the maximum value. a dynamic MAC address is deleted very soon. do as follows: huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 32 user-vlan 10 10 huawei(config)#display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 32 user-vlan 10 Command: display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 32 user-vlan 10 ---------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number ---------------------------------------------------------------------------adl 0/2/0 0 32 10 user-vlan 10 10 ---------------------------------------------------------------------------Note : F--Frame. S--Slot. P--Port(xDSL Port. By default. the data packets associated with the address are broadcast to all the ports in a VLAN due to the failure to find the destination address. If the aging time is set too short. thus affecting the running efficiency of the MA5600. the MA5600 cannot update its MAC address list according to the network change. you need to configure the aging time. Issue 04 (2007-11-30) Huawei Technologies Proprietary 15-5 . P--Port(xDSL Port. do as follows: huawei(config)#mac-address static adsl 0/2/0 vpi 0 vci 35 1010-1010-1010 huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 0 huawei(config)#display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 ---------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number ---------------------------------------------------------------------------adl 0/2/0 0 35 4000 0 -------------------------------------------------------------------------Total: 1 Note : F--Frame. Step 2 Run the mac-address max-mac-count command to set the maximum address count for the service port. S--Slot. ----End Example Assume that the static MAC address of ADSL2+ port 0/2/0 is 1010-1010-1010. Context The MA5600 does not support binding a MAC address directly.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 15 Configuring MAC Address To configure no aging time of a dynamic MAC address. and the maximum address count is 0. By configuring a static MAC address entry and setting the maximum address count to 0. Step 3 Run the display mac-address max-mac-count command to query the maximum MAC address number that can be learnt by service channels. to bind the port with the MAC address so that the port only allows the pass of packets with the source MAC address of 1010-1010-1010.6 Configuring MAC Address Filtering This operation enables you to configure the function of MAC address filtering to filter the packets with the source MAC address as the specified one. the VPI is access-end VLAN ID in vdsl/eau port or PON ID in epon port 15. Procedure Step 1 Run the mac-address static command to configure the static MAC address for a port.IMA GROUP or VLAN ID etc. Context The system supports up to four filtering MAC addresses.5 Binding the MAC Address This operation enables you to bind a service port with a MAC address.). you can bind a port with a MAC address. do as follows: huawei(config)#mac-address timer no-aging huawei(config)#display mac-address timer MAC aging time: No aging 15.UP-Link Port. Table 15-2 Related operation for configuring MAC address filtering To… Delete the filtering MAC address Run the Command… undo security mac-filter 15. A MAC address pool cannot contain the MAC address of the control board. The configured static MAC address must be excluded from the MAC address pool to be configured. and the MA5600 adopts the PPPoA or Auto encapsulation mode.Mac Address --------1000-0000-0000 ---. the range is 256. l l You need to configure the MAC address pool in one of the following two cases: l The user modem adopts the IPoA access mode. Context l l The system supports up to 20 MAC address pools and totally 1024 MAC addresses. you do not need to specify the index and range of the MAC address pool. The user modem adopts the PPPoA access mode. You can run the display mac-address static command to check it.7 Configuring the MAC Address Pool This operation enables you to configure the MAC address pool. do as follows: huawei(config)#security mac-filter 1000-0000-0000 huawei(config)#display security mac-filter --------.15 Configuring MAC Address SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the security mac-filter command to configure MAC address filtering. Step 2 Run the display security mac-filter command to query the configured filtering MAC address. By default. ----End Example To configure the MAC address 1000-0000-0000 as the filtering MAC address. 15-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . and the MA5600 adopts the IPoA or Auto encapsulation mode. l Procedure Step 1 Run the mac-pool command to configure the MAC address pool. When adding a MAC address pool.1 mac address found ---- Related Operation Table 15-2 lists the related operation for configuring MAC address filtering. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 15 Configuring MAC Address Step 2 Run the display mac-pool command to query the added MAC address pool. Addresses in use : 0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 15-7 . MAC addresses :800. the start MAC address of 1000-0000-0000. ----End Example To add a MAC address pool with the index of 0. do as follows: huawei(config)#mac-pool 0 1000-0000-0000 800 huawei(config)#display mac-pool all Current allocation method of MAC addresses: manual User-configured MAC pools : ---------------------------------------------------------------Index StartMAC EndMAC Scope UsedNum ---------------------------------------------------------------0 1000-0000-0000 1000-0000-031f 800 0 ---------------------------------------------------------------MAC pools : 1. and the address count of 800. . 1 Overview This chapter describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connection attributes and the application to the MA5600.4 Configuring the Finwait Timer This operation enables you to configure the finwait timer. 16.2 Basic Concepts This section describes concepts of synwait timer and finwait timer.6 Enabling the TCP Debugging This operation enables the TCP debugging. 16. Issue 04 (2007-11-30) Huawei Technologies Proprietary 16-1 . 16.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 16 Configuring TCP/IP Connection 16 Configuring TCP/IP Connection About This Chapter This chapter describes how to configure the TCP&IP connection on the MA5600. 16.3 Configuring the Synwait Timer This operation enables you to configure the synwait timer. 16.7 Enabling the IP Packets Debugging This operation enables the IP packets debugging. 16. 16.5 Configuring the Socket Buffer This operation enables you to configure the size of the socket transmit and receive buffer. the TCP connection will be terminated.16 Configuring TCP/IP Connection SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 16. If no acknowledgement (ACK) packet is received before time specified by the synwait timer. Procedure Run the tcp timer syn-timeout command to configure the synwait timer. The default is 75s. TCP connection configuration involves: l l l l Configuring the synwait timer Configuring the finwait timer Configuring the socket buffer Enabling the TCP debugging IP connection involves enabling the IP packets debugging. the TCP connection will be dropped. 16. Service Description The MA5600 supports TCP/IP.2 Basic Concepts This section describes concepts of synwait timer and finwait timer. Context The timeout time of synwait timer ranges from 2s to 600s. TCP enables the synwait timer.1 Overview This chapter describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connection attributes and the application to the MA5600. If no FIN packet is received before the time specified by the finwait timer. the finwait timer is enabled. ----End 16-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Synwait Timer When the synchronization (SYN) packet is sent.3 Configuring the Synwait Timer This operation enables you to configure the synwait timer. 16. Finwait Timer When the TCP connection state changes from FIN_WAIT_1 to FIN_WAIT_2. Table 16-1 Related operation for configuring the synwait timer To.5 Configuring the Socket Buffer This operation enables you to configure the size of the socket transmit and receive buffer. do as follows: huawei(config)#tcp timer syn-timeout 100 Related Operation Table 16-1 lists the related operation for configuring the synwait timer.. Table 16-2 Related operation for configuring the finwait timer To. undo tcp timer fin-timeout 16... Issue 04 (2007-11-30) Huawei Technologies Proprietary 16-3 .. Restore the default setting of the syswait timer Run the Command. ----End Example To set the time of finwait timer as 200s..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 16 Configuring TCP/IP Connection Example To set the TCP timer time as 100s. Restore the default setting of finwait timer Run the Command.. Procedure Run the tcp timer fin-timeout command to configure the finwait timer..4 Configuring the Finwait Timer This operation enables you to configure the finwait timer.. do as follows: huawei(config)#tcp timer fin-timeout 200 Related Operation Table 16-2 lists the related operation for configuring the finwait timer. undo tcp timer syn-timeout 16. Context The timeout time of finwait timer ranges from 76s to 3600s. The default is 675s. Procedure Run the debugging tcp packet command to enable the TCP debugging... The default is 4 KB. ----End Example To enable the TCP debugging.. do as follows: huawei(config)#debugging tcp packet 16-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .6 Enabling the TCP Debugging This operation enables the TCP debugging. Procedure Run the tcp window command to set the size of the socket transmit & receive buffer. By default. the related information will be displayed on the terminal. do as follows: huawei(config)#tcp window 12 Related Operation Table 16-3 lists the related operation for configuring the socket buffer. Restore the default setting of the socket buffer Run the Command. Context After the terminal monitor and terminal debugging function are enabled. the terminal monitor and terminal debugging functions are disabled. ----End Example To set the size of the socket transmit & receive buffer as 12 KB.16 Configuring TCP/IP Connection SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context The buffer size ranges from 1 KB to 32 KB. undo tcp window 16.. Table 16-3 Related operation for configuring the socket buffer To. offset = 0. undo debugging tcp { packet | event | md5 } (undo) terminal monitor (undo) terminal debugging 16. checksum = 17131.0. Table 16-4 Related operations for enabling the IP packets debugging To. By default. headlen = 20. tos = 192. do as follows: huawei(config)#debugging ip packet *0.. protocol = 17. s = 10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 16 Configuring TCP/IP Connection Related Operation Table 16-4 lists the related operations for enabling the IP packets debugging.. Disable the TCP debugging Enable/Disable the switch for displaying the debugging/log/alarm information at the terminal Enable/Disable output of the debugging information on the terminal Run the Command.11. pktid = 35614..0. the terminal monitor and terminal debugging functions are disabled.24271340 MA5600-42 IP/8/debug_case: Receiving.. d = 224.7 Enabling the IP Packets Debugging This operation enables the IP packets debugging. Procedure Run the debugging ip packet command to enable the IP packets debugging. pktlen = 70. the related information will be displayed on the terminal.2 prompt: Receiving IP packet Related Operation Table 16-5 lists the related operations for enabling the IP packets debugging.0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 16-5 . version = 4.209. Context After the terminal monitor and terminal debugging function are enabled. ttl = 1. interface = vlanif3000. ----End Example To enable the IP packets debugging. . undo debugging ip packet (undo) debugging ip icmp display ip interface (undo) terminal monitor (undo) terminal debugging 16-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Disable the IP packets debugging Enable/Disable the ICMP debugging Query the information about the IP layer interfaces Enable/Disable the switch for displaying the debugging/log/alarm information at the terminal Enable/Disable output of the debugging information on the terminal Run the Command....16 Configuring TCP/IP Connection SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 16-5 Related operations for enabling the IP packets debugging To. 10 Creating a Basic ACL Rule This operation enables you to configure a basic ACL rule so that the device can filter data packets according to the source IP address.4 Configuring the Advanced ACL This operation enables you to filter data packets that meet the source IP address and DSCP conditions within a certain period of time.1 Overview This chapter describes access control list (ACL) and its applications to the MA5600. 17.7 Creating an ACL This operation enables you to create a basic ACL. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-1 . a layer 2 ACL or a customized ACL.6 Configuration Example of the Customized ACL This operation enables you to filter data packets that meet the customized conditions within a certain period of time. 17.9 Setting the Step This operation enables you to modify the step of ACL rules when they are automatically numbered. destination MAC address.3 Configuring the Basic ACL This operation enables you to filter data packets that meet the source IP address conditions within a certain period of time.5 Configuring the Layer 2 ACL This operation enables you to filter data packets that meet the source MAC address.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL 17 About This Chapter The following lists the contents of this chapter. 17. an advanced ACL. 17. so as to specify the valid time of an ACL rule. 17. and VLAN ID conditions within a certain period of time. 17.2 Related Concepts Configuring ACL 17.8 Configuring a Time Range This operation enables you to configure a time range. 17. 17. 17. and IP bearer protocol type.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17. 17-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .11 Creating an Advanced ACL Rule This operation enables you to configure an advanced ACL rule to filter data packets according to such information as the source IP address. layer 2 forward port. destination IP address.14 Activating an ACL This operation enables you to activate a configured ACL to validate it. 17. layer 2 protocol type.13 Creating a Customized ACL Rule This operation enables you to configure a customized ACL rule to filter data packets according to any eight character strings (up to four bytes in a character string) in the first 80 bytes of the layer 2 data frame.12 Creating a Layer 2 ACL Rule This operation enables you to configure a layer 2 ACL rule to filter data packets according to the link layer information such as the source MAC address. and destination MAC address. 17. 17. source VLAN ID. the mask of the IP/MAC address is the positive mask. ACL Types Table 17-1 describes the four types of ACLs. refer to the Feature Description ACL. Service Description An ACL carries out the packet filtering function. priority queuing. You can configure some matching rules on network devices to filter unwanted data packets. and traffic measurement on packets filtered by ACL rules. If ACL rules are delivered to user port of the MA5600. traffic limitation. then all ADSL2+ ports in slot 1 of frame 0 filter packets. Service Specifications The MA5600 can ensure high QoS for user services based on the traffic rule classification. Table 17-1 ACL types ACL Type Basic ACL Numeral Range 2000–2999 Feature Allows rule definition according to L3 source IP address. advanced or layer 2 ACL. If ACL rules are delivered to an Ethernet port. With the matching rules. redirection.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL 17. For the customized ACL. For the basic. network devices can permit or deny the matching data packets to pass. measurement and scheduling policies. scheduling. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-3 . such as ADSL2+ port 0/1/0. For details on ACL. The MA5600 supports the following types of ACLs: l l l l Basic ACL Advanced ACL Layer 2 ACL Customized ACL The MA5600 performs filtering. traffic mirroring.1 Overview This chapter describes access control list (ACL) and its applications to the MA5600. The classified traffic is the prerequisite for carrying out Quality of Service (QoS). the mask of the IP/MAC address is the inverse mask. then only the Ether port filters packets. You can match the traffic with one group of ACL rules or with different groups of ACL rules. In this case. 17-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . If a traffic stream reaches a device and matches with two or more ACL rules. the definition of the advanced ACL is more accurate. Compared with the basic ACL. Allows rule definition according to any 32 bytes of the first 80 bytes in a layer 2 frame. the two ACL rules conflict when they are used to process packets to such specific IP address. source VLAN ID. If rules in an ACL are activated one by one. it has higher priority over ACL rule A. Customized ACL 5000–5999 Difference Between Matching Sequence and Configuration Sequence ACL rule IDs are assigned in the same sequence as that an ACL is defined. richer and more flexible. the ID of the second rule is 10. IP bearer protocol type. the ID of the third rule is 15. TCP source port. Matching with One Group of ACL Rules l If all rules in an ACL are activated at the same time. By default. layer 2 protocol type. Active the two rules at the same time. Since ACL rule B is defined later. a rule activated earlier has higher priority than those activated later.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide ACL Type Advanced ACL Numeral Range 3000–3999 Feature Allows rule definition according to source address. destination address. TCP destination port. the ID of the first ACL rule is 5. l Assume that ACL rule A denies all IP packets. so ACL rule B is chosen as the rule to handle the packets to such a specific address. This is called configuration sequence. ICMP protocol type and ICMP code. Layer 2 ACL 4000–4999 Allows rule definition according to source MAC address. This is determined by the matching sequence. a rule defined later has a higher priority than those defined earlier. and destination MAC address. and so on. which rule should be followed to handle the traffic. and ACL rule B permits packets to a specific IP address. 2. After that. Recommendations on Configuring ACL Rules To use ACLs more efficiently. Assume that ACL group A filters all IP packets. QoS action A is based on ACL A. Activate QoS action A first on a port. activate these two actions consecutively. and have the same priority if they are activated consecutively. and QoS action A is activated later. the QoS action that is activated earlier has a higher priority than the actions activated later.2. The default rule is to forward all the un-matched packets.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL Matching with Different Groups of ACL Rules When matching the packets using different groups of ACL rules. while QoS action B is based on ACL B. If QoS action B is activated first on the port. So the two rules use the same hardware resource. Assume that ACL group A denies all IP packets. and ACL group B permits packets to a specific IP address. the stream is processed according to a default rule.1. while rule 15 of ACL 2000 denies packets from IP address 2. You can define a rule such as permit any or deny any for all ACLs so that any packet has a rule to match. Assume that rule 10 of ACL 2000 denies packets from IP address 1. QoS action A is based on ACL A. and then activate QoS action B on the same port. This is because that QoS action B is activated later than QoS action A. To enable traffic statistics and traffic limitation on packets that match with rule 10 of ACL 2001. After that. only parameter values differ. and QoS action A is activated later.1. while QoS action B is based on ACL B. Huawei Technologies Proprietary 17-5 Issue 04 (2007-11-30) . l The same type of parameter is used in configuring the two rules. all IP packets are filtered. Activate QoS action A first on a port. you can: l Activate QoS actions consecutively if the QoS actions apply to the same ACL rule.1. This is because that QoS action B is activated later than QoS action A. all the IP packets are denied.2. If QoS action B is activated first on the port. Default Matching Sequence If a traffic stream does not match with any rule. This is because ACLs with the same parameters but different values share the same hardware resource. The reason is that all QoS actions based on the same rule share the same hardware resource. all packets are filtered except the packets carrying the specific IP address. l Activate QoS actions consecutively if the QoS actions have the same type of parameters but different parameter values. the QoS action that is activated later has a higher priority than the actions activated earlier. Matching Sequence When matching the packets using different groups of ACL rules. all packets are denied except the packets carrying the specific IP address. and ACL group B permits packets to a specific IP address. and then activate QoS action B on the same port. The source end can send cells at the PCR rate or a rate lower than PCR. It applies to voice services and interactive video services. The source end can send the data at different rates. the ACLs within the group will have the same priority. deactivate or delete the ACL configurations that are unimportant or not in the use. as ACLs with the same parameters but different values can share the same hardware resources. the rt-VBR service is more tolerant to burst. Burst Size (MBS) Huawei Technologies Proprietary Issue 04 (2007-11-30) 17-6 . Therefore. the hardware resources are insufficient. If you fails to initiate a protocol module. handling it according to the steps given below: – – l Check whether ACL rules occupy too many resources. To offer different priorities to rules of different ACL groups. comply with the principle that all ACLs within the group have the same parameters but different values. emulation voice service and video service. and then initiate the protocol module. The CBR applies to the circuit service. rt-VBR The rt-VBR is delay-critical and jitter-critical. It features high stability and low burst.2 Related Concepts Service Traffic The MA5600 supports four service types: l l l l Constant Bit Rate (CBR) service Real-Time Variable Bit Rate (rt-VBR) service Non-Real-Time Variable Bit Rate (nrt-VBR) service Unspecified Bit Rate (UBR) service CBR The CBR is used for connections that require static bandwidth and the highest priority. Compared with the CBR service. In this case. The activated ACL rules will consume the hardware resources and share the hardware resources with the protocol module (such as DHCP and IPoA) functions. 17. Parameters required for rt-VBR service include: l l l l PCR Cell Delay Variation Tolerance (CDVT) Sustainable Cell Rate (SCR) Max. Peak Cell Rate (PCR) is the only parameter required for applying the CBR service. comply with the preceding rules. If a QoS based on an ACL group is issued.17 Configuring ACL l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide When configuring an ACL group. it is recommended to initiate the protocol module first and then activate ACL rules in the data configuration. If ACL rules occupy too many resources. Data services are delivered in a fixed period with the smallest burst. Parameters required for service application include: l l l l PCR CDVT SCR MBS UBR The UBR is applied to services with high burst and no real time requirement.Table 17-2 shows all traffic classes and their parameter settings. UBR cells are the first to be dropped. Traffic Classes The MA5600 supports four service types. Different traffic types require different parameters. When congestion occurs. UBR users only demand best-effort service without QoS requirement. such as FTP and E-mail. The network offers no QoS guarantee for the UBR service. which correspond to thirteen traffic classes as defined in RFC 2514. Error correction is carried out by the upper layer protocols. Table 17-2 Mapping between the traffic classes and parameters Service Type CBR Traffic Class NO_CLP_N O_SCR NO_CLP_N O_SCR_CD VT CLP_TRAN SPARENT_ NO_SCR rt_VBR CLP_TRAN SPARENT_ SCR NO_CLP_S CR_CDVT CLP_NO_T AGGING_S CR_CDVT P1 CLP01PCR CLP01PCR P2 CDVT P3 P4 - CLP01PCR CDVT - - CLP01PCR CLP01SCR MBS CDVT CLP01PCR CLP01PCR CLP01SCR CLP0SCR MBS MBS CDVT CDVT Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-7 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL nrt-VBR The nrt-VBR is used for non-realtime services with burst nature. parameter is abbreviated as P. Compared with the rt-VBR service. the nrt-VBR service has lower priority. In the following table. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. ClpTransparentNoScr Disabled. NoClpNoScrCdvt Disabled. Second-level Funnel Disabled.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Service Type Traffic Class CLP_TAGG ING_SCR_ CDVT P1 CLP01PCR P2 CLP0SCR P3 MBS P4 CDVT nrt_VBR NO_CLP_S CR CLP_NO_T AGGING_S CR CLP_TAGG ING_SCR CLP01PCR CLP01PCR CLP01SCR CLP0SCR MBS MBS - CLP01PCR CLP01PCR CLP01PCR CLP0SCR CLP01SCR MBS MBS CDVT UBR NO_CLP_N O_SCR NO_CLP_N O_SCR_CD VT NO_CLP_T AGGING_N O_SCR CLP01PCR CDVT - - Table 17-3 Description of traffic classes Traffic Class ClpNoTaggingNoScr First-level Funnel Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 17-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The mismatched CLP0 cells are labelled and the mismatched CLP1 cells are dropped. ClpTaggingNoScr Disabled. Handles the CLP01 cells based on clp01Pcr. NoClpNoScr Disabled. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 300000. Disabled. 155000. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 45000. 4096. 7000. 1920. NoTrafficDescriptor Disabled. Handles the CLP01 cells based on clp01Pcr. 50000. 256. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. the CBR service and rt-VBR service of the MA5600supports traffic shaping. To enhance the processing efficiency of the system. 8160. 34000. The mismatched CLP0 cells are labelled and the mismatched CLP1 cells are dropped.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL Traffic Class ClpTransparentScr First-level Funnel Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 128. The mismatched CLP0 cells are labelled and the mismatched CLP1 cells are dropped. Handles the CLP0 cells based on clp0Scr and drops the mismatched cells. ClpNoTaggingScr ClpTaggingScr NoClpTaggingNoScr Disabled. the system supports 32 traffic classes: 64. Handles the CLP0 cells based on clp0Scr and drops the mismatched cells. 5000. 9000. 400000. Second-level Funnel Handles the CLP01 cells based on clp01Scr and drops the mismatched cells. 8000. 3000. 1000. By default. 12000. Handles the CLP01 cells based on clp01Pcr. 100000. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-9 . NoClpScrCdvt ClpNoTaggingScrCdvt ClpTaggingScrCdvt NoClpScr Handles the CLP01 cells based on clp01Scr and drops the mismatched cells. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 16 traffic classes are provided to the CPL01SCR and CPL0SCR parameters of rt-VBR service. similarly. 32 traffic classes are provided to the parameters of the CBR service. The mismatched CLP0 cells are labelled and the mismatched CLP1 cells are dropped. Handles the CLP0 cells based on clp0Scr and drops the mismatched cells. 10000. Traffic Class Currently. 2000. Handles the CLP01 cells based on clp01Scr and drops the mismatched cells. 1500. Handles the CLP0 cells based on clp0Scr and drops the mismatched cells. 512. 120000. 6000. 24544. 1024. 2500. 20000. Handles the CLP01 cells based on clp01Pcr. 599039. Handles the CLP01 cells based on clp01Pcr and drops the mismatched cells. 2048. traffic monitoring shall be enabled. 2000. Apply ACL 2000 on the port. 128000. 320. 4000. Wildcard: 0. 32000. 16000.2.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide By default. l Traffic control is applicable to all devices in the whole network. the MA5600 shall have the traffic control function to reduce traffic burstness and maintain the stability of service delivery. Impose traffic control at places near the source end. 1024.3 Configuring the Basic ACL This operation enables you to filter data packets that meet the source IP address conditions within a certain period of time. Data Plan Table 17-4 lists the data plan for configuring the basic ACL. 17-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 192. 1500. 17. Located at the access layer.2. 800. In the upper layer device.0. the system supports 16 traffic classes: 64. Traffic Control Principles The following lists the basic principles of traffic control: l l l l l l Control the traffic at the access end.0. Impose traffic control for every node. 128. Table 17-4 Data plan for configuring the basic ACL Item ACL number Source IP address ACL step Time range Port Data 2000 2.2 Default value From 00:00 to 12:00 every Friday 0/7/0 Remarks Data packets from 2.2 are permitted to pass. 8096.2.2. Impose traffic control at places prone to traffic congestion or convergence. 512. 64000. 256. and monitor the traffic at the convergence end. Determine the user bandwidth according to the minimum SCR among the nodes with the services going through. because the bandwidth of a PVC is determined by the minimum SCR among nodes of the PVC. Configuration Flowchart Figure 17-1 shows the flowchart for configuring a basic ACL. Impose traffic control for every node if end-to-end QoS must be ensured. Impose traffic control at places with switching nodes.0 (negative mask). 2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-11 .2. and discard other data packets.2 0.2. the port 0/7/0 on the MA5600 can receive the data packets from IP address 2. huawei(config-acl-basic-2000)#rule deny time-range time1 huawei(config-acl-basic-2000)#rule permit source 2. huawei(config)#time-range time1 00:00 to 12:00 fri Step 2 Create an ACL.2.0. 17.0. huawei(config)#acl 2000 Step 3 Configure the basic ACL rule. huawei(config)#save ----End Result According to the ACL rule. huawei(config-acl-basic-2000)#quit huawei(config)#packet-filter inbound ip-group 2000 port 0/7/0 Step 5 Save the data. from 00:00 to 12:00 every Friday.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL Figure 17-1 Flowchart for configuring a basic ACL Start Create an ACL (Optional) Configure a time range Define an ACL rule Activate/Deactivate an ACL for a port Show ACL settings End Procedure Step 1 Configure a time range.4 Configuring the Advanced ACL This operation enables you to filter data packets that meet the source IP address and DSCP conditions within a certain period of time.0 time-range time1 Step 4 Activate the ACL on port 0/7/0.2. 0. Table 17-5 Data plan for configuring the advanced ACL Item ACL number Source IP address Destination IP address DSCP ACL step Time range Port Data 3000 2.0.2.255 Wildcard mask: 0. Start Create an ACL (Optional) Configure a time range Define an ACL rule Activate/Deactivate an ACL for a port Show ACL settings End 17-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .0. Configuration Flowchart Figure 17-2 shows the flowchart for configuring an advanced ACL. Figure 17-2 Flowchart for configuring an advanced ACL.2.3.3 23 Default value From 00:00 to 12:00 every Friday 0/7/0 Remarks Wildcard: 0.3.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Data Plan Table 17-5 lists the data plan for configuring the advanced ACL.2 3.0. Apply ACL 3000 on the port.0. 3. 802.1p priority Wildcard: 0000-0000-0000 Wildcard: 0000-0000-0000 17-13 Huawei Technologies Proprietary .2. 17.255 destination 3.0.3. huawei(config-acl-adv-3000)#rule deny ip time-range time1 huawei(config-acl-adv-3000)#rule 3 permit ip source 2. and VLAN ID conditions within a certain period of time.3 0 dscp 23 time-range time1 Step 4 Activate the ACL on port 0/7/0.2.5 Configuring the Layer 2 ACL This operation enables you to filter data packets that meet the source MAC address.0. Table 17-6 Data plan for configuring the layer 2 ACL Item ACL number Type COS Source VLAN ID Source MAC address Destination MAC address ACL step Issue 04 (2007-11-30) Data 4000 0x8863 1 12 2222-2222-2222 00e0-fc11-4141 Default value Remarks The type of an Ethernet bearer protocol in hexadecimal digits.0 to 3. port 0/7/0 on the MA5600 can receive the data packets from 2. Other packets are discarded. Data Plan Table 17-6 lists the data plan for configuring the layer 2 ACL. huawei(config)#save ----End Result According to the ACL rule.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL Procedure Step 1 Configure a time range. huawei(config)#time-range time1 00:00 to 12:00 fri Step 2 Create an ACL. destination MAC address. huawei(config)#acl 3000 Step 3 Configure the advanced ACL rule.2.3.2. huawei(config-acl-adv-3000)#quit huawei(config)#packet-filter inbound ip-group 3000 port Step 5 Save the data.3 with DSCP of 23. from 00:00 to 12:00 every Friday.2 0.3. Context If you omit "0x" when entering the type of an Ethernet bearer protocol. Configuration Flowchart Figure 17-3 shows the flowchart for configuring a layer 2 ACL. huawei(config)#time-range time1 00:00 to 12:00 fri Step 2 Create an ACL. huawei(config-acl-link-4000)#rule deny time-range time1 17-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The decimal number you input is converted to hexadecimal ones for the protocol type. Figure 17-3 Flowchart for configuring a layer 2 ACL Start Create an ACL (Optional) Configure a time range Define an ACL rule Activate/Deactivate an ACL for a port Show ACL settings End Procedure Step 1 Configure a time range. the input shall be considered as a decimal number.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Time range Port Data From 00:00 to 12:00 every Friday 0/7/0 Remarks Apply ACL 4000 on the port. huawei(config)#acl 4000 Step 3 Configure the layer 2 ACL rule. 6 Configuration Example of the Customized ACL This operation enables you to filter data packets that meet the customized conditions within a certain period of time. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-15 . huawei(config)#save ----End Result According to the ACL rule.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1 source 12 2222-2222-2222 0000-0000-0000 destination 00e0-fc11-4141 0000-0000-0000 time-range time1 Step 4 Activate the ACL on port 0/7/0. port 0/7/0 on the MA5600 can receive the Ethernet frames with the source MAC address of 2222-2222-2222. Other packets are discarded. VLAN ID of 12. huawei(config-acl-link-4000)#quit huawei(config)#packet-filter inbound link-group 4000 port 0/7/0 Step 5 Save the data. from 00:00 to 12:00 every Friday. Configuration Flowchart Figure 17-4 shows the flowchart for configuring a customized ACL. destination MAC address of 00e0-fc11-4141. 17. Context The customized ACL can only be used to filter the data frame that is in the format of ETH II + VLAN tag. Table 17-7 Data plan for configuring the customized ACL Item ACL number Matching byte Offset ACL step Time range Port Data 5000 06 27 default From 00:00 to 12:00 every Friday 0/7/0 Remarks Wildcard: FF The ACL 5000 applies to this port. and COS of 1. Data Plan Table 17-7 shows the data plan for configuring the customized ACL. 17. 17-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . an advanced ACL.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 17-4 Flowchart for configuring a customized ACL Start Create an ACL (Optional) Configure a time range Define an ACL rule Activate/Deactivate an ACL for a port Show ACL settings End Procedure Step 1 Configure a time range. huawei(config)#time-range time1 00:00 to 12:00 fri Step 2 Create an ACL. huawei(config-acl-user-5000)#quit huawei(config)#packet-filter inbound user-group 5000 port 0/7/0 Step 5 Save the data. huawei(config)#acl 5000 Step 3 Configure the customized ACL rule. port 0/7/0 on the MA5600 rejects TCP packets. huawei(config)#save ----End Result According to the ACL rule.7 Creating an ACL This operation enables you to create a basic ACL. huawei(config-acl-user-5000)#rule deny 06 ff 27 time-range time1 Step 4 Activate the ACL on port 0/7/0. from 00:00 to 12:00 every Friday. a layer 2 ACL or a customized ACL. the ACL and the rules cannot be deleted. Configure the description for an ACL Issue 04 (2007-11-30) description Huawei Technologies Proprietary 17-17 . Step 3 Run the display acl command to query the configuration of the ACL. Step 2 Run the quit command to quit from the ACL config mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL Context The MA5600 supports up to 64 ACLs. Table 17-9 Related operations for creating an ACL To… Delete an ACL Run the Command… undo acl Remarks If an ACL and its rules are activated. Table 17-8 ACL number range ACL type Basic ACL (for IP packets) Advanced ACL (IP packets) Layer 2 ACL (for link layer packets) Customized ACL Numeral range 2000-2999 3000-3999 4000-4999 5000-5999 Procedure Step 1 Run the acl command to create an ACL. Table 17-8 lists the ACL number range. The description covers the functions and features of the ACL. do as follows: huawei(config)#acl 3000 huawei(config-acl-adv-3000)#quit huawei(config)#display acl 3000 Advanced ACL 3000. 0 rule Acl's step is 5 Related Operation Table 17-9 lists the related operations for creating an ACL. or if they are quoted by other QoS functions. ----End Example To create an advanced ACL with ID of 3000. Each ACL can be configured with up to 64 rules. By default. so as to specify the valid time of an ACL rule. undo step 17. l The principle for a time range to take effect is as follows: l When a time range includes only absolute time or relative time. By default. it is 5. the union set of all intervals in the time range takes effect. When a range time includes both absolute time and relative time. Procedure Step 1 Run the time-range command to configure a time range. Step 2 Run the display time-range command and you can find that the time range is configured. A time range that is used cannot be deleted. Context ACL time ranges include relative time and absolute time. the intersection set of the union sets of both relative time and absolute time takes effect. such as the period from 12:00 in the noon on June 8. it is 5. l Relative time refers to periodical intervals. 2006. ----End Example To create a time range named "last24hrs" that is valid for the whole day of 2008-03-24. such as the period from 8:30 in the morning to 18:30 in the afternoon every Monday. l Note that: l l Configuring a time range is optional when you configure an ACL.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To… Delete the description for an ACL Configure the step for an ACL Restore the default step Run the Command… undo description Remarks - step Step means the difference between two neighboring rules in a group of ACL rules. do as follows: 17-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Absolute time refers to intervals from a specific moment to another specific moment.8 Configuring a Time Range This operation enables you to configure a time range. 2006 to 18:00 in the afternoon on August 8. ----End Example To set the step to 10. Procedure Step 1 Run the step command to modify the step of ACL rule. If you set the step to 2 using the command step 2. Context l l By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL huawei(config)#time-range last24hrs from 00:00 2008/03/24 to 24:00 2008/03/24 huawei(config)#display time-range all Current time is 15:12:28 3-21-2007 Wednesday Time-range : last24hrs ( Inactive ) from 00:00 2008/3/24 to 24:00 2008/3/24 17. l To restore the default step value and renumber the ACL rules. with the default step of 5. 4 and 6. After you run the undo step command. it is 5. presume that the rules of an ACL are numbered as 5. Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-19 . the numbers of the ACL rules are 5. 10 and 15. the step is 5. Table 17-10 Related operation for setting the step To… Restore the default step value Run the Command… undo step Remarks By default. run the undo step command. Assume that ACL 1 contains rules 1. For example. 1 rule Acl's step is 10 rule 10 permit (0 times matched) Related Operation Table 17-10 lists the related operation for setting the step. and 15.9 Setting the Step This operation enables you to modify the step of ACL rules when they are automatically numbered. Step 2 Run the display acl command to query the set step. the rules will be numbered as 2. If a step changes. do as follows: huawei(config-acl-basic-2000)#step 10 huawei(config)#display acl 2000 Basic ACL 2000. 3 and 5 with a step of 2. 10. the rules in an ACL shall be re-numbered. 2 0 (0 times matched) Related Operation Table 17-11 lists the related operation for creating a basic ACL rule.2.10 Creating a Basic ACL Rule This operation enables you to configure a basic ACL rule so that the device can filter data packets according to the source IP address. do as follows: huawei(config)#acl 2000 huawei(config-acl-basic-2000)#rule permit source 2.2. Procedure Step 1 Run the acl command to create a basic ACL rule.2. Step 2 Run the rule command to configure the basic ACL rule. Context Up to 64 rules can be created for an ACL. Step 3 Run the quit command to quit from the basic ACL config mode. Step 4 Run the display acl command to query the information on the basic ACL rule.2.2 to pass. This method does not change the untouched part of the rule. Table 17-11 Related operation for creating a basic ACL rule To… Delete an ACL rule Run the Command… undo rule 17-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2. Prerequisite The basic ACL to which the rule is added already exists. You can change the configuration of an ACL rule by specifying the number of the rule. 1 rule Acl's step is 5 rule 5 permit source 2. ----End Example To define a basic ACL rule that enables data packets from 2.2.2 0 huawei(config-acl-basic-2000)#quit huawei(config)#display acl 2000 Basic ACL 2000.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17. ----End Example To define an advanced ACL rule that enables data packets from 2.3 with DSCP of 23 to pass. Procedure Step 1 Run the acl command to create an advanced ACL rule.2. do as follows: huawe(config)#acl 3000 huawei(config-acl-adv-3000)#rule 3 permit ip source 2.3 0 dscp 23 time-range time1 (0 times matched)(Inactive) Related Operation Table 17-12 lists the related operation for creating an advanced ACL rule. Step 3 Run the quit command to quit from the advanced ACL config mode.3 0 dscp 23 time-range time1 huawei(config-acl-adv-3000)#quit huawei(config)#display acl 3000 Advanced ACL 3000. Step 2 Run the rule command to configure the advanced ACL rule. This method does not change the untouched part of the rule.3.3.3.2 0 destination 3.2.2. and the valid time as the predefined time 1. Step 4 Run the display acl command to query the information on the ACL rule.2.2. Table 17-12 Related operation for creating an advanced ACL rule To… Delete an ACL rule Run the Command… undo rule Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-21 . and IP bearer protocol type. Context Up to 64 rules can be created for an ACL.3.3.2 to 3. destination IP address.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL 17. Prerequisite The advanced ACL to which the rule is added already exists. 1 rule Acl's step is 5 rule 3 permit ip source 2.3.2. You can change the configuration of an ACL rule by specifying the number of the rule.2 0 destination 3.11 Creating an Advanced ACL Rule This operation enables you to configure an advanced ACL rule to filter data packets according to such information as the source IP address. You can change the configuration of an ACL rule by specifying the number of the rule.17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17. Step 3 Run the quit command to quit from the layer 2 ACL config mode. This method does not change the untouched part of the rule.12 Creating a Layer 2 ACL Rule This operation enables you to configure a layer 2 ACL rule to filter data packets according to the link layer information such as the source MAC address. source MAC address of 2222-2222-2222 and destination MAC address of 00e0fc11-4141 to pass. layer 2 protocol type. Step 4 Run the display acl command to query the information on the layer 2 ACL rule. do as follows: huawe(config)#acl 4000 huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1 source 12 2222-2222-2222 0000-0000-0000 destination 00e0-fc11-4141 0000-0000-0000 huawei(config-acl-link-4000)#quit huawei(config)#display acl 4000 Basic ACL 4000. ----End Example To define a layer 2 ACL rule that enables data packets with type of 0x8863. Procedure Step 1 Run the acl command to create a layer 2 ACL rule. VLAN ID of 12. Context Up to 64 rules can be created for an ACL. COS of 1. Table 17-13 Related operation for creating a layer 2 ACL rule To… Delete an ACL rule Run the Command… undo rule 17-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Prerequisite The layer 2 ACL to which the rule is added already exists. layer 2 forward port. Step 2 Run the rule command to configure the layer 2ACL rule. 1 rule Acl's step is 5 rule 1 permit type 0x8863 cos background source 2222-2222-2222 0000-0000-0000 12 destination 00e0-fc11-4141 0000-0000-0000 Related Operation Table 17-13 lists the related operation for creating a layer 2 ACL rule. source VLAN ID. and destination MAC address. and every two letters represent one byte.13 Creating a Customized ACL Rule This operation enables you to configure a customized ACL rule to filter data packets according to any eight character strings (up to four bytes in a character string) in the first 80 bytes of the layer 2 data frame. You can change the configuration of an ACL rule by specifying the number of the rule.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL 17. Context Up to 64 rules can be created for an ACL. Prerequisite The customized ACL to which the rule is added already exists. Every letter represents one hexadecimal. Table 17-14 Description of letters and their offset values Letter A B C D E F G Meaning Destination MAC address Source MAC address VLAN tag field Protocol type IP version TOS field IP packet length Offset 0 6 12 16 18 19 20 Letter L M N O P Q R Meaning IP check sum Source IP address Destination IP address TCP source port TCP destination port Serial number Acknowledgem ent Offset 28 30 34 38 40 42 46 Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-23 . Figure 17-5 shows the first 64 bytes of a layer 2 frame. This method does not change the untouched part of the rule. Figure 17-5 First 64 bytes of a layer 2 frame Table 17-14 lists the meaning of the letters and their offset values. 17 Configuring ACL SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Letter H I J K Meaning ID number Flags field TTL field Protocol number (6 refers to TCP and 17 refers to UDP) Offset 22 24 26 27 Letter S T U V Meaning IP header length and reserved bit Reserved bit and flags bit Window Size field Other Offset 50 51 52 54 In Figure 17-5. and then compare the extracted byte with customized rules to filter matched data frames for processing.3 data frame of Sub Network Access Protocol (SNAP) + tag. the offset of their field is their offset in the 802. do as follows: huawe(config)#acl 5000 huawei(config-acl-adv-5000)#rule permit 06 ff 27 huawei(config-acl-adv-5000)#quit huawei(config)#display acl 5000 User ACL 5000. Table 17-15 Related operation for creating a used defined ACL rule To… Delete an ACL rule Run the Command… undo rule 17-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . For the customized ACL. 1 rule Acl's step is 5 rule 5 permit 06 ff 27 Related Operation Table 17-15 lists the related operation for creating a customized ACL rule. Step 2 Run the rule command to configure the customized ACL rule. Step 3 Run the display acl command to query the information on the ACL rule. the user can use the rule mask and offset parameters to extract any byte from the first 80 bytes of data frame. ----End Example To filter all TCP packets. Procedure Step 1 Run the acl command to create a customized ACL rule. Prerequisite The ACL to be activated has been configured. undo packet-filter Issue 04 (2007-11-30) Huawei Technologies Proprietary 17-25 . Procedure Step 1 Run the packet-filter command to activate an ACL.14 Activating an ACL This operation enables you to activate a configured ACL to validate it.. Table 17-16 Related operation for activating the ACL of a port To. do as follows: huawei(config)#packet-filter inbound ip-group 3000 port 0/2/0 huawei(config)#display packet-filter port 0/2/0 port0/2/0 Inbound: inbound Acl 3000 rule 1 port 0/2/0 running Related Operation Table 17-16 lists the related operation for activating the ACL of a port. and the port for which the ACL is to be activated is working in the normal state..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 17 Configuring ACL 17. Step 2 Run the display packet-filter port command and you can find that the ACL is activated.. Deactivate an ACL Run the Command.. ----End Example To activate ACL 3000 of port 0/2/0. . The traffic entries are the core of traffic management.3 Configuring the Queue Scheduling A queue is a unit that schedules packets in a physical port. 18. In the traffic management. After the queue scheduling is set. the packets of key services can be processed in time when network congestion occurs. 18.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS 18 About This Chapter Configuring the QoS The following lists the contents of this chapter.2 Configuring the Traffic Entry This operation enables you to configure the traffic entry.1 Overview This section describes the Quality of Service (QoS) functions and the application of the functions.4 Managing the Traffic Based on the ACL Rule This section describes how to filter by the ACL rule the traffic that passes through the port and how to manage the traffic that matches the ACL rule. 18. traffic entries monitor and control the service traffic. Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-1 . 18. You can bind traffic entries with service traffic to achieve traffic management. 18.5 Setting the Rate Limit for an Upstream Port This section describes how to set the rate limit for an upstream port. you can provide users with high quality services.18 Configuring the QoS SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18. 18. Context ATM-based Traffic Management The MA5600 provides the ATM service by means of permanent virtual connection (PVC). The traffic entries are the core of traffic management. When setting up a PVC. After the configuration. 18-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . rt-VBR. l Service type The MA5600 supports four service types: CBR. refer to the chapter "QoS" in the . you need to configure the ACL for only port 0 of a service board (excepting the ETHA board). jitter. delay. select the traffic profile index. Service Description QoS means the performance when the data stream flows through a network.2 Configuring the Traffic Entry This operation enables you to configure the traffic entry. the ACL is valid for all the ports of the service board. which corresponds to the traffic table. An ATM traffic table contains the following items: l Traffic index It is the traffic profile index selected when the PVC is set up. In the traffic management. nrt-VBR and UBR. traffic entries monitor and control the service traffic.MA5600 Feature Description Service Specifications The MA5600 supports the following QoS functions: l l Traffic management based on data stream Queue scheduling The MA5600 supports the following queue scheduling modes: – – Strict-priority queue (PQ) Weighted round robin (WRR) l l Traffic management based on ACLs Rate restriction on upstream ports NOTE When configuring the traffic management based on ACLs.1 Overview This section describes the Quality of Service (QoS) functions and the application of the functions. and packet loss ratio. such as service availability. throughput. For details on the QoS. By setting different parameters of the QoS. You can bind traffic entries with service traffic to achieve traffic management. l CAR Committed access rate means the maximum access rate. do as follows: huawei(config)#traffic table atm srvcategory cbr tdtype noClpNoScr clp01Pcr 160 priority 6 priority-policy tag-In-Package Create traffic descriptor record successfully ----------------------------------------------------------------------------TD Index : 0 Priority : 6 Priority policy : tagpri Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-3 .1p priority: 6 Priority policy: tag-In-Package To add an ATM traffic entry. To enhance the processing efficiency. which corresponds to the traffic table. 16 traffic classes are provided to CPL01SCR and CLP0SCR parameters of rt-VBR service. Similarly. SCR and CDVT. An IP traffic table contains the following items: l Traffic index It is the traffic profile index selected when the virtual port is added to the VLAN. l Traffic parameter The traffic parameters include: PCR. When adding the virtual port to a VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 18 Configuring the QoS Traffic type The MA5600 supports the traffic shaping of the CBR and rt-VBR service. ----End Example Assume that: l l l l l Service type: cbr Traffic class: noClpNoScr Clp01Pcr: 160 802. Step 2 Run the display traffic table command to query a traffic entry. select the traffic profile index. Procedure Step 1 Run the traffic table command to configure a traffic entry. l Priority and priority policy It is the policy for selecting the traffic priority and packet priority. 32 traffic classes are provided for CLP01PCR parameter of CBR service. IP-based Traffic Management The MA5600 provides the IP service by means of VLAN. 1p priority: 6 Priority policy: tag-In-Package To add an IP traffic entry. do as follows: huawei(config)#traffic table ip car 2048 priority 6 priority-policy tag-In-Package Create traffic descriptor record successfully ----------------------------------------------------------------------------TD Index : 10 Priority : 6 Priority policy : tag-pri CAR : 2048 kbps TD Type : NoClpNoScr Service category : ubr Referenced Status: not used EnPPDISC : on EnEPDISC : on 18-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .18 Configuring the QoS SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide CAR : 128 kbps TD Type : NoClpNoScr Service category : cbr Referenced Status : not used EnPPDISC : off EnEPDISC : off Clp01Pcr : 160 kbps -------------------------------------------------------------------------huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: ----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy ----------------------------------------------------------------------------0 128 6 tagpri ----------------------------------------------------------------------------Traffic parameters for ATM service: ----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us ----------------------------------------------------------------------------0 cbr 2 160 -----off/ off/-----------------------------------------------------------------------------Total Num : 1 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt ----------------------------------------------------------------------------- Assume that: l l l CAR: 2048 kbps 802. undo traffic table Remarks You can delete a traffic entry only if it is not referenced. the packets of key services can be processed in time when network congestion occurs.. The system supports the following two scheduling modes: – l PQ Huawei Technologies Proprietary 18-5 Issue 04 (2007-11-30) .. the higher the priority of the queue is. Features of the Queue Scheduling l The system schedules queues based on the priorities of the queues.3 Configuring the Queue Scheduling A queue is a unit that schedules packets in a physical port. The larger the queue number is.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS Clp01Pcr : 2048 kbps ----------------------------------------------------------------------------huawei(config)#display traffic table from-index 10 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: ----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy ----------------------------------------------------------------------------10 2048 6 tagpri ----------------------------------------------------------------------------Traffic parameters for ATM service: ----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us ----------------------------------------------------------------------------10 ubr 2 2048 -----.on / on /-----------------------------------------------------------------------------Total Num : 1 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt ----------------------------------------------------------------------------- Related Operation Table 18-1 lists the related operations for configuring the traffic entry. 18. After the queue scheduling is set. Table 18-1 Related operations for configuring the traffic entry To… Delete a traffic entry Run the Command. w3. the packets in the queue with a higher priority can be processed in time. packets in a queue with a lower priority are sent. WRR is performed for the queues in turn. Table 18-2 lists the relationship between the weight values and the actual queues.3. 18. 18. The weight values mean the proportions for resources acquisition.18 Configuring the QoS – SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide WRR NOTE By default. the PQ mode is adopted. l WRR The system supports WRR for eight queues. Context The MA5600 supports two queue scheduling modes: PQ and WRR. and w0 in descending order. namely.1 Configuring the Queue Scheduling This section describes how to set the queue scheduling so that when network congestion occurs. When the high priority queue is empty. w6. The weight sum of queues must be equal to 100. w7. This guarantees that each queue can obtain certain service time. Table 18-2 Relationship between the weight values and the actual queues Queue Number Configured Weight Actual Queue Weight (Supporting Ports of Eight Queues) W7 W6 W5 W4 W3 W2 W1 W0 Actual Queue Weight (Supporting Ports of Four Queues) W7 + W6 W5 + W4 W3 + W2 W1 + W0 7 6 5 4 3 2 1 0 W7 W6 W5 W4 W3 W2 W1 W0 NOTE Wn: means the weight of queue n. By default. 18-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . w2. the packets in the queue with a higher priority can be processed in time.3. w4.1 Configuring the Queue Scheduling This section describes how to set the queue scheduling so that when network congestion occurs. w5. l PQ PQ gives priority to packets in a high priority queue. the system support the PQ mode. w1. Each queue has a weight value. 4 Managing the Traffic Based on the ACL Rule This section describes how to filter by the ACL rule the traffic that passes through the port and how to manage the traffic that matches the ACL rule..4. The priorities that can be used include ToS.2 Adding a Priority Tag to the Traffic That Matches the ACL Rule This section describes how to add a priority tag to the ACL-matched traffic over a specified port. 10. 18.1p priority and a queue Run the Command.4.1p. undo queue-scheduler cos-queue-map 18. 20. ----End Example To set the queue scheduling mode as WRR and assign weight values 10. 20. For example. DSCP. the system takes the corresponding measures. Step 2 Run the display queue-scheduler command to query the configuration of the queue scheduling.. to label the traffic with the diff serv code point (DSCP) sign or to discard the traffic directly. 10. Restore the queue scheduling mode as the default value Set the mapping between the 802. 10.1 Restricting the Traffic That Matches the ACL Rule This section describes how to restrict the ACL-matched traffic over a specified port For the traffic that exceeds the restriction. 10 and 10 to eight queues.4.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS Procedure Step 1 Run the queue-scheduler command to set the queue scheduling.3 Measuring the Traffic That Matches the ACL Rule This section describes how to measure the traffic that matches the ACL rule so as to analyze and monitor the traffic.. and 802. do as follows: huawei(config)#queue-scheduler wrr 10 10 20 20 10 10 10 10 huawei(config)#display queue-scheduler Queue scheduling mode: weighted round robin weight of queue 0: 10% weight of queue 1: 10% weight of queue 2: 20% weight of queue 3: 20% weight of queue 4: 10% weight of queue 5: 10% weight of queue 6: 10% weight of queue 7: 10% Related Operation Table 18-3 lists the related operations for setting the queue scheduling. Table 18-3 Related operations for setting the queue scheduling To. so that the traffic can enjoy the services for the specified priority. 18.. 18. Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-7 . 4.4. it is not the source port but the redirected port forwards the traffic that matches the ACL rule. 18-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The rate of the limited traffic must be an integer multiple of 64.4. the system takes the corresponding measures. Procedure Step 1 Run the traffic-limit command to restrict the ACL-matched traffic over a specified port Step 2 Run the display qos-info traffic-limit port command to query the traffic control information about the specified port. Prerequisite The related ACL and the sub rules are configured. 18.4 Mirroring the Traffic That Matches the ACL Rule This section describes how to mirror the traffic that matches the ACL rule and passes through a port to a specified port. and for the packets that exceed the preset value.1 Restricting the Traffic That Matches the ACL Rule This section describes how to restrict the ACL-matched traffic over a specified port For the traffic that exceeds the restriction.18 Configuring the QoS SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18. For example. to limit its rate to 512 kbit/s. ----End Example For the traffic received on port 0/2/0 that matches the rule of ACL 2001.5 Redirecting the Traffic That Matches the ACL Rule This section describes how to redirect the traffic that matches the ACL rule and passes through a port to a specified port for forwarding. to label the traffic with the diff serv code point (DSCP) sign or to discard the traffic directly. 18. do as follows: huawei(config)#traffic-limit inbound ip-group 2001 512 exceed remark-dscp af1 port 0/2/0 huawei(config)#display qos-info traffic-limit port 0/2/0 traffic-limit: port 0/2/0: Inbound: Matches: Acl 2001 rule 5 running Target rate: 512 Kbps Exceed action: remark-dscp af1 Related Operation Table 18-4 lists the related operation for configuring the traffic restriction. After the redirection succeeds. The mirroring operation does not affect the normal receiving and transmitting of the traffic on the mirroring source port. By analyzing the traffic received on the mirroring destination port. you can monitor the traffic received on the mirroring source port. to label the packets with the DSCP priority (af1). Context l l The restriction is valid only for permit rules of an ACL. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS Table 18-4 Related operation for configuring the traffic restriction To. Prerequisite The ACL and its sub rules are configured. they cannot be configured at the same time. The ToS and the DSCP priorities are mutually exclusive. so that the traffic can enjoy the services for the specified priority. ----End Example Assume that the DSCP priority is 10 (af1) and the local priority is 0. The priorities that can be used include ToS. DSCP. Cancel the restriction on the traffic that matches the ACL rule and passes through the specified port Run the Command.4. Step 2 Run the display qos-info traffic-priority port command to query the configured priority. undo traffic-limit 18.. do as follows: huawei(config)#traffic-priority inbound ip-group 2001 dscp af1 local-precedence 0 port 0/2/0 huawei(config)#display qos-info traffic-priority port 0/2/0 traffic-priority: port 0/2/0: Inbound: Matches: Acl 2001 rule 5 running Priority action: dscp af1 cos background Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-9 . Procedure Step 1 Run the traffic-priority command to add a priority tag to the ACL-matched traffic over a specified port... and 802. and the port involved in adding a priority tag to the traffic is working in the normal state. To add a priority tag to the traffic that matches ACL rule 2001 and is received by port 0/2/0..1p. Context The operation of adding priority tags is valid only for permit rules of an ACL. Therefore.2 Adding a Priority Tag to the Traffic That Matches the ACL Rule This section describes how to add a priority tag to the ACL-matched traffic over a specified port. Procedure Step 1 Run the traffic-statistic command to collect the statistics of the ACL-matched traffic over a specified port Step 2 Run the display qos-info traffic-statistic port command to query the traffic statistics about the specified port.4.. Cancel the priority tag added to the traffic that matches the ACL rule Run the Command. Table 18-5 Related operation for adding a priority tag to the traffic that matches the ACL rule To.. Context Traffic measurement is valid only for permit rules of an ACL.18 Configuring the QoS SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 18-5 lists the related operation for adding a priority tag to the traffic that matches the ACL rule. undo traffic-priority 18.3 Measuring the Traffic That Matches the ACL Rule This section describes how to measure the traffic that matches the ACL rule so as to analyze and monitor the traffic. do as follows: huawei(config)#traffic-statistic inbound ip-group 2001 port 0/7/0 huawei(config)#display qos-info traffic-statistic port 0/7/0 traffic-statistic: port 0/7/0: Inbound: Matches: Acl 2001 rule 5 0 packet running Related Operation Table 18-6 lists the related operation for collecting the statistics of the traffic that matches the ACL rule. ----End Example To measure the traffic that matches ACL 2001 and are received on port 0/7/0. 18-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) ... Prerequisite The ACL and its sub rules are configured. and the port involved in traffic statistics is working in the normal state. . you can monitor the traffic received on the mirroring source port. and the mirroring source port is working in the normal state. ----End Example To mirror the packets that match the rules of ACL 2001 and are received on port 0/2/0 to port 0/7/0.. The mirroring operation does not affect the normal receiving and transmitting of the traffic on the mirroring source port. By analyzing the traffic received on the mirroring destination port. reset traffic-statistic undo traffic-statistic 18..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS Table 18-6 Related operation for collecting the statistics of the traffic that matches the ACL rule To. Prerequisite The ACL and its sub rules are configured.. do as follows: huawei(config)#traffic-mirror inbound ip-group 2001 port 0/2/0 to port 0/7/0 huawei(config)#display qos-info traffic-mirror port 0/2/0 traffic-mirror: port 0/2/0: Inbound: Matches: Acl 2001 rule 5 Mirror to: port 0/7/0 running Related Operation Table 18-7 lists the related operation for configuring the traffic mirroring. The mirroring destination port cannot be the aggregated port. Context l l The operation of traffic mirroring is valid only for permit rules of an ACL. Procedure Step 1 Run the traffic-mirror command to mirror the ACL-matched traffic over a specified port Step 2 Run the display qos-info traffic-mirror port command to query the traffic mirroring information about the specified port.4.4 Mirroring the Traffic That Matches the ACL Rule This section describes how to mirror the traffic that matches the ACL rule and passes through a port to a specified port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-11 . Clear the statistics of the ACLmatched traffic over a specified port Cancel the statistics of the traffic that matches the ACL rule Run the Command. ----End Example To redirect the traffic that matches ACL 2001 and is received on port 0/7/0 to port 0/7/1... do as follows: huawei(config)#traffic-redirect inbound ip-group 2001 port 0/7/0 to port 0/7/1 huawei(config)#display qos-info traffic-redirect port 0/7/0 traffic-redirect: port 0/7/0: Inbound: Matches: Acl 2001 rule 5 running Redirected to: port 0/7/1 Related Operation Table 18-8 lists the related operation for redirecting the traffic that matches the ACL rule. 18-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Procedure Step 1 Run the traffic-redirect command to redirect the ACL-matched traffic over a specified port. it is not the source port but the redirected port forwards the traffic that matches the ACL rule.4..5 Redirecting the Traffic That Matches the ACL Rule This section describes how to redirect the traffic that matches the ACL rule and passes through a port to a specified port for forwarding. and can redirect the traffic that matches the ACL rule on the upstream port to a service port of the same service board. the system can redirect the traffic that matches the ACL rule on a service board to the upstream port. After the redirection succeeds. Step 2 Run the display qos-info traffic-redirect port command to query the traffic redirection information about the specified port..18 Configuring the QoS SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 18-7 Related operation for configuring the traffic mirroring To. Currently. Cancel the mirroring of the traffic that matches the ACL rule Run the Command. Prerequisite The ACL and its sub rules are configured. Context l l The operation of traffic redirection is valid only for permit rules of an ACL. and the port to be redirected is working in the normal state. undo traffic-mirror 18. . Cancel the redirection of the traffic that matches the ACL rule Run the Command. but does not support the rate limit of a service port. do as follows: huawei(config)#line-rate 6400 port 0/7/0 huawei(config)#display qos-info line-rate port 0/7/0 line-rate: port 0/7/0: Line rate: 6400 Kbps Related Operation Table 18-9 lists the related operation for setting the rate limit for an upstream port. The rate limit must be a multiple of 64.. Context l The MA5600 supports only the rate limit of Ethernet port on the boards..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 18 Configuring the QoS Table 18-8 Related operation for redirecting the traffic that matches the ACL rule To. undo traffic-redirect 18.. undo line-rate Issue 04 (2007-11-30) Huawei Technologies Proprietary 18-13 .... Cancel the rate limit for an upstream port Run the Command.5 Setting the Rate Limit for an Upstream Port This section describes how to set the rate limit for an upstream port. ----End Example To limit the rate of Ethernet port 0/7/0 to 640 kbit/s.. Table 18-9 Related operation for setting the rate limit for an upstream port To. Step 2 Run the display qos-info line-rate port command to query the rate limit information about the port. l Procedure Step 1 Run the line-rate command to limit the rate of a port. . 19.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19 Configuring User Security 19 About This Chapter Configuring User Security This chapter describes how to configure the user security supported by the MA5600. 19. 19. 19.2 Enabling the PITP This operation enables the PITP so that the device can report the user port information to the BRAS for authenticating the user. unauthorized users are prevented from sending PPPoE and DHCP control packets through forged MAC addresses. 19.10 Enabling Anti IP Spoofing Issue 04 (2007-11-30) Huawei Technologies Proprietary 19-1 .9 Enabling Anti MAC Spoofing This operation enables the anti MAC spoofing function.5 Enabling the DHCP Option82 Function This operation enables the DHCP option82 function so that the BRAS can authenticate the access users. The MA5600 adds the option82 field to the DHCP packets to ensure the security of the DHCP function.1 Overview This section describes the service description and service specifications of user security. 19. 19.3 Setting the RAIO Working Mode This operation enables you to set the RAIO working mode.4 Setting the Ethernet Encapsulation Type This operation enables you to set the Ethernet encapsulation type. 19.6 Setting the Maximum Length of DHCP Packets This operation enables you to set the maximum length of DHCP packets. 19.8 Binding the MAC Address This operation enables you to bind a service port with a MAC address. 19. so that the messages from the IP addresses other than the bound IP addresses are refused to pass through the service channel of the port.  With the anti MAC spoofing function enabled.7 Binding the IP Address This operation enables you to bind a service port with one or multiple IP addresses. 19-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .19 Configuring User Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enable the anti IP spoofing function. With the anti IP spoofing function enabled. unauthorized users are prevented from logging in to the device using legal IP addresses. l pmode – You can configure the PITP in the following two modes: l Global configuration Huawei Technologies Proprietary 19-3 Issue 04 (2007-11-30) . l PITP V mode (VBAS mode): After the PPPoE discovery phase. PITP binds user accounts with the access ports to avoid the theft and roaming of user accounts.2 Enabling the PITP This operation enables the PITP so that the device can report the user port information to the BRAS for authenticating the user. a member of Huawei Group Management Protocol (HGMP) family. In this way. and the MA5600 sends the port information to the BRAS. For details onhe user security feature. The DHCP Option82 is used as reference for the DHCP server to allocate the IP address and other parameters. PITP V mode (PPPoE Tag mode): In the PPPoE discovery phase. which are added to the DHCP packets. Service Description Policy Information Transfer Protocol (PITP). Context PITP has two modes: l vmode – The BRAS sends the VBRAS request packets to the MA5600 first. refer to the chapter "User Security" in the Feature Description. l 19.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19 Configuring User Security 19.1 Overview This section describes the service description and service specifications of user security. the port information is sent to the BRAS. Service Specifications The MA5600 supports the PITP V mode and P mode as well as DHCP Option82 to implement binding between the user account and the physical port. the MA5600 initiates a request for querying user ports. The MA5600 sends the port information to the BRAS when the MA5600 responds to messages. The DHCP Option82 contains reliable user port information and terminal information. requiring the MA5600 to report the information on the user ports. and sends the port information to the BRAS. and adds tags to the PPPoE authentication request messages. BRAS initiates a request for querying user ports. The MA5600 adds the tag to the PPPoE packets directly. provides the Broadband Remote Access Server (BRAS) with the information about the port of access users. you need to configure the RAIO mode first. However. Current mode:vmode To enable PITP of port0/2/0. Global PITP configuration is of higher priority than port PITP configuration. Step 2 Run the display pitp config command to query the PITP configuration. Disabling PITP invalidates both PITP modes. By default. Context l Relay Agent Information Option (RAIO) includes DHCP option82 and PITP tag. The ports on the control board do not support PITP. l l l l l Procedure Step 1 Run the pitp command to enable the PITP V mode or the PITP of the physical port.19 Configuring User Security – SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide You can run the pitp { disable | enable { pmode | vmode } } command to disable PITP or select PITP mode. Huawei Technologies Proprietary Issue 04 (2007-11-30) l 19-4 . If global PITP configuration is disabled. the system works in only one mode. By default. the port configuration is enabled. PPPoE packets from a port contain user port information only when both global PITP configuration and port PITP configuration are enabled. To enable DHCP Option82 or PITP. Because these two options are not standardized. packets from a port do not contain user port information regardless whether the port PITP is enabled. – l Port configuration – – l You can switch over between PITP P and V modes. Global PITP configuration is of higher priority than port PITP configuration. the global configuration is disabled. different carriers have different formats of them. the RAIO working mode is common. ----End Example To enable the PITP V mode. do as follows: huawei(config)#pitp enable vmode huawei(config)#display pitp config PITP is enabled.3 Setting the RAIO Working Mode This operation enables you to set the RAIO working mode. By default. do as follows: huawei(config)#pitp port 0/2/0 enable huawei(config)#display pitp port 0/2/0 config PITP is enabled on this port 19. and it only transmits the PITP packets transparently. You can run the pitp { port frame/slot/port { enable | disable } | board frame/slot { enable | disable } } command to enable or disable PITP of the physical port. set correctly the RAIO working mode before using the DHCP option82 and PITP tag function. make sure that the PITP V mode is disabled.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 19 Configuring User Security To differentiate the formats. do as follows: huawei(config)#raio-mode xdsl-port-rate pitp-pmode huawei(config)#raio-mode xdsl-port-rate pitp-pmode huawei(config)#display raio-mode { <cr>|pitp-pmode<K>|pitp-vmode<K>|dhcp-option82<K>|detail<K> }: Command: display raio-mode Current mode of PITP pmode: xdsl-port-rate mode Current mode of PITP vmode: common mode Current mode of DHCP option82: xdsl-port-rate mode 19. the PPPoE packets contain the upstream/downstream activation rate of the port. such as: l l IP: 0x0800 ARP: 0x0806 Huawei Technologies Proprietary 19-5 Issue 04 (2007-11-30) . Step 2 Run the display raio-mode command to query the RAIO working mode.4 Setting the Ethernet Encapsulation Type This operation enables you to set the Ethernet encapsulation type. make sure that it does not conflict with any of existing protocol types. and the PPPoE packets contain the description of the port. Procedure Step 1 Run the raio-mode command to set the RAIO working mode. Context WARNING Before setting the Ethernet encapsulation type. do as follows: huawei(config)#display raio-mode { <cr>|pitp-pmode<K>|pitp-vmode<K>|dhcp-option82<K>|detail<K> }: Command: display raio-mode Current mode of PITP pmode: xdsl-port-rate mode Current mode of PITP vmode: common mode Current mode of DHCP option82: port-userlabel mode To set the RAIO working mode as xdsl-port-rate so that after the PITP P mode is enabled on the port. ----End Example To set the RAIO working mode as port-userlabel so that after the DHCP option82 function is enabled on the port. When setting a protocol type. Step 2 Run the display pitp vmode ether-type command and you can find the Ethernet encapsulation type is set successfully... Table 19-1 Related operation for setting the Ethernet encapsulation type To. l Procedure Step 1 Run the dhcp option82 enable command to enable the DHCP option82. do as follows: huawei(config)#pitp vmode ether-type 0x8200 huawei(config)#display pitp vmode ether-type Vmode ethernet type is 0x8200 Related Operation Table 19-1 lists the related operation for setting the Ethernet encapsulation type..1q: 0x8100 PPPoE: 0x8863 and0x8864 Procedure Step 1 Run the pitp vmode ether-type command to set the Ethernet encapsulation type. With the DHCP option82 function disabled. The MA5600 adds the option82 field to the DHCP packets to ensure the security of the DHCP function. Context l With the DHCP option82 function enabled. the MA5600 can add/remove the option82 field to/from DHCP packets. pitp disable 19. ----End 19-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. the MA5600 transparently transmits or directly forwards DHCP packets without processing them.19 Configuring User Security l l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide RARP: 0x8035 802. Step 2 Run the display dhcp option82 config command and you can find the DHCP option82 is enabled. ----End Example To set the Ethernet encapsulation type in V mode.5 Enabling the DHCP Option82 Function This operation enables the DHCP option82 function so that the BRAS can authenticate the access users. Disable PITP function Run the Command. do as follows: huawei(config)#dhcp option82 enable huawei(config)#display dhcp option82 config DHCP option82 is enabled Maximum length of DHCP packet is 1300 bytes Related Operation Table 19-2 lists the related operations for enabling the DHCP option82. ----End Example To set the maximum length of DHCP packets as 1300 bytes.. Step 2 Run the display dhcp option82 config command to query the configured maximum length of DHCP packets. Context l l By default.. Procedure Step 1 Run the dhcp option82 max-length command to set the maximum length of DHCP packets.. You can set the maximum length for the DHCP packets added with DHCP relay Agent Option messages. Disable the DHCP option82 Set the maximum length of the DHCP packet Run the Command.6 Setting the Maximum Length of DHCP Packets This operation enables you to set the maximum length of DHCP packets. Table 19-2 Related operations for enabling the DHCP option82 To. do as follows: huawei(config)#dhcp option82 max-length 1300 huawei(config)#huawei(config)#display dhcp option82 config DHCP option82 is enabled Maximum length of DHCP packet is 1300 bytes Issue 04 (2007-11-30) Huawei Technologies Proprietary 19-7 . If there are packets with length exceeding this value.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19 Configuring User Security Example To enable the DHCP option82. dhcp option82 disable dhcp option82 max-length 19. the maximum length of DHCP packets is 1500 bytes. the system transparently transmits these packets.. 10.10.10.1.8 1 10.10.245 of the service channel (VPI/VCI of 0/35) with ADSL port 0/2/0.1.10.10. Step 2 Run the display bind command to query the IP address binding information.10. IP address ------------------------0 10. so that the messages from the IP addresses other than the bound IP addresses are refused to pass through the service channel of the port.8-10.12 19-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . IP address ------------------------0 10.10/29 of the service channel (VPI/VCI of 0/35) with ADSL port 0/2/0 (the bound IP address segment is 10.10.10 29 huawei(config)#display bind adsl 0/2/0 vpi 0 vci 35 single-service { <cr>|user-encap<K>|user-vlan<K> }: Command: display bind adsl 0/2/0 vpi 0 vci 35 ------------------------No.245 huawei(config)#display bind adsl 0/2/0 vpi 0 vci 35 { <cr>|user-encap<K>|user-vlan<K> }: Command: display bind adsl 0/2/0 vpi 0 vci 35 ------------------------No.19 Configuring User Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19.245 1 2 3 4 5 6 7 ------------------------- To bind the IP address 10.10.10.10 3 10.10.10.10. The bound IP address must be unicast IP address. One port can be bound with either one IP address or eight consecutive IP addresses according to the IP address mask at one time.1.10.9 2 10. Context l A service channel can be bound with up to eight IP addresses.7 Binding the IP Address This operation enables you to bind a service port with one or multiple IP addresses. ----End To bind the IP address 10.1.11 4 10.1.10. do as follows: huawei(config)#bind ip adsl 0/2/0 vpi 0 vci 35 single-service 10. l Procedure Step 1 Run the bind ip command to bind an IP address.10.10.1. do as follows: huawei(config)#bind ip adsl 0/2/0 vpi 0 vci 35 single-service 10.15).10. 10. S--Slot.10. undo bind ip 19. Table 19-3 Related operation for binding the IP address To. to bind the port with the MAC address so that the port only allows the pass of packets with the source MAC address of 1010-1010-1010. Procedure Step 1 Run the mac-address static command to configure the static MAC address for a port. Cancel the binding of IP address Run the Command.IMA GROUP or VLAN ID etc.). do as follows: huawei(config)#mac-address static adsl 0/2/0 vpi 0 vci 35 1010-1010-1010 huawei(config)#mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 0 huawei(config)#display mac-address max-mac-count adsl 0/2/0 vpi 0 vci 35 ---------------------------------------------------------------------------Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number ---------------------------------------------------------------------------adl 0/2/0 0 35 4000 0 -------------------------------------------------------------------------Total: 1 Note : F--Frame. ----End Example Assume that the static MAC address of ADSL2+ port 0/2/0 is 1010-1010-1010.. Context The MA5600 does not support binding a MAC address directly.8 Binding the MAC Address This operation enables you to bind a service port with a MAC address.14 7 10. P--Port(xDSL Port. you can bind a port with a MAC address.. By configuring a static MAC address entry and setting the maximum address count to 0.UP-Link Port.10..10. the VPI is access-end VLAN ID in vdsl/eau port or PON ID in epon port Issue 04 (2007-11-30) Huawei Technologies Proprietary 19-9 .10. Step 3 Run the display mac-address max-mac-count command to query the maximum MAC address number that can be learnt by service channels.10. and the maximum address count is 0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5 10.15 ------------------------- 19 Configuring User Security Related Operation Table 19-3 lists the related operation for binding the IP address. Step 2 Run the mac-address max-mac-count command to set the maximum address count for the service port.13 6 10.. l l Procedure Step 1 Run the security anti-macspoofing enable command to enable anti MAC spoofing function.9 Enabling Anti MAC Spoofing This operation enables the anti MAC spoofing function. Each service virtue port can be bound with up to eight different MAC addresses dynamically. the system does not bind MAC address. Table 19-4 Related operations for enabling anti MAC spoofing To… Disable anti MAC spoofing Display the dynamically bound MAC addresses Run the Command… security anti-macspoofing disable display security bind mac 19-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . unauthorized users are prevented from sending PPPoE and DHCP control packets through forged MAC addresses. Step 2 Run the display security config command and you can find that the function is enabled. Context l l The anti MAC spoofing function is implemented through MAC address binding.  With the anti MAC spoofing function enabled. If a user has been online before the anti MAC spoofing function is enabled. the user MAC address is bound. ----End Example To enable anti MAC spoofing. do as follows: huawei(config)#security anti-macspoofing enable huawei(config)#display security config Anti-ipspoofing function : disable Anti-dos function : enable Anti-macspoofing function : enable Anti-ipattack function : disable Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 19-4 lists the related operations for enabling anti MAC spoofing. If a user logs in after the anti MAC spoofing function is enabled.19 Configuring User Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19. do as follows: huawei(config)#security anti-ipspoofing enable huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : enable Anti-macspoofing function : enable Anti-ipattack function : disable Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 19-5 lists the related operations for enabling anti MAC spoofing. With the anti IP spoofing function enabled. When the anti IP spoofing function is enabled before the user gets online. Context l l l l The anti IP spoofing function is implemented through dynamic IP address binding. The system only binds the IP address of the user who obtains the IP address through DHCP. the user needs to get offline and then online again. Step 2 Run the display security config command and you can find that the function is enabled. ----End Example To enable anti IP spoofing. l Procedure Step 1 Run the security anti-ipspoofing enable command to enable anti IP spoofing. In this case. unauthorized users are prevented from logging in to the device using legal IP addresses. the user does not need to get offline and then online again. the user service will be interrupted. By default. When the anti IP spoofing function is enabled for a user who has already got online.10 Enabling Anti IP Spoofing This operation enable the anti IP spoofing function. the dynamic IP address binding function is disabled.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19 Configuring User Security 19. Table 19-5 Related operations for enabling anti MAC spoofing To… Disable anti IP spoofing Display the dynamically bound IP addresses Issue 04 (2007-11-30) Run the Command… security anti-ipspoofing disable display security bind ip Huawei Technologies Proprietary 19-11 . 19 Configuring User Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 19-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 20. 20. This function prevents users from maliciously sending IP packets to the IP address of the device to enhance the device security. 20. so as to prevent large amount of packets sent by the access user from attacking the MA5600.8 Configuring the Black List This operation enables you to configure a firewall black list. 20.3 Enabling Anti IP Attack This operation enables the function of anti IP attack. 20.1 Overview This chapter describes the service description and service specification of system security.5 Enabling Source Route Filtering This operation enables the function of source route filtering. so that the service packets from these IP addresses cannot pass the firewall. Issue 04 (2007-11-30) Huawei Technologies Proprietary 20-1 . 20.7 Setting the Time to Detect Exceptional Disconnection of the PPPoE/DHCP Users This operation enables you to set the time to detect exceptional disconnection of the PPPoE/ DHCP users. 20.4 Enabling Anti ICMP Attack This operation enables the function of anti ICMP attack. This function filters the IP packet containing the route option field. 20. such as adding some IP addresses to the firewall black list.9 Configuring the Firewall Function This operation enables you to configure the firewall function to prohibit or allow the packets that meet the criteria to pass the inband or outband management interface.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security 20 About This Chapter Configuring System Security This chapter describes how to configure the system security supported by the MA5600.6 Configuring MAC Address Filtering This operation enables you to configure the function of MAC address filtering to filter the packets with the source MAC address as the specified one. 20.2 Enabling Anti DoS Attack This operation enables the anti DoS attack function. 11 Configuring the Inaccessible Address Segment This operation enables you to add the inaccessible address segment for the firewall of the specified protocol type. 20-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20.10 Configuring an Accessible Address Segment This operation enables you to configure the accessible address segment for the firewall of a specified protocol type. 20. This helps to guarantee user or equipment stability. refer to the chapter "System Security" in the Feature Description. For details on the system security.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security 20. Step 2 Run the display security config command to query the status of anti DoS attack. the MA5600 supports the following security features: l l l l l l l l l l Anti DoS attack Anti IP spoofing Anti MAC spoofing Anti IP attack Anti ICMP attack Source route filtering MAC address filtering IP/MAC address binding Firewall function SSH 20. Procedure Step 1 Run the security anti-dos enable command to enable anti DoS attack. do as follows: huawei(config)#security anti-dos enable huawei(config)#display security config Anti-ipspoofing function : disable Anti-dos function : enable Anti-macspoofing function : disable Anti-ipattack function : disable Issue 04 (2007-11-30) Huawei Technologies Proprietary 20-3 . ----End Example To enable anti DoS attack.2 Enabling Anti DoS Attack This operation enables the anti DoS attack function. Service Specification To ensure stable operation. so as to prevent large amount of packets sent by the access user from attacking the MA5600. Service Description The MA5600 supports system security setting to prevent attacks initiated at the network or user side.1 Overview This chapter describes the service description and service specification of system security. ----End Example To enable the function of anti IP attack. 20-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 20-1 Related operations for enabling anti DoS attack To… Disable anti DoS attack Display the black list of anti DoS attackers Run the Command… security anti-dos disable display security dos-blacklist 20. Procedure Step 1 Run the security anti-ipattack enable command to enable anti IP attack function.3 Enabling Anti IP Attack This operation enables the function of anti IP attack. do as follows: huawei(config)#security anti-ipattack enable huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : enable Anti-macspoofing function : enable Anti-ipattack function : enable Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 20-2 lists the related operation for enabling the function of anti IP attack. Step 2 Run the display security config command and you can find that the function is enabled. This function prevents users from maliciously sending IP packets to the IP address of the device to enhance the device security.20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 20-1 lists the related operations for enabling anti DoS attack. Step 2 Run the display security config command and you can find that the function is enabled.4 Enabling Anti ICMP Attack This operation enables the function of anti ICMP attack. This function filters the IP packet containing the route option field. Procedure Step 1 Run the security anti-icmpattack enable command to enable anti ICMP attack. Table 20-3 Related operation for enabling the function of anti ICMP attack To… Disable the function of anti ICMP attack Run the Command… security anti-icmpattack disable 20. do as follows: huawei(config)#security anti-icmpattack enable huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : enable Anti-macspoofing function : enable Anti-ipattack function : enable Anti-icmpattack function : enable Source-route filter function : disable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 20-3 lists the related operation for enabling the function of anti ICMP attack. ----End Example To enable the function of anti ICMP attack.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security Table 20-2 Related operation for enabling the function of anti IP attack To… Disable the function of anti IP attack Run the Command… security anti-ipattack disable 20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 20-5 .5 Enabling Source Route Filtering This operation enables the function of source route filtering. ----End Example To enable the function of source route filtering. the source route packet is not discarded. Table 20-4 Related operation for enabling the function of source route filtering To… Disable source route filtering Run the Command… security source-route disable 20.20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context By default. Step 2 Run the display security config command and you can find that the function is enabled. Context The system supports up to four filtering MAC addresses. Step 2 Run the display security mac-filter command to query the configured filtering MAC address. Procedure Step 1 Run the security mac-filter command to configure MAC address filtering.6 Configuring MAC Address Filtering This operation enables you to configure the function of MAC address filtering to filter the packets with the source MAC address as the specified one. do as follows: huawei(config)#security source-route enable huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : enable Anti-macspoofing function : enable Anti-ipattack function : enable Anti-icmpattack function : enable Source-route filter function : enable PPPoE Overall Aging Time(sec): 360 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 Related Operation Table 20-4 lists the related operation for enabling the function of source route filtering. Procedure Step 1 Run the security source-route enable command to enable the function of source route filtering. ----End 20-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 20-5 Related operation for configuring MAC address filtering To… Delete the filtering MAC address Run the Command… undo security mac-filter 20. Context l For PPPoE users. do as follows: huawei(config)#security mac-filter 1000-0000-0000 huawei(config)#display security mac-filter --------. When the offline period of a user exceeds the aging period but is less than the overall aging time. By default. – l l l By default. – The system checks the online/offline status of a user every aging period. it is considered that the user has been offline. the offline time of the user will be accumulated. and the overall aging time is 360s. the timeout time includes aging period and overall aging time. the PPPoE aging period is 90s.1 mac address found ---- Related Operation Table 20-5 lists the related operation for configuring MAC address filtering. the detection time contains only the timeout total time (1560s by default). do as follows: huawei(config)#security pppoe timeout 1800 Issue 04 (2007-11-30) Huawei Technologies Proprietary 20-7 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security Example To configure the MAC address 1000-0000-0000 as the filtering MAC address.Mac Address --------1000-0000-0000 ---. When the accumulated offline time exceeds the overall aging time. For DHCP users. Step 2 Run the display security config command and you can find the information about the time to detect the exceptional disconnection of the PPPoE/DHCP users. Procedure Step 1 Run the security timeout command to set the time to detect exceptional disconnection of the PPPoE or DHCP users.7 Setting the Time to Detect Exceptional Disconnection of the PPPoE/DHCP Users This operation enables you to set the time to detect exceptional disconnection of the PPPoE/ DHCP users. ----End To set the timeout total time for PPPoE users as 1800s. the DHCP overall aging time is 1560s. The firewall black list function only takes effect to the service packets that are sent from the user side. Prerequisite The ACL applied to the firewall function exists. The ACL rule used when the black list function is enabled can only be the advanced ACL rule. That is. l l Procedure Step 1 Run the firewall blacklist item command to add a firewall black list item. In this case.20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : disable Anti-macspoofing function : disable Anti-ipattack function : disable Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 1800 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1560 To set the timeout total time for DHCP users as 1800s. Step 2 Run the firewall blacklist enable command to enable the firewall black list item. so that the service packets from these IP addresses cannot pass the firewall. the priority level of the firewall black list is higher than that of the ACL rule. You can use the ACL rule when enabling the firewall black list function.8 Configuring the Black List This operation enables you to configure a firewall black list. such as adding some IP addresses to the firewall black list. Context l l The system supports up to 2000 items in a firewall black list. and then matches the ACL rule. do as follows: huawei(config)#security dhcp timeout 1800 huawei(config)#display security config Anti-ipspoofing function : enable Anti-dos function : disable Anti-macspoofing function : disable Anti-ipattack function : disable Anti-icmpattack function : disable Source-route filter function : disable PPPoE Overall Aging Time(sec): 1800 PPPoE Aging Period (sec): 90 DHCP Overall Aging Time(sec): 1800 20. Step 3 Run the display firewall blacklist item command to show the configuration of the firewall black list. the system checks the firewall black list first. ----End 20-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . enable the firewall black list function and apply ACL 3000.10. the packets matching the ACL rule are handled based on the ACL rule. Table 20-6 Related operations for configuring the firewall black list function To… Disable the firewall black list function Delete an item from a firewall black list Run the Command… undo firewall blacklist enable undo firewall blacklist item 20.9 Configuring the Firewall Function This operation enables you to configure the firewall function to prohibit or allow the packets that meet the criteria to pass the inband or outband management interface. The priority level of the ACL rule is superior to the default operation of firewall. and those not matching the rule are handled based on the default operation of firewall. That is. Context l Only one ACL can be configured respectively for the egress and ingress directions of the inband or outband management interface.10 timeout 100 huawei(config)#firewall blacklist enable acl-number 3000 huawei(config)#display firewall blacklist item Firewall blacklist items : Current manual insert items : 1 Current automatic insert items : 0 Need aging items : 1 IP Reason InsertTime AgeTime ---------------------------------------------------------------10.10.10.10 Manual 2006/02/16 09:58:50 100 Related Operation Table 20-6 lists the related operations for configuring the firewall black list function. do as follows: huawei(config)#firewall blacklist item 10.10 to a firewall black list with the aging time of 100 minutes. Issue 04 (2007-11-30) Huawei Technologies Proprietary 20-9 . The ACL applied to the firewall function can be the basic ACL or the advanced ACL.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security Example To add IP address 10. Prerequisite The ACL applied to the firewall function exists.10.10.10. l l Configuration Flowchart Figure 20-1 shows the flowchart for configuring the firewall function. Step 3 Run the interface meth 0 command to enter interface config mode. 0 packets. 0% permitted. Step 4 Run the firewall packet-filter command to apply ACL 2000 to the maintenance network port. and apply ACL 2000 to the outband management interface to filter packets. Totally 0 packets. 0 bytes. 0 bytes. set the default operation of the firewall as deny. 0% denied default. 0% permitted. 0 bytes. 0 packets. Totally 0 packets. 0% denied. 0 bytes. do as follows: huawei(config)#firewall enable huawei(config)#firewall default deny huawei(config)#interface meth 0 huawei(config-if-meth0)#firewall packet-filter 2000 inbound huawei(config)#display firewall packet-filter statistics all Interface: meth0 In-bound Policy: acl 2000 From 2006-02-16 10:00:26 to 2006-02-16 10:02:43 0 packets. 0% permitted default. 20-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 0 packets. Step 5 Run the display firewall packet-filter statistics command and you can find the configuration.20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 20-1 Flowchart for configuring the firewall function Start Enable the firewall function Set the default operation of firewall Apply ACL to the GE or ETH port of the SCU board End Procedure Step 1 Run the firewall enable command to enable the firewall function. 0 bytes. Related Operation Table 20-7 lists the related operation for configuring the firewall function. Step 2 Run the firewall default command to set the default operation of the firewall as deny. 0 bytes. 0% denied. ----End Example To enable the firewall function. l Procedure Step 1 Run the sysman ip-access command to add an accessible address segment.1 10.1. ----End Example To add a legal address segment the refuse list of the telnet type. and SNMP. When deleting one address segment. Each firewall can be added with up to 10 address segments.10. the first address cannot be the same as the existed one.10 Configuring an Accessible Address Segment This operation enables you to configure the accessible address segment for the firewall of a specified protocol type. SSH. When one address segment is added.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 20 Configuring System Security Table 20-7 Related operation for configuring the firewall function To… Disable the firewall function Run the Command… undo firewall enable 20.1.1 10. Context l l l The specified protocol types include: Telnet. Table 20-8 Related operations for configuring an accessible address segment To… Delete an accessible address segment Issue 04 (2007-11-30) Run the Command… undo sysman ip-access 20-11 Huawei Technologies Proprietary .10.10.10 -------------------------------------------- Related Operation Table 20-8 lists the related operations for configuring an accessible address segment. do as follows: huawei (config)#sysman ip-access telnet 1. you can only input the first address of the address segment.10 huawei(config)#display sysman ip-access telnet IP-Access Table: -------------------------------------------Index Start-IPAddr End-IPAddr -------------------------------------------1 1.10. Step 2 Run the display sysman ip-access telnet command to query the configuration of the accessible address segment.1.1. 1 huawei(config)#display sysman ip-refuse telnet IP-Refuse Table: -------------------------------------------Index Start-IPAddr End-IPAddr -------------------------------------------1 1. When you add an address segment. Table 20-9 Related operations for configuring the inaccessible address segment To… Delete the inaccessible address segment Display the configuration of firewall Run the Command… undo sysman ip-refuse display sysman 20-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . input the start address of the address segment.1. Step 2 Run the display sysman ip-refuse command to query configuration of the accessible address segment. SSH.10.10.1. Context l l l l The specified protocol type includes: telnet. do as follows: huawei(config)#sysman ip-refuse telnet 1. To delete an address segment.10.20 Configuring System Security SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To… Display the firewall configuration Run the Command… display sysman 20. Procedure Step 1 Run the sysman ip-refuse command to configure the inaccessible address segment.1 -------------------------------------------- Related Operation Table 20-9 lists the related operations for configuring the inaccessible address segment.10 10.1. and SNMP. ----End Example To add a address segment to the telnet IP-refuse table. the start address cannot be the same as an existing one.1. Each firewall is allowed to add ten address segments.11 Configuring the Inaccessible Address Segment This operation enables you to add the inaccessible address segment for the firewall of the specified protocol type.10.10 10. 3 Configuration Example of the ADSL2+ IPoA Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through the ADSL2+ lines in the IPoA mode. 21. it can be directly used to activate the ports.5 Adding an ADSL2+ Line Profile This operation enables you to add an ADSL2+ line profile. This helps to include the parameters needed by all the ADSL2+ ports in a line profile. After the alarm profile is configured and bound successfully.7 Adding an ADSL2+ Alarm Profile This operation enables you to add an ADSL2+ alarm profile. 21. After the line profile is configured successfully. it can be directly used to activate the ports.6 Adding an Extended ADSL2+ Line Profile This operation enables you to add an extended ADSL2+ line profile.9 Configuring the Port Rate Measurement Thresholds for an ADSL2+ Port Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-1 . 21.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service 21 Configuring the ADSL2+ Service About This Chapter This chapter describes the ADSL2+ technology and how to configure the ADSL2+ service on the MA5600. 21. 21.1 Overview This section describes the service description and service specifications of Asymmetrical Digital Subscriber Line 2 plus (ADSL2+).4 Configuration Example of the ADSL2+ PPPoA Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through ADSL2+ lines in the PPPoA mode. 21. 21. 21. This helps to filter the sub-carrier that are unsuitable for carrying data.8 Activating an ADSL2+ Port This operation enables you to activate an ADSL2+ port for transmitting service data.2 Configuration Example of the ADSL2+ PPPoE/IPoE Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through the ADSL2+ lines in the PPPoE/IPoE mode. 21. The extended ADSL2+ line profile is used to configure the extended parameters for an ADSL2+ port when the port is activated. 13 Enabling the Auto PVC Configuration of an ADSL Modem This operation enables a modem to automatically configure the VPI/VCI.12 Querying an ADSL2+ Port This operation enables you to query the comprehensive information about an ADSL2+ port.11 Configuring PPPoA/PPPoE Protocol Conversion The MA5600 supports the conversion between the PPPoA and PPPoE protocols. 21-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 21. 21. the PPPoA users can access the upper layer IP network to enhance the access ability and network capability of the MA5600. the IPoA users can access the upper layer IP network to enhance the access ability and network capability of the MA5600. In this way.10 Configuring IPoA/IPoE Protocol Conversion The MA5600 supports the conversion between the IPoA and IPoE protocols. 21. In this way. 21.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to configure the upstream and downstream rate measurement thresholds for an ADSL2+ port. An MA5600 shelf can house up to 14 ADSL2+ boards. The MA5600 provides six encapsulation modes. llc-PPPoA and vcmux-PPPoA. llc-IPoA. Auto vcmux-IPoA llc-Bridge.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service 21. the encapsulation mode is llc-Bridge. up to 24 Mbit/s downstream and 1. Service Description ADSL2+ adopts asymmetric transmission mode and features: l l High rate.2 Mbit/s upstream Long reach distance. Table 21-1 lists the encapsulation mode mapping between the MA5600 and the modem. a shelf provides up 896 ADSL2+ subscribers. vcmux-Bridge.1 Overview This section describes the service description and service specifications of Asymmetrical Digital Subscriber Line 2 plus (ADSL2+). vcmux-IPoA. Auto llc-Bridge. With each board providing 64 ADSL2+ ports. including llc-Bridge. llc-PPPoA and vcmux-PPPoA.5 km Service Specifications The MA5600 provides the ADSL2+ service through the ADGE board. Auto vcmux-PPPoA. Auto Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-3 . Auto vcmux-Bridge. Auto vcmux-Bridge. Auto vcmux-Bridge. up to 6. including llc-Bridge. By default. Auto llc-IPoA. llc-IPoA.PPPoE llc-PPPoE MA5600 Encapsulation Type llc-PPPoA. Auto llc-Bridge. vcmux-Bridge. Table 21-1 Encapsulation mode mapping between the MA5600 and the modem Service Type PPPoA Modem Encapsulation Type llc-PPPoA vcmux-PPPoA IPoA llc RFC1483/2684 Route vcmux RFC1483/2684 Route IPoE llc-Bridge vcmux-Bridge PPPoE llc-RFC1483/2684 Bridge vcmux-RFC1483/2684 Bridge vcmux. The MA5600 provides an Auto mode. Context l The MA5600 can limit the rate of users through the configured traffic profile or the configured ADSL2+ line profile. 21-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . reconfigure the data of the traffic profile. the user bandwidth is the minimum value defined in the two profiles. If the user bandwidth is insufficient. In this section. configure the data manually.2 Configuration Example of the ADSL2+ PPPoE/IPoE Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through the ADSL2+ lines in the PPPoE/IPoE mode. If the two profiles work together.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21. l Networking Figure 21-1 lists a sample network for configuring the ADSL2+ PPPoE/IPoE service.1 Router A D G E GE0/7/0 CON ETH MON Internet PPPoE/IPoE access SCU Modem MA5600 PC Data Plan Table 21-2 lists the data plan for configuring the ADSL2+ PPPoE/IPoE service. Only the deactivated port can be bound with the line profile. If the qualified rate of the port is lower than 96%. the traffic profile is taken as an example. Prerequisite l l The network devices and lines are in the normal state. The ADSL2+ service board is in the normal state.1. Figure 21-1 Sample network for configuring the ADSL2+ PPPoE/IPoE service 10.1. SCU Upstream port: 0/7/0 Gateway IP address: 10. and priority policy in the traffic profile. The actual qualified rate of the port may be lower than 96%.1/24 Issue 04 (2007-11-30) Huawei Technologies Proprietary Line profile Index: 1002 (the default profile) Alarm profile Index: 1 (the default profile) It is the IP address of the upper layer router. and priority policy. increase the rate to meet the user demands. priority. Configure the alarm threshold of the line parameter in the alarm profile. the ADSL2+ port is activated and the lines connecting to the port can bear services.1. 21-5 . which indicates that line monitoring is disabled. When activating the ADSL2 + port. When you add a service port. Therefore. priority.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Table 21-2 Data plan for configuring the ADSL2+ PPPoE/IPoE service Item Traffic profile Data Index: 7 Access rate: 3072 kbit/s Priority: 6 Priority policy: Pvc-Setting Remarks Configure the access rate. you can monitor the conditions of the lines connecting to the port. configure the rate of the traffic profile as 3072 kbit/s. Upon successful negotiation. ADGE ADSL2+ port: 0/2/0 VLAN ID: 10 Upstream/Downstream bandwidth: 3 Mbit/s Keep it consistent with the upper layer device. Configure the upstream/ downstream bandwidth in the traffic profile according to the user demands. all the alarm thresholds are set as 0.1. In an ideal case. you can use the parameters configured in the line profile to negotiate with the CPE. By binding the threshold to a port. In the default alarm profile. you can specify the traffic profile to restrict the access rate. Figure 21-2 Flowchart for configuring the ADSL2+ PPPoE/IPoE service Start Is there an appropriate traffic profile? Yes Create a VLAN and add port(s) to it No Add a traffic profile Is the port activated? Yes Deactivate the ADSL2+ port No Is there an appropriate line profile? Yes Do you need to add an extended line profile? No Is there an appropriate alarm profile? Yes No Add a line profile Yes Add an extended line profile No Add an alarm profile Bind the alarm profile Bind the extended line profile (optional) Bind the line profile and activate the ADSL2+ port Save the data End 21-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configuration Flowchart Figure 21-2 shows the flowchart for configuring the ADSL2+ PPPoE/IPoE service. If required. To assign IP addresses to users through the BRAS. refer to "21." l Procedure Step 1 Query and configure the traffic profile. Step 3 Configure the ADSL2+ line profile. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 multi-service userencap pppoe rx-cttr 7 tx-cttr 7 NOTE If you need to enable services in bathes in actual configuration. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy -------------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri 7 3072 6 pvc-pri -------------------------------------------------------------------------Traffic parameters for ATM service: -------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/--------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------------- The query result shows that traffic profile 7 is available. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-7 . configure the corresponding IP address pool on the BRAS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide NOTE 21 Configuring the ADSL2+ Service l To authenticate users on the BRAS. Step 2 Create a VLAN and add a service port and an upstream port to the VLAN.6 Adding an Extended ADSL2+ Line Profile. refer to "9.12 Adding Service Ports in Batches" to add service ports in batches. In this example. the extended line profile is not configured. configure the name and password of the access user on the BRAS. Prerequisite l l The network devices and lines are in the normal state.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide If there is no appropriate line profile. In the case of the IPoA access. IP access becomes the mainstream access mode for digital subscriber line access multiplexers (DSLAMs). configure the data manually.3 Configuration Example of the ADSL2+ IPoA Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through the ADSL2+ lines in the IPoA mode. add one. and then adopt the IPoA static address encapsulation. To switch from a dynamic address to a static address in the IPoA mode. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol. Step 4 Bind the default alarm profile 1. the user can access the Internet in the PPPoE/IPoE mode. the traffic profile is taken as an example. huawei(config)#interface adsl 0/2 huawei(config-if-adsl-0/2)#deactivate 0 huawei(config-if-adsl-0/2)#activate 0 profile-index 1002 Step 6 Save the data. The default line profile 1002 is adopted in this example. you can select the dynamic IP address (without specifying the source IP address) or the static IP address (specifying the source IP address) for the packets. Context l With the development of the IP network. To be compatible with the user side modems that adopt the ATM as the access mode. Huawei Technologies Proprietary Issue 04 (2007-11-30) l l l l 21-8 . you must adopt the LLC-Bridge encapsulation first. If the two profiles work together. If the qualified rate of the port is lower than 96%. huawei(config-if-adsl-0/2)#alarm-config 0 1 Step 5 Bind the line profile and activate ADSL2+ port 0/2/0. In this section. If the user bandwidth is insufficient. the application service of IPoA/PPPoA users is the common Internet service. Currently. Only the deactivated port can be bound with the line profile. huawei(config-if-adsl-0/2)#quit huawei(config)#save ----End Result After the configuration. The ADSL2+ service board is in the normal state. and enables IPoA/PPPoA users to transparently access the upper layer IP network. reconfigure the data of the traffic profile. the user bandwidth is the minimum value defined in the two profiles. The MA5600 can limit the rate of users through the configured traffic profile or the configured ADSL2+ line profile. 21. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Networking Figure 21-3 shows a sample network for configuring the ADSL2+ IPoA service. you can use the parameters configured in the line profile to negotiate with the customer premises equipment (CPE).1. priority.1. When you add a service port. and priority policy in the traffic profile. Table 21-3 Data plan for configuring the ADSL2+ IPoA service Item Traffic profile Data Index: 7 Access rate: 3072 kbit/s Priority: 6 Priority policy: Pvc-Setting Line profile Index: 1002 (the default profile) Remarks Configure the access rate. and priority policy. priority. Figure 21-3 Sample network for configuring the ADSL2+ IPoA service 10.1 Router A D G E GE0/7/0 CON ETH MON Internet IPoA access SCU Modem MA5600 PC Data Plan Table 21-3 lists the data plan for configuring the ADSL2+ IPoA service. When activating the ADSL2+ port. you can specify the traffic profile to limit the access rate. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-9 . increase the rate to meet the user demands. configure the rate of the traffic profile as 3072 kbit/s. SCU Upstream port: 0/7/0 Gateway IP address: 10.1. all the alarm thresholds are set as 0. Therefore. In the default alarm profile. By binding the threshold to a port. In an ideal case.1/24 It is the IP address of the upper layer router.1. Configure the upstream/downstream bandwidth in the traffic profile according to the user demands. you can monitor the conditions of the lines connecting to the port. ADGE ADSL2+ port: 0/2/0 VLAN ID: 10 Upstream/Downstream bandwidth: 3 Mbit/s Keep it consistent with the upper layer device. 21-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The actual qualified rate of the port may be lower than 96%. Configuration Flowchart Figure 21-4 shows the flowchart for configuring the ADSL2+ IPoA service. which indicates that line monitoring is disabled.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Alarm profile Data Index: 1 (the default profile) Remarks Configure the alarm threshold of the line parameter in the alarm profile. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Figure 21-4 Flowchart for configuring the ADSL2+ IPoA service Start Is there an appropriate traffic profile? Yes Create a VLAN and add port(s) to it No Add a traffic profile Bind the line profile Bind the alarm profile Is the port activated? No Bind the extended line profile (optional) Yes Deactivate the ADSL2+ port Activate the ADSL2+ port Configure a MAC address pool Is there an appropriate line profile? Yes Do you need to add an extended line profile? No Is there an appropriate alarm profile? Yes No Enable protocol conversion Add a line profile Yes Configure IPoA default gateway Set the encapsulation mode Add an extended line profile Save the data No End Add an alarm profile Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-11 . 6 Adding an Extended ADSL2+ Line Profile. refer to "9. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy -------------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri -------------------------------------------------------------------------Traffic parameters for ATM service: -------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/--------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------------- If there is no appropriate traffic profile for use. configure the name and password of the access user on the BRAS. To assign IP addresses to users through the BRAS. create one." l Procedure Step 1 Query and configure the traffic profile. In this example. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 NOTE If you need to enable services in bathes in actual configuration. refer to "21.12 Adding Service Ports in Batches" to add service ports in batches. 21-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .21 Configuring the ADSL2+ Service NOTE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l To authenticate users on the broadband remote access server (BRAS). If required. configure the corresponding IP address pool on the BRAS. Step 3 Configure the ADSL2+ line profile. huawei(config)#traffic table index 7 ip car 3072 priority 6 priority-policy pvcSetting Step 2 Configure the VLAN. the extended line profile is not configured. Step 4 Bind the line profile and activate ADSL2+ port 0/2/0. 4.4 Configuration Example of the ADSL2+ PPPoA Service This example shows how to configure the ADSL2+ service so that the user can access the Internet through ADSL2+ lines in the PPPoA mode. huawei(config-if-adsl-0/2)#quit huawei(config)#mac-pool 0 0000-0000-0001 2. The default line profile 1002 is adopted in this example. huawei(config)#ipoa enable Configure the default IPoA gateway.1. huawei(config-if-adsl-0/2)#alarm-config 0 1 Step 6 Configure the IPoA service. huawei(config)#save ----End Result After the configuration. huawei(config)#encapsulation 0/2 start-portId 0 end-portId 10 type ipoa llc Step 7 Save the data. 1. Enable the IPoA protocol conversion. 3. add one.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service If there is no appropriate line profile. the user can access the Internet in the IPoA mode. To be compatible with the use side modems that adopt the ATM as the access mode. Prerequisite l l The network devices and lines are in the normal state. the application service of IPoA/PPPoA users is the common Internet service. Configure MAC address pool 0. 21. If the two profiles work together. The MA5600 can limit the rate of users through the configured traffic profile or the configured ADSL2+ line profile. which begins with 0000-0000-0001. huawei(config)#ipoa default gateway 10. and enables IPoA/PPPoA users to transparently access the upper layer IP network. the user bandwidth is Huawei Technologies Proprietary 21-13 l l Issue 04 (2007-11-30) . huawei(config)#interface adsl 0/2 huawei(config-if-adsl-0/2)#deactivate 0 huawei(config-if-adsl-0/2)#activate 0 profile-index 1002 Step 5 Bind default alarm profile 1.1. IP access becomes the mainstream access mode in DSLAMs. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol.1 Set the IPoA service encapsulation mode of ADSL2+ port 0/2/0 as LLC-IPoA. Context l With the development of the IP network. Currently. The ADSL2+ service board is in the normal state. 1. When activating the ADSL2 + port. Networking Figure 21-5 shows a sample network for configuring the ADSL2+ PPPoA service. In this section. and priority policy in the traffic profile.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide the minimum value defined in the two profiles. you can specify the traffic profile to restrict the access rate.1 Router A D G E GE0/7/0 CON ETH MON Internet PPPoA access SCU Modem MA5600 PC Data Plan Table 21-4 lists the data plan for configuring the ADSL2+ PPPoA service. and priority policy.1. the traffic profile is taken as an example. Figure 21-5 Sample network for configuring the ADSL2+ PPPoA service 10. When you add a service port. you can use the parameters configured in the line profile to negotiate with the CPE. priority. Line profile Index: 1002 (the default profile) 21-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 21-4 Data plan for configuring the ADSL2+ PPPoA service Item Traffic profile Data Index: 7 Rate: 3072 kbit/s Priority: 6 Remarks Configure the access rate. priority. SCU Upstream port: 0/7/0 Gateway IP address: 10. ADGE ADSL2+ port: 0/2/0 VLAN ID: 10 Upstream/Downstream bandwidth: 3 Mbit/s Keep it consistent with the upper layer device.1. Configuration Flowchart Figure 21-6 shows the flowchart for configuring the ADSL2+ PPPoA service. Configure the upstream/ downstream bandwidth in the traffic profile according to the user demands.1/24 It is the IP address of the upper layer router.1. all the alarm thresholds are set as 0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Item Alarm profile Data Index: 1 (the default profile) Remarks Configure the alarm threshold of the line parameter in the alarm profile. you can monitor the conditions of the lines connecting to the port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-15 . Therefore. increase the rate to meet the user demands. In the default alarm profile. By binding the threshold to a port. The actual qualified rate of the port may be lower than 96%. configure the rate of the traffic profile as 3072 kbit/s. which indicates that line monitoring is disabled. In an ideal case. 21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 21-6 Flowchart for configuring the ADSL2+ PPPoA service Start Is there an appropriate traffic profile? Yes Create a VLAN and add port(s) to it No Add a traffic profile Bind the line profile Bind the alarm profile Is the port activated? No Bind the extended line profile Yes Deactivate the ADSL2+ port Activate the ADSL2+ port Configure a MAC address pool Is there an appropriate line profile? Yes Do you need to add an extended line profile? No Is there an appropriate alarm profile? Yes No Enable protocol conversion Add a line profile Yes Set the encapsulation mode Save the data Add an extended line profile End No Add an alarm profile 21-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Create a VLAN and add a service port and an upstream port to the VLAN. configure the corresponding IP address pool on the BRAS. In this example. the extended line profile is not configured.12 Adding Service Ports in Batches" to add service ports in batches. refer to "9. refer to "21." l Procedure Step 1 Query and configure the traffic profile. To assign IP addresses to users through the BRAS. Step 3 Configure the ADSL2+ line profile. If required.6 Adding an Extended ADSL2+ Line Profile. configure the name and password of the access user on the BRAS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide NOTE 21 Configuring the ADSL2+ Service l To authenticate users on the BRAS. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 NOTE If you need to enable services in bathes in actual configuration. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-17 . huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy -------------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri 7 3072 6 pvc-pri -------------------------------------------------------------------------Traffic parameters for ATM service: -------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/--------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------------- The query result shows that traffic profile 7 is available. 21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide If there is no appropriate line profile. The default line profile 1002 is adopted in this example.4). Step 4 Bind the line profile and activate ADSL2+ port 0/2/0. pay attention to the following points: l Up to 1002 line profiles can be configured for the MA5600. huawei(config)#save ----End Result After the configuration. Context When configuring an ADSL2+ line profile. huawei(config-if-adsl-0/2)#alarm-config 0 1 Step 6 Configure the PPPoA service. the user can access the Internet in the PPPoA mode. you can select only "interleaved" as the channel mode. huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type pppoa llc Step 7 Save the data. 1. ADSL2+ line profile contains a series of parameters. l When the transmission mode is G. 3. so as to determine whether the connection can be set up to between them under the existing conditions. it can be directly used to activate the ports. which can be modified.2/G992. which begins with 0000-0000-0001. Huawei Technologies Proprietary Issue 04 (2007-11-30) l 21-18 . 21. 1000. add one. the ATU-R negotiates with the ATU-C based on the parameters in the line profile. huawei(config)#pppoa enable Set the PPPoA service encapsulation mode of ADSL2+ port 0/2/0 as LLC-PPPoA. After the line profile is configured successfully. the downstream rate must be equal to the minimum rate.5 Adding an ADSL2+ Line Profile This operation enables you to add an ADSL2+ line profile. Enable the PPPoA protocol conversion. 1. When the downstream channel mode is fixed. huawei(config-if-adsl-0/2)#quit huawei(config)#mac-pool 0 0000-0000-0001 2. huawei(config)#interface adsl 0/2 huawei(config-if-adsl-0/2)#deactivate 0 huawei(config-if-adsl-0/2)#activate 0 profile-index 1002 Step 5 Bind the default alarm profile 1. 1001 and 1002 are default ones. This helps to include the parameters needed by all the ADSL2+ ports in a line profile. such as: – – – l Upstream/downstream rate Upstream/downstream interleaved depth Signal to Noise Ratio (SNR) margin When a port is being activated. Configure MAC address pool 0.lite (G992. SNR margin ≤ target SNR margin ≤ max. SNR margin. Similarly. and 32–512 kbit/s in upstream.lite Standards.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 21 Configuring the ADSL2+ Service When setting the upstream/downstream SNR margin. When setting the downstream SNR margin for rate downshift. make sure that it is larger than or equal to the downstream mini. the supported rate ranges 64–1536 kbit/s in downstream. SNR margin.lite (G992. l l Configuration Flowchart Figure 21-7 and Figure 21-8 show the flowchart for configuring an ADSL2+ line profile. make sure that the settings comply with mini. SNR margin. According to G.2/G992. when the transmission mode is G. the upstream SNR margin for rate downshift shall be equal to or larger than the upstream mini.4). Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-19 . downstream interleaved delay Set max.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 21-7 Flowchart for configuring an ADSL2+ line profile-1 Start Name the profile? Yes Set profile name No Select profile type: ADSL2+ Configure the Modem? Yes Select ADSL2+ working mode No Set trellis coding Set downstream channel bit swap Set upstream channel bit swap Interleaved mode No Fast channel mode Select downstream adapt mode Set channel mode Set interleaved delay? Yes Set max. SNR margin in downstream Set max. upstream interleaved delay Set SNR margin for Modem? Yes Set target SNR margin in downstream Set min. SNR margin in downstream A No B 21-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . downshift time in upstream B Set bit rate? Yes Set min. transmit rate in downstream Set min. transmit rate in downstream Set max. SNR margin in upstream Set min. downshift time in upstream Set min. SNR margin in upstream Set downstream SNR margin for rate downshift Set downstream SNR margin for rate upshift Set upstream SNR margin for rate downshift Set upstream SNR margin for rate upshift Set adjustment time? Yes Set min. upshift time in upstream End Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-21 . downshift time in downstream No B Set min.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Figure 21-8 Flowchart for configuring an ADSL2+ line profile-2 A Set target SNR margin in upstream Set max. transmit rate in upstream Set max. transmit rate in upstream No Set min. 1~5.1~5.lite mode) > 3: T1.1/3/5) > 5: g.413 mode) > 4: g.1~2. ----End Example Assume that: l l l l l l l ADSL2+ work mode: G.3 > 9: G992.hs (G992.4 > 10:G992.5 is prior) > 6: G992.413(ADSL over ISDN board doesn't support T1.1/3/5 or T1.dmt Maximum downstream delay: 8 ms Maximum upstream delay: 2 ms Minimum downstream rate: 1024 Kbit/s Maximum downstream rate: 32000 Kbit/s Minimum upstream rate: 32 Kbit/s Maximum upstream rate: 512 Kbit/s To add an ADSL2+ line profile.5 > 11: ADSL all (G992.2/4) (ADSL over ISDN board doesn't support g.2 > 8: G992.T1.lite(G992.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Run the adsl line-profile add command to add an ADSL2+ line profile.3~5 will lead that the adsl ports that are not support adsl2+ not be activated ADSL transmission mode: > 0: All (G992.dmt (G992. do as follows: huawei(config)#adsl line-profile add { <cr>|profile-index<L><2.413) > 12: ADSL&ADSL2(G992.413) > 2: g. G992.413) Please select (0~12) [0]: 4 > > > > > > > > > > > > > Trellis mode 0-disable 1-enable (0~1) [1]: Downstream channel bit swap 0-disable 1-enable (0~1) [1]: Upstream channel bit swap 0-disable 1-enable (0~1) [1]: Please select channel mode 0-interleaved 1-fast (0~1) [0]: Will you set interleaved delay? (y/n)[n]:y Maximum downstream interleaved delay(0~255 ms) [16]:8 Maximum upstream interleaved delay(0~255 ms) [6]:2 Please select form of transmit rate adaptation in downstream: 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: Will you set SNR margin for modem? (y/n)[n]: Will you set parameters for rate? (y/n)[n]:y Minimum transmit rate in downstream (32~32000 Kbps) [32]: 1024 Maximum transmit rate in downstream (32~32000 Kbps) [24544]: 32000 21-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .T1.1/3 or T1.413) > 1: Full rate(G992.1 > 7: G992.999> }: Command: adsl line-profile add Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:y Note: Setting to these mode of G992. there are six ADSL/ADSL2+ working modes: G992. fast mode is recommended.1 or T1.413. When the conditions of an ADSL2+ channel get worse. but the longer the transmission delay.413. With the bit swap function.413 adopt similar rates: up to 8160 kbit/s in downstream.2 adopts rather narrow frequency spectrum and low upstream/downstream rate.3. l ADSL2+ transmission mode G992. Its frequency spectrum is only half of that of G992. Compared with fast mode. It is usually enabled.1 and the T1. G992. the higher the ADSL2+ connection stability.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service > Minimum transmit rate in upstream (32~6000 Kbps) [32]: > Maximum transmit rate in upstream (32~6000 Kbps) [1024]: 512 Add profile 3 successfully Table 21-5 lists parameters of an ADSL2+ line profile. G992. the SNR of a sub-carrier may deteriorate. l channel mode For common Internet access services. l  Maximum downstream/ upstream interleaved depth The larger the interleave delay. G992. the interleave mode is recommended.5 and T1. G992.4. and up to 896 kbit/s in upstream.1. Currently. For services that are delay sensitive. the interleave mode is characterized by stable line connection. such as Video On Demand (VOD). There are two channel modes: interleave mode and fast mode. G992. resulting in failure in bearing the bits allocated to the sub-carrier.2. the system can swap the allocated bits from one sub-carrier to another to avoid possible disconnection due to the variation in characteristics. its maximum upstream and downstream rates are 512 kbit/s and 1536 kbit/s respectively. Table 21-5 Parameters of an ADSL2+ line profile Parameter Profile Index Description You can input the line profile index or press Enter to enable the system to allocate a profile index. l  Trellis mode Upstream/Downstream channel bit swap The Trellis coding algorithm is used to boost SNR and enhance line stability. The profile index is unique. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-23 . and longer transmission delay. the system starts to adjust the rate downwards. When the SNR margin reaches this value. the lower the chance of occurrence of the line error. if the calculated target SNR margin of an ADSL2+ line is higher than the preset max. When the SNR margin reaches "SNR margin for rate downshift". In the process of ADSL2+ connection setup. if the calculated upward/downward rate is lower than this value. the port activation will fail. In the process of ADSL2+ connection setup. Minimum SNR margin in downstream/upstream Maximal SNR margin in downstream/upstream Target SNR margin in downstream/upstream Downstream/Upstream SNR margin for rate downshift Downstream/Upstream SNR margin for rate upshift Minimum upshift time in downstream/upstream Minimum downshift time in downstream/upstream Minimum bit rate in downstream/upstream 21-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the safer the system may be. the higher the connection stability. the port activation will fail. but the lower of the activated physical connection rate. but the lower the data transmission rate. When the SNR margin reaches this value. if the calculated SNR margin is lower than the preset one.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameter Adapt mode in downstream/ upstream Description There are three adapt modes: l l l 1-fixed 2-adaptAtStartup 3-adaptAtRuntime SNR margin for modem The SNR margin refers to the additional tolerable SNR that does not lead to the deterioration of the current line rate. the system will limit the downstream max. the target SNR margin shall be adjusted based on the actual line conditions. When the SNR margin reaches "SNR margin for rate upshift". In the process of ADSL2+ connection setup. The target SNR margin is the preserved SNR margin to ensure normal communication in the case of line SNR deterioration. SNR margin to the preset max. The larger the modem SNR margin. the system will keep the current rate for a certain period before adjusting the rate upwards. SNR margin. the system starts to adjust the rate upwards. the system will keep the current rate for a certain period before adjusting the rate downwards. value. Therefore. The larger the target SNR margin. The extended ADSL2+ line profile is used to configure the extended parameters for an ADSL2+ port when the port is activated. rate. while maintaining the target SNR margin. value. Quickly add an ADSL2+ line profile Run the Command.. If the line is in poor condition. The command serves as a complement to the command adsl line profile add.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Parameter Maximum bit rate in downstream/upstream Description In setting up the ADSL2+ connection. adsl line-profile quickadd Remarks The system adopts non-interactive mode for inputting parameters of the command. and the calculated downstream/upstream rate is lower than the set max. if the line is in good condition and the calculated downstream/upstream rate of an ADSL2+ line is higher than the preset max. - Delete an ADSL2+ line profile Modify an ADSL2+ line profile Quickly modify an ADSL2+ line profile adsl line-profile delete adsl line-profile modify adsl line-profile quickmodify Display an ADSL2+ line profile display adsl line-profile 21. This helps to filter the sub-carrier that are unsuitable for carrying data.. the system prompts that the profile takes effect immediately The system adopts non-interactive mode for inputting parameters of the command. The command serves as a complement to the command adsl line profile modify.. the system will limit the rate to the preset value while increasing the SNR margin. Table 21-6 Related operations for adding an ADSL2+ line profile To. Related Operation Table 21-6 lists the related operations for adding an ADSL2+ line profile..6 Adding an Extended ADSL2+ Line Profile This operation enables you to add an extended ADSL2+ line profile. You cannot delete the default line profiles or a referenced line profile. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-25 . the system will set up the ADSL2+ connection at the calculated rate. After the line profile is modified. By default. Some bands have special purposes in some regions. To set the minimum pulse noise protection parameter for the downstream line as noProtection.1. l Impulse Noise Protection (INP) INP defines the capacity of resisting the impulse interference of the ADSL channel. you can set the parameter to forbid these bands. and Annex type as Annex. NOTE l The H561ADBF board supports Annex.B and the incorrect extended line profile is used to activate the port. Its unit is DMT SYMBOL. If the entered Annex type is Annex.A. ----End Example Add an extended ADSL2+ line profile and disable the tones 40-50. allowing or prohibiting the board automatically to enter or exit L2 low power mode according to the data traffic. l L2 low power management mode configuration The system allows you to set the switch for automatic entering or exiting L2 low power mode. these sub-carriers has no power output. If the Annex type is incorrect and the incorrect extended line profile is used to activate the port. transmission mode as G992. it means that the current ADSL channel can resist the impulse noise of one DMT SYMBOL. and no bit is allocated to them. Step 2 Run the display adsl extline-profile command to query a configured extended ADSL2+ line profile. bind it with the ports and then directly reference it for activating the ADSL2+ ports.B working mode. do as follows: 21-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . If INP is 1. To prevent interference to these bands. the system automatically selects a suitable parameter to ensure that the port can be activated normally. l Procedure Step 1 Run the adsl extline-profile add command to add an extended ADSL2+ line profile. After an extended ADSL2+ line profile is configured. The MA5600 supports up to 32 extended ADSL2+ line profiles. l Maximum downstream power spectral density (PSD) margin The maximum downstream PSD margin ranges from –40 dBm/Hz to –52 dBm/Hz. In this way. and then validate the configuration. the line will not be affected by the band. The H569ADEE board does not support Annex.B working mode only.the system automatically selects a suitable parameter to ensure that the port can be activated normally. The following are three major parameters: l missingtone When you set this parameter to the specified sub-carrier of the line. it is –40 dBm/Hz.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context An extended ADSL2+ line profile is used to configure the extended parameters for an ADSL2 + port when the port is activated. you can set this parameter to forbid this band. If the noise of some bands is very unstable. 2 3: G992.3-4]: ADSL annex type : > 1: Annex.B 3: Annex.1-enable.3 4: G992.M > Please input the Annex possible in use(1-4)[1-4]: > Will you configure the L2 parameter?(y/n)[n]:y > L2 mode state: 0-disable.1-enable.2-force(0~2)[0]:1 > Minimum L0 time interval between L2 exit and next L2 entry(0~255s)[255]: > Minimum L2 time interval between L2 entry and first L2 trim(0~255s)[30]: > Maximum aggregate transmit power reduction per L2 request or L2 power trim(0~ 31db)[3]: > Total maximum aggregate transmit power reduction in L2(0~31db)[9]: Add profile 1 successfully huawei(config)#display adsl extline-profile 1 ------------------------------------------------------------------ Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-27 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#adsl extline-profile add { <cr>|profile-index<L><1.2 Please input the start index of the disabled tone(32-511)[32]: > Please input the end index of the disabled tone(32-511)[32]: > Do you want to validate the settings of this section? (y/n)[n]:y > No.32> }: Command: 21 Configuring the ADSL2+ Service adsl extline-profile add Start adding profile Notes: If pilot tone is included in the forbidden tones .5 5: T1.1 Please input the start index of the disabled tone(32-511)[32]:40 > Please input the end index of the disabled tone(32-511)[32]:50 > Do you want to validate the settings of this section? (y/n)[n]:y > No.413 > Please input the standard possible in use(1-5)[1.the link may not be activated When port activated with annexA in mode G992.3 Please input the start index of the disabled tone(32-511)[32]: > Please input the end index of the disabled tone(32-511)[32]: > Do you want to validate the settings of this section? (y/n)[n]:y > No.1.1.1 2: G992. 96tone is pilot Press 'Q' to quit the current configuration and new configuration will be neglected >　 Do you want to name the profile (y/n) [n]: > Will you configure the disabled tone? (y/n)[n]:y > How many sections do you want to configure?(1-4)[4]: > No.5) > 3--singleSymbol(1) > 4--twoSymbols(2) > 5--fourSymbols(4) Please select (0~5) [0]: > Will you configure the maximum PSD mask in downstream? (y/n)[n]:y > Maximum PSD mask in downstream(40~52 -dBm/Hz) [40]: > Warning: The configuration of transmission mode in extline-profle will replace the one configured in line-profile when the transmission mode is enabled! > Will you enable the transmission mode?(y/n)[n]:y ADSL transmission mode in standard : > 1: G992.L 4: Annex. 64tone is pilot When port activated with annexB in mode G992.2-force(0~2)[0]:2 > Warning: System can not support to force into or out of L2 power mode by manually now! > L2 mode state: 0-disable.A 2: Annex.5) > 3--singleSymbol(1) > 4--twoSymbols(2) > 5--fourSymbols(4) Please select (0~5) [0]: > Will you configure the minimum INP in upstream? (y/n)[n]:y > Minimum INP on uptream direction: > 0--auto > 1--noProtection(0) > 2--halfSymbol(0.4 Please input the start index of the disabled tone(32-511)[32]: > Please input the end index of the disabled tone(32-511)[32]: > Do you want to validate the settings of this section? (y/n)[n]:y > Will you configure the minimum INP in downstream? (y/n)[n]:y > Minimum INP on downstream direction: > 0--auto > 1--noProtection(0) > 2--halfSymbol(0. . the system prompts the profile takes effect immediately.3.Annex. run the extline-config all command. After the alarm profile is configured and bound successfully.32 y Section 3 32 .1.G992. it can be directly used to activate the ports.Annex. You cannot delete a referenced extended line profile. adsl extline-profile quickadd Remarks The system adopts non-interactive mode for inputting parameters of the command.32 y Section 4 32 .Annex.32 y ------------------------------------------------------------------ Related Operation Table 21-7 lists the related operations for adding an extended ADSL2+ line profile. Prerequisite The ADSL2+ line meets the requirements of service provisioning.50 y Section 2 32 . It is a complement to the adsl extline-profile add command. To bind an extended ADSL2+ line profile with all ports on a board at a time.21 Configuring the ADSL2+ Service Profile Index : 1 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Name: ADSL EXTLINEPROFILE 1 :auto :auto :40 :G992.B. After the profile is modified. Quickly add an extended ADSL2+ line profile Delete an extended ADSL2+ line profile Modify an extended ADSL2+ line profile Quickly modify an extended ADSL2+ line profile Bind/unbind an extended ADSL2+ line profile Run the Command.5 :Annex.M :enable :255 :30 :3 :9 Minimum INP in downstream(DMT Symbol) Minimum INP in upstream(DMT Symbol) Maximum PSD mask in downstream(-dBm/Hz) ADSL transmission mode in standard ADSL annex type L2 mode state Minimum L0 time(s) Minimum L2 time(s) L2 interval power(db) L2 total power(db) Current configuration of each section: Sections Value Effective Section 1 40 . The system adopts non-interactive mode for inputting parameters of the command. Table 21-7 Related operations for adding an extended ADSL2+ line profile To.. adsl extline-profile delete adsl extline-profile modify adsl extline-profile quickmodify (undo)extline-config 21.G992.7 Adding an ADSL2+ Alarm Profile This operation enables you to add an ADSL2+ alarm profile.A...L. 21-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The ADSL2+ alarm profile contains a series of alarm thresholds to measure and monitor an activated ADSL2+ line. When a statistic reaches the threshold.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Context When adding an ADSL2+ alarm profile. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-29 . You can modify the profile but cannot delete it. you should pay attention to the following points: l The MA5600 has a default ADSL2+ alarm profile named DEFVAL and numbered 1. the MA5600 sends the alarm to the loghost and NMS. l Configuration Flowchart Figure 21-9 shows the flowchart for adding an ADSL2+ alarm profile. 21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 21-9 Flowchart for adding an ADSL2+ alarm profile Configure ADSL2+ alarm profile Set threshold of negative difference between current and past transmit rate in interleaved mode Set alarm profile index Set LOF seconds in ATU-R Set LOF seconds in ATU-C Set LOS seconds in ATU-R Set LOS seconds in ATU-C Set LOP seconds in ATU-R Set LOL seconds in ATU-C Set errored seconds in ATU-R Set LOP seconds in ATU-C Set severely errored seconds in ATU-R Set errored seconds in ATU-C Set unavailable seconds in ATU-R No Report initialization failure? Set threshold of positive difference between current and past transmit rate in fast mode Set threshold of positive difference between current and past transmit rate in interleaved mode Set threshold of negative difference between current and past transmit rate in fast mode Set threshold of negative difference between current and past transmit rate in interleaved mode Yes Set failed fast retrain seconds in ATU-C Set severely errored seconds in ATU-C Set unavailable seconds in ATU-C Set threshold fo positive difference between current and past transmit rate in fast mode Set threshold of positive difference between current and past transmit rate in interleaved mode Set threshold of negative difference betwen current and past transmit rate in fast mode End Procedure Run the adsl alarm-profile add command to add an ADSL2+ alarm profile. ----End 21-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Example To add an ADSL2+ alarm profile. Within any given 15-minute period. if the number of lost signal seconds exceeds the preset value. an alarm is generated. do as follows: huawei(config-if-adsl-0/2)#adsl alarm-profile add 2 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: <ATU-C> > The number of Loss of Frame Seconds (0~900) [0]:50 > The number of Loss of Signal Seconds (0~900) [0]:10 > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > Enable or disable the Initial failure trap 0-disable 1-enable (0~1) [0]: > The number of failed fast retrain seconds (0~900) [0]:10 > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968Kbps) [0]:100 > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~31968Kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968Kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968Kbps) [0]: <ATU-R> > The number of Loss of Frame Seconds (0~900) [0]:10 > The number of Loss of Signal Seconds (0~900) [0]:10 > The number of Loss of Power Seconds (0~900) [0]:10 > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~5968Kbps) [0]: > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~5968Kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~5968Kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~5968Kbps) [0]: Add profile 2 successfully Table 21-8 lists the parameters of an ADSL2+ alarm profile. The number of loss of frame Seconds The number of loss of signal Seconds Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-31 . Table 21-8 Parameters of an ADSL2+ alarm profile Parameters Index Description You can enter a profile index or press Enter to enable the system to designate an index for it. Within any given 15-minute period. if the number of downstream frame second loss exceeds the preset value. The profile index is unique. an alarm is generated. with the index of 2. if the negative difference between the current and the past transmit rates in interleaved mode exceeds the preset value. if the positive difference between the current and the past transmit rates in fast mode exceeds the preset value. an alarm is generated. an alarm is generated. Within any given 15-minute period. if the number of unavailable seconds exceeds the preset value. Within any given 15-minute period. an alarm is generated. an alarm is generated.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameters The number of loss of link seconds Description Within any given 15-minute period. Within any given 15-minute period. Within any given 15-minute period. Within any given 15-minute period. an alarm is generated. if the negative difference between the current and the past transmit rates in fast mode exceeds the preset value. Within any given 15-minute period. if the number of lost link seconds exceeds the preset value. if the number of errored seconds exceeds the preset value. Within any given 15-minute period. Within any given 15-minute period. an alarm is generated. an alarm is generated. 21-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Within any given 15-minute period. if the positive difference between the current and the past transmit rates in interleaved mode exceeds the preset value. an alarm is generated. if the number of severely errored seconds exceeds the preset value. an alarm is generated. if the number of lost power seconds exceeds the preset value. an alarm is generated. The number of loss of power seconds The number of errored seconds The number of failed fast retrain seconds The number of severely errored seconds The number of unavailable seconds Threshold of positive difference between the current and the past transmit rate in fast mode Threshold of negative difference between the current and the past transmit rate in fast mode Threshold of positive difference between the current and the past transmit rate in interleaved mode Threshold of negative difference between the current and the past transmit rate in interleaved mode Related Operation Table 21-9 lists the related operations for adding an ADSL2+ alarm profile. if the number of failed retrain events exceeds the preset value. . the system checks the line distance and line state based on settings included in the line profile.. A configured alarm profile can take effect only after it is bound with an ADSL2+ port. the port is activated. You cannot delete the default alarm profiles or a referenced alarm profile. the activation process ends upon the completion of the training. The command serves as a complement to the adsl alarm profile add command. Once the ATU-R gets online.. the system prompts that the profile takes effect immediately. Quickly add an ADSL2+ alarm profile Run the Command. Huawei Technologies Proprietary 21-33 l l Issue 04 (2007-11-30) . The system adopts the non-interactive mode for inputting parameters of the command. At the moment. the communication is terminated. When the ATU-R gets offline. Prerequisite The ADSL2+ line profile has been configured. The command serves as a complement to the adsl alarm profile modify command..8 Activating an ADSL2+ Port This operation enables you to activate an ADSL2+ port for transmitting service data. and the ATU-C is in listening state. During the training process. and is ready for service data transmission. the training process begins automatically. The ATU-C negotiates with the ATU-R to check whether the MA5600 can work well under the existing conditions. such as upstream/downstream line rate and SNR margin. When the ATU-R is online. When the training succeeds. adsl alarm-profile quickadd Remarks The system adopts non-interactive mode for inputting the parameters of the command. the ATU-C can communicate with the ATU-R.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Table 21-9 Related operations for adding an ADSL2+ alarm profile To. the port works in activated state. Delete an ADSL2+ alarm profile Modify an ADSL2+ alarm profile Quickly modify an ADSL2+ alarm profile adsl alarm-profile delete adsl alarm-profile modify adsl alarm-profile quickmodify Display an ADSL2+ alarm profile Bind an ADSL2+ alarm profile display adsl alarmprofile alarm-config 21. If the training succeeds. Context l Activating (or activation) refers to the training between the ATU-C and the ATU-R. After the profile is modified. Step 2 Run the display port state command to query the activated port. do as follows: huawei(config-if-adsl-0/2)#activate all profile-index 1 huawei(config-if-adsl-0/2)#display port state all 32 Activated 1 1 -33 Activated 1 1 -34 Activated 1 1 -35 Activated 1 1 -36 Activated 1 1 -37 Activated 1 1 -38 Activated 1 1 -39 Activated 1 1 -40 Activated 1 1 -41 Activated 1 1 -42 Activated 1 1 -43 Activated 1 1 -44 Activated 1 1 -45 Activated 1 1 -46 Activated 1 1 -47 Activated 1 1 -48 Activated 1 1 -49 Activated 1 1 -50 Activated 1 1 -51 Activated 1 1 -52 Activated 1 1 -53 Activated 1 1 -54 Activated 1 1 -55 Activated 1 1 -56 Activated 1 1 -57 Activated 1 1 -58 Activated 1 1 -59 Activated 1 1 -60 Activated 1 1 -61 Activated 1 1 -62 Activated 1 1 -63 Activated 1 1 ----------------------------------------------------------------------Total number of activated port : 64 Total number of unactivated port: 0 To activate port 0 on the ADSL2+ board in slot 0/2 using line profile huawei. do as follows: huawei(config-if-adsl-0/2)#activate 0 profile-name huawei huawei(config-if-adsl-0/2)#display port state 0 ---------------------------------------------------------------------Port Status Line_Profile Alm_Profile Ext_Profile ---------------------------------------------------------------------0 Activated 3 1 ----------------------------------------------------------------------- Related Operation Table 21-10 lists the related operations for activating an ADSL2+ port. ----End To activate all ports on ADSL2+ board in slot0/2 using line profile 1. you need to bind it with an ADSL2+ line profile.21 Configuring the ADSL2+ Service l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To activate an ADSL2+ port. Procedure Step 1 Run the activate command to activate an ADSL2+ port. the system will use the profile bound with the port last time to activate ADSL2 + port. 21-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) . If no profile is specified. Deactivate an ADSL2+ port Run the Command. For service transmission. If the host detects both the upstream and downstream rate measurements meet the system requirement. If the host detects one rate measurement does not meet the system requirement. the upstream and downstream rate measurements states change. If you need to monitor both the upstream rate and downstream rate. The system generates alarms irrespective of whether the upstream and downstream rate measurement thresholds meet the requirement. - Loop back ADSL port loopback 21.. deactivate Remarks After an ADSL port is deactivated. the communication link established during activation between the ATU-C and the ATUR will be disconnected. The upstream and downstream rate measurement thresholds can be set to rates or percents. Context l When an ADSL2+ port is activated.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Table 21-10 Related operations for activating an ADSL2+ port To. Step 2 Run the display adsl line-monitoring command to query the rate measurement thresholds information of an ADSL2+ port. activate the port again.. l l l l l l Procedure Step 1 Run the adsl line-monitoring command to set the rate measurement thresholds for an ADSL2 + port.9 Configuring the Port Rate Measurement Thresholds for an ADSL2+ Port This operation enables you to configure the upstream and downstream rate measurement thresholds for an ADSL2+ port. They can also be configured for a specified ADSL port. an alarm will be reported to the NMS. set the upstream and downstream rate measurement thresholds respectively. a recovery alarm will be reported. The upstream and downstream rate measurement thresholds are set separately. This does not affect other processing of a port... The upstream and downstream rate measurement thresholds can be configured for all ADSL boards for one time. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-35 . 1 Enabling IPoA Protocol Conversion This operation enables IPoA/IPoE protocol conversion.10.10. 21. 1.3 Setting the Default Gateway of the IPoA User This operation enables you to configure the default gateway of the IPoA user. 21. do as follows: huawei(config)#adsl line-monitoring port 0/2/0 rate-threshold downstream downstream-rate-percent 90 huawei(config)#display adsl line-monitoring 0/2/0 Port ID : 0/2/0 Port Type : ADSL Line Monitoring Upstream Rate-percent : 80 percent Line Monitoring Downstream Rate-percent : 90 percent 21. Step 2 Run the display ipoa config command to query IPoA protocol conversion state.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the upstream rate measurement threshold of all ADSL boards as 80%. 21-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Procedure Step 1 Run the ipoa enable command to enable IPoA protocol conversion. the IPoA users can access the upper layer IP network to enhance the access ability and network capability of the MA5600. 2 huawei(config)#display adsl line-monitoring 0/2/0 Port ID : 0/2/0 Port Type : ADSL Line Monitoring Upstream Rate-percent : 80 percent Line Monitoring Downstream Rate-percent : 80 percent To set the downstream rate measurement threshold of port 0/2/0 as 90%. 21. do as follows: huawei(config)#ipoa enable Run the display ipoa config command and you can find the IPoA protocol conversion is enabled. 21.4 Configuring the Encapsulation Type of the IPoA User This operation enable you to configure the encapsulation type of the IPoA user.10 Configuring IPoA/IPoE Protocol Conversion The MA5600 supports the conversion between the IPoA and IPoE protocols. ----End Example To enable IPoA protocol conversion. 21. In this way.10.1 Enabling IPoA Protocol Conversion This operation enables IPoA/IPoE protocol conversion.2 Setting the Aging time of IPoA Forwarding Entry This operation enables you to set the aging time of IPoA forwarding entry.10. do as follows: huawei(config)#adsl line-monitoring all rate-threshold upstream upstream-rate-pe rcent 80 Command was executed successfully for slot : 0.10. Disable IPoA protocol conversion Run the Command. ----End Example To configure the aging time of IPoA forwarding entry as 300s. Table 21-11 Related operations for enabling IPoA protocol conversion To. and the system regards users offline.10.0.0. Procedure Step 1 Run the ipoa expire-time command to set the aging time of IPoA forwarding entry. Context l l By default..0 : 300 s Related Operation Table 21-12 lists the related operation for setting the aging time of IPoA forwarding entry. When the aging time times out..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display ipoa IPoA status IPoA user default gateway IPoA expire-time config : enable : 0. Step 2 Run the display ipoa config command to query the correctly configured aging time of IPoA forwarding entry.0.. the IPoA forwarding entry cannot be updated.0 : 1200 s 21 Configuring the ADSL2+ Service Related Operation Table 21-11 lists the related operations for enabling IPoA protocol conversion.0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-37 . ipoa disable 21.. the aging time of IPoA forwarding entry is 1200s. huawei(config)#display ipoa IPoA status IPoA user default gateway IPoA expire-time config : enable : 0.2 Setting the Aging time of IPoA Forwarding Entry This operation enables you to set the aging time of IPoA forwarding entry. do as follows: huawei(config)#ipoa expire-time 300 Run the display ipoa config command and you can find the aging time of IPoA forwarding entry is set correctly. 1.. 21-38 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Restore the default gateway of the IPoA user Run the Command.0.4 Configuring the Encapsulation Type of the IPoA User This operation enable you to configure the encapsulation type of the IPoA user. the gateway of the IPoA user is 0.1.1.1. But not that of the MA5600 its own.10. Step 2 Run the display ipoa config command to query the default gateway of the IPoA user is set correctly. ----End Example To set the default gateway of the IPoA user as 10. do as follows: huawei(config)#ipoa default gateway 10.1 : 300 s Related Operation Table 21-13 lists the related operations for setting the default gateway of the IPoA user..3 Setting the Default Gateway of the IPoA User This operation enables you to configure the default gateway of the IPoA user. display ipoa config 21.1. huawei(config)#display ipoa IPoA status IPoA user default gateway IPoA expire-time config : enable : 10. Table 21-13 Related operations for setting the default gateway of the IPoA user To.1. Query the IPoA configuration Run the Command. undo ipoa default gateway 21.10.. Context l l By default.1.0. Procedure Step 1 Run the ipoa deault gateway command to set the default gateway of the IPoA user....21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 21-12 Related operation for setting the aging time of IPoA forwarding entry To.1 Run the display ipoa config command and you can find that the default gateway of the IPoA user is set correctly.0.. The default gateway of the IPoA user is the interface IP address of upper device that connects to the MA5600.. After you have configured IPoA encapsulation for an xDSL port. In this case. In this case.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Context l By default. When a default gateway has been configured for the IPoA service. huawei(config)#display encapsulation type ipoa llc { <cr>|number<K> }: Command: display encapsulation type ipoa llc -------------------------------------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-39 . are you sure to make the operation? (y/n)[n]y Set encapsulation type successfully Run the display encapsulation type command to query the LLC-IPoA user. When configuring LLC for the IPoA service. pay attention to the following points: – l LLC encapsulation supports both dynamic and static source IP address learning. – – – l When configuring VC-MUX for the IPoA service. ----End Example To configure the encapsulation type of the IPoA user as LLC. you need not configure the destination IP address for the IPoA user. Step 2 Run the display encapsulation type command to query the configuration. LLC and VC-MUX are used for the IPoA encapsulation. Otherwise. You can set the encapsulation type as needed. you can delete a virtual port only after you have changed the encapsulation type to LLC bridge. the user’s destination IP address is that of the default gateway. When a default gateway has been configured for the IPoA service. the user’s destination IP address is that of the default gateway. Make sure the MAC address pool is configured before the encapsulation configuration. Otherwise. pan attention to the following points: – – – – Procedure Step 1 Run the encapsulation command to configure the encapsulation type of the IPoA user. the encapsulation configuration fails. you need not configure the destination IP address for the IPoA user. you can delete a virtual port only after you have changed the encapsulation type to LLC bridge. So you do not need to specify the source IP address if the modem automatically reports the IP address. Make sure the MAC address pool is configured before the encapsulation configuration. do as follows: huawei(config)#encapsulation 0/2/0 vpi 0 vci 34 { type<K> }:type { bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:ipoa { llc<K>|vc-mux<K> }:llc { <cr>|srcIP<K>|dstIP<K> }: Command: encapsulation 0/2/0 vpi 0 vci 34 type ipoa llc Changing encapsulation type may cause service interruption. you must specify the source IP address. After you have configured IPoA encapsulation for an xDSL port. the encapsulation configuration fails. Since VC-MUX encapsulation supports only static source IP address learning. VLAN ID etc. The vpi is access-end VLAN ID in vdsl port To configure the encapsulation type of the IPoA user as VC-MUX.3 Enabling PPPoA/PPPoE MRU Negotiation This operation enables you to enable PPPoA/PPPoE maximum receive unit (MRU) negotiation.1 Enabling PPPoA Protocol Conversion This operation enables you to convert the PPPoA protocol to PPPoE protocol.1. such as IMA GROUP.1. S--Slot. S--Slot.).11 Configuring PPPoA/PPPoE Protocol Conversion The MA5600 supports the conversion between the PPPoA and PPPoE protocols. huawei(config)#display encapsulation type ipoa vc-mux { <cr>|number<K> }: Command: display encapsulation type ipoa vc-mux ---------------------------------------------------------------------------F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE ---------------------------------------------------------------------------0/2 /0 0 34 vc_ip 10.2 { <cr>|dstIP<K> }: Command: encapsulation 0/2/0 vpi 0 vci 34 type ipoa vc-mux srcIP 10. The VPI is access-end VLAN ID in VDSL port 21.2 Changing encapsulation type may cause service interruption.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE -------------------------------------------------------------------------0/2 /0 0 34 llc_ip 0.1 dynamic -------------------------------------------------------------------------Total: 1 Note : F--Frame.2 Configuring the Encapsulation Type of the PPPoA User This operation enables you to configure the encapsulation type of the PPPoA user. 21.11.1 Enabling PPPoA Protocol Conversion This operation enables you to convert the PPPoA protocol to PPPoE protocol. do as follows: huawei(config)#encapsulation { frame/slot/port<S><1. In this way.1. P--Port(or Virtual Port. so that the PPPoA user can access the upper layer IP network. VLAN ID etc.0. P--Port(or Virtual Port. 21.1.1 static ---------------------------------------------------------------------------Total: 1 Note : F--Frame.1.0.11.).11.1.2 10.1.11. 21-40 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1. the PPPoA users can access the upper layer IP network to enhance the access ability and network capability of the MA5600. are you sure to make the operation? (y/n)[n]y Set encapsulation type successfully Run the display encapsulation type command to query the VC-MUX-IPoA user. 21.0 1. so that the PPPoA user can access the upper layer IP network.15>|frame/slot<S><1.1. such as IMA GROUP.15> }:0/2/0 vpi 0 vci 34 { type<K> }:type { bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:ipoa { llc<K>|vc-mux<K> }:vc-mux { srcIP<K> }:srcIP 10.1. 21. . Step 2 Run the display pppoa config command to query the PPPoA/PPPoE protocol conversion state. For PPPoA access.11. ----End Example To enable the PPPoA/PPPoE protocol conversion. LLC and VC-MUX encapsulation are similar. Disable the PPPoA protocol conversion Run the Command. Step 2 Run the display encapsulation type command to query the configuration. huawei(config)#display pppoa config Global PPPoA-to-PPPoE conversion : Enable Max-receive-unit negotiate function: Disable Related Operation Table 21-14 lists the related operations for enabling PPPoA protocol conversion. Be sure to configure the MAC address pool before the encapsulation configuration. Table 21-14 Related operations for enabling PPPoA protocol conversion To. you can delete a virtual service port only when you have changed the encapsulation type to LLC bridge. do as follows: huawei(config)#pppoa enable Run the display pppoa config command and you can query the PPPoA protocol conversion is enabled. LLC and VC-MUX are used for the PPPoA encapsulation..2 Configuring the Encapsulation Type of the PPPoA User This operation enables you to configure the encapsulation type of the PPPoA user.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Procedure Step 1 Run the pppoa enable command to enable PPPoA/PPPoE protocol conversion.. l l l Procedure Step 1 Run the encapsulation command to configure the encapsulation type of the PPPoA user. pppoa disable 21. After you have configured PPPoA encapsulation for an xDSL port. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-41 .. Configure it based on the actual access user type. Otherwise. You can set the encapsulation type as needed. the encapsulation configuration will fail. Context l By default. P--Port(or Virtual Port. The vpi is access-end VLAN ID in vdsl port 21. The MA5600 identifies the PPPoE packets converted from PPPoA packets. do as follows: huawei(config)#encapsulation 0/2/0 vpi 0 vci 34 { type<K> }:type { bridge<K>|pppoa<K>|auto<K>|ipoa<K> }:pppoa { llc<K>|vc-mux<K> }:llc Command: encapsulation 0/2/0 vpi 0 vci 34 type pppoa llc Changing encapsulation type may cause service interruption. the packets will be segmented and resembled. 21-42 Huawei Technologies Proprietary Issue 04 (2007-11-30) . VLAN ID etc. l MRU enabled – The PC initiates the PPPoE connection and negotiates by MRU of 1492 bits. huawei(config)#display encapsulation type pppoa llc -------------------------------------------------------------------------F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE -------------------------------------------------------------------------0/2 /0 0 34 llc_ppp -------------------------------------------------------------------------Total: 1 Note : F--Frame. Context The MA5600 determines whether to segment and resemble packets according to the PPPoA/ PPPoE MRU configuration. Step 2 Run the display pppoa config command to query PPPoA and MRU switch state. S--Slot. It adds a Tag to the packets and then sends them to the upper layer BRAS. do as follows: huawei(config)#pppoa mru enable Run the display pppoa config command to query the PPPoA and MRU configuration. By doing so. such as IMA GROUP.11. ----End Example To enable the MRU negotiation. In this case. l MRU disabled – Procedure Step 1 Run the pppoa mru enable command to enable PPPoA/PPPoE MRU negotiation. In this case.3 Enabling PPPoA/PPPoE MRU Negotiation This operation enables you to enable PPPoA/PPPoE maximum receive unit (MRU) negotiation. the size of the MTU between the CPE and the BRAS is equal to that of the standard MTU of the Ethernet. The BRAS negotiates with the CPE according to the 1500-byte MRU.). are you sure to make the operation? (y/n)[n]y Set encapsulation type successfully Run the display encapsulation type command to query the LLC-PPPoA user.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To configure the encapsulation type of a PPPoA user as LLC. the packet is not segmented and reassembled. . activated. Disable PPPoA/PPPoE MRU negotiation Run the Command. Context An ADSL2+ port may be in activating.. Figure 21-10 shows the status conversion of the ADSL2+ port.. Table 21-15 Related operation for enabling PPPoA/PPPoE MRU negotiation To. pppoa mru disable 21. 1 DEFVAL Bind no ext-profile BTV user bind profile name : -Hardware is ATU-C Last UP time : -Last DOWN time : -- Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-43 .1002 ADSL LINE PROFILE 1002 Bind alarm-profile No.12 Querying an ADSL2+ Port This operation enables you to query the comprehensive information about an ADSL2+ port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display pppoa config Global PPPoA-to-PPPoE conversion : Enable Max-receive-unit negotiate function: Enable 21 Configuring the ADSL2+ Service Related Operation Table 21-15 lists the related operation for enabling PPPoA/PPPoE MRU negotiation.. ----End Example To display the comprehensive information about ADSL2+ port 0/2/0. deactivated or loopback state. do as follows: huawei#display interface adsl 0/2/0 Adsl 0/2/0 is down The ADSL link is activating Description : -Bind line-profile No. Figure 21-10 Status conversion of the ADSL2+ port undo loopback Loopback loopback activate activating deactivated deactivate deactivate Modem is off or powered off activated Modem training succeeds Procedure Run the display interface adsl command to query the comprehensive information about an ADSL2+ port. . 21-44 Huawei Technologies Proprietary Issue 04 (2007-11-30) . display port state display parameter display statistics performance display line bit-allocation display line snr display alarm state display line operation adsl line-operation detail display adsl line-operation detail config 21.21 Configuring the ADSL2+ Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Current operational mode : No protocol selected / Current downstream Rate : 0 Current upstream Rate : 0 Total count of line training : 1 Total Up stream cells num(cell) : 0 Total Up stream packets num(packet) : 0 Total Down stream cells num(cell) : 0 Total Down stream packets num(packet) : 0 Total Down stream packets discarded due to congestion(packet) : 0 PVC 0/35 PVC encapsulation : Bridge LLC rx-cttr : 5 tx-cttr : 5 VLAN : 100 Max mac-address learning count : 255 Support Down MultiCast Stream : enable Up stream cells num(cell) : 0 Up stream packets num(packet) : 0 Down stream cells num(cell) : 0 Down stream packets num(packet) : 0 Related Operation Table 21-16 lists the related operations for querying an ADSL2+ port. Table 21-16 Related operations for querying an ADSL2+ port To....13 Enabling the Auto PVC Configuration of an ADSL Modem This operation enables a modem to automatically configure the VPI/VCI. Query the status of an ADSL2+ port Query the settings of an ADSL2+ port Query the performance statistics of an ADSL2+ port Query the bit allocation Query the subcarrier SNR of the activated line Query the alarm status of an ADSL2+ port Query the operation parameters of an activated line Set the switch controlling the detailed display of ADSL2+ line operations Query the switch controlling the detailed display of ADSL2+ line operations Run the Command. ----End Example To enable the modem in slot 0/2 to automatically configure the PVC.. Table 21-17 Related operation for enabling an ADSL modem to automatically configure the PVC To.. Disable the auto PVC configuration of an ADSL modem Run the Command..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 21 Configuring the ADSL2+ Service Prerequisite The modem must support the function of automatically configuring the VPI/VCI. do as follows: huawei(config-if-adsl-0/2)#modem-learning enable Related Operation Table 21-17 lists the related operation for enabling an ADSL modem to automatically configure the PVC. modem-learning disable Issue 04 (2007-11-30) Huawei Technologies Proprietary 21-45 .. Procedure Run the modem-learning command to enable the auto PVC configuration of an ADSL modem. . 22. it can be used to activate the ports. 22.2 Configuration Example of the SHDSL IPoE/PPPoE Service This example shows how to configure the SHDSL service so that the user can access the Internet through the SHDSL lines in the IPoE/PPPoE mode. When a statistic reaches the threshold. The SHDSL line profile includes a majority of parameters of the ports.5 Adding an SHDSL Line Profile This operation enables you to add an SHDSL line profile. 22.4 Configuration Example of the SHDSL PPPoA Service This example shows how to configure the SHDSL PPPoA service so that the user can access the Internet through the SHDSL lines in the PPPoA mode.8 Configuring the SHDSL Multi-Pair Binding This operation enables you to configure the single-pair high-speed digital subscriber line (SHDSL) multi-pair binding. After the line profile is configured. the MA5600 informs the device of the event. 22. The SHDSL alarm profile is used to set a group of alarm thresholds for measuring and monitoring the performances of an active SHDSL line.3 Configuration Example of the SHDSL IPoA Service This example shows how to configure the SHDSL IPoA service so that the user can access the Internet through the SHDSL lines in the IPoA mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service 22 Configuring the SHDSL Service About This Chapter This chapter describes the SHDSL technology and how to configure the SHDSL service on the MA5600.7 Binding an SHDSL Alarm Profile This operation enables you to bind an SHDSL alarm profile to SHDSL ports to validate the alarm profile after the SHDSL ports are activated. 22.1 Overview This section describes the SHDSL service and its specifications. 22. 22. 22. and sends alarms to the NMS.6 Adding an SHDSL Alarm Profile This operation enables you to add an SHDSL alarm profile. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-1 . The purpose of configuring the SHDSL multi-pair binding is to improve the line rate. 11 Querying an SHDSL Port This operation enables you to query the SHDSL port status to check the port conditions. 22. 22-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 22.12 Configuring the Clock Mode This operation enables you to configure the clock mode. 22.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22.10 Activating an SHDSL Port This operation enables you to activate an SHDSL port for service transmission.9 Configuring the SHDSL EFM Multi-port Binding This operation enables you to configure the SHDSL multi-port binding. The purpose of configuring the SHDSL EFM multiple-port binding is to improve the line rate. The SHEB board supports the SHDSL. For details on the SHDSL service. The adjustment granularity is eight kbit/s. Table 22-1 Encapsulation type mapping between the MA5600 and the modem Access Type IPoE PPPoE Modem Encapsulation Type RFC1483 Bridge RFC1483 Bridge PPPoE Issue 04 (2007-11-30) MA5600 Encapsulation Type Bridge or Auto Bridge or Auto Bridge or Auto 22-3 Huawei Technologies Proprietary .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service 22. The system can adjust the line rate automatically according to the line conditions. Each group contains four ports. Service Specifications The MA5600 provides the SHDSL service through the SHEA or SHEB board. The port involved in M-pair binding and that involved in EFM binding must belong to the same group. SHDSL provides a distance from 3 km to 6 km.bis line. The system supports the EFM binding. The bi-directional rate ranges from 768 kbit/s to 22784 kbit/s. the system supports the binding of up to four ports. In theory. The MA5600 provides the SHDSL service through the SHEA or SHEB board. l The system supports the binding of M-pair. l The SHDSL. NOTE l The SHEB board divides the 32 ports into eight groups in turn. In the PTM port encapsulation mode. three-pair. Service Description The single-line high speed digital subscriber line (SHDSL) technology provides a symmetric high-rate leased line access service over twisted pairs to meet the broadband access requirements of the small and medium enterprises or SOHO users. l The SHDSL port supports the ATM/PTM mode activation. and four-pair. Each SHEA or SHEB board provides 32 SHDSL ports. three times and four times of the single-pair rate.1 Overview This section describes the SHDSL service and its specifications. The rates are respectively twice. You can configure the corresponding profiles to switch the mode of the SHDSL port between the ATM mode and the PTM mode. Table 22-1 lists the encapsulation type mapping between the MA5600 and the modem. refer to the chapter "SHDSL.bis single twisted pair supports the symmetric rates from 192 kbit/s to 5696 kbit/s. In the ATM port encapsulation mode. the system supports the binding of two-pair. The rate is the sum of the rates of the four ports.bis Access" in the MA5600 Feature Description. the system supports the binding of up to four pairs. Context l The MA5600 can restrict the user bandwidth through a traffic profile or an SHDSL line profile.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Access Type IPoA PPPoA Modem Encapsulation Type RFC1483 Route or IPoA PPPoA MA5600 Encapsulation Type IPoA or Auto PPPoA or Auto 22. Make sure that the user bandwidth configured in the line profile is larger than that configured in the traffic profile. 22-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the traffic is taken as an example. the smaller one of the bandwidths restricted by the two profiles is used as the user bandwidth. The network devices and lines are in the normal state.2 Configuration Example of the SHDSL IPoE/PPPoE Service This example shows how to configure the SHDSL service so that the user can access the Internet through the SHDSL lines in the IPoE/PPPoE mode. Prerequisite l l The SHEB board is in the normal state. When both the traffic profile and the SHDSL line profile work. l Networking Figure 22-1 shows a sample network for configuring the SHDSL IPoE/PPPoE service. In this example. The parameter values must be the same as those of the default profile (with the index of 1). and priority policy in the traffic profile.1. Table 22-2 Data plan for configuring the SHDSL IPoE/PPPoE service Item Traffic profile Data Index: 1 (the default profile) l l l Remarks Configure the access rate. To activate the SHDSL port. use the parameters configured in the line profile to negotiate with the CPE. you can specify the traffic profile to restrict the access rate. When you add a service port. priority.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Figure 22-1 Sample network for configuring the SHDSL IPoE/PPPoE service 10. The actual qualified rate of the port may be lower than 96%. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-5 . Therefore. When the two parties negotiate successfully. In an ideal case.1. Rate: 2 Mbit/s Priority: 6 Priority policy: Pvc-Setting Line profile Index: 2. the SHDSL port is activated and the lines connecting to the port can bear services. increase the rate to meet the user demands. priority. and priority policy. configure the rate of the traffic profile as 2048 kbit/s.1/24 Internet Router S H E B GE0/7/0 CON ETH MON IPoE/PPPoE access SCU Modem MA5600 PC Data Plan Table 22-2 lists the data plan for configuring the SHDSL IPoE/PPPoE service. which indicates that line monitoring is disabled. SCU board Upstream port: 0/7/0 Gateway IP address: 10.1. SHEB board SHDSL port: 0/5/0 SHDSL mode: ATM VLAN ID: 10 - Keep it consistent with the upper layer device. 22-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Alarm profile Data Index: 1 (the default profile) Remarks Configure the alarm threshold of the line parameter in the alarm profile. By binding the threshold to a port. you can monitor the conditions of the lines connecting to the port.1/24 Configuration Flowchart Figure 22-2 shows the flowchart for configuring the SHDSL IPoE/PPPoE service.1. all the alarm thresholds are set as 0. It is the IP address of the upper layer router. In the default alarm profile. If there is no appropriate traffic profile. add one. confirm the board through the command line.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Figure 22-2 Flowchart for configuring the SHDSL IPoE/PPPoE service Start Add and confirm a board No Is there an appropriate traffic profile? Yes Add a VLAN and add port(s) to it Add a traffic profile Is the port activated? Yes Deactivate the SHDSL port No Is there an appropriate line profile? Yes Add a line profile Is there an appropriate alarm profile? Yes Add an alarm profile Bind the alarn profile Bind the line profile and activate the SHDSL port Set the service type Save the data End Procedure Step 1 Add an SHEB board and confirm it. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-7 . If the SHEB board is in the auto-find state. The system automatically finds and confirms the SHEB board. Then insert the SHEB board into the MA5600 shelf. huawei(config)#board confirm 0/5 Step 2 Check whether there is an appropriate traffic profile. Create VLAN 10. In this example. Run the display port state command to query the port status. If the port is already activated. refer to "9. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#deactivate 0 Step 5 Check whether there is an appropriate SHDSL line profile. huawei(config)#service-port vlan 10 shdsl mode atm 0/5/0 vpi 0 vci 35 multiserv ice user-encap pppoe rx-cttr 1 tx-cttr 1 NOTE If you need to enable services in bathes in actual configuration.then settings at this time will be ignored Do you want to name the profile (y/n) [n]:y 22-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Deactivate SHDSL port 0/5/0.12 Adding Service Ports in Batches" to add service ports in batches. Step 3 Create a VLAN and add a service port and an upstream port to it. and add upstream port 0/7/0 to it. Step 4 Make sure that the port is deactivated. 2. 1. Add a service port to the VLAN. In general. 1. a new line profile is created. huawei(config-if-shl-0/5)#quit huawei(config)#shdsl line-profile add 2 During inputting.press 'Q' to quit. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 2.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy -------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------Traffic parameters for ATM service: ------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-------------------------------------------------------------------6 ubr 1 ------off/off/-Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------- The query result shows that traffic profile 1 is available. deactivate it first and then use the new line profile to reactivate it. use the default line profile. Line profile 1 is the default line profile with the bandwidth of 2048 kbit/s. 2312 kbps)[2048]: 2048 > Power Spectral Density mode (1--symmetric.2--asymmetric)[1]: > Transmission mode (1--G.3--six wire. Prerequisite l The SHEB board is in the normal state.2 Annex A.)[1]: > Do you use the default data to create a line profile?(y/n)[y]:n > G. huawei(config-if-shl-0/5)#quit huawei(config)#save ----End Result After the configuration. the default alarm profile 1 is used. An SHDSL alarm profile takes effect only when it is bound with a port. By default. Huawei Technologies Proprietary 22-9 Issue 04 (2007-11-30) .991.3--support Annex A&B) [3]: 1 > Remote enable (1--enabled. except 2312kbps. 22. except 2312kbps. If the port has been bound with another alarm profile. 192~5696. each port is bound with alarm profile 1 in system initialization. the user can access the Internet in the IPoE/PPPoE mode.SHDSL minimum line rate(Value must be multiple of 64.2--enabled)[1]: > Do you config the target SNR margin?(y/n)[n]:y > Downstream current target SNR margin(0~10 db)[0]: 3 > Downstream worst case target SNR margin(0~10 db)[0]: 2 > Upstream current target SNR margin(0~10 db)[0]: 9 > Upstream worst case target SNR margin(0~10 db)[0]: 8 > Target SNR margin bitmap(0x01~0x0f. Use profile 3 to activate SHDSL port 0. bit2--up current. 1. rebind it with alarm profile 1.3 Configuration Example of the SHDSL IPoA Service This example shows how to configure the SHDSL IPoA service so that the user can access the Internet through the SHDSL lines in the IPoA mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Please input profile name:prof_name_test > pathmode(1--ATM. huawei(config-if-shl-0/5)#activate 0 3 Step 8 Query the port status.SHDSL interface mode of line (1--two wire.2--PTM)[1]:1 > G.2312 kbps)[2048]: 2048 > G. 2.2 Annex B.bit1-down worst.SHDSL maximum line rate (Value must be multiple of 64.bit3--up worst)[1]: Add profile 2 successfully Step 6 Check whether there is an appropriate alarm profile. 192~5696. add one.bit0--down current. In this example. If there is no appropriate alarm profile.991.4--eight wire. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#alarm-config 0 1 Step 7 Activate SHDSL port 0/5/0.2--disabled)[1]: > Probe enable (1--disabled.2--four wire. huawei(config-if-shl-0/5)#display port state 0 -------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status -------------------------------------------------------------------0 Activated Active 3 1 Normal None Normal -------------------------------------------------------------------- Step 9 Save the data.2--G. IP access becomes the mainstream access mode in DSLAMs.1. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol.22 Configuring the SHDSL Service l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The network devices and lines are in the normal state. l l l Networking Figure 22-3 shows a sample network for configuring the SHDSL IPoA service. the application service of IPoA/PPPoA users is the common Internet service. 22-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Figure 22-3 Sample network for configuring the SHDSL IPoA service 10. The MA5600 can restrict the user bandwidth through a traffic profile or an SHDSL line profile.1. the traffic is taken as an example. Make sure that the user bandwidth configured in the line profile is larger than that configured in the traffic profile.1/24 Internet Router S H E B GE0/7/0 CON ETH MON IPoA access SCU Modem MA5600 PC Data Plan Table 22-3 shows the data plan for configuring the SHDSL IPoA service. Context l With the development of the IP network. and enables IPoA/PPPoA users to transparently access the upper layer IP network. Currently. When both the traffic profile and the SHDSL line profile work. To be compatible with the user side modems that adopt the ATM as the access mode. In this example. the smaller one of the bandwidths restricted by the two profiles is used as the user bandwidth. The actual qualified rate of the port may be lower than 96%.1. Alarm profile Index: 1 (the default profile) SHEB board SHDSL port: 0/5/0 SHDSL mode: ATM VLAN ID: 10 - Keep it consistent with the upper layer device. and priority policy. When the two parties negotiate successfully. SCU board Upstream port: 0/7/0 Gateway IP address: 10. Configure the alarm threshold of the line parameter in the alarm profile. In the default alarm profile. all the alarm thresholds are set as 0. By binding the threshold to a port. priority. you can specify the traffic profile to restrict the access rate. Therefore. you can monitor the conditions of the lines connecting to the port. configure the rate of the traffic profile as 2048 kbit/s. In an ideal case.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Table 22-3 Data plan for configuring the SHDSL IPoA service Item Traffic profile Data Index: 1 (the default profile) l l l Remarks Configure the access rate. It is the IP address of the upper layer router. The parameter values must be the same as those of the default profile (with the index of 1). Rate: 2 Mbit/s Priority: 6 Priority policy: Pvc-Setting Line profile Index: 2.1. increase the rate to meet the user demands. To activate the SHDSL port. When you add a service port. priority.1/24 Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-11 . which indicates that line monitoring is disabled. use the parameters configured in the line profile to negotiate with the CPE. and priority policy in the traffic profile. the SHDSL port is activated and the lines connecting to the port can bear services. The system automatically finds and confirms the SHEB board. If the SHEB board is in the auto-find state. add one. Figure 22-4 Flowchart for configuring the SHDSL IPoA service Start Add and confirm a board Is there an appropriate traffic profile Yes Create a VLAN and add port(s) to it No Add a traffic profile No Is the port activated? Yes Deactivate the SHDSL port Is there an appropriate line profile Yes Is there an appropriate alarm profile Yes Bind the alarm profile Bind the line profile and activate the SHDSL port Configure the MAC address pool No Add a line profile No Add an alarm profile Enable the IPoA protocol conversion Configure the IPoA default gateway Set the encapsulation mode Save the data End Procedure Step 1 Add an SHEB board and confirm it. Then insert the SHEB board into the MA5600 shelf.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configuration Flowchart Figure 22-4 shows the flowchart for configuring the SHDSL IPoA service. If there is no appropriate traffic profile. huawei(config)#board confirm 0/5 Step 2 Check whether there is an appropriate traffic profile. confirm the board through the command line. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy 22-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . refer to "9. add one. If there is no appropriate profile. Step 4 Make sure that the port is deactivated.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service -------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------Traffic parameters for ATM service: ------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-------------------------------------------------------------------6 ubr 1 ------off/off/-Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------- The query result shows that traffic profile 1 is available. Create VLAN 10. 1. Add a service port to the VLAN.2--four wire.3--six wire. deactivate it first and then use the new line profile to reactivate it. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 2. Step 3 Create a VLAN and add a service port and an upstream port to it.2--PTM)[1]:1 > G.then settings at this time will be ignored Do you want to name the profile (y/n) [n]:y Please input profile name:prof_name_test > pathmode(1--ATM.4--eight wire. Line profile 1 is the default line profile with the bandwidth of 2048 kbit/s.)[1]: Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-13 . use the default line profile. In this example.SHDSL interface mode of line (1--two wire. Run the display port state command to query the port status. 2. huawei(config)#service-port vlan 10 shdsl mode atm 0/5/0 vpi 0 vci 35 multiserv ice user-encap pppoe rx-cttr 1 tx-cttr 1 NOTE If you need to enable services in bathes in actual configuration. If the port is already activated. and add upstream port 0/7/0 to it. huawei(config-if-shl-0/5)#quit huawei(config)#shdsl line-profile add 2 During inputting. In general.12 Adding Service Ports in Batches" to add service ports in batches. a new line profile is created. Deactivate SHDSL port 0/5/0.press 'Q' to quit. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#deactivate 0 Step 5 Check whether there is an appropriate SHDSL line profile. 1. which begins with 0000-0000-0001.bit0--down current. If the port has been bound with another alarm profile. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#display port state 0 -------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status -------------------------------------------------------------------0 Activated Active 3 1 Normal None Normal -------------------------------------------------------------------- Step 13 Save the data.2--asymmetric)[1]: > Transmission mode (1--G.SHDSL minimum line rate(Value must be multiple of 64.1.2--disabled)[1]: > Probe enable (1--disabled. If there is no appropriate alarm profile. huawei(config)#encapsulation 0/5/0 vpi 0 vci 35 type ipoa llc srcIP 10. huawei(config)#ipoa enable Step 10 Configure the default IPoA gateway. huawei(config-if-shl-0/5)#activate 0 3 Step 8 Configure MAC address pool 0.1. By default. each port is bound with alarm profile 1 in system initialization.2--G.SHDSL maximum line rate (Value must be multiple of 64. adopt the LLC-Bridge encapsulation first.bit1-down worst. and then adopt the IPoA static address encapsulation. In this example.991.192~5696 £¬2312 kbps)[2048]: 2048 > Power Spectral Density mode (1--symmetric.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > Do you use the default data to create a line profile?(y/n)[y]:n > G. except 2312kbps. huawei(config-if-shl-0/5)#quit huawei(config)#save ----End 22-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config-if-shl-0/5)#quit huawei(config)#mac-pool 0 0000-0000-0001 Step 9 Enable the IPoA protocol conversion.1. rebind it with alarm profile 1.bit3--up worst)[1]: Add profile 2 successfully Step 6 Check whether there is an appropriate alarm profile.2 Annex A.192~5696 £¬2312 kbps)[2048]: 2048 > G.2 Annex B. Step 12 Query the port status. add one. An SHDSL alarm profile takes effect only when it is bound with a port.1. huawei(config)#ipoa default gateway 10. the default alarm profile 1 is used.991.20 In the case of IPoA access.2--enabled)[1]: > Do you config the target SNR margin?(y/n)[n]:y > Downstream current target SNR margin(0~10 db)[0]: 3 > Downstream worst case target SNR margin(0~10 db)[0]: 2 > Upstream current target SNR margin(0~10 db)[0]: 9 > Upstream worst case target SNR margin(0~10 db)[0]: 8 > Target SNR margin bitmap(0x01~0x0f.1 Step 11 Set the encapsulation mode of SHDSL port 0/5/0 as LLC-IPoA. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#alarm-config 0 1 Step 7 Activate SHDSL port 0/5/0. Use profile 3 to activate port 0.3--support Annex A&B) [3]: 1 > Remote enable (1--enabled. select the dynamic IP address (without specifying the source IP address) or the static IP address (specifying the source IP address) for the packets. To switch from a dynamic address to a static address in the IPoA mode. except 2312kbps. bit2--up current. Context l With the development of the IP network.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Result After the configuration. Currently. Make sure that the user bandwidth configured in the line profile is larger than that configured in the traffic profile. l l l Networking Figure 22-5 shows a sample network for configuring the SHDSL PPPoA service. IP access becomes the mainstream access mode in DSLAMs. When both the traffic profile and the SHDSL line profile work. the application service of IPoA/PPPoA users is the common Internet service. The MA5600 can restrict the user bandwidth through a traffic profile or an SHDSL line profile. the smaller one of the bandwidths restricted by the two profiles is used as the user bandwidth. the traffic is taken as an example. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol. and enables IPoA/PPPoA users to transparently access the upper layer IP network. the user can access the Internet in the IPoA mode. 22. Prerequisite l l The SHEB board is in the normal state. In this example.4 Configuration Example of the SHDSL PPPoA Service This example shows how to configure the SHDSL PPPoA service so that the user can access the Internet through the SHDSL lines in the PPPoA mode. To be compatible with the user side modems that adopt the ATM as the access mode. The network devices and lines are in the normal state. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-15 . 22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 22-5 Sample network for configuring the SHDSL PPPoA service 10. use the parameters configured in the line profile to negotiate with the CPE. you can specify the traffic profile to restrict the access rate.1/24 Internet Router S H E B GE0/7/0 CON ETH MON PPPoA access SCU Modem MA5600 PC Data Plan Table 22-4 shows the data plan for configuring the SHDSL PPPoA service. priority. and priority policy. configure the rate of the traffic profile as 2048 kbit/s. Therefore. priority. In an ideal case. Table 22-4 Data plan for configuring the SHDSL PPPoA service Item Traffic profile Data Index: 1 (the default profile) l l l Remarks Configure the access rate. the SHDSL port is activated and the lines connecting to the port can bear services. Rate: 2 Mbit/s Priority: 6 Priority policy: Pvc-Setting Line profile Index: 2. To activate the SHDSL port. The parameter values must be the same as those of the default profile (with the index of 1). increase the rate to meet the user demands. and priority policy in the traffic profile.1. The actual qualified rate of the port may be lower than 96%. When the two parties negotiate successfully. 22-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1. When you add a service port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-17 . In the default alarm profile. It is the IP address of the upper layer router.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Item Alarm profile Data Index: 1 (the default profile) Remarks Configure the alarm threshold of the line parameter in the alarm profile. SHEB board SHDSL port: 0/5/0 SHDSL mode: ATM VLAN ID: 10 - Keep it consistent with the upper layer device.1.1. which indicates that line monitoring is disabled.1/24 Configuration Flowchart Figure 22-6 shows the flowchart for configuring the SHDSL PPPoA service. By binding the threshold to a port. you can monitor the conditions of the lines connecting to the port. all the alarm thresholds are set as 0. SCU board Upstream port: 0/7/0 Gateway IP address: 10. 22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 22-6 Flowchart for configuring the SHDSL PPPoA service Start Add and confirm a board Is there an appropriate traffic profile Yes Create a VLAN and add port(s) to it No Add a traffic profile No Is the port activated? Yes Deactivate the SHDSL port Is there an appropriate line profile Yes Is there an appropriate alarm profile Yes Bind the alarm profile Bind the line profile and activate the SHDSL port Configure the MAC address pool Enable the PPPoA protocol conversion No Add a line profile No Add an alarm profile Set the encapsulation mode Save the data End 22-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#board confirm 0/5 Step 2 Check whether there is an appropriate traffic profile. and add upstream port 0/7/0 to it. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: -------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy -------------------------------------------------------------------0 960 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------Traffic parameters for ATM service: ------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us -------------------------------------------------------------------0 cbr 2 1000 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-------------------------------------------------------------------6 ubr 1 ------off/off/-Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt -------------------------------------------------------------------- The query result shows that traffic profile 1 is available.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Procedure Step 1 Add an SHEB board and confirm it. add one. Create VLAN 10. Add a service port to the VLAN. Step 4 Make sure that the port is deactivated. The system automatically finds and confirms the SHEB board. Then insert the SHEB board into the MA5600 shelf. confirm the board through the command line. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-19 . refer to "9. huawei(config)#service-port vlan 10 shdsl mode atm 0/5/0 vpi 0 vci 35 multiserv ice user-encap pppoe rx-cttr 1 tx-cttr 1 NOTE If you need to enable services in bathes in actual configuration. If there is no appropriate traffic profile. If the SHEB board is in the auto-find state.12 Adding Service Ports in Batches" to add service ports in batches. 1. Step 3 Create a VLAN and add a service port and an upstream port to it. 4-eight wire.2--asymmetric)[1]: > Transmission mode (1--G. the default alarm profile 1 is used.3--support Annex A&B)[3]: 1 > Remote enable (1--enabled. Deactivate SHDSL port 0/5/0. In general. 2. except 2312kbps. 192~5696.3--six wire. 192~5696.SHDSL minimum line rate(Value must be multiple of 64. deactivate it first and then use the new line profile to reactivate it. huawei(config-if-shl-0/5)#quit huawei(config)#mac-pool 0 1000-0000-0001 22-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Line profile 1 is the default line profile with the bandwidth of 2048 kbit/s. Run the display port state command to query the port status. bit2--up current. If there is no appropriate alarm profile. Use alarm profile 3 to activate SHDSL port 0. rebind it with alarm profile 1. 1.2312 kbps)[2048]: 2048 > Power Spectral Density mode (1--symmetric.)[1]: > Do you use the default data to create a line profile?(y/n)[y]:n > G.bit0--down current.2--disabled)[1]: > Probe enable (1--disabled.2 Annex A.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1. use the default line profile. add one.2--four wire. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#alarm-config 0 1 Step 7 Bind SHDSL port 0/5/0 by using the default alarm profile.SHDSL maximum line rate (Value must be multiple of 64. Alarm profile 1 is the default alarm. huawei(config-if-shl-0/5)#activate 0 3 Step 9 Configure the MAC address pool.SHDSL interface mode of line (1--two wire.991. In this example. If there is no appropriate line profile.2--G.2--enabled)[1]: > Do you config the target SNR margin?(y/n)[n]:y > Downstream current target SNR margin(0~10 db)[0]: 3 > Downstream worst case target SNR margin(0~10 db)[0]: 2 > Upstream current target SNR margin(0~10 db)[0]: 9 > Upstream worst case target SNR margin(0~10 db)[0]: 8 > Target SNR margin bitmap(0x01~0x0f. 3. add one. If the port is already activated.991.bit1-down worst. each port is bound with alarm profile 1 in system initialization. use the default alarm profile. 1.2 Annex B.bit3--up worst)[1]: Add profile 2 successfully Step 6 Check whether there is an appropriate alarm profile. 2. except 2312kbps. huawei(config-if-shl-0/5)#quit huawei(config)#shdsl line-profile add 2 During inputting. 2. In general. You can also configure other alarm profiles on demands.2312 kbps)[2048]: 2048 > G. In this example. a new line profile is created.then settings at this time will be ignored Do you want to name the profile (y/n) [n]:y Please input profile name:prof_name_test > pathmode(1--ATM. If the port has been bound with another alarm profile. huawei(config-if-shl-0/5)#alarm-config 0 1 Step 8 Activate SHDSL port 0/5/0. By default. An SHDSL alarm profile takes effect only when it is bound with a port. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#deactivate 0 Step 5 Query whether there is an appropriate line profile.press 'Q' to quit.2--PTM)[1]:1 > G. The H569SHEB board supports the high rate SHDSL. Two default profiles. huawei(config-if-shl-0/5)#quit huawei(config)#save ----End Result After the configuration. and is bound with a line profile. 22.bis feature. Five default SHDSL line profiles. 102. you can access the Internet in the PPPoA mode. The SHDSL line profile includes a majority of parameters of the ports. Context Each SHDSL line of the MA5600 is associated with a specific channel mode. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-21 . it can be used to activate the ports.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Step 10 Enable the PPPoA protocol conversion. thus realizing ATM/PTM switching in the manner of profile configuration. 100.5 Adding an SHDSL Line Profile This operation enables you to add an SHDSL line profile. The SHDSL port can be activated in the ATM/PTM mode. huawei(config)#pppoa enable Step 11 Set the encapsulation type of SHDSL port 0/5/0 as LLC-PPPoA. Configuration Flowchart Figure 22-7 shows the flowchart for adding an SHDSL line profile. A configuration table can hold up to 103 line profiles. and 103. profiles 1. cannot be deleted but can be modified. After the line profile is configured. cannot be deleted but can be modified. profile 1 and profile 100. huawei(config)#encapsulation 0/5/0 vpi 0 vci 35 type pppoa llc Step 12 Query the port status. huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#display port state 0 -------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status -------------------------------------------------------------------0 Activated Active 3 1 Normal None Normal -------------------------------------------------------------------- Step 13 Save the data. 101. 22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 22-7 Flowchart for adding an SHDSL line profile Start Set the index of the line profile Set the transmission mode Whethert to set the name of the SHDSL line profile? Yes Set the name of the line profile No Set the remote enable function Set the probe enable function Select the SHDSL encapsulation mode No Whether to set the target SNR margin Yes Set the downstream current target SNR margin Set the interface mode of the SHDSL line Yes Whether to use the default parameters to create a new profile? No Set the SHDSL min. ----End 22-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . line rate Set the downstream worst case target SNR margin Set the upstream current target SNR margin Set the SHDSL max. line rate Set the upstream worst case target SNR margin Set the power spectral density mode Set the target SNR margin bitmap End Procedure Run the shdsl line-profile add command to add an SHDSL line profile. Power spectral density mode Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-23 .press 'Q' to quit.2 Annex B.3--support Annex A&B) [3]: 1 > Remote enable (1--enabled. except 2312kbps.2 Annex A.2--four wire.991.SHDSL interface mode of line G.2--disabled)[1]: > Probe enable (1--disabled.SHDSL minimum line rate G.3--six wire. Selects line encapsulation mode.2--enabled)[1]: > Do you config the target SNR margin?(y/n)[n]:y > Downstream current target SNR margin(0~10 db)[0]: 3 > Downstream worst case target SNR margin(0~10 db)[0]: 2 > Upstream current target SNR margin(0~10 db)[0]: 9 > Upstream worst case target SNR margin(0~10 db)[0]: 8 > Target SNR margin bitmap(0x01~0x0f. Table 22-5 Parameters of an SHDSL line profile Parameter Profile index pathmode G.991. do as follows: huawei(config)#shdsl line-profile add 3 During inputting.2--asymmetric)[1]: > Transmission mode (1--G.4--eight wire.SHDSL minimum line rate(Value must be multiple of 64. ATM and PTM are supported. except 2312kbps.2312 kbps)[2048]: 2048 > Power Spectral Density mode (1--symmetric.SHDSL maximum line rate Description You can enter a profile index or press Enter to enable the system to allocate a profile index.)[1]: > Do you use the default data to create a line profile?(y/n)[y]:n > G. Selects interface mode of line. if the calculated downstream/upstream rate of an SHDSL line is higher than the set maximum value.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Example To add an SHDSL line profile with the index of 3.bit1-down worst.bit3--up worst)[1]: Add profile 2 successfully Parameter Description Table 22-5 lists the parameters of an SHDSL line profile.bit0--down current. bit2--up current.2312 kbps)[2048]: 2048 > G. while maintaining the target SNR margin. the system will set up the SHDSL connection at the calculated rate. 192~5696. If the calculated downstream/upstream rate is lower than the set maximum rate.then settings at this time will be ignored Do you want to name the profile (y/n) [n]:y Please input profile name:prof_name_test > pathmode(1--ATM.2--G.2--PTM)[1]:1 > G. the system will limit the rate to the set value while increasing the SNR margin. 192~5696.SHDSL maximum line rate (Value must be multiple of 64. There are two types of PSD: symmetrical and asymmetrical.SHDSL interface mode of line (1--two wire. In the process of setting up an SHDSL connection. Specifies the minimum line rate. bit3--up worst) It specifies the downstream/upstream SNR threshold in the worst case. and the safer the system can be. 22. the value is 0x01. the larger the target SNR margin. Therefore. bit1=1: makes the settings of worst downstream target SNR margin take effect. bit3=1: makes the settings of worst upstream target SNR margin take effect. the probe function is disabled. The larger the target SNR margin. l l Downstream/Upstream current target SNR margin l l Downstream/Upstream worst case target SNR margin Target SNR margin bitmap (0x01~0x0f. the lower the maximum data transmission rate. When a statistic reaches the threshold. l bit0=1: makes the settings of current downstream target SNR margin take effect. Meanwhile.6 Adding an SHDSL Alarm Profile This operation enables you to add an SHDSL alarm profile. the less chances of occurrence of the line error.991. l If this function is enabled.2 Annex A ITU-T G. The target SNR margin is the preserved SNR margin to ensure normal communication in the case of line SNR deterioration. The SHDSL alarm profile is used to set a group of alarm thresholds for measuring and monitoring the performances of an active SHDSL line. By default. the system implements the line probe function to search the best line rate.bit0--down current. bit2--up current. the target SNR margin must be adjusted based on the actual line conditions.bit1-down worst. 22-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . bit2=1: makes the settings of current upstream target SNR margin take effect. Range: 0x01-0x0F. and sends alarms to the NMS.991. If this function is disabled.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameter Transmission mode Description There are three types of SHDSL transmission modes: l l l ITU-T G. the MA5600 informs the device of the event. l l l By default.2 Annex B Annex A&B Remote enable Probe enable It specifies whether to manage the STU-R.SHDSL line. by default. That is. the settings of current downstream target SNR margin take effect. the system skips the line rate adaptation process to shorten the time to set up the G. Configuration Flowchart Figure 22-8 shows the flowchart for adding an SHDSL alarm profile. Figure 22-8 Flowchart for adding an SHDSL alarm profile Configure SHDSL alarm profile Set alarm profile index Use default parameter to create alarm profile? No Set loop attenuation threshold Yes Set SNR margin threshold Set errored second threshold Set SES threshold Set CRC abnormality threshold Set LOSW threshold Set UAS threshold End Procedure Run the shdsl alarm-profile add command to add an SHDSL alarm profile. profile 1 and profile 100. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-25 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Context There are two default alarm profiles. The default alarm profile cannot be deleted. the system will report an alarm. and is in the range of 2 to 99.press 'Q' to quit. If the accumulative CRC exceeds the threshold. The system collects SNR related performance data generated within any 15-minute period. If the UAS exceeds the threshold. The system collects SES related performance data generated within any 15-minute period. the system will report an alarm. The system collects CRC related performance data generated within any 15-minute period. The system collects ES related performance data generated within any 15-minute period. Table 22-6 Parameters of an SHDSL alarm profile Parameter Profile index Description You can enter a profile number or press Enter to enable the system to designate a number for it. the system will report an alarm. The profile index is unique. The system collects LOSW related performance data generated within any 15-minute period.then settings at this time will be ignored Do you want to name the profile (y/n) [n]:y Please input profile name:profile-3 > Do you use the default data to create an alarm profile?(y/n)[y]:n > Loop attenuation threshold (0~127 db)[0]: > SNR margin threshold (0~10 db)[0]: > ES threshold (0~900 s)[0]: > SES threshold (0~900 s)[0]: > CRC anomaly threshold (0~58981500)[0]: > LOSWS threshold (0~900 s)[0]: > UAS threshold (0~900 s)[0]: Add profile 3 successfully Parameter Description Table 22-6 lists the parameters of an SHDSL alarm profile.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To add an SHDSL alarm profile with the index of 3. If the accumulative SES exceeds the threshold. the system will report an alarm. the system will report an alarm. do as follows: huawei(config)#shdsl alarm-profile add 3 During inputting. If the accumulated ES exceeds the threshold. The system collects performance data generated within any 15minute period. the system will report an alarm. the system will report an alarm. Loop attenuation threshold SNR margin threshold ES threshold SES threshold CRC anomalies number threshold LOSWS threshold UAS threshold 22-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The system collects UAS related performance data generated within any 15-minute period. If the loop attenuation exceeds the threshold. If the LOSW exceeds the threshold. If the SNR margin exceeds the threshold. The command serves as a complement to the shdsl lineprofile quickmodify command.. the system uses the alarm profile bound with the port last time. Context Pay attention to the following points: l An SHDSL alarm profile can take effect only when it is bound to a port and the port is activated. l l Procedure Step 1 Run the alarm-config command to bind an SHDSL alarm profile with a port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Related Operation Table 22-7 lists the related operations for adding an SHDSL alarm profile. or alarm profile 1 if the port is to be bound for the first time.. shdsl alarm-profile delete Remarks You cannot delete the default alarm profiles or a referenced alarm profile. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-27 . Table 22-7 Related operations for adding an SHDSL alarm profile To. You can bind an SHDSL alarm profile to the deactivated port only. The command serves as a complement to the shdsl alarm-profile quickaddcommand. By default.. The system adopts non-interactive mode for the input of the parameter of the command.7 Binding an SHDSL Alarm Profile This operation enables you to bind an SHDSL alarm profile to SHDSL ports to validate the alarm profile after the SHDSL ports are activated. display shdsl alarmprofile shdsl alarm-profile quickadd Modify an SHDSL line profile Quickly modify an SHDSL line profile shdsl line-profile modify shdsl line-profile quickmodify 22. The line profile is valid after being modified. Run the command in privilege mode or SHDSL config mode. Step 2 Run the display port state command to query whether the ports has been bound with the alarm profile. Delete an SHDSL alarm profile Query an SHDSL alarm profile Quickly add an SHDSL alarm profile Run the Command .. Profile 101 is for activating the six-wire SHDSL port. and four-pair. Profile 102 is for activating the eight-wire SHDSL port. three times and four times of the single-pair rate. When configuring the SHDSL multi-pair binding. three-pair. Profile 100 is for activating the four-wire SHDSL port. the system supports the binding of two-pair. Step 3 Run the service-port command to configure a service port. l The SHEB board divides the 32 ports into eight groups in turn. and performing a loopback and canceling a loopback on a port. and is bound with a line profile. set the binding type as M-Pair.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To bind alarm profile 3 to port 1 of the SHDSL board in slot 0/5. l Procedure Step 1 Run the interface shl command to enter the SHDSL mode. The rates are respectively twice. The purpose of configuring the SHDSL multi-pair binding is to improve the line rate. configuring power backoff. Only the main port can be configured. A configuration table of SHDSL line profiles contains up to 103 line profiles.8 Configuring the SHDSL Multi-Pair Binding This operation enables you to configure the single-pair high-speed digital subscriber line (SHDSL) multi-pair binding. In ATM port encapsulation mode. Step 2 Run the port bind command to configure the SHDSL multi-pair binding. ----End 22-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The configuration here refers to the operation of activating and deactivating a port. The bound ports must be activated by a same profile simultaneously. huawei(config-if-shl-0/5)#display port state 1 --------------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status --------------------------------------------------------------------------1 Deactivated Deactive 1 3 Normal None Normal --------------------------------------------------------------------------- 22. do as follows: huawei(config-if-shl-0/5)#alarm-config 1 3 Run the display port state command and you can find the ports has been bound with the alarm profile. Profile 1 is for activating the two-wire SHDSL port. Prerequisite The port for configuring the SHDSL multi-pair binding must be deactivated and cannot be configured with any service port. Context Each SHDSL line of the MA5600 is associated with a specific channel mode. Each group contains four ports. The ports for the multi-pair binding must belong to the same group. Context Each SHDSL line of the MA5600 is associated with a specific channel mode.. In the PTM port encapsulation mode. configuring power backoff. The configuration here refers to the operation of activating and deactivating a port. You need to configure the parameters of each port respectively. When you configure the SHDSL EFM multi-port binding. The bound ports are independent from each other. The rate is the summation of the ports. The purpose of configuring the SHDSL EFM multiple-port binding is to improve the line rate. shdsl line-profile add activate deactivate 22. set the binding type as EFM. Add an SHDSL line profile Activate an SHDSL port Deactivate an SHDSL port Run the Command. l Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-29 . The ports for the EFM multi-port binding must belong to the same group..9 Configuring the SHDSL EFM Multi-port Binding This operation enables you to configure the SHDSL multi-port binding. Prerequisite The port for configuring the SHDSL EFM multi-port binding must be deactivated and cannot be configured with any service port. the system supports the binding of up to four ports.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Example To configure ports 0. and performing a loopback and canceling a loopback on a port. and to add the main port to a service port. do as follows: huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#port bind m-pair 0-2 The M-Pair binding of port 0-2 is successful huawei(config)#service-port vlan 10 shdsl mode atm 0/5/0 vpi 0 vci 35 multi-serv ice user-encap pppoe rx-cttr 7 tx-cttr 7 Related Operation Table 22-8 lists the related operation for configuring the SHDSL multi-pair binding. Profile 103 is used to activate the port that is for EFM multi-port binding. Table 22-8 Related operation for configuring the SHDSL multi-pair binding To. l The SHEB board divides the 32 ports into eight groups in turn.. 1 and 2 of the SHDSL board in slot 0/5 as three-pair.. Each group contains four ports. A configuration table of SHDSL line profiles contains up to 103 line profiles. and is bound with a line profile. ----End Example To configure ports 0.. Step 2 Run the port bind command to configure the SHDSL EFM multi-port binding. Step 3 Run the service-port command to configure a service port. Add an SHDSL line profile Activate an SHDSL port Deactivate an SHDSL port Run the Command. 1 and 2 of the SHDSL board in slot 0/5 as EFM multi-port binding.. Huawei Technologies Proprietary Issue 04 (2007-11-30) 22-30 . do as follows: huawei(config)#interface shl 0/5 huawei(config-if-shl-0/5)#port bind efm 0-2 The EFM bonding of port 0-2 is successful huawei(config)#service-port vlan 10 shdsl mode ptm 0/5/0 multi-serv ice user-encap pppoe rx-cttr 1 tx-cttr 1 huawei(config)#service-port vlan 10 shdsl mode ptm 0/5/1 multi-serv ice user-encap pppoe rx-cttr 1 tx-cttr 1 huawei(config)#service-port vlan 10 shdsl mode ptm 0/5/2 multi-serv ice user-encap pppoe rx-cttr 1 tx-cttr 1 Related Operation Table 22-9 lists the related operation for configuring the SHDSL EFM multi-port binding. Table 22-9 Related operation for configuring the SHDSL EFM multi-port binding To. shdsl line-profile add activate deactivate 22.10 Activating an SHDSL Port This operation enables you to activate an SHDSL port for service transmission.. such as upstream/downstream line rate and SNR margin.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the interface shl command to enter the SHDSL mode. Context l Activating (or activation) refers to the training between the STU-C and the STU-R. During the training process. the system will check the line distance and line state based on settings included in the line profile. Prerequisite There is a suitable SHDSL line profile.. and to add service ports to each port respectively. The STU-C negotiates with the STU-R to check whether the devices can work well under the existing conditions. and then activate it using the profile with the desired parameters. Deactivate an SHDSL port Loopback an SHDSL port Run the Command. do as follows: huawei(config-if-shl-0/5)#activate 0 1 Run the display port state command to query the SHDSL port information. Table 22-10 Related operations for activating an SHDSL port To. l l l l Procedure Step 1 Run the activate command to activate an SHDSL port. When the training succeeds. the system uses the default line profile. huawei(config-if-shl-0/5)#display port state 0 --------------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status --------------------------------------------------------------------------0 Activated Active 1 1 Normal None Normal --------------------------------------------------------------------------- Related Operation Table 22-10 lists the related operations for activating an SHDSL port. Step 2 Run the display port state command to query the information of the SHDSL port.. the communication is terminated. deactivate loopback 22.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 22 Configuring the SHDSL Service If the training succeeds. and the ATU-C is in the listening state. the port works in activated state. you must deactivate the port first. namely profile 1. At the moment. Once the STU-R gets online.11 Querying an SHDSL Port This operation enables you to query the SHDSL port status to check the port conditions. an SHDSL port must be activated. Before transmitting service traffic. the port is activated.. If you intend to use new parameters for an activated port.. If no profile index is entered during the activation operation. the training process begins automatically. ----End Example To activate the SHDSL port 0 in slot 0/5 using line profile 1. When the STU-R gets offline. When the STU-R is online. If a port is to be activated for the first time. Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-31 . and is ready for service delivery. the STU-C can communicate with the STU-R. the activation process ends after the completion of the training. the system uses the profile bound with the port last time to activate the port.. Deactivate it and then reactivate it if the port is in activated state. Context The SHDSL port clock modes include: l l System clock synchronization Local clock synchronization The network synchronization reference (NSR) clock mode takes effect only when the port is reactivated.22 Configuring the SHDSL Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l An SHDSL port may be in activating. activated. do as follows: huawei(config-if-shl-0/5)#display port state 0 -------------------------------------------------------------------------Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status -------------------------------------------------------------------------0 Activating Active 1 1 Normal None Normal -------------------------------------------------------------------------- 22. deactivated or loopback state. but does not support that of the port level clock mode. The SHEA board supports the configuration of the board level clock mode. but does not support that of the board level clock mode. l l Activate it directly if the port is in deactivated state. Figure 22-9 shows the inter-conversion between the states. Figure 22-9 Inter-conversion between the SHDSL port states undo loopback Local loopback loopback activate activating deactivated deactivate Modem link failure or power-off deactivate activated undo loopback Modem training succeeds loopback Remote loopback Procedure Run the display port state command to query the SHDSL port state.12 Configuring the Clock Mode This operation enables you to configure the clock mode. 22-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To query the configuration and running status of the port 0/5/0. The SHEB boars supports the configuration of the port level clock mode. system> }:system { <cr>|snr-margin<K>|name<K> }: Command: shdsl line-profile quickadd 3 line two-wire clockmode system Add profile 3 successfully huawei(config-if-shl-)#deactivate 0 Deactivate port 0 successfully huawei(config-if-shl-)#activate 0 3 Send the command to activate port 0 successfully Issue 04 (2007-11-30) Huawei Technologies Proprietary 22-33 . Run the shdsl line-profile quickadd command to configure the clock mode when adding a profile. Are you sure to set clockmode? (y/n)[n]:y huawei(config-if-shl-0/5)#display clockmode Clock mode: System To configure the clock mode of port of the SHEB board as system clock synchronization mode. configure the port level clock mode as follows: ----End Example To configure the clock mode of the SHEA board in slot 0/5 as system clock synchronization mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 22 Configuring the SHDSL Service Procedure Step 1 For the SHEA board. Run the activate command to activate the port whose clock mode needs to be configured. Run the set clockmode command to configure the clock mode. Run the deactivate command to deactivate the port whose clock mode needs to be configured. 2. Run the display clockmode command to display the configured clock mode. 1. 3. Step 2 For the SHEB board. do as follows: huawei(config-if-shl-)#shdsl line-profile quickadd { profile-index<U><2. 2. configure the board level clock mode as follows: 1. do as follows: huawei(config-if-shl-0/5)#set clockmode system The new clockmode will not take effect until the port is activated again.99>|line<K>|ptm<K> }:3 { line<K>|ptm<K> }:line { two-wire<K>|four-wire<K>|six-wire<K>|eight-wire<K> }:two-wire { <cr>|rate<K>|psd<K>|transmission<K>|remote<K>|probe<K>|clockmode<K>|snr-margin <K>|name<K> }:clockmode { clockmode<E><free-run. . 23.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service 23 Configuring the VDSL2 Service About This Chapter This chapter describes the VDSL2 technology and how to configure the VDSL2 service on the MA5600.2 Configuration Example of the VDSL2 PPPoE/IPoE Service This example shows how to configure the VDSL2 PPPoE/IPoE service so that the user can access the Internet through the VDSL2 lines in the PPPoE/IPoE mode.3 Configuration Example of the VDSL2 IPoA Service This example shows how to configure the VDSL2 IPoA service so that the user can access the Internet through the VDSL2 lines in the IPoA mode. 23. 23. 23.7 Adding a VDSL2 Line Template This operation enables you to add a VDSL2 line template.1 Overview The section describes the service description and service specifications of VDSL2 service.9 Adding a VDSL2 Channel Alarm Profile This operation enables you to add a channel alarm profile containing alarm thresholds for channel parameters.4 Configuration Example of the VDSL2 PPPoA Service This example shows how to configure the VDSL2 PPPoA service so that the user can access the Internet through the VDSL2 lines in the PPPoA mode. 23. 23. Use the line profile to activate ports.6 Adding a VDSL2 Channel Profile This operation enables you to add a VDSL2 channel profile. After the alarm profile is configured successfully.8 Adding a VDSL2 Line Alarm Profile This operation enables you to configure a VDSL2 line alarm profile so as to include the majority of parameters of all the VDSL2 ports in a line alarm profile. 23. it can be directly used to activate the ports. The line profile binds the specified line profile and channel profile. 23. 23. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-1 .5 Adding a VDSL2 Line Profile This operation enables you to add a VDSL2 line profile so as to include the majority of parameters of all the VDSL2 ports in a line profile. 13 Querying a VDSL2 port This operation enables you to query a VDSL2 port. After the port is activated.12 Activating a VDSL2 Port This operation enables you to activate a VDSL2 port. 23-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .11 Binding an VDSL2 Alarm Template This operation enables you to bind a VDSL2 alarm template with a port. 23. 23. 23.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23. monitor the line according to the alarm thresholds set in the ADSL2+ alarm template.10 Adding a VDSL2 Alarm Template This operation enables you to add a VDSL2 alarm template. with the reach distance of up to 3.2 Configuration Example of the VDSL2 PPPoE/IPoE Service This example shows how to configure the VDSL2 PPPoE/IPoE service so that the user can access the Internet through the VDSL2 lines in the PPPoE/IPoE mode. the user bandwidth is the minimum value defined in the two profiles. Context The MA5600 can restrict the user bandwidth through the configured traffic profile or the configured VDSL2 line profile.1 Overview The section describes the service description and service specifications of VDSL2 service. Prerequisite l l l The network devices and lines are in the normal state. Service Description Very High Speed DSL2 (VDSL2) adopts symmetric or asymmetric transmission mode. refer to the chapter "VDSL2 Access" in the Feature Description. The upper layer router of the MA5600 has assigned the corresponding VLAN to the VDSL2 subscriber. If the two profiles work together.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service 23. For details on VDSL2. The VDEA board works in the normal state. With each VDSL2 board providing 32 VDSL2 ports. An MA5600 shelf can house up to 14 VDSL2 boards. Service Specifications l l The MA5600 provides the VDSL2 service through the VDEA board or the VDBD board. 23.5 km. a shelf supports up to 448 VDSL2 subscribers. Networking Figure 23-1 shows a sample network for configuring the VDSL2 PPPoE/IPoE service. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-3 . 1/24 Router V D E A GE 0/7/0 CON ETH MON PPPoE/IPoE access SCU Modem MA5600 PC Data Plan Table 23-1 lists the data plan for configuring the VDSL2 PPPoE/IPoE service. priority. and priority policy in the traffic profile. Table 23-1 Data plan for configuring the VDSL2 PPPoE/IPoE service Item Traffic profile Data Index: 7 Access rate: 3072 kbit/s Priority: 6 Priority policy: Pvc-Setting Remarks Configure the access rate. priority. you can specify the traffic profile to restrict the access rate. 23-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 23-1 Sample network for configuring the VDSL2 PPPoE/IPoE service Internet 10. When you add a service port. and priority policy.1.1. Index: 3 Target downstream/upstream SNR margin: 12 dB Minimum downstream/ upstream SNR margin: 0. - SCU board Upstream port: 0/7/0 Configuration Flowchart Figure 23-2 shows the flowchart for configuring the VDSL2 PPPoE/IPoE service. the VDSL port uses the line and channel parameters configured in the line profile to negotiate with the CPE. you can monitor the conditions of the lines connecting to the port. all the alarm thresholds are set as 0. When the two parties negotiate successfully.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Item Line profile Data Index: 3 Line profile: l l Remarks When the VDSL port is activated. By binding the threshold to a port. which indicates that line monitoring is disabled. VDEA board VDSL2 port: 0/2/0 VLAN ID: 10 Keep it consistent with the upper layer device.5 dB Other parameters: default setting Index: 3 Path mode: PTM Other parameters: default setting l l Channel profile: l l l Alarm profile Alarm profile index: 1 (the default Configure the alarm threshold of profile) the line parameter in the alarm profile. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-5 . the VDSL2 port is activated and the lines connecting to the port can bear services. In the default alarm profile. 23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 23-2 Flowchart for configuring the VDSL2 PPPoE/IPoE service Start Is there an appropriate traffic profile? Yes Create a VLAN and add a port to it No Add a traffic profile Is the port activated? Yes No Deactivate the VDSL2 port Yes Is there an appropriate line profile? Yes Is there an appropriate alarm profile? No No Add a line profile Add an alarm profile Bind the line profile Bind the alarm profile Activate the VDSL2 port Save the data End Procedure Step 1 Check whether there is an appropriate traffic profile. add one. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: ----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy ----------------------------------------------------------------------------- 23-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . If there is no appropriate traffic profile. G993.G993.413) > 6: VDSL (G993.HS (G992.1~5.2) > Please select (0~6) [1]:0 > Current configured modes: Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-7 .1~5. Create a VLAN.413.2) > 5: ADSL (G.DMT (G992. huawei(config)#vdsl line-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Transmission mode: > 0: Custom > 1: All (G992.992. Step 3 Configure the VDSL2 line profile.T1. 3.2) > 3: G.413.2) > 4: G. You can add line profiles as required.1/3/5.G993. 1.T1.G993. huawei(config)#service-port vlan 10 vdsl mode ptm 0/2/0 multi-service userencap pppoe rx-cttr 7 tx-cttr 7 NOTE If you need to enable services in bathes in actual configuration.T1. huawei(config)#port vlan 10 0/7 0 Add a service port to the VLAN.12 Adding Service Ports in Batches" to add service ports in batches.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service 0 1024 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------------------Traffic parameters for ATM service: ----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us ----------------------------------------------------------------------------0 cbr 2 1024 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/-----------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt ----------------------------------------------------------------------------huawei(config)#traffic table index 7 ip car 3072 priority 6 priority-policy pvcSetting Step 2 Create a VLAN and add ports to the VLAN. refer to "9. 2. huawei(config)#vlan 10 smart Add upstream port 0/7/0 to the VLAN. Suppose that the profile you added is profile 3.1~5.1/3/5.2) > 2: Full rate(G992. each band consists of two parameters[a.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL 7-AnnexM (1. for example:20.4 (Annex A/I) 6-G.1dB) [300]: Target SNR margin upstream (0~310 0.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:1 1-T1.992.1000-2000 Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y Please set the VDSL tone blackout range. You cannot set more than 8 ranges: Will you set mode-specific parameters? (y/n) [n]:y Current configured modes: 1-defmode Please select 1-Add 2-Modify 3-Save and quit [3]:1 2-adsl 3-adsl2Pots 4-adsl2Isdn 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended 8-vdsl2Pots 9-vdsl2Isdn Please select [2]:7 Maximum nominal aggregate transmit power downstream (0~205 0.1dB) [0]: Maximum SNR margin upstream (60~310 0. b]. the format : tone index(0~4095) or begin tone index-end tone index.2: 1-All Annex 2-AnnexA 3-AnnexC (1.992. the format : tone index(0~4095) or begin tone index-end tone index.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM (1. 2-auto(1~2) [2]: Will you set RFI notch configuration parameter? (y/n) [n]:y Please set the RFI notch band range. Begin tone index must not be more than end tone index.2 (Annex A/C) 4-G.1 (Annex A/B/C) 3-G.2-3) [1]:2-6 G.5 (Annex A/B/I/J) 7-G.2-3) [1]: G.992.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:3 Please select the form of transmit rate adaptation downstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Please select the form of transmit rate adaptation upstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Will you set SNR margin parameters? (y/n) [n]:y Target SNR margin downstream (0~310 0. and b value from 0 (coded as 0) to 40.400-700.992.1dB) [0]: Maximum SNR margin downstream (60~310 0.50-100.25-30. Parameter a value from 40 dBm/Hz (coded as 0) to 80.992.3 (Annex A/B/I/J/L) 5-G.1 (Annex A/B/C) 3-G.992.992.25-30. for example:20.992.992.2-3) [1]:2-6 G.992.5 (Annex A/B/I/J/M) 7-G.3 (Annex A/B/I/J/L/M) 5-G.5 (Annex A/B/I/J/M) 7-G.413 2-G.1dB) [60]: Minimum SNR margin downstream (0~60 0.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1.1 (Annex A/B/C) 3-G.4 (Annex A/I) 6-G.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1.992.993.2 (Annex A/C) 4-G.2-3) [1]:2-5 Current configured modes: 1-T1.01 dBm/Hz.95 dBm/Hz (coded as 4095) in steps of 0. You cannot set more than 16 ranges:1-20.992.01 dBm/Hz UPBO US1 band reference PSD parameter a(0~4095) [1650]: UPBO US1 band reference PSD parameter b(0~4095) [1020]: UPBO US2 band reference PSD parameter a(0~4095) [1650]: UPBO US2 band reference PSD parameter b(0~4095) [615]: UPBO US3 band reference PSD parameter a(0~4095) [0]: UPBO US3 band reference PSD parameter b(0~4095) [0]: Will you force the CPE to use the electrical length to compute the UPBO: 1-forced.413 2-G.2-3) [1]: G.2 (Annex A/B/C) Please select (1.2-3) [1]: G.992.95 dBm/Hz (coded as 4095) in steps of 0.2 (Annex A/C) 4-G.1dB) [300]: Will you set DPBO parameters? (y/n)[n]:y DPBO E-side electrical length (0~511 0.23 Configuring the VDSL2 Service > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > > > > > > > > > > > > > > > > > > > 1-T1.992.1dB) [60]: Minimum SNR margin upstream (0~60 0.4 (Annex A/I) 6-G.993.992.992.992.5dB) [0]: Will you set UPBO parameters? (y/n)[n]:y UPBO reference PSD per band.1dBm) [145]: 23-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) .992. Begin tone index must not be more than end tone index.993.413 2-G.992.3 (Annex A/B/I/J/L/M) 5-G. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-9 . Bind the configured line profile with the channel profile. Suppose that VDSL2 channel profile 3 is added. huawei(config)#interface vdsl 0/2 huawei(config-if-vdsl-0/2)#activate 0 template-index 3 Step 7 Bind an alarm profile with the VDSL2 port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > 23 Configuring the VDSL2 Service Maximum nominal aggregate transmit power upstream (0~205 0. 3-Both (1~3) [3]:2 > Will you set the minimum impulse noise protection? (y/n) [n]:y > Minimum impulse noise protection downstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Minimum impulse noise protection upstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Will you set interleaving delay parameters? (y/n) [n]:y > Maximum interleaving delay downstream (0~200 ms) [20]: > Maximum interleaving delay upstream (0~200 ms) [20]: > Will you set parameters for rate? (y/n) [n]:y > Minimum transmit rate downstream (128~100000 Kbps) [128]: > Maximum transmit rate downstream (128~100000 Kbps) [100000]: > Minimum transmit rate upstream (128~100000 Kbps) [128]: > Maximum transmit rate upstream (128~100000 Kbps) [100000]: Add profile 3 successfully Step 5 Configure the VDSL2 line profile.1dBm) [145]: Will you set PSD mask value downstream parameter? (y/n) [n]: Will you set PSD mask value upstream parameter? (y/n) [n]: Current configured modes: 1-defmode 7-adsl2ReachExtended Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]: Add profile 3 successfully Step 4 Configure the VDSL2 channel profile. huawei(config)#vdsl channel-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Data path mode 1-ATM. Suppose that the index of the line profile is 3. 2-PTM. huawei(config)#vdsl line-template add 3 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the template (y/n) [n]: > Please set the line-profile index (1~128) [1]:3 > Will you set channel configuration parameters? (y/n) [n]:y > Please set the channel number (1~2) [1]: > Channel1 configuration parameters: > Please set the channel-profile index (1~128) [1]:3 Add template 3 successfully Step 6 Activate VDSL2 port 0/2/0. Use line profile 3 to activate port 0. and enables IPoA/PPPoA users to transparently access the upper layer IP network. the user can access the Internet in the PPPoE/IPoE mode. huawei(config)#save ----End Result After the configuration. By default. The MA5600 can restrict the user bandwidth through the configured traffic profile or the configured VDSL2 line profile. If the two profiles work together. The upper layer router of the MA5600 has assigned the corresponding VLAN to the VDSL2 subscriber. each port is bound with alarm profile 1. To switch from a dynamic address to a static address in the IPoA mode. Context l With the development of the IP network. 23. The VDEA board works in the normal state. the default alarm profile is adopted. the application service of IPoA/PPPoA users is the common Internet service. A VDSL2 alarm profile takes effect only when it is bound with a port. the user bandwidth is the minimum value defined in the two profiles. To be compatible with the user side modems that adopt the ATM as the access mode. run the vdsl alarmtemplate add 2 command to add alarm profile 2. Prerequisite l l l The network devices and lines are in the normal state. IP access becomes the mainstream access mode in DSLAMs. and then adopt the IPoA static address encapsulation. select the dynamic IP address (without specifying the source IP address) or the static IP address (specifying the source IP address) for the packets. 23-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Currently.3 Configuration Example of the VDSL2 IPoA Service This example shows how to configure the VDSL2 IPoA service so that the user can access the Internet through the VDSL2 lines in the IPoA mode. you must adopt LLCBridge encapsulation first. If the default alarm profile is not adopted and you need to adopt alarm profile 2. In the case of IPoA access.23 Configuring the VDSL2 Service NOTE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l l In this example. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol. and then run the alarm-config 0 2 command to bind the profile with the VDSL2 port. l l l Networking Figure 23-3 shows a sample network for configuring the VDSL2 IPoA service. l Step 8 Save the data. 1. When you add a service port. you can specify the traffic profile to restrict the access rate. priority. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-11 . and priority policy.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Figure 23-3 Sample network for configuring the VDSL2 IPoA service Internet 10. priority. and priority policy in the traffic profile. Table 23-2 Data plan for configuring the VDSL2 IPoA service Item Traffic profile Data Index: 7 Access rate: 3072 kbit/s Priority: 6 Priority policy: Pvc-Setting Remarks Configure the access rate.1/24 Router V D E A GE 0/7/0 CON ETH MON IPoA access SCU Modem MA5600 PC Data Plan Table 23-2 lists the data plan for configuring the VDSL2 IPoA service.1. 23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Line profile Data Index: 3 Line profile: l l Remarks When the VDSL port is activated.1. you can monitor the conditions of the lines connecting to the port. the VDSL port uses the line and channel parameters configured in the line profile to negotiate with the CPE. When the two parties negotiate successfully. In the default alarm profile.5 dB Other parameters: default setting Index: 3 Path mode: PTM Other parameters: default setting l l Channel profile: l l l Alarm profile Alarm profile index: 1 (the default Configure the alarm threshold of profile) the line parameter in the alarm profile. 23-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . VDEA board VDSL2 port: 0/2/0 VLAN ID: 10 Keep it consistent with the upper layer device.1. By binding the threshold to a port. SCU board Default IPoA gateway Upstream port: 0/7/0 IP address: 10. all the alarm thresholds are set as 0. Index: 3 Target downstream/upstream SNR margin: 12 dB Minimum downstream/ upstream SNR margin: 0. which indicates that line monitoring is disabled. It is the IP address of the upper layer router.1/24 Configuration Flowchart Figure 23-4 shows the flowchart for configuring the VDSL2 IPoA service. the VDSL2 port is activated and the lines connecting to the port can bear services. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Figure 23-4 Flowchart for configuring the VDSL2 IPoA service Start Is there an appropriate traffic profile? Yes Create a VLAN and add a port to it No Add a traffic profile No Is the port activated? Yes Deactivate the VDSL2 port Is there an appropriate line Yes profile? No Add a line profile Is there an appropriate alarm Yes profile? No Add an alarm profile Bind the line profile Bind the alarm profile Activate the VDSL2 port Configure the MAC address pool Enable the IPoA protocol conversion Configure the IPoA default gateway Set the encapsulation mode Save the data End NOTE When adding a service port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-13 . you can select the ATM or PTM as the data path mode. The PTM data path mode does not support the PPPoA and IPoA modes. huawei(config)#vdsl line-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected 23-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Suppose that the profile you added is profile 3. add one. and add upstream port 0/7/0 to it. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: Command: display traffic table from-index 0 Traffic parameters for IP service: ----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy ----------------------------------------------------------------------------0 1024 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------------------Traffic parameters for ATM service: ----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us ----------------------------------------------------------------------------0 cbr 2 1024 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/-----------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt ----------------------------------------------------------------------------huawei(config)#traffic table index 7 ip car 3072 priority 6 priority-policy pvcSetting Step 2 Create VLAN 10. refer to "9.12 Adding Service Ports in Batches" to add service ports in batches. Step 4 Configure the VDSL2 line profile. You can add line profiles as required. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 Step 3 Add a service port to the VLAN. huawei(config)#service-port vlan 10 vdsl mode atm 0/2/0 vpi 0 vci 35 rx-cttr 7 txcttr 7 NOTE If you need to enable services in bathes in actual configuration.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Check whether there is an appropriate traffic profile. If there is no appropriate traffic profile. 993.992.413 2-G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1.2) Please select (0~6) [1]:0 Current configured modes: 1-T1.3 (Annex A/B/I/J/L/M) 5-G.3 (Annex A/B/I/J/L/M) 5-G.992.G993. Begin tone index must not be more than end tone index.5 (Annex A/B/I/J) 7-G.1dB) [0]: Maximum SNR margin downstream (60~310 0.T1.1dB) [300]: Target SNR margin upstream (0~310 0.992.50-100. and b value from 0 (coded as 0) to 40.2-3) [1]:2-5 Current configured modes: 1-T1.992.25-30.2-3) [1]: G.4: 1-All Annex 2-AnnexA 3-AnnexI (1.4 (Annex A/I) 6-G.G993.992.992.1dB) [60]: Minimum SNR margin downstream (0~60 0. for example:20.2) 4: G.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 23 Configuring the VDSL2 Service > > > > > > > > > > > > > > > > > Do you want to name the profile (y/n) [n]: Transmission mode: 0: Custom 1: All (G992.2 (Annex A/C) 4-G.2-3) [1]: G.1~5.T1.413) 6: VDSL (G993.1 (Annex A/B/C) 3-G.2-3) [1]: G. You cannot set more than Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-15 .992.1000-2000 Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y Please set the VDSL tone blackout range.1 (Annex A/B/C) 3-G.992. the format : tone index(0~4095) or begin tone index-end tone index.992.992.2-3) [1]:2-6 G.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM (1.DMT (G992.25-30.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:1 1-T1.2: 1-All Annex 2-AnnexA 3-AnnexC (1.993.2) 5: ADSL (G.992.1~5.01 dBm/Hz UPBO US1 band reference PSD parameter a(0~4095) [1650]: UPBO US1 band reference PSD parameter b(0~4095) [1020]: UPBO US2 band reference PSD parameter a(0~4095) [1650]: UPBO US2 band reference PSD parameter b(0~4095) [615]: UPBO US3 band reference PSD parameter a(0~4095) [0]: UPBO US3 band reference PSD parameter b(0~4095) [0]: Will you force the CPE to use the electrical length to compute the UPBO: 1-forced.1/3/5.2-3) [1]:2-6 G.400-700.993.5dB) [0]: Will you set UPBO parameters? (y/n)[n]:y UPBO reference PSD per band.2 (Annex A/C) 4-G.992.992.3 (Annex A/B/I/J/L) 5-G.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL 7-AnnexM (1.G993. You cannot set more than 16 ranges:1-20.992.1dB) [60]: Minimum SNR margin upstream (0~60 0.1/3/5.01 dBm/Hz.992.413 2-G.T1.1~5.413 2-G.992.1dB) [300]: Will you set DPBO parameters? (y/n)[n]:y DPBO E-side electrical length (0~511 0.5 (Annex A/B/I/J/M) 7-G. 2-auto(1~2) [2]: Will you set RFI notch configuration parameter? (y/n) [n]:y Please set the RFI notch band range.95 dBm/Hz (coded as 4095) in steps of 0.1dB) [0]: Maximum SNR margin upstream (60~310 0.2) 3: G.2 (Annex A/C) 4-G.95 dBm/Hz (coded as 4095) in steps of 0. the format : tone index(0~4095) or begin tone index-end tone index.992.1 (Annex A/B/C) 3-G. each band consists of two parameters[a.992.992.5 (Annex A/B/I/J/M) 7-G.4 (Annex A/I) 6-G.413.4 (Annex A/I) 6-G. Begin tone index must not be more than end tone index.413.2) 2: Full rate(G992.G993.992.HS (G992.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:3 Please select the form of transmit rate adaptation downstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Please select the form of transmit rate adaptation upstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Will you set SNR margin parameters? (y/n) [n]:y Target SNR margin downstream (0~310 0. b]. Parameter a value from 40 dBm/Hz (coded as 0) to 80. for example:20.2 (Annex A/B/C) Please select (1. huawei(config)#vdsl channel-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Data path mode 1-ATM.1dBm) [145]: Maximum nominal aggregate transmit power upstream (0~205 0. Bind the configured line profile with the channel profile. 3-Both (1~3) [3]:1 > Will you set the minimum impulse noise protection? (y/n) [n]:y > Minimum impulse noise protection downstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Minimum impulse noise protection upstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Will you set interleaving delay parameters? (y/n) [n]:y > Maximum interleaving delay downstream (0~200 ms) [20]: > Maximum interleaving delay upstream (0~200 ms) [20]: > Will you set parameters for rate? (y/n) [n]:y > Minimum transmit rate downstream (128~100000 Kbps) [128]: > Maximum transmit rate downstream (128~100000 Kbps) [100000]: > Minimum transmit rate upstream (128~100000 Kbps) [128]: > Maximum transmit rate upstream (128~100000 Kbps) [100000]: Add profile 3 successfully Step 6 Configure the VDSL2 line profile. 2-PTM.23 Configuring the VDSL2 Service > > > > > > > > > > > > > > > > > > SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 8 ranges: Will you set mode-specific parameters? (y/n) [n]:y Current configured modes: 1-defmode Please select 1-Add 2-Modify 3-Save and quit [3]:1 2-adsl 3-adsl2Pots 4-adsl2Isdn 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended 8-vdsl2Pots 9-vdsl2Isdn Please select [2]:7 Maximum nominal aggregate transmit power downstream (0~205 0. huawei(config)#vdsl line-template add 3 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the template (y/n) [n]: > Please set the line-profile index (1~128) [1]:3 > Will you set channel configuration parameters? (y/n) [n]:y > Please set the channel number (1~2) [1]: > Channel1 configuration parameters: 23-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1dBm) [145]: Will you set PSD mask value downstream parameter? (y/n) [n]: Will you set PSD mask value upstream parameter? (y/n) [n]: Current configured modes: 1-defmode 7-adsl2ReachExtended Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]: Add profile 3 successfully Step 5 Configure the VDSL2 channel profile. Suppose that VDSL2 channel profile 3 is added. Suppose that the index of the line profile is 3. huawei(config)#interface vdsl 0/2 huawei(config-if-vdsl-0/2)#activate 0 template-index 3 Step 8 Bind an alarm profile with the VDSL2 port. huawei(config)#save ----End Result After the configuration. The upper layer router of the MA5600 has assigned the corresponding VLAN to the VDSL2 subscriber. Use line profile 3 to activate port 0. huawei(config)#mac-pool 0 0000-0000-0001 Step 10 Enable the IPoA protocol conversion. run the vdsl alarmtemplate add 2 command to add alarm profile 2.4 Configuration Example of the VDSL2 PPPoA Service This example shows how to configure the VDSL2 PPPoA service so that the user can access the Internet through the VDSL2 lines in the PPPoA mode. which begins with 0000-0000-0001. huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type ipoa llc srcIP 10. If the default alarm profile is not adopted and you need to adopt alarm profile 2. the user can access the Internet in the IPoA mode.1. and then run the alarm-config 0 2 command to bind the profile with the VDSL2 port. Huawei Technologies Proprietary 23-17 Issue 04 (2007-11-30) .1 Step 12 Set the encapsulation mode of VDSL2 port 0/2/0 as IPoA-LLC. 23. huawei(config)#ipoa enable Step 11 Configure the default IPoA gateway. A VDSL2 alarm profile takes effect only when it is bound with a port.1.1. The VDEA board works in the normal state. each port is bound with alarm profile 1. Prerequisite l l l The network devices and lines are in the normal state.20 Step 13 Save the data. Configure MAC address pool 0. By default.1. l Step 9 Configure the MAC address pool. huawei(config)#ipoa default gateway 10. NOTE l l In this example.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > 23 Configuring the VDSL2 Service Please set the channel-profile index (1~128) [1]:3 Add template 3 successfully Step 7 Activate VDSL2 port 0/2/0. the default alarm profile is adopted. l l Networking Figure 23-5 shows a sample network for configuring the VDSL2 PPPoA service. the user bandwidth is the minimum value defined in the two profiles.1. The MA5600 can restrict the user bandwidth through the configured traffic profile or the configured VDSL2 line profile. Currently. To be compatible with the user side modems that adopt the ATM as the access mode.1. IP access becomes the mainstream access mode in DSLAMs. the application service of IPoA/PPPoA users is the common Internet service. the MA5600 supports the conversion between the IPoA protocol and the PPPoA protocol and that between the IPoE and the PPPoE protocol. 23-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1/24 Router V D E A GE 0/7/0 CON ETH MON PPPoA access SCU Modem MA5600 PC Data Plan Table 23-3 lists the data plan for configuring the VDSL2 PPPoA service. and enables IPoA/PPPoA users to transparently access the upper layer IP network. Figure 23-5 Sample network for configuring the VDSL2 PPPoA service Internet 10.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l With the development of the IP network. If the two profiles work together. 1/24 Configuration Flowchart Figure 23-6 shows the flowchart for configuring the VDSL2 PPPoA service. priority. which indicates that line monitoring is disabled. When the VDSL port is activated. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-19 . SCU board Default PPPoA gateway Upstream port: 0/7/0 IP address: 10. In the default alarm profile.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Table 23-3 Data plan for configuring the VDSL2 PPPoA service Item Traffic profile Data Index: 7 Access rate: 3072 kbit/s Priority: 6 Priority policy: Pvc-Setting Line profile Index: 3 Line profile: l l Remarks Configure the access rate. When you add a service port. priority. you can specify the traffic profile to restrict the access rate.1. the VDSL port uses the line and channel parameters configured in the line profile to negotiate with the CPE. VDEA board VDSL2 port: 0/2/0 VLAN ID: 10 Keep it consistent with the upper layer device. you can monitor the conditions of the lines connecting to the port. It is the IP address of the upper layer router. and priority policy in the traffic profile. When the two parties negotiate successfully. Index: 3 Target downstream/upstream SNR margin: 12 dB Minimum downstream/ upstream SNR margin: 0. and priority policy.1. the VDSL2 port is activated and the lines connecting to the port can bear services. all the alarm thresholds are set as 0.5 dB Other parameters: default setting Index: 3 Path mode: ATM Other parameters: default setting l l Channel profile: l l l Alarm profile Alarm profile index: 1 (the default Configure the alarm threshold of profile) the line parameter in the alarm profile. By binding the threshold to a port. Procedure Step 1 Check whether there is an appropriate traffic profile. The PTM data path mode does not support the PPPoA and IPoA modes. If there is no appropriate traffic profile. huawei(config)#display traffic table from-index 0 { <cr>|to-index<K> }: 23-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . you can select the ATM or PTM as the data path mode. add one.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 23-6 Flowchart for configuring the VDSL2 PPPoA service Start Is there an appropriate traffic profile? Yes Create a VLAN and add a port to it No Add a traffic profile No Is the port activated? Yes Deactivate the VDSL2 port Yes Is there an appropriate line profile? Yes Is there an appropriate alarm profile? No No Add a line profile Add an alarm profile Bind the line profile Bind the alarm profile Activate the VDSL2 port Configure the MAC address pool Enable the IPoA protocol conversion Configure the IPoA default gateway Set the encapsulation mode Save the data End NOTE When adding a service port. DMT (G992.G993.1/3/5.2) > 3: G.G993. huawei(config)#vlan 10 smart huawei(config)#port vlan 10 0/7 0 Step 3 Add a service port to the VLAN.1~5.HS (G992.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Command: 23 Configuring the VDSL2 Service display traffic table from-index 0 Traffic parameters for IP service: ----------------------------------------------------------------------------TID CAR(kbps) Priority Pri-Policy ----------------------------------------------------------------------------0 1024 6 tag-pri 1 2496 6 tag-pri 2 512 0 tag-pri 3 576 2 tag-pri 4 64 4 tag-pri 5 2048 0 tag-pri 6 -0 tag-pri ----------------------------------------------------------------------------Traffic parameters for ATM service: ----------------------------------------------------------------------------TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE Type Type kbps kbps kbps kbps cells 1/10us ----------------------------------------------------------------------------0 cbr 2 1024 -----off/off/-1 cbr 2 2500 -----off/off/-2 ubr 2 512 -----on /on /-3 nrt-vbr 5 1200 -600 -250 -on /on /-4 rt-vbr 15 128 --64 300 10000000 on /on /off 5 ubr 2 2048 -----on /on /-6 ubr 1 ------off/off/-----------------------------------------------------------------------------Total Num : 7 Traffic type definition: 1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr 4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr 7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr 10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt 13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt ----------------------------------------------------------------------------huawei(config)#traffic table index 7 ip car 3072 priority 6 priority-policy pvcSetting Step 2 Create VLAN 10.2) > 5: ADSL (G. You can add line profiles as required. huawei(config)#service-port vlan 10 vdsl mode atm 0/2/0 vpi 0 vci 35 rx-cttr 7 txcttr 7 NOTE If you need to enable services in bathes in actual configuration.T1.413.413.413) Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-21 .2) > 2: Full rate(G992.992.G993. and add upstream port 0/7/0 to it.2) > 4: G. huawei(config)#vdsl line-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Transmission mode: > 0: Custom > 1: All (G992.T1.1~5.1/3/5.1~5. Step 4 Configure the VDSL2 line profile. Suppose that the profile you added is profile 3.T1. refer to "9.G993.12 Adding Service Ports in Batches" to add service ports in batches. 4 (Annex A/I) 6-G.1dB) [300]: Target SNR margin upstream (0~310 0. each band consists of two parameters[a.992.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:3 Please select the form of transmit rate adaptation downstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Please select the form of transmit rate adaptation upstream: 1-fixed 2-adaptAtStartup (1~2) [2]: Will you set SNR margin parameters? (y/n) [n]:y Target SNR margin downstream (0~310 0.5 (Annex A/B/I/J) 7-G.4 (Annex A/I) 6-G.1dB) [0]: Maximum SNR margin downstream (60~310 0.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM (1.1 (Annex A/B/C) 3-G.1dB) [60]: Minimum SNR margin downstream (0~60 0.50-100.992. the format : tone index(0~4095) or begin tone index-end tone index. Begin tone index must not be more than end tone index. Begin tone index must not be more than end tone index.992.1dB) [0]: Maximum SNR margin upstream (60~310 0.3 (Annex A/B/I/J/L) 5-G. for example:20.3 (Annex A/B/I/J/L/M) 5-G.95 dBm/Hz (coded as 4095) in steps of 0.1000-2000 Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y Please set the VDSL tone blackout range.2 (Annex A/C) 4-G. You cannot set more than 16 ranges:1-20.992.413 2-G.5dB) [0]: Will you set UPBO parameters? (y/n)[n]:y UPBO reference PSD per band.992.993. b].413 2-G.992.25-30. and b value from 0 (coded as 0) to 40.992.2 (Annex A/B/C) Please select 1-Modify 2-Delete 3-Save and quit [3]:1 1-T1.2-3) [1]: G. Parameter a value from 40 dBm/Hz (coded as 0) to 80.1 (Annex A/B/C) 3-G.1 (Annex A/B/C) 3-G.992.95 dBm/Hz (coded as 4095) in steps of 0.2 (Annex A/C) 4-G.992.992.3 (Annex A/B/I/J/L/M) 5-G.2: 1-All Annex 2-AnnexA 3-AnnexC (1.01 dBm/Hz UPBO US1 band reference PSD parameter a(0~4095) [1650]: UPBO US1 band reference PSD parameter b(0~4095) [1020]: UPBO US2 band reference PSD parameter a(0~4095) [1650]: UPBO US2 band reference PSD parameter b(0~4095) [615]: UPBO US3 band reference PSD parameter a(0~4095) [0]: UPBO US3 band reference PSD parameter b(0~4095) [0]: Will you force the CPE to use the electrical length to compute the UPBO: 1-forced.2-3) [1]: G. 2-auto(1~2) [2]: Will you set RFI notch configuration parameter? (y/n) [n]:y Please set the RFI notch band range.4: 1-All Annex 2-AnnexA 3-AnnexI (1. the format : tone index(0~4095) or begin tone index-end tone index.1dB) [300]: Will you set DPBO parameters? (y/n)[n]:y DPBO E-side electrical length (0~511 0.4 (Annex A/I) 6-G.23 Configuring the VDSL2 Service > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > > > > > > > > > > > > > > > > 6: VDSL (G993.01 dBm/Hz.992.2-3) [1]:2-5 Current configured modes: 1-T1.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL 7-AnnexM (1.413 2-G.400-700.2-3) [1]:2-6 G.2) Please select (0~6) [1]:0 Current configured modes: 1-T1.2 (Annex A/C) 4-G.5 (Annex A/B/I/J/M) 7-G.992.993.25-30.992.2-3) [1]: G.992.1dB) [60]: Minimum SNR margin upstream (0~60 0.5 (Annex A/B/I/J/M) 7-G.2 (Annex A/B/C) Please select (1.2-3) [1]:2-6 G.992. for example:20.993.992. You cannot set more than 8 ranges: Will you set mode-specific parameters? (y/n) [n]:y Current configured modes: 1-defmode Please select 1-Add 2-Modify 3-Save and quit [3]:1 2-adsl 3-adsl2Pots 4-adsl2Isdn 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended 8-vdsl2Pots 9-vdsl2Isdn 23-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .992.992.992. 1dBm) [145]: Will you set PSD mask value downstream parameter? (y/n) [n]: Will you set PSD mask value upstream parameter? (y/n) [n]: Current configured modes: 1-defmode 7-adsl2ReachExtended Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]: Add profile 3 successfully Step 5 Configure the VDSL2 channel profile. Use line profile 3 to activate port 0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-23 . huawei(config)#vdsl channel-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Data path mode 1-ATM. Bind the configured line profile with the channel profile.1dBm) [145]: Maximum nominal aggregate transmit power upstream (0~205 0. huawei(config)#vdsl line-template add 3 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the template (y/n) [n]: > Please set the line-profile index (1~128) [1]:3 > Will you set channel configuration parameters? (y/n) [n]:y > Please set the channel number (1~2) [1]: > Channel1 configuration parameters: > Please set the channel-profile index (1~128) [1]:3 Add template 3 successfully Step 7 Activate VDSL2 port 0/2/0. Suppose that VDSL2 channel profile 3 is added.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > 23 Configuring the VDSL2 Service Please select [2]:7 Maximum nominal aggregate transmit power downstream (0~205 0. Suppose that the index of the line profile is 3. 3-Both (1~3) [3]:1 > Will you set the minimum impulse noise protection? (y/n) [n]:y > Minimum impulse noise protection downstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Minimum impulse noise protection upstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Will you set interleaving delay parameters? (y/n) [n]:y > Maximum interleaving delay downstream (0~200 ms) [20]: > Maximum interleaving delay upstream (0~200 ms) [20]: > Will you set parameters for rate? (y/n) [n]:y > Minimum transmit rate downstream (128~100000 Kbps) [128]: > Maximum transmit rate downstream (128~100000 Kbps) [100000]: > Minimum transmit rate upstream (128~100000 Kbps) [128]: > Maximum transmit rate upstream (128~100000 Kbps) [100000]: Add profile 3 successfully Step 6 Configure the VDSL2 line profile. 2-PTM. l l Configuration Flowchart Figure 23-7 shows the flowchart for adding a VDSL2 line profile. the user can access the Internet in the PPPoA mode. NOTE l l In this example. which begins with 0000-0000-0001. SNR margin.5 Adding a VDSL2 Line Profile This operation enables you to add a VDSL2 line profile so as to include the majority of parameters of all the VDSL2 ports in a line profile. make sure that the settings comply with mini. 23. and then run the alarm-config 0 2 command to bind the profile with the VDSL2 port. each port is bound with alarm profile 1. SNR margin ≤ target SNR margin ≤ max. If the default alarm profile is not adopted and you need to adopt alarm profile 2. huawei(config)#encapsulation 0/2/0 vpi 0 vci 35 type pppoa llc Step 12 Save the data. Configure MAC address pool 0. A VDSL2 alarm profile takes effect only when it is bound with a port. huawei(config)#pppoa enable Step 11 Set the encapsulation mode of VDSL2 port 0/2/0 as PPPoA-LLC. When the downstream channel mode is fixed. 23-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . l Step 9 Configure the MAC address pool. the default alarm profile is adopted. Context l Up to 128 line profiles can be added for the MA5600. Line profile 1 is the default. the downstream maximum rate must be equal to the minimum rate. run the vdsl alarmtemplate add 2 command to add alarm profile 2. huawei(config)#save ----End Result After the configuration.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#interface vdsl 0/2 huawei(config-if-vdsl-0/2)#activate 0 template-index 3 Step 8 Bind an alarm profile with the VDSL2 port. huawei(config)#mac-pool 0 0000-0000-0001 Step 10 Enable the PPPoA protocol conversion. which can be modified but cannot be deleted. By default. When setting the upstream/downstream SNR margin. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Figure 23-7 Flowchart for adding a VDSL2 line profile Start No Name the profile? Yes Set the line profile No Set VDSL tone blackout configuration parameter? Yes Set VDSL tone blackout configuration parameter Set transmission mode Set mode-specific parameters for modem? Select the form of transmit rate adaptation downstream Yes Select the form of transmit rate adaptation upstream Select the form of transmit rate adaptation upstream Select the mode to be configured No Set maximum nominal aggregate transmit power downstream Set maximum nominal aggregate transmit power upstream Set SNR margin for modem? Yes Set target SNR margin downstream Set minimum SNR margin downstream Set maximum SNR margin downstream Set target SNR margin upstream Set minimum SNR margin upstream Set maximum SNR margin upstream No Set PSD mask value downstream parameter? Yes Set PSD mask value downstream parameter No Set PSD mask value upstream parameter? No Yes Set PSD mask value upstream parameter No Set PBO control upstream Set RFI notch configuration parameter? Yes Set RFI notch configuration parameter End Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-25 . 993.992.5 (Annex A/B/I/J/M) > 7-G. each band consists of two parameters[a.DMT (G992.T1.1dB) [0]: > Maximum SNR margin upstream (60~310 0.413.2 (Annex A/C) 4-G.992.992.1 (Annex A/B/C) > 3-G.2-3) [1]: > G. and b value from 0 (coded as 0) to 40.3 (Annex A/B/I/J/L/M) > 5-G.992.HS (G992.2 (Annex A/C) 4-G.G993.1dB) [60]: > Minimum SNR margin upstream (0~60 0.01 dBm/Hz > UPBO US1 band reference PSD parameter a(0~4095) [1650]: 23-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2) > 5: ADSL (G.T1.2-3) [1]: > G.1~5.992.2 (Annex A/B/C) > Please select (1.2: 1-All Annex 2-AnnexA 3-AnnexC (1.4: 1-All Annex 2-AnnexA 3-AnnexI (1.993.95 dBm/Hz (coded as 4095) in steps of 0.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM > (1.G993.992. b].992.2-3) [1]:2-6 > G.4 (Annex A/I) 6-G.993.5 (Annex A/B/I/J) > 7-G.413 2-G.992.992.4 (Annex A/I) 6-G.1 (Annex A/B/C) > 3-G.413.2-3) [1]: > G.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL > 7-AnnexM (1.2-3) [1]:2-6 > G.992.2) > 3: G.1/3/5.2) > 4: G.1/3/5.992.2-3) [1]:2-5 > Current configured modes: > 1-T1.992.992.5dB) [0]: > Will you set UPBO parameters? (y/n)[n]:y > UPBO reference PSD per band.1dB) [0]: > Maximum SNR margin downstream (60~310 0.992.1~5.992.992.413 2-G. Step 2 Run the display vdsl line-profile command to query the added VDSL2 line profile.1~5.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1. Parameter a value from 40 dBm/Hz (coded as 0) to 80.2) > 2: Full rate(G992. ----End To add VDSL2 line profile 3.01 dBm/Hz.5 (Annex A/B/I/J/M) > 7-G.1 (Annex A/B/C) > 3-G.413) > 6: VDSL (G993.2 (Annex A/B/C) > Please select 1-Modify 2-Delete 3-Save and quit [3]:3 > Please select the form of transmit rate adaptation downstream: > 1-fixed 2-adaptAtStartup (1~2) [2]: > Please select the form of transmit rate adaptation upstream: > 1-fixed 2-adaptAtStartup (1~2) [2]: > Will you set SNR margin parameters? (y/n) [n]:y > Target SNR margin downstream (0~310 0.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the vdsl line-profile add command to add a VDSL2 line profile.2 (Annex A/C) 4-G.T1.2) > Please select (0~6) [1]:0 > Current configured modes: > 1-T1.1dB) [300]: > Target SNR margin upstream (0~310 0.992.G993.1dB) [60]: > Minimum SNR margin downstream (0~60 0.992.413 2-G.95 dBm/Hz (coded as 4095) in steps of 0.992.1dB) [300]: > Will you set DPBO parameters? (y/n)[n]:y > DPBO E-side electrical length (0~511 0.3 (Annex A/B/I/J/L/M) > 5-G.3 (Annex A/B/I/J/L) > 5-G. do as follows: huawei(config)#vdsl line-profile add 3 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Transmission mode: > 0: Custom > 1: All (G992.992.G993.4 (Annex A/I) 6-G.2 (Annex A/B/C) > Please select 1-Modify 2-Delete 3-Save and quit [3]:1 > 1-T1. 1(Annex A/B/C) G.992.3 90.2 profile : Profile12a VDSL2 PSD class mask : AnnexB998-M1x-A(B8-1) Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-27 .1dBm) [145]: Will you set PSD mask value downstream parameter? (y/n) [n]: Will you set PSD mask value upstream parameter? (y/n) [n]: Current configured modes: 1-defmode 7-adsl2ReachExtended Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]: Add profile 3 successfully huawei(config)#display vdsl line-profile { <cr>|profile-index<L><1.1020 UPBO US2 band reference PSD parameters[a.25-30. Begin tone index must not be more than end tone index.993.0 4 1000 2000 4312.1dB) : 0 Maximum downstream SNR margin(0. 2-auto(1~2) [2]: Will you set RFI notch configuration parameter? (y/n) [n]:y Please set the RFI notch band range.1dB) : 300 Target SNR margin upstream(0.50-100.2(Annex A/B/C) Form of transmit rate adaptation downstream : AdaptAtStartup Form of transmit rate adaptation upstream : AdaptAtStartup Target SNR margin downstream(0.1000-2000 Will you set VDSL tone blackout configuration parameter? (y/n) [n]:y Please set the VDSL tone blackout range.992.25-30.615 UPBO US3 band reference PSD parameters[a. the format : tone index(0~4095) or begin tone index-end tone index.5 3 400 700 1725. You cannot set more than 16 ranges:1-20.2(Annex A/C) G.0 3023.3(Annex A/B/I/J/L) G.3 <defmode> G.1dB) : 60 Minimum SNR margin upstream(0.6 435.4(Annex A/I) G.128> }:3 Command: display vdsl line-profile 3 -----------------------------------------------------------------------------Profile index: 3 Name: VDSL LINE PROFILE 3 Transmission mode: T1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 23 Configuring the VDSL2 Service UPBO US1 band reference PSD parameter b(0~4095) [1020]: UPBO US2 band reference PSD parameter a(0~4095) [1650]: UPBO US2 band reference PSD parameter b(0~4095) [615]: UPBO US3 band reference PSD parameter a(0~4095) [0]: UPBO US3 band reference PSD parameter b(0~4095) [0]: Will you force the CPE to use the electrical length to compute the UPBO: 1-forced.5 2 50 100 215.993. for example:20.413 G.1dB) : 0 Maximum SNR margin upstream(0. for example:20. b] : 0.400-700.1dBm) [145]: Maximum nominal aggregate transmit power upstream (0~205 0.992. the format : tone index(0~4095) or begin tone index-end tone index. Begin tone index must not be more than end tone index.0 UPBO use of electrical length to compute UPBO : Auto RFI notch configuration： Number Start Tone Stop Tone Start Frequency End Frequency (KHz) (KHz) 1 1 20 4.1dB) : 300 UPBO US1 band reference PSD parameters[a.992.1dB) : 60 Minimum downstream SNR margin(0. b] : 1650. You cannot set more than 8 ranges: Will you set mode-specific parameters? (y/n) [n]:y Current configured modes: 1-defmode Please select 1-Add 2-Modify 3-Save and quit [3]:1 2-adsl 3-adsl2Pots 4-adsl2Isdn 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended 8-vdsl2Pots 9-vdsl2Isdn Please select [2]:7 Maximum nominal aggregate transmit power downstream (0~205 0. b] : 1650.5(Annex A/B/I/J) G.992.5 8629. 1dBm) : 145 Maximum nominal aggregate transmit power upstream(0.dmt (G992. G993.1dBm) : 145 Maximum nominal aggregate transmit power upstream(0. You can enter a profile index. after the line training. The profile index is unique. the line must be activated with the specified downstream activation rate.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide VDSL2 link use of U0 : Unused Maximum nominal aggregate transmit power downstream(0.2) 5: ADSL (G.2) AdaptAtS tartup mode The form of transmit rate adaptation upstream/ downstream Options include 1-fixed and 2-adaptAtStartup. G993.1~5.413. l Minimum SNR margin in downstream/upstream In the process of VDSL2 connection setup. G993. or press Enter to enable the system to allocate a profile name. In adaptAtStartup mode.1/3/5.1~5. if the calculated SNR margin is lower than the preset one. T1.413) 6: VDSL (G993. there are six VDSL2 working modes: l l l l l l l Default - profile-name VDSL2 transmission mode All 0: Custom 1: All (G992.T1. the downstream activation rate is between the minimum activation rate and the maximum activation rate.2) 2: Full rate(G992. or press Enter to enable the system to allocate a profile index. T1. Table 23-4 Parameters of a VDSL2 line profile Parameter profile-index Description You can enter a profile index.1/3/5. 0 dB 23-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2) 4: g. Currently. the line must be trained again. l In fixed mode.1dBm) : 145 ------------------------------------------------------------------------------ Parameter Description Table 23-4 lists the parameters of a VDSL2 line profile.2) 3: g. the port cannot be activated.992.hs (G992. but cannot change during the showtime. G993.1dBm) : 145 <adsl2ReachExtended> Maximum nominal aggregate transmit power downstream(0.1~5.413. Otherwise. 75 KHz. if the calculated target SNR margin of a VDSL2 line is higher than the preset maximum SNR margin. DPBO span minimum frequency. the target SNR margin must be adjusted based on the actual line conditions. the system will limit the downstream maximum SNR margin to the preset maximum value. It ranges from 0 to 511 and the actual range is 0 dB-255. l Default 300 dB Target SNR margin in downstream/upstream 60 dB DPBO parameters DPBO E-side electrical length. then DPBO function is disabled and you can not configure the other parameters. If it is configured as 0. Scalar C (Local cable feature parameter scalar C). Even if the system is the safer. Scalar A (Local cable feature parameter scalar A). DPBO assumed exchange PSD mask. DPBO span maximum frequency.3125 KHz. If the target SNR margin is large enough. The target SNR margin is the preserved SNR margin to ensure normal communication in the case of line SNR deterioration. So the actual range is 138 KHz -29997. So the actual range is 0 KHz-8832 KHz. the chance of the occurrence of the line error is reduced. DPBO minimum usable signal. Therefore.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Parameter Maximal SNR margin in downstream/upstream Description In the process of VDSL2 connection setup.3125 KHz. - l l l l l l l Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-29 . It ranges from 0 to 2048 with the unit of 4. Scalar B (Local cable feature parameter scalar B).5 dB. It ranges from 32 to 6956 with the unit of 4. the rate of data transmission is low. UPBO US2 band reference PSD parameter a (upstream band 2 reference Power Spectral Density parameter a). UPBO US1 band reference PSD parameter b (upstream band 1 reference Power Spectral Density parameter b). 23-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . it is defmode. Sets whether VTU-R adjusts the UPBO using the electric distance configured by VTU-O. Its value range is ditto. Up to 16 frequency ranges can be set. If you do not find it. UPBO US3 band reference PSD parameter a (upstream band 3 reference Power Spectral Density parameter a).96.01. Its value range is ditto. the parameter of the defmode to activate the line. UPBO US2 band reference PSD parameter b (upstream band 2 reference Power Spectral Density parameter b). Not all transmission modes shall be configured with corresponding power frequency spectrum profile parameters. Its value range is ditto. Its value range is ditto. set several frequency ranges.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameter UPBO parameters Description l Default - UPBO US1 band reference PSD parameter a (upstream band 1 reference Power Spectral Density parameter a). for a transmission mode. Each range consists of the start tone and the end tone. Each line can be configured with multiple transmission modes. UPBO US3 band reference PSD parameter b (upstream band 3 reference Power Spectral Density parameter b). To avoid radio interference. so the actual value range is from 40. l l l l l l mode-specific parameters for modem Power frequency spectrum setting. There must be a group of default power frequency spectrum parameters in a line. do not use these frequency ranges. Up to 16 frequency ranges can be set. It ranges from 4000 to 8096 with the unit of 0. that is. Its value range is ditto. Each transmission mode has its corresponding frequency parameters. - RFI notch configuration for modem RFI notch is used to avoid amateur radio interference. find the corresponding power frequency spectrum setting with priority. Mapping it to the profile.00 to 80. that is. As defined in the standard. use the default power frequency spectrum parameter. Notch the corresponding frequency ranges. This function guarantees that the SNR margin at the upstream channel receiver meets the upstream PSD mask requirements but reduces the transmit power.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-31 . Determine the PSD of each sub-carrier by interpolation between two breakpoints.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Parameter PSD mask value upstream/downstream Description The PSD mask defines the PSD of a series of breakpoints of transmit frequency bands. The system adopts noninteractive mode for the input of the parameter of the command. the system prompts that the modified profile takes effect immediately.. vdsl line-profile modify vdsl line-profile quickadd Quickly modify a VDSL2 line profile vdsl line-profile quickmodify 23. This function checks whether to enable the downstream power cutback function. After modification. The system adopts noninteractive mode for the input of the parameter of the command. The command serves as a complement to the vdsl lineprofile quickadd command. Auto PBO control upstream Power cutback downstream Disabled Related Operation Table 23-5 lists the related operations for adding a VDSL2 line profile.6 Adding a VDSL2 Channel Profile This operation enables you to add a VDSL2 channel profile.. There are up to 16 upstream breakpoints and there are up to 32 downstream breakpoints. vdsl line-profile delete Remarks You cannot delete the default line profiles or a referenced line profile.. The command serves as a complement to the vdsl lineprofile quickmodifycommand. Table 23-5 Related operations for adding a VDSL2 line profile To. Delete a VDSL2 line profile Modify a VDSL2 line profile Quickly add a VDSL2 line profile Run the Command. Default Null for both upstream and downstrea m PSD. You can specify the index or press Enter to enable the system to allocate an index. You can create channel profiles according to the line conditions. The parameters in the default profile are the data for reference. l l Configuration Flowchart Figure 23-8 shows the flowchart for adding a VDSL2 channel profile. The created channel profiles are numbered from 2 to 128. You can type in parameters in interactive mode.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l The system has a default channel profile. Figure 23-8 Flowchart for adding a VDSL2 channel profile Start Set interleaved delay for modem? No Yes Set maximum interleaved delay downstream Set maximum interleaved delay upstream No Name the profile? Yes Set the channel profile Select data path mode Set parameters for rate? Set the minimum impulse noise protection? Yes Set minimum impulse noise protection downstream Set minimum impulse noise protection upstream No No Yes Set minimum transmit rate downstream Set maximum transmit rate downstream Set minimum transmit rate upstream Set maximum transmit rate upstream Start 23-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-33 .128> }:2 Command: display vdsl channel-profile 2 -----------------------------------------------------------------------------Profile index: 2 Name: VDSL CHANNEL PROFILE 2 Data path mode : Both Minimum impulse noise protection downstream : NoProtection Minimum impulse noise protection upstream : NoProtection Maximum interleaving delay downstream(ms) : 20 Maximum interleaving delay upstream(ms) : 20 Minimum transmit rate downstream(Kbps) : 128 Maximum transmit rate downstream(Kbps) : 100000 Minimum transmit rate upstream(Kbps) : 128 Maximum transmit rate upstream(Kbps) : 100000 ------------------------------------------------------------------------------ Table 23-6 lists the parameters of a VDSL2 channel profile. ----End Example To add VDSL2 channel profile 2. huawei(config)#display vdsl channel-profile { <cr>|profile-index<L><1. 2-PTM.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Procedure Step 1 Run the vdsl channel-profile add command to add a VDSL2 channel profile. 3-Both (1~3) [3]: > Will you set the minimum impulse noise protection? (y/n) [n]:y > Minimum impulse noise protection downstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Minimum impulse noise protection upstream: > 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols > 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols > 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols > 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols > 17-fifteenSymbols 18-sixteenSymbols > Please select (1~18) [1]: > Will you set interleaving delay parameters? (y/n) [n]:y > Maximum interleaving delay downstream (0~200 ms) [20]: > Maximum interleaving delay upstream (0~200 ms) [20]: > Will you set parameters for rate? (y/n) [n]:y > Minimum transmit rate downstream (128~100000 Kbps) [128]: > Maximum transmit rate downstream (128~100000 Kbps) [100000]: > Minimum transmit rate upstream (128~100000 Kbps) [128]: > Maximum transmit rate upstream (128~100000 Kbps) [100000]: Add profile 2 successfully Query the added VDSL2 channel profile. huawei(config)#vdsl channel-profile add 2 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Data path mode 1-ATM. do as follows: Add VDSL2 channel profile 2. Step 2 Run the display vdsl channel-profile command to query the added channel profile. and set adapting the board to the mode supported.. the system prompts that the modified profile takes effect immediately.. 100000 kbit/s Related Operation Table 23-7 lists the related operations for adding a VDSL2 channel profile. 128 kbit/s Ranges from 128 kbit/s to 100000 kbit/s. You can enter a name or press Enter to enable the system to allocate a profile name..23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 23-6 Parameters of a VDSL2 channel profile Parameter profile-index Description You can enter a profile index. Ranges from 128 kbit/s to 100000 kbit/s. Default - profile-name Data path mode - Maximum interleaved delay downstream/ upstream Minimum impulse noise protection downstream/ upstream Minimum transmit rate downstream/ upstream Maximum transmit rate downstream/ upstream 20 ms There are 18 options for downstream/upstream. The first. vdsl channel-profile delete Remarks You cannot delete the default channel profiles or a referenced channel profile. If the set mode is different from the mode supported by the physical line. Table 23-7 Related operations for adding a VDSL2 channel profile To. or press Enter to enable the system to allocate a profile index. It ranges from 0 ms to 200 ms. Delete a VDSL2 channel profile Modify a VDSL2 channel profile Run the Command.. Interleaved delay in downstream or upstream. The profile index is unique. After modification. guarantee that the line activation with priority. vdsl channel-profile modify 23-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The command serves as a complement to the vdsl channel-profile add command. Step 2 Run the display vdsl line-template command to query the added line template. The command serves as a complement to the vdsl channel-profile modify command. You can type in parameters in interactive mode. You can create line profile according to the line conditions. Context l The system has a default line template.. The parameters in the default profile are the data for reference. Quickly modify a VDSL2 channel profile vdsl channel-profile quickmodify 23.. l l Procedure Step 1 Run the vdsl line-template add command to add a VDSL2 line template. The line profile binds the specified line profile and channel profile. vdsl channel-profile quickadd Remarks The system adopts noninteractive mode for the input of the parameter of the command. When creating a profile.  you can specify the index or press Enter to enable the system to allocate an idle index.. Quickly add a VDSL2 channel profile Run the Command. Prerequisite The line profile and the channel profile have been configured.7 Adding a VDSL2 Line Template This operation enables you to add a VDSL2 line template. The created channel profiles are numbered from 2 to 128.. Use the line profile to activate ports.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service To. do as follows: huawei(config)#vdsl line-template add 2 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the template (y/n) [n]: > Please set the line-profile index (1~128) [1]:3 > Will you set channel configuration parameters? (y/n) [n]:y Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-35 . The system adopts noninteractive mode for the input of the parameter of the command. ----End To add a VDSL2 line template. if you input a channel number that is different from the last channel number. 23-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This enables you to set the number of channels the line supports. The index of the configured line profile. huawei(config)#display vdsl line-template { <cr>|template-index<L><1. the system considers that you will reconfigure the following channel number. The profile index is unique. Related Operation Table 23-9 shows the related operations for configuring a VDSL2 line template. and then the configured parameters will be cleared. or press Enter to enable the system to allocate a profile index. When modifying the line template. Channel profile index The index of the configured channel profile. You can enter a name or press Enter to enable the system to allocate a profile name.23 Configuring the VDSL2 Service > > > SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Please set the channel number (1~2) [1]: Channel1 configuration parameters: Please set the channel-profile index (1~128) [1]:2 Add template 2 successfully Query the added VDSL2 line template.128> }:2 Command: display vdsl line-template 2 -----------------------------------------------------------------------------Template index: 2 Name: VDSL LINE TEMPLATE 2 Line profile index : 3 Channel1 profile index : 2 Channel1 rate adaptation ratio downstream : Channel1 rate adaptation ratio upstream : ------------------------------------------------------------------------------ Parameter Description Table 23-8 lists the parameters of a VDSL2 line template. You can configure the second channel only after you have configured the first channel. Table 23-8 Parameters of a VDSL2 line template Parameter Profile index Profile name Line profile index Channel number Description You can enter a line template index. The command serves as a complement to the vdsl line-template add command.8 Adding a VDSL2 Line Alarm Profile This operation enables you to configure a VDSL2 line alarm profile so as to include the majority of parameters of all the VDSL2 ports in a line alarm profile. After modification. The created line alarm profiles are numbered 2–50. it can be directly used to activate the ports. l Configuration Flowchart Figure 23-9 shows the flowchart for adding a VDSL2 line alarm profile. the MA5600 sends the alarm to the log host and the NMS. The command serves as a complement to the vdsl line-template modify command. When a statistic reaches the threshold. but you can modify it..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Table 23-9 Related operations for configuring a VDSL2 line template To. vdsl line-template delete vdsl line-template modify vdsl line-template quickadd Remarks You cannot delete a referenced extended line profile. When configuring a VDSL2 line alarm profile.... Delete a VDSL2 line template Modify a VDSL2 line template Quickly add a VDSL2 line template Run the Command. the system prompts that the modified profile takes effect immediately. Quickly modify a VDSL2 line template vdsl line-template quickmodify 23. you cannot delete profile 1. The system adopts non-interactive mode for the input of the parameter of the command. Context l The VDSL2 line alarm profile contains a series of alarm thresholds to measure and monitor the performance of an activated VDSL2 line. After the alarm profile is configured successfully. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-37 . The system adopts non-interactive mode for the input of the parameter of the command. 23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 23-9 Flowchart for adding a VDSL2 line alarm profile Start Name the profile? Yes Name the profile No Set the line thresholds for CPE? Yes Set the number of forward error correction seconds No Set the number of errored seconds No set the line thresholds for CO? Yes Set the number of forward error correction seconds Set the number of severely errored seconds Set the number of loss of signal seconds Set the number of unavailable seconds Set the number of failed full initialization Set the number of errored seconds Set the number of severely errored seconds Set the number of loss of signal seconds Set the number of unavailable seconds End Procedure Step 1 Run the vdsl alarm-profile add command to add a VDSL2 line alarm profile. huawei(config)#vdsl alarm-profile add 2 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Will you set the line thresholds for CO? (y/n) [n]:y 23-38 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 2 Run the display vdsl alarm-profile command to query the added VDSL2 line alarm profile. ----End Example To add a VDSL2 line alarm profile. do as follows: Add VDSL2 line alarm profile 2. if the forward error correction seconds exceed the threshold.50> }:2 Command: display vdsl alarm-profile 2 -----------------------------------------------------------------------------Profile index: 2 Name: VDSL ALARM PROFILE 2 <CO> The number of forward error correction seconds : 10 The number of errored seconds : 0 The number of severely errored seconds : 0 The number of loss of signal seconds : 0 The number of unavailable seconds : 0 <CPE> The number of forward error correction seconds : 10 The number of errored seconds : 0 The number of severely errored seconds : 0 The number of loss of signal seconds : 0 The number of unavailable seconds : 0 The number of failed full initialization : 5 ------------------------------------------------------------------------------ Table 23-10 lists parameters of a VDSL2 line alarm profile. The name of the configured line alarm profile. an alarm is reported. an alarm is reported. The profile index is unique.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide > > > > > > > > > > > > 23 Configuring the VDSL2 Service The number of forward error correction seconds (0~900) [0]:10 The number of errored seconds (0~900) [0]: The number of severely errored seconds (0~900) [0]: The number of loss of signal seconds (0~900) [0]: The number of unavailable seconds (0~900) [0]: Will you set the line thresholds for CPE? (y/n) [n]:y The number of forward error correction seconds (0~900) [0]:10 The number of errored seconds (0~900) [0]:10 The number of severely errored seconds (0~900) [0]: The number of loss of signal seconds (0~900) [0]: The number of unavailable seconds (0~900) [0]: The number of failed full initialization (0~900) [0]:5 Add profile 2 successfully Query the added VDSL2 line alarm profile. no alarm is reported. Within the 15-minute performance data collection period. Severely errored seconds Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-39 . Within the 15-minute performance data collection period. Table 23-10 Parameters of a VDSL2 line alarm profile Parameter Profile index Profile name Forward error correction seconds Errored seconds Description You can enter a profile index or press Enter to enable the system to designate an index for it. huawei(config)#display vdsl alarm-profile { <cr>|profile-index<L><1. no alarm is reported. Otherwise. Otherwise. if the severely errored seconds exceed the threshold. no alarm is reported. an alarm is reported. Within the 15-minute performance data collection period. Otherwise. if the errored seconds exceed the threshold. no alarm is reported. After modification. no alarm is reported.. The command serves as a complement to the vdsl alarm-profile add command. 23-40 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The system adopts non-interactive mode for the input of the parameter of the command. if the number of unavailable seconds exceeds the threshold. Context You cannot delete channel alarm profile 1. an alarm is reported. an alarm is reported. Table 23-11 Related operations for adding a VDSL2 line alarm profile To. an alarm is reported. Otherwise.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameter Loss of signal seconds Description Within the 15-minute performance data collection period.. the system prompts that the modified profile takes effect immediately. vdsl alarm-profile delete vdsl alarm-profile modify vdsl alarm-profile quickadd Remarks You cannot delete the default line alarm profiles or a referenced alarm profile. if the failed full initialization times exceed the threshold... Within the 15-minute performance data collection period.9 Adding a VDSL2 Channel Alarm Profile This operation enables you to add a channel alarm profile containing alarm thresholds for channel parameters. Quickly modify a VDSL2 line alarm profile vdsl alarm-profile quickmodify 23. The system adopts non-interactive mode for the input of the parameter of the command. no alarm is reported. The created alarm profiles are numbered 2 to 50. Delete a VDSL2 line alarm profile Modify a VDSL2 line alarm profile Quickly add a VDSL2 line alarm profile Run the Command. Within the 15-minute performance data collection period. The number of unavailable seconds Failed full initialization Related Operation Table 23-11 shows the related operations for adding a VDSL2 line alarm profile. Otherwise. Otherwise. The command serves as a complement to the vdsl alarm-profile modify command. but you can modify it. if the loss of signal seconds exceeds the threshold. do as follows: Add channel alarm profile 2. Figure 23-10 Flowchart for adding a VDSL2 channel alarm profile Start set the channel thresholds for the CPE? No Name the profile? Yes Set the alarm profile Yes Set the number of coding violations counts Set the number of corrected blocks counts Set the threshold of channel monitoring rate downstream Set the threshold of channel monitoring rate upstream No set the channel thresholds for the CO? Yes Set the number of coding violations counts Set the number of corrected blocks counts No End Procedure Step 1 Run the vdsl channel-alarm-profile add command to add a VDSL2 channel alarm profile. ----End Example To add channel alarm profile 2. huawei(config)#vdsl channel-alarm-profile add 2 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the profile (y/n) [n]: > Will you set the channel thresholds for CO? (y/n) [n]:y > The number of coding violations counts (0~60000) [0]:10 > The number of corrected blocks counts (0~60000) [0]: > Will you set the channel thresholds for CPE? (y/n) [n]:y > The number of coding violations counts (0~60000) [0]:10 > The number of corrected blocks counts (0~60000) [0]:10 > The threshold of channel monitoring rate downstream Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-41 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service Configuration Flowchart Figure 23-10 shows the flowchart for adding a VDSL2 channel alarm profile. Step 2 Run the display vdsl channel-alarm-profile command to query the added VDSL2 channel alarm profile. Within the 15-minute performance data collection period. an alarm is reported. If the activation rate of the current channel does not reach the set threshold. Within the 15-minute performance data collection period. an alarm is reported. The profile index is unique. Delete a VDSL2 channel alarm profile Run the Command.. huawei(config)#display vdsl channel-alarm-profile 2 -----------------------------------------------------------------------------Profile index: 2 Name: VDSL CHANNEL ALARM PROFILE 2 <CO> The number of coding violations counts : 10 The number of corrected blocks counts : 0 <CPE> The number of coding violations counts : 10 The number of corrected blocks counts : 10 The threshold of channel monitoring rate downstream(Kbps) : 2048 The threshold of channel monitoring rate upstream(Kbps) : 4096 ------------------------------------------------------------------------------ Table 23-12 lists the parameters of VDSL2 channel alarm profile. Table 23-13 Related operations for adding a VDSL2 channel alarm profile To. 0 indicates no alarm is needed.. vdsl channel-alarmprofile delete Remarks You cannot delete the default channel alarm profiles and a reference channel alarm profile. Table 23-12 Parameters of VDSL2 channel alarm profile Parameter Profile index Description You can enter a profile index or press Enter to enable the system to allocate an index for it.. 23-42 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. an alarm is reported. The number of coding violations counts The number of corrected blocks counts The threshold of channel monitoring rate upstream/downstream Related Operation Table 23-13 lists the related operations for adding a VDSL2 alarm profile. if the number exceeds the set threshold. if the number exceeds the set threshold. 0 indicates no alarm is needed. 0 indicates no alarm is needed.23 Configuring the VDSL2 Service > > > SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide (0~100000Kbps) [0]:2048 The threshold of channel monitoring rate upstream (0~100000Kbps) [0]:4096 Add profile 2 successfully Query the added VDSL2 channel alarm profile. vdsl channel-alarmprofile modify vdsl channel-alarmprofile quickadd Remarks After modification. If you do not specify the line alarm profile and alarm profile. The system adopts non-interactive mode for the input of the parameter of the command. The system adopts non-interactive mode for the input of the parameter of the command. the system prompts the modified profile takes effect immediately. The command serves as a complement to the vdsl channelalarm-profile modify command. ----End To add an alarm template with index of 2. do as follows: huawei(config)#vdsl alarm-template add 2 Start adding template Press 'Q' to quit the current configuration and new configuration will be neglected > Do you want to name the template (y/n) [n]: > Please set the alarm-profile index (1~50) [1]:2 > Will you set channel configuration parameters? (y/n) [n]:y > Please set the channel number (1~2) [1]: > Please set the channel1 alarm-profile index (1~50) [1]:2 Add template 2 successfully Query the alarm template 2. Prerequisite The required line alarm profile and channel alarm profile has been configured.. Context l l The new alarm template binds the specified line alarm profile and channel alarm profile. The command serves as a complement to the vdsl channelalarm-profile add command. Procedure Step 1 Run the vdsl alarm-template add command to add a VDSL2 alarm template.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service To. Quickly modify a VDSL2 channel alarm profile vdsl channel-alarmprofile quickmodify 23. Modify a VDSL2 channel alarm profile Quickly add a VDSL2 channel alarm profile Run the Command.10 Adding a VDSL2 Alarm Template This operation enables you to add a VDSL2 alarm template. Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-43 .. the alarm template binds the default line alarm profile and the channel alarm profile... Step 2 Run the display vdsl alarm-template command to query the VDSL2 alarm template. vdsl alarm-template modify 23-44 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. l l Channel alarm profile index The index of the configured channel alarm profile. The profile index is unique. and then the configured parameters will be cleared. or press Enter to enable the system to allocate a profile index. the system considers that you will reconfigure the following channel number. You can enter a name or press Enter to enable the system to allocate a profile name. The index of the configured line alarm profile... the system prompts that the modified template takes effect immediately. vdsl alarm-template delete Remarks You cannot delete the default alarm profile and the referenced alarm profile . You can configure the second channel only after you have configured the first one..23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display vdsl alarm-template 2 -----------------------------------------------------------------------------Template index: 2 Name: VDSL ALARM TEMPLATE 2 Line alarm profile index : 2 Channel1 alarm profile index : 2 ------------------------------------------------------------------------------ Parameter Description Table 23-14 lists all parameters of a VDSL2 alarm template. When modifying the alarm template. if you input a channel number that is different from the last. Table 23-15 Related operations for adding a VDSL2 alarm template To. Table 23-14 Parameters for configuring a VDSL2 alarm template Parameter Profile index Description You can enter an alarm template index. After modification. Related Operation Table 23-15 lists the related operations for adding a VDSL2 alarm template. Delete a VDSL2 alarm template Modify a VDSL2 alarm template Run the Command. l Profile name Line alarm profile index Channel number This enables you to set the number of channels the line supports. The command serves as a complement to the vdsl alarm-template add command. Context l The thresholds in the VDSL2 alarm template take effect only after the template is bound with a port and the port is activated. do as follows: huawei(config-if-vdsl-0/5)#alarm-config 1 2 huawei(config-if-vdsl-0/5)#display port state 1 ----------------------------------------------------------------Port Status Loopback Line Template Alarm Template ----------------------------------------------------------------1 Activating Disable 1 2 ----------------------------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-45 . Quickly modify a VDSL2 alarm template vdsl alarm-template quickmodify Bind a VDSL2 alarm template alarm-config 23.. vdsl alarm-template quickadd Remarks The system adopts non-interactive mode for the input of the parameter of the command.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service To.. ----End Example To bind alarm template 2 with port 1 of the VDSL2 board in 0/5. The command serves as a complement to the vdsl alarm-template modify command.11 Binding an VDSL2 Alarm Template This operation enables you to bind a VDSL2 alarm template with a port. A configured alarm profile can take effect only after it is bound with a VDSL2 port. a port is bound with alarm template 1 and all the alarm thresholds in the template are 0.. By default. l Procedure Step 1 Run the alarm-config command to bind an alarm template with a port.. Quickly add a VDSL2 alarm template Run the Command. After the port is activated. Step 2 Run the display port state command to query the binding between the alarm template and the port. monitor the line according to the alarm thresholds set in the ADSL2+ alarm template. The system adopts non-interactive mode for the input of the parameter of the command. the system uses the profile bound wit the port last time to activate a VDSL2 port. The VTU-C negotiates with VTU-R to check whether the system can work in the normal state under the existing conditions. During the training process. When the VTU-R gets offline. the activation process ends after the completion of the training. the system checks the line distance and line status based on settings included in the line profile. At the moment. you need bind it with a VDSL2 line template. If the template is not specified. l l Procedure Step 1 Run the active command to activate all port on the service board. the communication is terminated. Once the VTU-T gets online. do as follows: huawei(config)#interface vdsl huawei(config-if-vdsl-0/2)#activate all template-index 1 To query the port status and the line profile bound with it. and the VTU-C is in listening state.12 Activating a VDSL2 Port This operation enables you to activate a VDSL2 port. the VTU-C can communicate with VTU-R. the port is activated. Context Activation refers to the training between the VTU-C and VTU-R. Step 2 Run the display port state command to query the port status and the line profile bound to it.23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23. do as follows: huawei(config-if-vdsl-)#display port state all ----------------------------------------------------------------Port Status Loopback Line Template Alarm Template ----------------------------------------------------------------0 Activated Disable 1 1 1 Activated Disable 1 1 2 Activated Disable 1 1 3 Activated Disable 1 1 4 Activated Disable 1 1 5 Activated Disable 1 1 6 Activated Disable 1 1 7 Activated Disable 1 1 8 Activated Disable 1 1 9 Activated Disable 1 1 23-46 Huawei Technologies Proprietary Issue 04 (2007-11-30) . When the training succeeds. the training process begins automatically. When the VTU-R is online. If the training succeeds. the port works in activated state. such as upstream/downstream line rate and SNR margin. ----End Example To activate all port on the VDSL2 board in slot using line profile 1. and is ready for service data communication. Prerequisite The VDSL2 line template has been configured. l To activate a VDSL2 port. Prerequisite The VDSL2 line template has been configured. activated. Table 23-16 Related operations for activating a VDSL2 port To.. deactivate loopback 23.. Figure 23-11 Inter-conversion between these states undo loopback Loopback loopback activate activating deactivated deactivate deactivate Modem is off or powered off activated Modem training succeeds Issue 04 (2007-11-30) Huawei Technologies Proprietary 23-47 .. Context A VDSL2 port may be in activating. deactivated or loopback state. Activate a VDSL2 port Loopback a VDSL2 port Run the Command.. Inter-conversion between these states Figure 23-11 shows the inter-conversion between these states.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 23 Configuring the VDSL2 Service 10 Activated Disable 1 1 11 Activated Disable 1 1 12 Activated Disable 1 1 13 Activated Disable 1 1 14 Activated Disable 1 1 15 Activated Disable 1 1 16 Activated Disable 1 1 17 Activated Disable 1 1 18 Activated Disable 1 1 19 Activated Disable 1 1 20 Activated Disable 1 1 21 Activated Disable 1 1 22 Activated Disable 1 1 23 Activated Disable 1 1 ----------------------------------------------------------------Total number of activated port : 24 Total number of unactivated port: 0 Related Operation Table 23-16 lists the related operations for activating a VDSL2 port.13 Querying a VDSL2 port This operation enables you to query a VDSL2 port. . Query the settings of a VDSL2 port Query the version of the VTU-C or VTU Run the Command..23 Configuring the VDSL2 Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Run the display port state command to query comprehensive information of a VDSL2 port. ----End Example Example: To query a VDSL2 port0/2/0.. do as follows: huawei(config)#interface vdsl huawei(config-if-vdsl-)#display port state 0 ------------------------------------------------------------------Port Status Loopback Line_template Alm_template ------------------------------------------------------------------0 Deactivated Local 1 1 ------------------------------------------------------------------- Related Operation Table 23-17 lists the related operations for querying a VDSL2 port. display parameter display inventory 23-48 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. Table 23-17 Related operations for querying a VDSL2 port To. When the MA5600 is disconnected from the upper layer device physically due to some unknown causes.1 Overview This chapter describes the service protection mechanism of the upstream port on the MA5600.3 Configuring a Protection Group This operation enables you to configure a protection group. 24. 24. 24. the MA5600 uses the standby line to transmit the subscriber services. When there are multiple protection groups on a control board.4 Configuring the Protection Group Weight This operation enables you to configure the protection group weight. Issue 04 (2007-11-30) Huawei Technologies Proprietary 24-1 .2 Configuration Example of the Upstream Link Protection This operation enables you to back up upstream links. 24.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 24 Configuring Protection for Upstream Link 24 Configuring Protection for Upstream Link About This Chapter This chapter describes how to configure the protection for the upstream link on the MA5600. the system judges whether to implement active-standby switchover according to the protection group weight. Enable the port of the standby control board directly. Otherwise. or the ports of the two boards are enabled. enable the port of the standby control board. When there are multiple protection groups.1 Overview This chapter describes the service protection mechanism of the upstream port on the MA5600. When the MA5600 is disconnected with the upper layer device physically due to some unknown causes. l Service Specifications The MA5600 provides three detection modes of the active/standby switchover to achieve the service protection of the upstream port. Service Description l The broadband access service of Internet becomes more and more popular. and the configuration of the duration for a enabled port in standby control board detection.24 Configuring Protection for Upstream Link SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 24. the sum of the weights of protection groups in the condition that the port of the active control board is faulty and the port of the standby control board is normal is larger than that of protection groups in the condition that the port of the active control board is normal and the port of the standby control board is faulty. The MA5600 adopts the active/standby mechanism to ensure the normal operation of the service. The delay detection mode and delay enhanced detection mode support the configuration of detection delay and detection frequency of a protection group. detection proceeds. the link aggregation protocol control is performed. Delay enhanced detection mode: It means that one port in a protection group is enabled and the other one is disabled. and the other one is disabled. If the status of the port of the standby control board is UP. Delay detection mode: It means that only one port in a protection group is enabled. l l l l l l 24-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the port fault is detected. the MA5600 uses the standby line to transmit the user services. it is designed with the service protection mechanism of the upstream port. disable the port. As a result. The delay detection mode and delay enhanced detection mode support the configuration of the weight of protection groups. If the status of the port of the standby control board is UP. If the status of the port of the active control board is DOWN. the switchover is performed. and users demand for both high performance and stable network access. l Port status detection mode: It means that the two ports of a protection group. namely. Link Aggregation Control Protocol (LACP) detection mode: In this mode. the active/ standby switchover is performed only when the requirement is met. Then. do not disable the port. and protection switchover function is triggered. The port status determines whether to implement switchover. carriers prefer the broadband access equipment that runs stably and has better automatic protection and self-healing capability. Protection groups in the delay detection mode and the delay enhanced detection mode support optical ports. the switchover is performed. If the status of the port of the active control board is DOWN. Otherwise. In addition. detection proceeds. and delay enhanced detection mode. Figure 24-1 Sample network for configuring the upstream link protection Internet Router A D G E GE 0/7/1 CON ETH MON GE 0/8/1 SCU Mode m SCU MA5600 PC Configuration Flowchart Figure 24-2 shows the flowchart for configuring the upstream link protection. delay detection mode.2 Configuration Example of the Upstream Link Protection This operation enables you to back up upstream links. Context l The MA5600 supports three detection modes for link protection: port status detection.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 24 Configuring Protection for Upstream Link 24. but the port numbers and port type of the two ports must be the same. l Networking Figure 24-1 shows a sample network for configuring the upstream link protection. Issue 04 (2007-11-30) Huawei Technologies Proprietary 24-3 . The two ports of a link protection cannot be on a same upstream board. 1/24 0/2/0 Procedure Step 1 Run the protect-group command to configure the protection group.1.1. huawei(config)#protect huawei(config-protect)#protect-group first 0/7/1 second 0/8/1 eth workmode portstate Step 2 Run the vlan to create a VLAN.24 Configuring Protection for Upstream Link SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 24-2 Flowchart for configuring the upstream link protection Start Configure the protection group Create a VLAN Add the upstrem port to the VLAN Add a service port to the VLAN Save the data End Data Plan Table 24-1 shows the data plan for configuring the upstream link protection. Table 24-1 Data plan for configuring the upstream link protection Item VLAN ID Upstream port Protection group mode Gateway IP address Service port Data 10 The 0/7/1 and 0/8/1 Status detection mode 10. 24-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#save ----End Verification After the configuration. the system automatically transfers the services to the uplink of upstream port 0/8/1. huawei(config)#service-port vlan 10 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 5 Save the data. do as follows: huawei(config-protect)#protect-group first 0/7/1 second 0/8/1 eth workmode portstate huawei(config-protect)#display protect-group --------------------------------------------------------------------------FirstIntf SecondIntf Enable ActiveFlag ProtectType WorkMode --------------------------------------------------------------------------0/7/1 0/8/1 Enable First MainBoard-PORT PortState --------------------------------------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 24-5 . When the MA5600 is disconnected from the upper layer device physically due to some unknown causes.3 Configuring a Protection Group This operation enables you to configure a protection group. Step 2 Run the display protect-group command to query the protection group. In this way.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-protect)#quit huawei(config)#vlan 10 smart 24 Configuring Protection for Upstream Link Step 3 Run the port vlan command to add the upstream port to the VLAN. the MA5600 uses the standby line to transmit the subscriber services. The two ports in the protection group must be in the same aggregation group. Context The two ports in a protection group must be on different upstream ports of the upstream board and of the same type. When the uplink of upstream port 0/7/1 fails. Procedure Step 1 Run the protect-group command to configure a protection group. huawei(config)#port vlan 10 0/7 1 huawei(config)#port vlan 10 0/8 1 Step 4 Run the service-port command add to a service port to the VLAN. 24. ----End Example To configure a protection group that consists of ports 0/7/1 and 0/8/1. users can still access the Internet. users can access the Internet. and the aggregation group must contains only the only two ports. Context Only the delay detection mode and the delay enhanced detection mode support the configuration of the protection group weight... Delete a protection group Run the Command.. Procedure Step 1 Run the protect-group command to configure the protection group on a port and configure the protection group weight.15>|<cr>|frame/slot/port<S><1.15> }:0/7/1 Command: display protect-group 0/7/1 --------------------------------------------------------------------------------------------FirstIntf ：0/7/1 SecondIntf ：0/8/1 CurrentIntf ：First Enable ：Enable ProtectType ：ETH WorkMode ：Timebis Standby-On-Time（10ms） ：40 Weight ：60 HoldTime（10ms） ：0 ------------------------------------------------------------------------------------------------ 24-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config-protect)#protect-group first 0/7/1 second 0/8/1 eth workmode timebis weight 60 huawei(config-protect)#display protect-group { frame/slot<S><1. When there are multiple protection groups on a control board. Table 24-2 Related operation for configuring a protection group To.. Step 2 Run the display protect-group command to query the protection group weight.4 Configuring the Protection Group Weight This operation enables you to configure the protection group weight. the system judges whether to implement active-standby switchover according to the protection group weight.24 Configuring Protection for Upstream Link SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 24-2 lists the related operation for configuring a protection group. undo protect-group 24. ----End Example To configure the protection group on ports 0/7/1 and 0/8/1 in delay enhanced detection mode and configure the protection group weight as 60. 25. 25. you need to run the related command to configure the working mode of the ETH board as QinQ. In this case.6 Configuring the Physical Attributes of an Ethernet Port 25.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending 25 Configuring Device Subtending About This Chapter This chapter describes the Ethernet technology and how to configure the device subtending on the MA5600. enterprise users directly access the device through the ETH board. This helps analyze the cause of a faulty port. 25. 25. Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-1 . 25.8 Enabling the Traffic Suppression This operation enables the traffic suppression on a port to guarantee the stable network services. This section describes the service description and service specifications of the subtending device.3 Configuration Example of the Subtended Network Through the SCU Board The example shows how to subtend two MA5600 devices. 25.2 Configuration Example of the Ethernet Access Service The MA5600 provides the basic PPP over Ethernet (PPPoE) dialup service for the users accessing through the ETH board that works in the normal state.5 Configuring the Working Mode of the ETH Board This operation enables you to configure the working mode of the ETH board.4 Configuration Example of Subtending Device Through the ETHA Board This operation enables you to subtend two MA5600 devices.10 Mirroring an Ethernet Port This operation enables the mirroring function of an Ethernet port. 25.9 Enabling the Ethernet Port Aggregation This operation enables Ethernet port aggregation. 25.1 Overview The MA5600 supports multiple types of Ethernet ports and other DSLAM devices can be subtended to these Ethernet ports.7 Enabling the Flow Control on an Ethernet Port This operation enables the flow control on an Ethernet port. In the private line access. 25. When the ETH board works in QinQ mode.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25. you need to configure the QinQ VLAN of the port.11 Adding an Ethernet Port to a VLAN This operation enables you to add Ethernet ports to a VLAN.12 Configuring the Outer QinQ VLAN of the Ethernet Port This operation enables you to configure the outer QinQ VLAN of the Ethernet port. 25. 25. 25-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .13 Setting the Native VLAN for an Ethernet Port This operation enables you to set the native VLAN for an Ethernet port. refer to the chapter "Subtended Network Configuration" in the Feature Description. Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-3 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending 25. Multiple DSLAMs at different tiers can be subtended through the GE/FE port to extend the network coverage and satisfy the requirements for a large capacity.2 Configuration Example of the Ethernet Access Service The MA5600 provides the basic PPP over Ethernet (PPPoE) dialup service for the users accessing through the ETH board that works in the normal state. Service Specifications The MA5600 provides Ethernet ports through the SCU board and ETH board. Service Description The MA5600 supports subtended through the Ethernet port. For details on the subtended network.1 Overview The MA5600 supports multiple types of Ethernet ports and other DSLAM devices can be subtended to these Ethernet ports. Table 25-1 lists the Ethernet ports of the MA5600 Table 25-1 Ethernet ports of the MA5600 Port Type 100 Base-FX Port 100M single-mode/ multiple-mode optical port 1000M electrical port Working Mode Full duplex Rate 100 Mbit/s 1000 Base-TX l l l Full duplex Half duplex Auto negotiation Full duplex Auto negotiation Full duplex Auto negotiation l l l 10 Mbit/s 100 Mbit/s 1000 Mbit/s 1000 Base-SX 1000M multiple-mode optical port 1000M single-mode optical port l l l l 1000 Mbit/s 1000 Base-LX 1000 Mbit/s 25. The ETH board also provides the basic PPPoE dialup access service. This section describes the service description and service specifications of the subtending device. The Ethernet ports provided by the SCU board are used for upstream service transmission and subtended network configuration. 25-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 25-2 Data plan for the Ethernet access service Item MA5600 Data Uplink port: 0/7/0 ETH access port: 0/6/0 VLAN ID: 10 Prerequisite l l l The network devices and lines are in the normal state.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context The PPPoE protocol packets of the users accessing through the ETH board are transparently transmitted through the MA5600 to the upper layer device for authentication. The working mode of the ETH board is normal. All boards of the MA5600 are normal. Figure 25-1 Sample network for configuring the Ethernet access service Router Internet E T H A SCU CON ETH MON MA5600 LSW PC Data Plan Table 25-2 lists the data plan for the Ethernet access service. huawei(config)#save ----End Result After the configuration. Figure 25-2 Flowchart for configuring the Ethernet access service Start Create a standard VLAN Add sn uplink port Add an access port Save the data End Procedure Step 1 Create a standard VLAN. Huawei Technologies Proprietary 25-5 Issue 04 (2007-11-30) .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Configuration Flowchart Figure 25-2 shows the flowchart for configuring the Ethernet access service. huawei(config)#port vlan 10 0/6 0 Step 4 Save the data. huawei(config)#vlan 10 standard Step 2 Add an uplink port to the VLAN. huawei(config)#port vlan 10 0/7 0 Step 3 Add an access port. 25.3 Configuration Example of the Subtended Network Through the SCU Board The example shows how to subtend two MA5600 devices. the PCs of the access users can access the network through PPPoE dialup. l All the network devices and lines are normal. Figure 25-3 Sample network for configuring the subtended network IP CON ETH MON GE 0/7/0 GE 0/7/1 MA5600_A SCU A D G G CON ETH MON GE 0/7/0 GE 0/7/1 CPE SCU MA5600_B PC Configuration Flowchart Figure 25-4 shows the flowchart for configuring the subtended network. The MA5600_B need not be configured with a subtended port. Perform the following tasks on MA5600_A. The other configurations of MA5600_B are the same as those of MA5600_A. 25-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The Ethernet port 0/7/1 of MA5600_A and the Ethernet port 0/7/0 of MA5600_B are of the same port type. The Ethernet port 0/7/1 of MA5600_A and the Ethernet port 0/7/0 of MA5600_B are of the same auto-negotiation for their rates and duplex modes. l l Networking Figure 25-3 show a sample network for configuring the subtended network.25 Configuring Device Subtending l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide All the boards in the MA5600 are in the normal state. 4 Configuration Example of Subtending Device Through the ETHA Board This operation enables you to subtend two MA5600 devices. 25. All boards of the MA5600 are in the normal state. huawei(config)#vlan 9 standard Step 2 Add an upstream port to the VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Figure 25-4 Flowchart for configuring the subtended network Start Create a standard VLAN Add an upstream port to the VLAN Add a subtending port to the VLAN End Procedure Step 1 Create a standard VLAN. Huawei Technologies Proprietary 25-7 Issue 04 (2007-11-30) . Ethernet port 0/6/0 on MA5600_A and Ethernet port 0/7/0 on MA5600_B are of the same type. Prerequisite l l l The network device and the line are in the normal state. Users of MA5600_B can access the Internet. huawei(config)#save ----End Result After the configuration. and the port rate and duplex mode is auto negotiation. huawei(config)#port vlan 9 0/7 1 Step 4 Save the data. you can configure various services through both the MA5600_A and MA5600_B. huawei(config)#port vlan 9 0/7 0 Step 3 Add a subtending port to the VLAN. 25 Configuring Device Subtending l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configuration on MA5600_B is finished and it is not repeated here. Networking Figure 25-5 shows a sample network for subtending devices Figure 25-5 Sample network for subtending devices Internet E T H A GE 0/6/0 CON ETH GE 0/7/0 SCU A D G G MA5600_A CON ETH GE 0/7/1 SCU MA5600_B Configuration Flowchart Figure 25-6 shows the flowchart for configuring subtending devices 25-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . they are the same on MA5600_A and MA5600_B.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Figure 25-6 Flowchart for configuring subtending devices Start Create a standard VLAN Add an upstream port to the VLAN Add a subtending port to the VLAN End NOTE The mentioned configuration is performed on MA5600_A. Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-9 . For other configurations. huawei(config)#port vlan 10 0/6 0 Step 4 Save the data. No subtending port is needed to be configured on MA5600_B. Procedure Step 1 Create a standard VLAN. enterprise users directly access the device through the ETH board. huawei(config)#vlan 10 standard Step 2 Add an upstream port. huawei(config)#port vlan 10 0/7 0 Step 3 Add a subtending port. you need to run the related command to configure the working mode of the ETH board as QinQ. huawei(config)#save ----End Result After the configuration. 25. the subtended devices can be configured with services and users connected to MA5600_B can access the Internet. In this case.5 Configuring the Working Mode of the ETH Board This operation enables you to configure the working mode of the ETH board. In the private line access. do as follows: huawei(config)#eth mode qinq 0/6 This operation will reset the ETH board. 25. 25-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The switchover of the working mode of the ETH board will cause the resetting of the ETH board.6 Configuring the Physical Attributes of an Ethernet Port 25.1 Setting the Auto-negotiation Mode of an Ethernet Port This operation enables you to set the auto-negotiation mode of an Ethernet port. 25. check whether the ETH board is configured with the ETH OAM and the multicast subtending port services. the switchover of the working mode is rejected. the switchover of the working mode is rejected. and the QinQ VLAN of the subtending port is not all "1"s. 25. are you sure to continue? (y/n)[n]:y huawei(config)#display eth mode 0/6 Current eth mode is qinq 25.3 Setting the Rate of an Ethernet Port This operation enables you to set the rate of an Ethernet port.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l The ETH board can work in normal mode or QinQ mode.6. If the working mode of the ETH board is switched from the normal mode to the QinQ mode. 25. the switchover of the working mode is rejected. If the working mode of the ETH board is switched from the QinQ mode to the normal mode.1 Setting the Auto-negotiation Mode of an Ethernet Port This operation enables you to set the auto-negotiation mode of an Ethernet port.2 Setting the Duplex Mode of an Ethernet Port This operation enables you to set the duplex mode of an Ethernet port. l l l l Procedure Step 1 Run the eth mode command to configure the working mode of the ETH board. the switchover of the working mode is rejected. and the native VLAN of the subtending port is not all "1"s.6. If the specified port is not in the specified VLAN.6. If the two services are configured. Step 2 Run the display eth mode command to query the working mode of the ETH board. If you need to switch the working mode of the ETH board from the normal mode to the QinQ mode.6.4 Setting the Network Cable Type of an Ethernet Port This operation enables you to set the network cable type of an Ethernet port.6. ----End Example To configure the working mode of the ETH board residing in slot 0/6 as the QinQ mode. 6. Context l The duplex of an Ethernet port can be full duplex. When a port is in auto-negotiation mode. This operation takes effect on the electrical port only. the auto-neg switch of the Ethernet electric port is enabled. Step 3 Run the display port state command to query the duplex mode of the port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Context l l By default. do as follows: huawei(config-if-scu-0/7)#auto-neg 1 disable huawei(config-if-scu-0/7)#display port state 1 Optics module status is absence The port is active Native VLAN ID is 1 Ethernet port is offline Ethernet port is full duplex Ethernet port rate is 1000M Ethernet port does not support flow control Ethernet port does not support line-selfadaptive 25. Step 2 Run the display port state command to query the configuration of the Ethernet port. to change its duplex mode to full duplex. Procedure Step 1 Run the auto-neg command to set the auto-negotiation mode of an Ethernet port. the auto-neg switch of the Ethernet optical port is disabled. Step 2 Run the duplex command to set the duplex mode of the Ethernet port. The FE optical port is in full duplex mode. or auto-negotiation. disable the auto-negotiation mode of the port first. make sure that the duplex of the Ethernet port must be the same as that of the interconnected port on the peer device. By default. ----End Example To disable the auto-negotiation mode of Ethernet port 0/7/1 on the SCU board. When setting the duplex mode of an Ethernet port. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-11 . Procedure Step 1 Run the auto-neg command to disable the auto negotiation mode of an Ethernet port.2 Setting the Duplex Mode of an Ethernet Port This operation enables you to set the duplex mode of an Ethernet port. This prevents communication failure. By default: – – l l l The FE electrical port is in auto-negotiation mode. half duplex. 3 Setting the Rate of an Ethernet Port This operation enables you to set the rate of an Ethernet port.6. make sure that the rate of the Ethernet port must be the same as that of the interconnected port on the peer device. The rate of the 1000 Mbit/s electrical port is not compulsorily 1000 Mbit/s but can be autonegotiated to 1000 Mbit/s. do as follows: huawei(config-if-scu-0/7)#auto-neg 1 disable huawei(config-if-scu-0/7)#speed 1 1000 huawei(config-if-scu-0/7)#display port state 1 Optics module status is normal The port is active Native VLAN ID is 1 Ethernet port is offline Ethernet port is full duplex Ethernet port rate is 1000M Ethernet port does not support flow control Ethernet port does not support line-selfadaptive 25-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This prevents communication failure. The rate of the FE optical port is 100 Mbit/s. ----End Example To set the rate of a GE optical port to 1000 Mbit/s. Step 2 Run the speed command to query the configured rate of the Ethernet port. disable the auto-negotiation mode first. The rate of the GE optical port is 1000 Mbit/s. Context When setting the rate of an Ethernet port. When a port is in auto-negotiation mode.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To change the auto-negotiation mode of Ethernet port 0/7/1 to full duplex. do as follows: huawei(config-if-scu-0/7)#auto-neg 1 disable huawei(config-if-scu-0/7)#duplex 1 full huaweii(config-if-scu-0/7)#display port state 1 Optics module status is normal The port is active Native VLAN ID is 1 Ethernet port is offline Ethernet port is full duplex Ethernet port rate is 1000M Ethernet port does not support flow control Ethernet port does not support line-selfadaptive 25. to change its rate to a specific value. l Procedure Step 1 Run the auto-neg command to set the rate of an Ethernet port. By default: l l l l The rate of the FE/GE electrical port is auto-negotiation. By default. l The control function requires the supports from both the MA5600 and the peer device. Context l The Ethernet electrical port uses a straight-through cable or a crossover cable. disable the flow control of the MA5600. the MA5600 sends PAUSE frames to inform the remote PC to reduce the traffic so as to reduce the packet loss rate. The process involved is called flow control. and response to the PAUSE frames sent from remote PC.7 Enabling the Flow Control on an Ethernet Port This operation enables the flow control on an Ethernet port. Context When the traffic exceeds a certain level (> 1 Gbit/s for the GE port or > 100 Mbit/s for the FE port).6. Such setting only applies to the Ethernet electrical port. the network cable type cannot be configured as auto. enable the flow control of the MA5600 If the peer device does not support the flow control. run the mdi command.4 Setting the Network Cable Type of an Ethernet Port This operation enables you to set the network cable type of an Ethernet port. the flow control on the Ethernet port is disabled. l l l Procedure Step 1 Run the mdi command to set the network cable type of an Ethernet port. ----End Example To set the network cable type of Ethernet electrical port 0/7/0 as straight-through cable. To set the type of the network cable of the Ethernet port. If the peer device supports flow control. When the Ethernet electrical port is not in auto-negotiation mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending 25. Step 2 Run the display port state command to query the configured network cable type. l Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-13 . do as follows: huawei(config-if-scu-0/7)#mdi 1 normal huawei(config-if-scu-0/7)#display port state 1 The port is active Native VLAN ID is 1 Ethernet port is online Ethernet port is full duplex Ethernet port rate is 100M Ethernet port does not support flow control Line-adaptive function of the ethernet port is normal 25. The default network cable type is auto (auto-adaptive). unknown multicast packets are not suppressed. When IGMP Proxy or IGMP Snooping is enabled. do as follows: huawei(config-if-scu-0/7)#flow-control all huawei(config-if-scu-0/7)#display port state all ----------------------------------------------------------------------------Port Port Optic Native MDI Speed Duplex Flow... the level of unknown multicast suppression is 7. Context There are three traffic suppression modes available: l Broadcast storm suppression Broadcast storm suppression refers to discarding broadcast traffic when it exceeds a preset threshold to guarantee stable network services. When IGMP proxy and IGMP snooping are disabled.. Disable the flow control on the Ethernet port Run the command. ----End Example To enable the flow control on all ports. Step 2 Run the display port state command to query the set flow control.8 Enabling the Traffic Suppression This operation enables the traffic suppression on a port to guarantee the stable network services. Huawei Technologies Proprietary Issue 04 (2007-11-30) l l 25-14 .Active Link Type Status VLAN (Mbps) Ctrl State ----------------------------------------------------------------------------0 GE absence 1 1000 full on active offline 1 GE absence 1 1000 full on active offline ----------------------------------------------------------------------------- Related Operation Table 25-3 lists the related operation for enabling the flow control of an Ethernet port. undo flow-control 25. It is suggested to enable broadcast storm suppression according to network conditions.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the flow-control command to enable the flow control on an Ethernet port. the level of broadcast storm suppression and unknown unicast suppression is 7. l l l Unknown unicast suppression Unknown multicast storm suppression By default. By default.. Table 25-3 Related operation for enabling the flow control of an Ethernet port To. unknown multicast packets are suppressed. Step 2 Run the display traffic-suppress command to query the configuration of the traffic suppression. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps) --------------------------------------------------------------------1 6 145 12 Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-15 . Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps) --------------------------------------------------------------------1 6 145 12 2 12 291 24 3 24 582 48 4 48 1153 95 5 97 2319 191 6 195 4639 382 7 390 9265 763 8 781 18531 1526 9 1562 37063 3052 10 3125 74126 6104 11 6249 148241 12207 12 12499 296483 24414 --------------------------------------------------------------------Current traffic suppression ID of broadcast : 1 Current traffic suppression ID of multicast : 7 Current traffic suppression ID of unicast : 1 To set multicast packet suppression for port 0/7/0 to level 7.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Procedure Step 1 Run the traffic-suppress command to enable the traffic suppression on a port. ----End To set broadcast storm suppression for all ports to level 1. do as follows: huawei(config-if-scu-0/7)#traffic-suppress all broadcast value 1 huawei(config-if-scu-0/7)#display traffic-suppress 0 Traffic suppression ID definition: --------------------------------------------------------------------NO. do as follows: huawei(config-if-scu-0/7)#traffic-suppress 0 multicast value 1 huawei(config-if-scu-0/7)#display traffic-suppress 0 Traffic suppression ID definition: --------------------------------------------------------------------NO. do as follows: huawei(config-if-scu-0/7)#traffic-suppress 0 unicast value 1 huawei(config-if-scu-0/7)#display traffic-suppress 0 Traffic suppression ID definition: --------------------------------------------------------------------NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps) --------------------------------------------------------------------1 6 145 12 2 12 291 24 3 24 582 48 4 48 1153 95 5 97 2319 191 6 195 4639 382 7 390 9265 763 8 781 18531 1526 9 1562 37063 3052 10 3125 74126 6104 11 6249 148241 12207 12 12499 296483 24414 --------------------------------------------------------------------Current traffic suppression ID of broadcast : 1 Current traffic suppression ID of multicast : 7 Current traffic suppression ID of unicast : 7 To set unknown unicast suppression for port 0/7/0 to level 7. . When configuring the port aggregation. Disable unknown unicast packet suppression Disable unknown multicast packet suppression Disable broadcast storm suppression Run the Command.. No mirror destination port is included. l l l The SCU board supports up to 3 port aggregation groups.. The default VLAN (PVID) and VLAN attributes of all the ports must be the same. 25-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . pay attention to the following points: l l l l l All the ports must work in full duplex mode. Context Port aggregation means aggregation of multiple ports together to expand the bandwidth. Link Aggregation Control Protocol (LACP) is run in the static port aggregation but not in the manual port aggregation.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2 12 291 24 3 24 582 48 4 48 1153 95 5 97 2319 191 6 195 4639 382 7 390 9265 763 8 781 18531 1526 9 1562 37063 3052 10 3125 74126 6104 11 6249 148241 12207 12 12499 296483 24414 --------------------------------------------------------------------Current traffic suppression ID of broadcast : 1 Current traffic suppression ID of multicast : 1 Current traffic suppression ID of unicast : 1 Related Operation Table 25-4 lists the related operations for enabling traffic suppression. and cannot be configured as auto-negotiation. The rates of all the ports must be the same. One aggregation group supports up to 6 Ethernet ports..9 Enabling the Ethernet Port Aggregation This operation enables Ethernet port aggregation. The input and output load can be distributed among the member ports. One port belongs to only one aggregation group. Table 25-4 Related operations for enabling traffic suppression To. undo traffic-suppress unicast undo traffic-suppress multicast undo traffic-suppress broadcast 25. Step 2 Run the speed command to set the port rate..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 25 Configuring Device Subtending Procedure Step 1 Run the duplex command to set the duplex mode of the Ethernet port. Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-17 . Step 4 Run the display link-aggregation command to query the related information about the aggregated ports. Step 3 Run the link-aggregation command to set the port aggregation. Table 25-5 Related operation for enabling the Ethernet port aggregation To. Context l l l You can configure only one mirroring destination port on the SCU board or ETH board. Procedure Step 1 Run the mirror port command to enable the mirroring function of an Ethernet port. Delete the Ethernet port aggregation Run the command. ----End Example To set the Ethernet port aggregation. The mirroring destination port cannot be the aggregated port.. undo link-aggregation 25.10 Mirroring an Ethernet Port This operation enables the mirroring function of an Ethernet port.. You can mirror multiple ports to one destination port.. do as follows: huawei(config-if-scu-0/7)#duplex 0 full huawei(config-if-scu-0/7)#duplex 1 full huawei(config-if-scu-0/7)#speed 0 1000 huawei(config-if-scu-0/7)#speed 1 1000 huawei(config-if-scu-0/7)#quit huawei(config)#link-aggregation 0/7 0-1 ingress huawei(config)#display link-aggregation all -----------------------------------------------------Master port link-aggregation mode Port NUM -----------------------------------------------------0/7/1 egress-ingress 2 -----------------------------------------------------Total: 1 link-aggregation(s) Related Operation Table 25-5 lists the related operation for enabling the Ethernet port aggregation. This helps analyze the cause of a faulty port. ----End Example To mirror the transmit and receive packets of port 0 to port 1.11 Adding an Ethernet Port to a VLAN This operation enables you to add Ethernet ports to a VLAN. ----End Example To add Ethernet port 0/7/0 to VLAN 2. do as follows: huawei(config-if-scu-)#mirror port 0 1 all Run the display mirror command and you can find that the port mirroring function is enabled. huawei(config)#display vlan 2 { <cr>|to<K> }: Command: display vlan 2 VLAN ID: 2 VLAN type: MUX VLAN attribute: common ------------------------------ 25-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config-if-scu-)#display mirror -----------------------------------------------Source port Direction Destination port -----------------------------------------------0 all 1 ------------------------------------------------ Related Operation Table 25-6 lists the related operation for enabling the mirroring function of an Ethernet port. Step 2 Run the display vlan command to query the upstream port of a VLAN... display mirror 25. Table 25-6 Related operation for enabling the mirroring function of an Ethernet port To. Procedure Step 1 Run the port vlan command to add an Ethernet Port to a VLAN.. do as follows: huawei(config)#port vlan 2 0 Run the display vlan command to query the upstream port of the VLAN. Display the mirroring of an Ethernet port Run the command.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 2 Run the display mirror command to query the configuration of the Ethernet port.. Delete a port from a VLAN Run the command. Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-19 . l l Procedure Step 1 Run the interface eth command to enter the ETH mode.. If the ETH board works in QinQ mode. refer to "25." l If the ETH board works in normal mode. do as follows: huawei(config)#interface eth 0/6/0 huawei(config-if-eth-0/6)#qinq-vlan 0 vlan 100 Related Operation Table 25-8 lists the related operation for configuring the outer QinQ VLAN of the Ethernet port. If the specified port is not in the specified VLAN.. Step 2 Run the qinq-vlan command to configure the QinQ VLAN of the ETH port. the QinQ VLAN of the port cannot be configured and queried.. the ETH board works in QinQ mode. Context When the ETH board adopts the private line access.12 Configuring the Outer QinQ VLAN of the Ethernet Port This operation enables you to configure the outer QinQ VLAN of the Ethernet port. When the ETH board works in QinQ mode. In this case. Table 25-7 Related operation for adding an Ethernet Port to a VLAN To. undo port vlan 25..5 Configuring the Working Mode of the ETH Board. you need to configure the QinQ VLAN of the port. the QinQ VLAN cannot be configured. For how to configure the working mode of the ETH board. ----End Example To configure the QinQ VLAN of port 0 in slot 0/6 as 100.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide F/S /P Native VLAN State -----------------------------/0 1 up -----------------------------Standard port number: 1 Service virtual port number: 0 25 Configuring Device Subtending Related Operation Table 25-7 lists the related operation for adding an Ethernet Port to a VLAN. you need to configure the QinQ VLAN of the port. the QinQ VLAN of the port cannot be configured and queried. . – l If the working mode of the ETH board is normal mode. the VLAN must be included in the port.. If the working mode of the ETH board is QinQ mode. the QinQ VLAN value of the port cannot be configured or queried. the Native VLAN value of the port cannot be configured or queried. Step 2 Run the display port state command to query the configuration of the Native VLAN.25 Configuring Device Subtending SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 25-8 Related operation for configuring the outer QinQ VLAN of the Ethernet port To. the native VLAN of the upstream port of the MA5600 must be different from the VLAN to which the upstream port belongs. ----End Example To set the native VLAN of Ethernet port0/7/0 as VLAN 10. When the Ethernet port is used as the upstream port: – If the native VLAN of the Ethernet port is the same as the VLAN to which this Ethernet port belongs. – l Before specifying the native VLAN of an Ethernet port..13 Setting the Native VLAN for an Ethernet Port This operation enables you to set the native VLAN for an Ethernet port. Configure the working mode of the ETH board Run the Command. l Procedure Step 1 Run the native-vlan command to set the native VLAN of an Ethernet port. eth mode 25. the Ethernet port will keep the VLAN Tag of the upstream packets. the Ethernet port will remove the VLAN Tag of the upstream packets. If the upper-layer equipment does not support the packets containing the VLAN tag. Whether the native VLAN must be set for the upstream port depends on the upper-layer equipment connected to the port. do as follows: huawei(config-if-scu-0/7)#native-vlan 0 vlan 10 huawei(config-if-scu-0/7)#display port state 0 Optics module status is normal 25-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. the native VLAN of the upstream port of the MA5600 must be the same as the VLAN to which the upstream port belongs. – l If the upper-layer equipment supports the packets containing the VLAN tag. If the native VLAN of the Ethernet port is different from the VLAN to which this Ethernet port belongs. Context l l The default Native VLAN of the Ethernet ports is VLAN 1. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The port is active Native VLAN ID is 10 Ethernet port is online Ethernet port is full duplex Ethernet port rate is 1000M Ethernet port does not support flow control Ethernet port does not support line-selfadaptive 25 Configuring Device Subtending Issue 04 (2007-11-30) Huawei Technologies Proprietary 25-21 . . 11 Clearing the Statistics of an E3 Port This operation enables you to clear the statistics of an E3 port. 26.6 Setting the IMA Group Mode This operation enables you to set the clock mode.2 Configuration Example of the ATM-DSLAM Access This example shows how to configure the ATM-DSLAM so that the user can access the Internet in OPTIC. 26.8 Setting the Line Type for an E3 Port This operation enables you to set the line type for an E3 port.4 Setting the OPTIC Port Type This operation enables you to set the optical port type.3 Setting the OPTIC Port Mode This operation enables you to set the OPTIC port mode. 26. 26.1 Overview This section describes ATM-DSLAM access service and specification on the MA5600. IMA and E3 modes. 26. CRC4 multiframe and scramble of the IMA group. Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-1 . 26. 26. 26.5 Adding an IMA Group This operation enables you to add an IMA group. 26.10 Setting the Tx Clock of an E3 Port This operation enables you to set the Tx clock of an E3 port.7 Adding an IMA Link This operation enables you to add an IMA link. 26.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26 Configuring ATM-DSLAM Access 26 Configuring ATM-DSLAM Access About This Chapter This chapter describes how to configure the ATM-DSLAM service supported by the MA5600. 26.9 Setting the E3 Port Type This operation enables you to set the E3 port type. For details on the ATM subtending.1 Overview This section describes ATM-DSLAM access service and specification on the MA5600. carriers will replace their ATM-DSLAM network devices in the access layer with IP network devices. Figure 26-1 Sample network of the ATM-DSLAM access FE/GE MA5600 MPLS Ethernet switching GE bus ATM access Service traffic A Service traffic B ATM-DSLAM The MA5600 provides two upstream modes: through FE/GE ports on the SCU board or through the MPLS module. refer to the chapter "ATM Subtending" in the Feature Description. l Through the MPLS module Huawei Technologies Proprietary Issue 04 (2007-11-30) 26-2 . Figure 26-1 shows a sample network of ATM-DSLAM access. service traffic A from the ATM-DSLAM is directly sent to the upper layer device through the Ethernet switching module on the SCU. l Through the FE/GE ports on the SCU In the upstream direction. In this evolution. Service Description In the evolution from ATM networks to IP networks. a large number of ATM network devices still exist in the network for a long time. The MA5600 provides ATM ports for lower level ATM network devices to access the network. Service Specifications The MA5600 supports ATM access through the subboards on the AIUG board. IMA E1 port or IMA E3 port to connect to the ATM-DSLAM devices in the downstream direction.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26. The subboards provide 155M ATM ports. Figure 26-2 Sample network for configuring the ATM-DSLAM access Router Internet A I U G CON ETH MON SCU MA5600 ATM-DSLAM Modem PC Data Plan Table 26-1 shows the data plan for configuring the ATM-DSLAM access. For the configuration through the MPLS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26 Configuring ATM-DSLAM Access In ATM over Ethernet mode. refer to the chapter "27 Configuring MPLS Access. IMA and E3 modes. while in Ethernet mode.2 Configuration Example of the ATM-DSLAM Access This example shows how to configure the ATM-DSLAM so that the user can access the Internet in OPTIC. Table 26-1 Data plan for configuring the ATM-DSLAM access Item AIUG Data Service port: 0/5/0 OPTIC port type: UNI Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-3 . This chapter describes the configuration through the GE ports on the SCU board. Networking Figure 26-2 shows a sample network for configuring the ATM-DSLAM access." 26. MPLS upstream supports mapping between PVC and Pseudo Wire (PW). MPLS supports mapping between VLAN and PW. huawei(config-if-aiu-0/5. huawei(config-if-aiu-0/5. Set the port working mode. Configuration Flowchart Figure 26-3 shows the flowchart for configuring the ATM-DSLAM access. Figure 26-3 Flowchart for configuring the ATM-DSLAM access Start Set working mode of port Configure port type Create VLAN Add upstream port Add service port End Procedure Step 1 Configure the OPTIC port.optic)#uni-nni-set 0 uni huawei(config-if-aiu-0/5.optic)#port mode 0 stm-1 Set the interface type. Select the command mode. 1. Create a VLAN. huawei(config)#vlan 10 mux 26-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .optic)#quit huawei(config-if-aiu-0/5)#quit 4. huawei(config)#interface aiu 0/5 huawei(config-if-aiu-0/5)#sub-interface optic huawei(config-if-aiu-0/5. Different subboards are needed for configuring ATM DSLAM access in different modes.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item SCU Data Upstream port: 0/7/0 NOTE l l In this example.optic)# 2. 3. only the configuration at the MA5600 side is introduced. huawei(config)#port vlan 10 0/7 0 Add the service virtual port to the VLAN. huawei(config)#service-port vlan 10 atm 0/5/0 vpi 1 vci 40 rx-cttr 2 upc off tx-cttr 2 upc off Step 3 Configure the E3 port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26 Configuring ATM-DSLAM Access 5. Set the clock mode.e3)#tx clock 0 line Set the interface type.ima)#ima IMA link add successfully huawei(config-if-aiu-0/5.ima)#quit huawei(config-if-aiu-0/5)#quit huawei(config)#vlan 10 mux 6. the default line type is used.ima)#ima group mode clockmode 0 system Set IMA group transmit clock successfully 5. huawei(config)#interface aiu 0/5 huawei(config-if-aiu-0/5)#sub-interface ima huawei(config-if-aiu-0/5. The line types include e3other.ima)# 2. huawei(config-if-aiu-0/5. huawei(config-if-aiu-0/5. huawei(config-if-aiu-0/5.ima)#ima group add 0 version1. huawei(config-if-aiu-0/5. huawei(config)#port vlan 10 0/7 0 Add the service virtual port to the VLAN. Run the linetype command to set the line type for the port. Add an IMA group. Select the command mode. huawei(config)#interface aiu 0/5 huawei(config-if-aiu-0/5)#sub-interface e3 huawei(config-if-aiu-0/5.e3)# 2. Set the line type for the port. 7. Select the command mode. and e3Plcp.ima)#ima IMA link add successfully huawei(config-if-aiu-0/5.e3Plcp> }:e3plcp In this example.ima)#ima IMA link add successfully huawei(config-if-aiu-0/5. Set the clock mode. Create a VLAN. 1.e3Framed. 1. For example. Add the upstream port to the VLAN. 4. By default.e3)#uni-nni-set 0 uni Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-5 . 3. 3. so you do not need to set the line type. Add the upstream port to the VLAN. huawei(config-if-aiu-0/5.ima)#ima IMA link add successfully link add 0 0 link add 0 1 link add 0 2 link add 0 3 4.0 1 1 ctc 0 128 2 2 1 Add an IMA link. huawei(config-if-aiu-0/5. 6. the line type is e3Framed. e3Framed. huawei(config)#service-port vlan 10 atm 0/5/0 vpi 1 vci 40 rx-cttr 2 upc off tx-cttr 2 upc off Step 2 Configure the IMA access. do as follows: huawei(config-if-aiu-0/5. to set the line type to e3plcp.3> }:0 { linetype<E><e3other.e3)#linetype { portId<U><0. Add the upstream port to the VLAN. IMA or E3 mode. ----End Example To set port AIUG 0/5/0 mode as STM-1. Context 155M ATM port supports C-3c/STS-3c mode and STM-1 mode. huawei(config)#port vlan 10 0/7 0 Add the service virtual port to the VLAN. huawei(config-if-aiu-0/5. huawei(config)#service-port vlan 10 e30/5/0 vpi 1 vci 40 rx-cttr 2 upc off txcttr 2 upc off ----End Result After the configuration.3 Setting the OPTIC Port Mode This operation enables you to set the OPTIC port mode. the users of the ATM-DSLAM can access the Internet in OPTIC . huawei(config-if-aiu-0/5. Create a VLAN. l Procedure Step 1 Run the port mode command to configure the OPTIC port mode.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5.e3)#quit huawei(config-if-aiu-0/5)#quit huawei(config)#vlan 10 mux 6. The rate is 155 Mbit/s.optic)#port mode 1 stm-1 Run the display board command and you can find the OPTIC port mode is set successfully. do as follows: huawei(config)#interface aiu 0/5 huawei(config-if-aiu-0/5)#sub-interface optic huawei(config-if-aiu-0/5. l OC-3c is a signal rate level at the optical port of the Synchronous Optical Network (SONET). STS-3c is the signal rate at the electrical port that corresponds to OC-3c level. Step 2 Run the display board command to query the configured OPTIC port mode. 7.optic)#quit huawei(config-if-aiu-0/5)#quit huawei(config)#display board 0/5 --------------------------------------Board Name : H561AIUG Board Status : Normal --------------------------------------Subboard[0]: H511O1CTG Status: Failed 26-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the rate is 155 Mbit/s. STM-1 is a signal rate level of the STM (Synchronous Transport Module) defined in SDH (Synchronous Digital Hierarchy). 26. .4 Setting the OPTIC Port Type This operation enables you to set the optical port type. the VPI value of the port shall be from 0 to 255.. Table 26-2 Related operation for setting the OPTIC port mode To.. the VPI value of the port shall be from 0 to 4095. do as follows: huawei(config-if-aiu-0/5. Set the OPTIC port type Run the Command. Step 2 Run the display board command to query the configured OPTIC port type. l Procedure Step 1 Run the uni-nni-set command to set the OPTIC port type. huawei(config-if-aiu-0/5. the VCI value of the port shall be from 32 to 1023. uni-nni-set 26.. When you set the port type as NNI. the VCI value of the port shall be from 32 to 1023. ----End Example To set the type of port AIUG 0/5/0 as UNI. l When you set the port type as UNI.optic)#quit huawei(config-if-aiu-0/5)#quit huawei(config)#display board 0/5 --------------------------------------Board Name : H561AIUG Board Status : Normal Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-7 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26 Configuring ATM-DSLAM Access -------------------------------------------------------------------Port Port Port Line Port Loop Optical Phy Line Rate IF Type Status Signal Clock Type Type Type Type (Mbps) Type -------------------------------------------------------------------0 ATM Fail No System No Single Optical STM-1 155 UNI -------------------------------------------------------------------- Related Operation Table 26-2 lists the related operation for setting the OPTIC port mode.optic)#uni-nni-set 0 uni Run the display board command and you can find the OPTIC port type is set successfully. Context The MA5600 supports User Network Interface (UNI) and Network Node Interface (NNI). Prerequisite The port type shall be the same as that of the peer. do as follows: huawei(config)#interface aiu 0/5 huawei(config-if-aiu-0/5)#sub-interface ima huawei(config-if-aiu-0/5. Each IMA group can be configured with one to eight E1 links.7> }:0 { version<E><version1.0 { minTxLinks<U><1.64.. port mode 26.2> }: Command: ima group add 0 version1.128. Table 26-3 Related operation for setting the OPTIC port type To.. Set the OPTIC port mode Run the Command.ima)#ima group add { groupIndex<U><0.5 Adding an IMA Group This operation enables you to add an IMA group.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide --------------------------------------Subboard[0]: H511O1CTG Status: Failed -------------------------------------------------------------------Port Port Port Line Port Loop Optical Phy Line Rate IF Type Status Signal Clock Type Type Type Type (Mbps) Type -------------------------------------------------------------------0 ATM Fail No System No Single Optical STM-1 155 UNI -------------------------------------------------------------------- Related Operation Table 26-3 lists the related operation for setting the OPTIC port type.itc> }:itc { imaId<U><0. Step 2 Run the display ima group parameter command to query the IMA group configuration...255> }:0 { framelength<E><32. Each E1 link belongs to one IMA group only. ----End Example To add IMA group 0.0 2 2 itc 0 256 26-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) .0> }:version1. Context The AIUG provides IMA ports through the subboards on the AIUG board.8> }:2 { minRxLinks<U><1. Procedure Step 1 Run the ima group add command to add an IMA group.version1.1. l l l The AIUG board supports up to four IMA groups through the E8IT subboard.8> }:2 { clock<E><ctc.256> }:256 { <cr>|alpha_value<U><1. ITC is recommended if you set an IMA group to link clock mode.ima)#display ima group parameter 0 Command: display ima group parameter 0 -------------------------------------------------------------------NE symmetry : both config and operation symmetry FE symmetry : NULL Min Tx link : 2 Min Rx link : 2 NE clock : ITC FE clock : NULL Tx reference link : NULL Rx reference link : NULL Tx IMA ID : 0 Rx IMA ID : NULL Tx frame length : 256 Rx frame length : NULL Maximum differential delay(ms): 40 Alpha : 2 Beta : 2 Gamma : 1 Tx protocol version : 1. 64. Table 26-4 Parameters of an IMA group Parameter Version Description Version 1.0 and version 1. In common transmit clock (CTC) mode. The value of minTxLinks and minRxLinks must be the same. all the links in an IMA group have the same clock source. Frame length Framelength is the size of an IMA frame. The value can be 32. clock sources for different links in an IMA group are different. In independent transmit clock (ITC) mode. Link number Clock mode Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-9 . It represents the number of cells carried in an IMA frame.0 Rx protocol version : NULL -------------------------------------------------------------------- Parameter Description Table 26-4 lists parameters of an IMA group. or 256.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide IMA group add successfully 26 Configuring ATM-DSLAM Access Run the display ima group command to query the configuration of the IMA group. MinTxLinks and minRxLinks represent the minimum number of links for sending and receiving signals in the IMA group. CTC and ITC are two clock modes. IMA groups supporting different versions cannot interoperate with each other. You are recommended to set it to 128. huawei(config-if-aiu-0/5. 128. the IMA group is activated.1 are two IMA protocol versions defined by ATM Forum. When the number of activated links reaches the minimum link number you set for an IMA group. Delete an IMA group Block an IMA group Add an IMA link Delete an IMA link Run the Command. and the default setting is 1. If there is no clock subboard. If there is a clock subboard. If a link is the last one in an IMA group.. and the recommended setting is 2.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Parameter Invalid ICP cells Description Alpha_value indicates the number of invalid ICP cells. the clock subboard provides clock signals for the IMA subboard.. Run the ima group delete command to delete the IMA group and the link. CRC4 multiframe and scramble of the IMA group.. Beta_value indicates the number of errored ICP cells. Prerequisite The IMA subboard clock comes from the line recovery clock. the ima link delete command cannot delete the link. Table 26-5 Related operations for adding an IMA group To. l System – This is the default clock mode for an IMA subboard.6 Setting the IMA Group Mode This operation enables you to set the clock mode. Gamma_value indicates the number of valid ICP cells. ima group delete ima group block ima link add ima link delete Remarks Make sure that an IMA group contains links before blocking it. 26. Related Operation Table 26-5 lists the related operations for add an IMA group. Context The clock mode of the IMA subboard includes are system and line.. and the recommended setting is 2. l Line Huawei Technologies Proprietary Issue 04 (2007-11-30) 26-10 . an IMA subboard itself provides clock signals. By default. When the MA5600 interoperates with the devices of other vendors.ima)#ima group mode crc4-multiframe 0 on Set CRC4 switch successfully To enable scramble on an IMA Group. and line at the other end. If the other side enables CRC4 multiframe.ima)#display ima config ------------------------------------------------------------------GroupIndex State Loopback CRC4 Scramble TxClock Links ------------------------------------------------------------------0 Config On On Line 1 2 3 ----------------------------------------------------------------------------------------------Link ID Tx state Rx state -----------------------------0 1 2 3 4 5 6 7 ------------------------------ Related Operation Table 26-6 lists the related operations for setting the IMA group mode. do as follows: huawei(config-if-aiu-0/5. you need to enable it on the MA5600. Procedure Step 1 Run theima group mode command to set the IMA group mode.ima)#ima group mode clockmode 0 line Set IMA group transmit clock successfully To enable CRC4 multiframe for an IMA group. do as follows: huawei(config-if-aiu-0/5. do as follows: huawei(config-if-aiu-0/5. huawei(config-if-aiuu-0/5. the scramble switch is off. the scramble switch must be on or off at the same time for both sides. make sure the E1 settings are the same at both sides. CRC4 multiframe is disabled (the CRC4 switch is off). That is. Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-11 . The setting of scramble must be the same for the two sides.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide – – 26 Configuring ATM-DSLAM Access By default. – l Make sure the clock mode for an IMA group is system at one end of the link. Step 2 Run the display ima config command to query the configuration of the IMA group mode. ----End To set the clock mode of an IMA group.ima)#ima group mode scramble 0 on Set scramble switch successfully Run the display ima config command and you can find the IMA group mode is set successfully. Step 2 Run the display ima config command to query the configuration of the IMA link. Add an IMA group Delete an IMA group Run the Command. while Rx at the local end connects with Ty at the remote end (x and y indicate link numbers). you cannot add PVC to the group.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 26-6 Related operations for setting the IMA group mode To.. l l Procedure Step 1 Run the ima link add command to add an IMA link. T1. do as follows: huawei(config-if-aiu-0/5. Tx and Rx belong to the same E1 link. uni-nni-set ima group delete 26. make sure that Tx at the local end connects with Ry at the remote end.ima)#display ima config ------------------------------------------------------------------GroupIndex State Loopback CRC4 Scramble TxClock Links ------------------------------------------------------------------0 Config On On Line 0 1 2 3 ----------------------------------------------------------------------------------------------Link ID Tx state Rx state -----------------------------0 Config Config 1 2 3 4 - 26-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . R0.7 Adding an IMA Link This operation enables you to add an IMA link.. huawei(config-if-aiu-0/5. When you configure IMA links.. Context l On the E1 cables of the MA5600 you can see signs of T0. and so on. R1. If an IMA group has no links. loopback or block the group. ----End Example To add a link 0 to IMA group 0. Add an IMA group before adding IMA links.ima)#ima link add 0 0 IMA link add successfully Run the display ima config command and you can find that the system prompts the IMA link is added successfully.. Table 26-7 Related operations for adding an IMA link To. first delete the link from both the local and remote ends. l Block an IMA link ima link block - 26. e3Framed complies with G.832. Run the ima group delete command to delete the IMA group and the link.. Context The E3 port supports three line types: e3other. e3Plcp complies with G.751 and does not adopt PLCP encapsulation. ima group add ima link delete Remarks l To delete a link from one group and add the link to another group. and then add the link again. e3Framed and e3Plcp. By default. Add an IMA group Delete an IMA link Run the Command. the line type of the E3 port is e3Framed. If a link is the last one in an IMA group. Step 2 Run the display board command to query the configured line type of the E3 port... ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-13 . Procedure Step 1 Run the linetype command to set the line type for an E3 port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 5 6 7 ------------------------------ 26 Configuring ATM-DSLAM Access Related Operation Table 26-7 lists the related operations for adding an IMA link.751 and adopts PLCP encapsulation.. the ima link delete command cannot delete the link. l l l l e3other complies with G.8 Setting the Line Type for an E3 Port This operation enables you to set the line type for an E3 port. e3)#linetype 0 e3plcp Run the display board command and you can find the line type of the E3 port is configured successfully. Context The MA5600 supports User Network Interface (UNI) and Network Node Interface (NNI). l The default port type is UNI. huawei(config-if-aiu-0/5. do as follows: huawei(config-if-aiu-0/5.e3)#display board 0/5 --------------------------------------Board Name : H561AIUG Board Status : Failed --------------------------------------Subboard[0]: H511E13T Status: Failed -------------------------------------------------------------------Port Port Port Line Port Loop Line Line Rate IF Type Status Signal Clock Type Type Code (Kbps) Type -------------------------------------------------------------------0 E3 Fail No System No e3Plcp(G.9 Setting the E3 Port Type This operation enables you to set the E3 port type. uni-nni-set tx clock 26. The E3 port type shall be the same as that of the peer end... the VPI value of the port shall be from 0 to 4095. When you set the port type as UNI or NNI. l l l When you set the port type as UNI.751) HDB3 30528 UNI -------------------------------------------------------------------- Related Operation Table 26-8 lists the related operations for setting the line type of the E3 port. the VCI value of the port shall be from 32 to 1023..26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the line type of the E3 port as e3plcp. When you set the port type as NNI.. Procedure Step 1 Run the uni-nni-set command to set the E3 port type. the VPI value of the port shall be from 0 to 255. Set the E3 port type Set the Tx clock of an E3 port Run the Command. Table 26-8 Related operations for setting the line type of an E3 port To. 26-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . .. Table 26-9 Related operation for setting the E3 port type To.. By default.e3)#display board 0/5 --------------------------------------Board Name : H561AIUG Board Status : Failed --------------------------------------Subboard[0]: H511E13T Status: Failed -------------------------------------------------------------------Port Port Port Line Port Loop Line Line Rate IF Type Status Signal Clock Type Type Code (Kbps) Type -------------------------------------------------------------------0 E3 Fail No System No e3Plcp(G. Procedure Step 1 Run the tx clock command to set the Tx clock of an E3 port.10 Setting the Tx Clock of an E3 Port This operation enables you to set the Tx clock of an E3 port. huawei(config-if-aiu-0/5. do as follows: Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-15 . the Tx clock is system. Step 2 Run the display board 0/5 command to query the configured Tx clock of the port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 26 Configuring ATM-DSLAM Access Step 2 Run the display board command to query the configuration the E3 port. ----End Example To set the E3 port type as UNI.. ----End Example To set the Tx clock for port 0 as line.751) HDB3 30528 UNI -------------------------------------------------------------------- Related Operation Table 26-9 lists the related operation for setting the E3 port type. Context l l The Tx clock includes two types: system and line.e3)#uni-nni-set 0 uni Run the display board command and you can find the E3 port type is set successfully. Set the type of an E3 port Run the Command. uni-nni-set 26. do as follows: huawei(config-if-aiu-0/5. huawei(config-if-aiu-0/5.. Setting the line type of an E3 port Setting the E3 port type Run the Command.e3)#display statistics 0 -------------------------------------------Line coding violation events :0 Frame head bit errored events :0 Excessive zero of frame events :0 Parity check errored events :0 26-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .e3)#clear statistics 0 Run the display statistics command and you can find that the E3 port performance statistics is cleared successfully.... Procedure Step 1 Run the clear statistic command to clear the statistics of an E3 port.11 Clearing the Statistics of an E3 Port This operation enables you to clear the statistics of an E3 port.e3)#tx clock 0 line Run the display board command and you can find that the Tx clock of the E3 port is set successfully. linetype uni-nni-set 26. ----End Example To clear the statistics of port 0.e3)#display board 0/5 --------------------------------------Board Name : H561AIUG Board Status : Failed --------------------------------------Subboard[0]: H511E13T Status: Failed -------------------------------------------------------------------Port Port Port Line Port Loop Line Line Rate IF Type Status Signal Clock Type Type Code (Kbps) Type -------------------------------------------------------------------0 E3 Fail No Line No e3Plcp(G. Table 26-10 Related operations for setting the Tx clock of an E3 port To.751) HDB3 30528 UNI -------------------------------------------------------------------- Related Operation Table 26-10 lists the related operations for setting the Tx clock of an E3 port. Step 2 Run the display statistic command to query the port statistics. do as follows: huawei(config-if-aiu-0/5. huawei(config-if-aiu-0/5.26 Configuring ATM-DSLAM Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-if-aiu-0/5. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Far end block errored events :0 BIP errored of PLCP layer events :0 PLCP layer errored events :0 FEBE of PLCP layer events :0 Sent cells :0 Received cells :0 HEC bit errored corrected events :0 HEC bit errored uncorrected events :0 Receiving idle cells :0 ------------------------------------------- 26 Configuring ATM-DSLAM Access Issue 04 (2007-11-30) Huawei Technologies Proprietary 26-17 . . LSP and PW between the MA5600 and the router.Based on Binding the VLAN with the PW Profile The example shows how to set up the LDP remote session. 27.7 PW Configuration This section describes how to configure a PW template. 27. Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-1 .6 MPLS LDP Configuration This section describes how to configure MPLS LDP. 27. 27. label switching paths (LSP) and PW between the MA5600 and the router.1 Overview This section describes MPLS access service and its specifications on the MA5600. 27.2 Configuration Example of MPLS . 27. 27.3 Configuration Example of MPLS.5 Static LSP Configuration This section describes how to configure a static LSP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access 27 About This Chapter Configuring MPLS Access This chapter describes the MPLS technology and how to configure the MPLS service on the MA5600.4 Basic Configuration of MPLS This section describes basic configuration of MPLS.Based on Binding the PVC with the PW Profile The example shows how to set up the label distribution protocol (LDP) remote session. MPLS architecture consists of the following two planes: l Control Plane: The Control Plane is connectionless. refer to the chapter "MPLS" in the Feature Description. The master shelf supports the ETH PWE3 and the ATM PWE3 services. Networking Figure 27-1 shows a sample network for configuring the multiprotocol label switching (MPLS) based on binding the PVC with the PW profile.) 27. such as ATM network. l l Only the master shelf supports MPLS function. this plane forwards packets rapidly based on the label forwarding table. (To support the ATM PWE3 service. Through layer 2 network. to subtend slave shelves. l For more details. label switching paths (LSP) and PW between the MA5600 and the router. NOTE l l To provide the MPLS function. including: l l l l l Internet Protocol version 6 (IPv6) Internet Packet Exchange (IPX) Appletalk DECnet Connectionless Network Protocol (CLNP) For details on the MPLS protocol. Forwarding Plane (also known as Data Plane): The forwarding plane is connection-oriented. For the MA5600.Based on Binding the PVC with the PW Profile The example shows how to set up the label distribution protocol (LDP) remote session.2 Configuration Example of MPLS . and the slave shelf supports only the ETH PWE3 service. refer to RFC3031 Multiprotocol Label Switching Architecture. the MA5600 can serve as only a provider edge (PE) device.27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27. Service Specifications The MA5600 provides the MPLS function through the MPLS subboard attached to the SCU board. a slave shelf must be separately configured with the and the AIUG subboard.1 Overview This section describes MPLS access service and its specifications on the MA5600. Service Description Multiprotocol Label Switching (MPLS) is derived from Internet Protocol version 4 (IPv4). The core technology of MPLS involves multiple network protocols. It distributes labels by using the current IP network. 27-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . so as to serve as an independent PE to provide MPLS upstream function. 4.3.8/32 Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-3 .4/32 VLAN type: Standard VLAN VLAN ID: 140 L3 interface IP address: 10.8 Type: ATM SDU SCU Upstream port: 0/7/2 VLAN ID of the upstream port:: 140 Native VLAN ID of the upstream port: 140 AIUG Port: 0/5/0 VPI/VCI: 1/40 Router name LSR ID: 3.11.3.214/30 PW profile name: pwt Remote address: 3.0.3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Figure 27-1 Sample network for configuring the MPLS based on binding the PVC with the PW profile ISP BRAS Router (lsr-id 3.4.3.4. Table 27-1 Data plan for configuring the MPLS based on binding the PVC with the PW profile Item MPLS Data LSR ID: 4.3.8/32) MPLS Network 5# 7# A I U G S C U MA5600 (lsr-id 4.3.4.4/32) Data Plan Table 27-1 lists the data plan for configuring the MPLS based on binding the PVC with the PW profile. Figure 27-2 Flowchart for configuring the MPLS based binding the PVC with the PW profile Start Configure OSPF Configure the loopback interface Configure LSR-ID of MPLS Enable MPLS Configure the VLAN interface Enable the MPLS LDP Enable the remote peer Configure the MPLS LDP triggering mechanism Enable the MPLS L2VPN Create a VLAN Create a PW template Bind the VLAN with the PW template End Procedure Step 1 Configure the open shortest path first (OSPF).27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configuration Flowchart Figure 27-2 shows the flowchart for configuring the MPLS based on binding the PVC with the PW profile. huawei(config)#ospf 27-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 4.4.4.4 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#network 10.11.0.0 0.0.255.255 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit Step 2 Configure the loopback interface. huawei(config)#interface loopback 1 huawei(config-if-loopback1)#ip address 4.4.4.4 32 huawei(config-if-loopback1)#quit Step 3 Configure the label switch router (LSR) ID for the MPLS. huawei(config)#mpls lsr-id 4.4.4.4 Step 4 Enable the MPLS. huawei(config)#mpls huawei(config-mpls)#quit huawei(config)#vlan 140 standard huawei(config)#mpls vlan 140 huawei(config)#interface vlanif 140 huawei(config-if-vlanif140)#ip address 10.11.0.214 30 huawei(config-if-vlanif140)#mpls huawei(config-if-vlanif140)#quit Step 5 Configure a VLAN interface. huawei(config)#port vlan 140 0/7 0 huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 2 vlan 140 huawei(config-if-scu-0/7)#quit Step 6 Enable the MPLS LDP. huawei(config)#mpls ldp huawei(config-mpls-ldp)#quit huawei(config)#interface vlanif 140 huawei(config-if-vlanif140)#mpls ldp huawei(config-if-vlanif140)#quit Step 7 Create a remote peer. huawei(config)#mpls ldp remote-peer router huawei(config-mpls-ldp-remote-router)#remote-ip 3.3.3.8 huawei(config-mpls-ldp-remote-router)#quit Step 8 Configure the MPLS LDP triggering mechanism. huawei(config)#mpls huawei(config-mpls)#lsp-trigger host huawei(config-mpls)#label advertise non-null huawei(config-mpls)#quit Step 9 Enable the MPLS L2VPN. huawei(config)#mpls l2vpn Step 10 Configure a service port. huawei(config)#service-port vlan aoe atm 0/5/0 vpi 1 vci 40 rx-cttr 6 upc off txcttr 6 upc off Step 11 Create a PW profile. huawei(config)#pw-template pwt huawei(config-pw-template-pwt)#peer-address 3.3.3.8 huawei(config-pw-template-pwt)#pw-type atm sdu huawei(config-pw-template-pwt)#quit Step 12 Bind the PVC with the PW profile. huawei(config)#pw-ac-binding pvc 0/5/0 vpi 1 vci 40 pw 106 pw-template pwt ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-5 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Result After the configuration, LDP remote session, LSP and PW can be set up between the MA5600 and the router. The PW is in the up state. 27.3 Configuration Example of MPLS- Based on Binding the VLAN with the PW Profile The example shows how to set up the LDP remote session, LSP and PW between the MA5600 and the router. Networking Figure 27-3 shows a sample network of the MPLS based on binding the VLAN with the PW template. Figure 27-3 Sample network of the MPLS based on binding the VLAN with the PW template ISP BRAS Router (lsr-id 3.3.3.8/32) MPLS Network A D G G S C U MA5600 (lsr-id 4.4.4.4/32) Data Plan Table 27-2 shows the data plan for configuring the MPLS based on binding the VLAN with the PW profile. Table 27-2 Data plan for configuring the MPLS based on binding the VLAN with the PW profile Item MPLS Data Lsr id: 4.4.4.4/32 27-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Item Data VLAN type: standard VLAN VLAN ID: 140 IP address: 10.11.0.214/30 PW profile name: pwt Remote address: 3.3.3.8 Type: Ethernet Tagged SCU Upstream port: 0/7/2 VLAN ID of the upstream port: 140 Native VLAN ID of the upstream port: 140 ADSL Port: 0/2/0 VPI/VCI: 1/100 Router Name Lsr id: 3.3.3.8/32 Configuration Flowchart Figure 27-4 shows the flowchart for configuring the MPLS based on binding the VLAN with the PW template. Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-7 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 27-4 Flowchart for configuring the MPLS based on binding the VLAN with the PW profile Start Configure OSPF Configure loopback interface Configure LSR-ID of MPLS Enable MPLS Configure VLAN interface Enable MPLS LDP Enable remote peer Configure MPLS LDP triggering mechanism Enable MPLS L2VPN Create VLAN Create PW profile Bind PVC with PW End Procedure Step 1 Configure OSPF. huawei(config)#ospf huawei(config-ospf-1)#area 0 huawei(config-ospf-1-area-0.0.0.0)#network 4.4.4.4 0.0.0.0 huawei(config-ospf-1-area-0.0.0.0)#network 10.11.0.0 0.0.255.255 huawei(config-ospf-1-area-0.0.0.0)#quit huawei(config-ospf-1)#quit 27-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Step 2 Configure the loopback interface. huawei(config)#interface loopback 1 huawei(config-if-loopback1)#ip address 4.4.4.4 32 huawei(config-if-loopback1)#quit Step 3 Configure MPLS Lsr id. huawei(config)#mpls lsr-id 4.4.4.4 Step 4 Enable MPLS. huawei(config)#mpls huawei(config-mpls)#quit huawei(config)#vlan 140 standard huawei(config)#mpls vlan 140 huawei(config)#interface vlanif 140 huawei(config-if-vlanif140)#ip address 10.11.0.214 30 huawei(config-if-vlanif140)#mpls huawei(config-if-vlanif140)#quit Step 5 Configure the VLAN interface. huawei(config)#port vlan 140 0/7 0 huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 140 huawei(config-if-scu-0/7)#quit Step 6 Enable the MPLS LDP. huawei(config)#mpls ldp huawei(config-mpls-ldp)#quit huawei(config)#interface vlanif 140 huawei(config-if-vlanif140)#mpls ldp huawei(config-if-vlanif140)#quit Step 7 Create the remote peer. huawei(config)#mpls ldp remote-peer Router huawei(config-mpls-ldp-remote-Router)#remote-ip 3.3.3.8 huawei(config-mpls-ldp-remote-Router)#quit Step 8 Configure the MPLS LDP triggering mechanism. huawei(config-mpls)#lsp-trigger host Step 9 Enable the MPLS L2VPN. huawei(config)#mpls l2vpn Step 10 Add a service port. huawei(config)#service-port vlan 140 adsl 0/2/0 vpi 1 vci 100 rx-cttr 5 tx-cttr 5 Step 11 Create a PW template. huawei(config)#pw-template pweth huawei(config-pw-template-pweth)#peer-address 3.3.3.8 huawei(config-pw-template-pweth)#pw-type ethernet tagged huawei(config-pw-template-pweth)#quit Step 12 Bind the VLAN with the PW template. huawei(config)#pw-ac-binding vlan 100 pw 107 pw-template pweth ----End Result After the configuration, the MA5600 can set up the LDP remote session with the router. The LSP and PW can be created, and the PW is in up state. Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-9 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27.4 Basic Configuration of MPLS This section describes basic configuration of MPLS. Context NOTE Before you configure other MPLS features, you must perform basic MPLS configuration on all routers involved in MPLS forwarding in the MPLS domain. 27.4.1 Configuring the LSR ID This operation enables you to configure the label switching router (LSR) ID. 27.4.2 Enabling MPLS This operation enables the MPLS function. 27.4.1 Configuring the LSR ID This operation enables you to configure the label switching router (LSR) ID. Context l l l In general, the address of the loopback interface is used as the LSR ID. An LSR has no default ID. Therefore, you must configure it manually. After configuring the LSR ID, you must enable MPLS. Then you can configure the other MPLS features. You must enable the global MPLS first, and then enable the interface MPLS. The LSR ID is unique in the MPLS domain. By combining with the 2-byte label space serial number, it forms the LDP identifier, which is used to identify the label space used by the LSR, and to set up and maintain LDP session between LSRs. l l Procedure Step 1 Run the mpls lsr-id command to configure the LSR ID. Step 2 Run the display current-configuration command and you can find the configuration of LSR ID is successful. ----End Example To configure the LSR ID as 4.4.4.4, do as follows: huawei(config)#mpls lsr-id 4.4.4.4 huawei(config)#display current-configuration section mpls { <cr>||<K> }: Command: display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> 27-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide mpls lsr-id 4.4.4.4 # return 27 Configuring MPLS Access Related Operation Table 27-3 shows the related operations for configuring the LSR ID. Table 27-3 Related operations for configuring the LSR ID To... Enable/Disable MPLS Enable/Disable the MPLS VLAN Run the Command... (undo)mpls (undo)mpls vlan 27.4.2 Enabling MPLS This operation enables the MPLS function. Context l l You must enable the global MPLS first and then enable the interface MPLS. You can only enable the MPLS of the standard VLAN. Procedure l l In global config mode, run the mpls command to enable the MPLS globally. In global config mode, run the mpls vlan command to enable the MPLS of the VALN. 1. 2. l 1. 2. 3. ----End To enable the MPLS function globally, do as follows: huawei(config)#mpls Run the mpls command to enable the MPLS of the VLAN. Run the display mpls vlan command to query the MPLS state of the VLAN. Run the interface vlanif command to enter VLAN interface mode. Run the mpls command to enable the MPLS. Run the display mpls interface command to query the information about the interface whose MPLS function is enabled. In VLAN interface mode, run the mpls command to enable the MPLS of an interface. To enable the MPLS function of VLAN 140, do as follows: huawei(config)#mpls vlan 140 huawei(config)#display mpls vlan 140 Vlan 140 is enabled MPLS To enter interface mode and enable the MPLS of a VLAN, do as follows: huawei(config)#interface vlanif 140 Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-11 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-if-vlanif140)#mpls huawei(config-if-vlanif140)#quit huawei(config)#display mpls interface vlanif 140 verbose No : 1 Interface : vlanif140 Status : Down TE Attribute : Disable LSPCount : 0 CR-LSPCount : 0 MPLS Config MTU : 1500 Interface MTU : 1500 MPLS Effective MTU : 1500 TE FRR : Disabled Related Operation Table 27-4 shows the related operations for enabling MPLS. Table 27-4 Related operations for enabling MPLS To... Configure the LSR ID Disable MPLS Disable the MPLS VLAN Run the Command... mpls lsr-id undo mpls undo mpls vlan 27.5 Static LSP Configuration This section describes how to configure a static LSP. 27.5.1 Overview This section describes LSP types and commands for configuring the static LSP. 27.5.2 Configuring the Ingress LSR of the Static LSP This operation enables you to configure the ingress LSR of the static LSP. 27.5.3 Configuring the Egress LSR of the Static LSP This operation enables you to configure the egress LSR of the static LSP. 27.5.4 Configuring the LSP CAR This operation enables you to configure the LSP Committed Access Rate (CAR). 27.5.1 Overview This section describes LSP types and commands for configuring the static LSP. There are two types of LSPs: static LSP and dynamic LSP. l l l Static LSP is configured manually. After you configure all LSRs along the static LSP, the LSP can work in the normal state. Dynamic LSP is generated by the routing protocol dynamically. Table 27-5 lists the related commands for configuring the static LSP. 27-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Table 27-5 Related commands for configuring the static LSP To... Configure the ingress LSR of the static LSP Configure the egress LSR of the static LSP Configure/Remove LSP CAR Query the static LSP Run the Command... static-lsp ingress static-lsp egress (undo) mpls car-lsp display mpls static-lsp 27.5.2 Configuring the Ingress LSR of the Static LSP This operation enables you to configure the ingress LSR of the static LSP. Context If you specify the next hop address when configuring the static LSP, then you must specify the next hop address when configuring the IP static route. Similarly, if you specify the egress when configuring the static LSP, then you must specify the egress when configuring the IP static route. Procedure Step 1 Run the static-lsp ingress command to configure the ingress LSR of the static LSP. Step 2 Run the display mpls static-lsp command to query the configured ingress LSR of the static LSP. ----End Example To configure ingress LSR of the static LSP, do as follows: huawei(config)#static-lsp ingress staticlsp1 destination 3.3.3.3 32 nexthop 10.11.11.213 out-label 8500 huawei(config)#display mpls static-lsp <cr>|string<S><1,15>|verbose<K>|include<K>|exclude<K> }: Command: display mpls static-lsp Name FEC I/O Label I/O If Stat staticlsp1 3.3.3.3/32 NULL/8500 -/Down Related Operation Table 27-6 lists the related operations for configuring ingress LSR of the static LSP. Table 27-6 Related operations for configuring ingress LSR of the static LSP To... Configure the egress LSR of the static LSP Enable/Disable LSP CAR Issue 04 (2007-11-30) Run the Command... static-lsp egress (undo)mpls car-lsp Huawei Technologies Proprietary 27-13 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27.5.3 Configuring the Egress LSR of the Static LSP This operation enables you to configure the egress LSR of the static LSP. Procedure Step 1 Run the static-lsp egress command to configure the egress LSR of the static LSP. Step 2 Run the display mpls static-lsp command to query the configured egress LSR of the static LSP. ----End Example To configure egress LSR of the static LSP, do as follows: huawei(config)#static-lsp egress staticslp3 incoming-interface vlanif 140 in-label 8400 huawei(config)#display mpls static-lsp { <cr>|string<S><1,15>|verbose<K>|include<K>|exclude<K> }: Command: Name staticlsp1 staticslp3 display mpls static-lsp FEC I/O Label I/O If 3.3.3.3/32 NULL/8500 -/-/8400/NULL Vlanif140/Stat Down Up Related Operation Table 27-7 lists the related operations for configuring egress LSR of the static LSP. Table 27-7 Related operations for configuring egress LSR of the static LSP To... Configure egress LSR of the static LSP Enable/Disable the LSP CAR Run the Command... static-lsp ingress (undo)mpls car-lsp 27.5.4 Configuring the LSP CAR This operation enables you to configure the LSP Committed Access Rate (CAR). Procedure Step 1 Run the mpls car-lsp static command to configure the LSP CAR. Step 2 Run the display mpls car-lsp command and you can find the configuration of the LSP CAR is successful. ----End 27-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Example To configure the bandwidth of static LSP staticlsp1 as 1000×64 kbit/s, do as follows. And the system determines the burst value automatically based on the bandwidth. huawei(config)#mpls car-lsp static lspname staticlsp1 burst 0 bandwidth 1000 huawei(config)#display mpls car-lsp static lspname staticlsp1 Static Lsp CAR Table Total: 1 ---------------------------------------------------Lsp Name Burst(2KB) Bandwidth(64kbps) ---------------------------------------------------*staticlsp1 AUTO 1000 ---------------------------------------------------Note: A '*' before an LSP-CAR means the CAR is invalid. Related Operation Table 27-8 lists the related operations for configuring the LSP CAR. Table 27-8 Related operations for configuring LSP CAR To... Configure the ingress of the static LSP Configure the egress of the static LSP Query a static LSP Disable parameters of the LSP CAR Run the Command... static-lsp ingress static-lsp egress display mpls static-lsp undo mpls car-lsp 27.6 MPLS LDP Configuration This section describes how to configure MPLS LDP. 27.6.1 Overview This section describes the LDP protocol. 27.6.2 Enabling the MPLS LDP This operation enables the MPLS LDP. 27.6.3 Configuring Parameters of the LDP Basic Discovery This operation enables you to configure parameters of the LDP basic discovery. 27.6.4 Configuring Parameters of the LDP Extended Discovery This operation enables you to configure the parameters of the LDP extended discovery. 27.6.5 Configuring Parameters of the LDP Basic Session This operation enables you to configure parameters for the LDP basic session. 27.6.6 Configuring Parameters of the LDP Extended Session This operation enables you to configure parameters of the LDP extended session. 27.6.7 Configuring the LDP LSP Triggering Policy Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-15 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to configure the LDP LSP triggering policy. 27.6.8 Configuring the LDP Label Retention Mode This operation enables you to configure the LDP label retention mode. 27.6.9 Configuring the LDP Loopback Detection This operation enables you to configure the LDP loopback detection. 27.6.10 Configuring the LDP MD5 Authentication This operation enables you to configure the LDP MD5 authentication. 27.6.11 Enable the LDP MTU Signaling Function This operation enables the LDP MTU signaling function. 27.6.1 Overview This section describes the LDP protocol. If the LDP is adopted as the label distribution protocol in an MPLS domain to set up LSP, LDP sessions should be established between LSRs along the LSP to perform information exchange such as label mapping and release. The LDP uses Hello hold timer to maintain the LDP adjacency and session hold timer to maintain the LDP session. In most applications, you can adopt the default value of the two timers. In some special cases, you can modify the parameter as required. Modifying the hold timer may cause the original session to be recreated. The LSP originally created on the basis of this session will be deleted and needs to be recreated. 27.6.2 Enabling the MPLS LDP This operation enables the MPLS LDP. Context l l You must enable the MPLS first and then enable the MPLS LDP. You can only enable the MPLS of the standard VLAN. Procedure l In the global config mode: 1. 2. l Run the mpls ldp command to enable the MPLS LDP globally. Run the display current-configuration command and you can query the global MPLS LDP is enabled successfully. Run the mpls ldp command to enable the MPLS LDP of a VLAN interface. Run the display mpls interface command and you can query the MPLS LDP of the VLAN interface is enabled successfully. In VLAN interface mode: 1. 2. ----End To enable the MPLS LDP globally, do as follows: huawei(config)#mpls ldp huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] 27-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide # [mpls] <mpls> mpls lsr-id 4.4.4.4 mpls # [mpls-ldp] <mpls-ldp> mpls ldp # return 27 Configuring MPLS Access To enable the MPLS LDP of VLAN interface 140, do as follows: huawei(config)#interface vlanif { <1-4000> }:140 huawei(config-if-vlanif140)#mpls ldp huawei(config-if-vlanif140)#quit huawei(config)#display mpls interface vlanif 140 { <cr>|verbose<K> }: Command: Interface Vlanif140 display mpls interface vlanif 140 Status TE Attr LSP Count Down Dis 0 CRLSP Count Effective MTU 0 1500 Related Operation Table 27-9 lists the related operations for enabling the MPLS LDP. Table 27-9 Related operations for enabling the MPLS LDP To... Query information of MPLS LDP Query information of the peer session Disable the MPLS LDP Run the Command... display mpls ldp display mpls ldp session undo mpls ldp Remarks Disabling LDP on the interface will interrupt all LDP sessions on the interface. All the LSPs based on these sessions will be deleted accordingly. 27.6.3 Configuring Parameters of the LDP Basic Discovery This operation enables you to configure parameters of the LDP basic discovery. Context l In the VLAN interface, the link Hello timer can be configured. In remote peer mode, the target Hello timer can be configured. By default, the link Hello duration is 15s, and the target Hello duration is 45s. l Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-17 27 Configuring MPLS Access l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Generally, the default can meet the requirement. Modifying the Hello timer duration will result in recreating the original session, and all the LSPs based on the session will be deleted and needs to be recreated. Run the mpls ldp transport-address command to configure the LDP transmission address. By default, the address is the local LSR ID. l Procedure l Set the Hello timer duration. 1. 2. l Run the mpls ldp timer command to set the Hello timer duration. Run the display mpls ldp command to query the configuration of the Hello timer duration. Run the mpls ldp transport-address command to configure the LDP transmission address. Run the display mpls ldp command to query the configuration of the LDP transmission address. Configure the LDP transmission address. 1. 2. ----End To set the Hello timer duration, do as follows: huawei(config-if-vlanif140)#mpls ldp timer hello-hold 15 huawei(config-if-vlanif140)#quit huawei(config)#display mpls ldp interface vlanif 140 { <cr>||<K> }: Command: display mpls ldp interface vlanif 140 LDP Interface Information -------------------------------------------------------------------Interface Name : vlanif140 LDP ID : 4.4.4.4:0 Transport Address : 4.4.4.4 Entity Status : Inactive Interface MTU : 1500 Configured Hello Timer : 15 Sec Negotiated Hello Timer : 15 Sec Configured Keepalive Timer : 45 Sec Label Advertisement Mode : Downstream Unsolicited Hello Message Sent/Rcvd : 0/0 (Message Count) -------------------------------------------------------------------- To configure the LDP transmission address, do as follows: huawei(config-if-vlanif140)#mpls ldp transport-address vlanif 140 huawei(config-if-vlanif140)#quit huawei(config)#display mpls ldp interface vlanif 140 { <cr>||<K> }: Command: display mpls ldp interface vlanif 140 LDP Interface Information -------------------------------------------------------------------Interface Name : vlanif140 LDP ID : 4.4.4.4:0 Transport Address : 10.10.10.1 Entity Status : Inactive Interface MTU : 1500 Configured Hello Timer : 15 Sec Negotiated Hello Timer : 15 Sec Configured Keepalive Timer : 45 Sec Label Advertisement Mode : Downstream Unsolicited Hello Message Sent/Rcvd : 0/0 (Message Count) -------------------------------------------------------------------- 27-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Related Operation Table 27-10 lists the related operations for configuring parameters of the LDP basic discovery. Table 27-10 Related operations for configuring parameters of LDP basic discovery To... Query information of the peer session Query an MPLS LSP Run the Command... display mpls ldp session display mpls lsp 27.6.4 Configuring Parameters of the LDP Extended Discovery This operation enables you to configure the parameters of the LDP extended discovery. Context Only one local session or one remote session can exist between two LSRs. The local session has a higher priority than the remote session. l When a local adjacency already exists with the remote peer, the remote adjacency will not be created. When a remote adjacency exists and a local adjacency is created for the remote peer, the remote peer will be deleted. l Procedure l Set the Hello timer duration. 1. 2. l 1. 2. ----End Run the mpls ldp remote-peer remotepeer command to enter MPLS LDP remote peer mode. Run the mpls ldp timer hello-hold command to set the Hello timer duration. Run the interface vlanif command to enter VLAN interface mode. Run the mpls ldp transport-address command to configure the LDP transmission address. Configure the LDP transmission address. To set the Hello timer duration, do as follows: huawei(config)#mpls ldp remote-peer remotepeer huawei(config-mpls-ldp-remote-remotepeer)#mpls ldp timer hello-hold 45 To configure the LDP transmission address, do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls ldp transport-address vlanif 140 Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-19 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Verification After you specify the remote LSR ID as the remote-ip, the local LSR will send LDP Targeted Hello message to the remote-ip, thus discovering the LDP neighbor and establishing the remote session. Related Operation Table 27-11 lists the related operations for configuring the parameters of the LDP extended discovery. Table 27-11 Related operations for configuring the parameters of the LDP extended discovery To... Query information of the peer session Query the MPLS LSP Query the MPLS LDP Run the Command... display mpls ldp session display mpls lsp display mpls ldp 27.6.5 Configuring Parameters of the LDP Basic Session This operation enables you to configure parameters for the LDP basic session. Context l l By default, the value of the timer keepalive-hold is 45s. If there are more than one enabled LDP links between two LSRs, the keepalive-hold time of all links must be the same. Otherwise, the session may be unstable. Procedure Step 1 Run the interface vlanif command to enter vlan interface mode. Step 2 Run the mpls ldp timer keepalive-hold command to configure the timer keepalive-hold duration. Step 3 Run the display mpls ldp command to query the configuration of the timer keepalive-hold duration. ----End Example To set the Hello timer duration, do as follows: huawei(config)#interface vlanif 140 huawei(config-if-vlanif140)#mpls ldp timer keepalive-hold 45 huawei(config)#display mpls ldp interface vlanif 140 { <cr>||<K> }: Command: display mpls ldp interface vlanif 140 LDP Interface Information 27-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access -------------------------------------------------------------------Interface Name : vlanif120 LDP ID : 4.4.4.4:0 Transport Address : 10.10.10.1 Entity Status : Inactive Interface MTU : 1500 Configured Hello Timer : 15 Sec Negotiated Hello Timer : 15 Sec Configured Keepalive Timer : 45 Sec Label Advertisement Mode : Downstream Unsolicited Hello Message Sent/Rcvd : 0/0 (Message Count) -------------------------------------------------------------------- Related Operation Table 27-12 lists the related operations for configuring parameters of the LDP basic session. Table 27-12 Related operations for configuring parameters of the LDP basic session To... Query information of the peer session Query the MPLS LSP Run the Command... display mpls ldp session display mpls lsp 27.6.6 Configuring Parameters of the LDP Extended Session This operation enables you to configure parameters of the LDP extended session. Procedure Step 1 Run the mpls ldp remote-peer remotepeer command to enter MPLS LDP remote peer mode. Step 2 Run the mpls ldp timer keepalive-hold command to set the Hello timer duration. ----End Example To set the Hello timer duration, do as follows: huawei(config)#mpls ldp remote-peer remotepeer huawei(config-mpls-ldp-remote-remotepeer)#mpls ldp timer keepalive-hold 45 Related Operation Table 27-13 lists the related operations for configuring parameters of the LDP extended session. Table 27-13 Related operations for configuring parameters of the LDP extended session To... Query information of the peer session Query the MPLS LSP Issue 04 (2007-11-30) Run the Command... display mpls ldp session display mpls lsp Huawei Technologies Proprietary 27-21 27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To... Query the MPLS LDP Run the Command... display mpls ldp 27.6.7 Configuring the LDP LSP Triggering Policy This operation enables you to configure the LDP LSP triggering policy. Context l The IGP route entry that is included in the host or IP address prefix list can trigger LDP to set up an LSP. By default, no route entry can trigger LDP to set up an LSP. The host or IP address prefix list is only effective on the static route and the IGP route. l l Procedure Step 1 Run the mpls command to enter MPLS mode. Step 2 Run the lsp-trigger command to configure the LDP LSP triggering policy. Step 3 Run the display current-configuration command to query the configuration of the LDP LSP triggering policy. ----End Example To configure the triggering policy based on the host, do as follows: huawei(config)#mpls huawei(config-mpls)#lsp-trigger host huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> mpls lsr-id 4.4.4.4 mpls lsp-trigger host # [mpls-ldp] <mpls-ldp> mpls ldp # [mpls-ldp-remote] <mpls-ldp-remote-remotepeer> mpls ldp remote-peer remotepeer # return Related Operation Table 27-14 lists the related operations for configuring the LDP LSP triggering policy. 27-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) Step 3 Run the display mpls ldp command to query the configuration of the LDP label retention mode. do as follows: huawei(config)#mpls ldp huawei(config-mpls-ldp)#label-retention liberal huawei(config)#display mpls ldp { <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>| lsp<K> }: Command: display mpls ldp LDP Global Information -------------------------------------------------------------------Protocol Version : V1 Neighbor Liveness : 600 Sec Graceful Restart : Off FT Reconnect Timer : 300 Sec MTU Signaling : On Recovery Timer : 300 Sec LDP Instance Information -------------------------------------------------------------------Instance ID : 0 VPN-Instance : Instance Status : Active LSR ID : 4.. ----End To set the LDP label retention mode as liberal.6.. l Procedure Step 1 Run the mpls ldp command to enable the MPLS LDP globally.4. no matter whether the neighboring LSR is at its next hop. conservative: For the label mapping received from the neighboring LSR..4 Hop Count Limit : 32 Path Vector Limit : 32 Loop Detection : Off DU Re-advertise Timer : 10 Sec DU Re-advertise Flag : On Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-23 . the LSR can accommodate itself to the route changes rapidly. display mpls ldp session display mpls lsp display mpls ldp 27. Therefore. Query information of the peer session Query the MPLS LSP Query the MPLS LDP Run the Command..8 Configuring the LDP Label Retention Mode This operation enables you to configure the LDP label retention mode. the LSR can distribute and retain fewer labels. the LSR will retain it. the LSR will retain it only when the neighboring LSR is at its next hop. Context There are two label retention modes: l liberal: For the label mapping received from the neighboring LSR.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Table 27-14 Related operations for configuring the LDP LSP triggering policy To. Therefore.4. Step 2 Run the label-retention command to configure the LDP label retention mode. the maximum hop is 32. Step 2 Run the loop-detect command to start the loopback detection. Query information of the peer session Query the MPLS LSP Run the Command. in setting up an LDP session. The maximum value of the path hop is exceeded. By default. display mpls ldp session display mpls lsp 27. Step 3 Run the hops-count command to set the maximum hops for the loopback detection. the maximum path vector is 32. Path vectors: The maximum value of LSP shall be specified.27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide DU Explicit Request : Off Request Retry Flag : On Label Distribution Mode : Independent Label Retention Mode : Liberal -------------------------------------------------------------------- Related Operation Table 27-15 lists the related operations for configuring the LDP label retention mode. the loopback detection is disabled. and the LSP fails to set up: – – l l l The LSR record already exists in the path vector table. Table 27-15 Related operations for configuring the LDP label retention mode To.9 Configuring the LDP Loopback Detection This operation enables you to configure the LDP loopback detection. By default.6. l Maximum hops: If the specified value is exceeded.. the system considers that the loopback occurs. it is required that all LSRs be configured with loopback detection function. Procedure Step 1 Run the mpls ldp command to enable the MPLS LDP globally. 27-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. the loopback detection configuration of both sides can be different. and the LSP fails to set up. However. Step 4 Run the path-vectors command to set the maximum value of path vectors.. The system considers that the loopback occurs in any of the following conditions.. The loopback detection configuration is only effective on the established LSP. Prerequisite There are two types of the LDP loopback detection: maximum hops and path vectors. By default. l Context l Before starting the loopback detection for the MPLS domain. 10 Configuring the LDP MD5 Authentication This operation enables you to configure the LDP MD5 authentication. ----End Example To configure the LDP loopback detection with the maximum hop of 30 and the maximum path vector of 30. do as follows: huawei(config)#mpls ldp huawei(config-mpls-ldp)#loop-detect huawei(config-mpls-ldp)#hops-count 30 huawei(config-mpls-ldp)#path-vectors 30 huawei(config)#display mpls ldp { <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>|lsp <K> }: Command: display mpls ldp LDP Global Information -------------------------------------------------------------------Protocol Version : V1 Neighbor Liveness : 600 Sec Graceful Restart : Off FT Reconnect Timer : 300 Sec MTU Signaling : On Recovery Timer : 300 Sec LDP Instance Information -------------------------------------------------------------------Instance ID : 0 VPN-Instance : Instance Status : Active LSR ID : 4.6.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Step 5 Run the display mpls ldp command to query the configuration of the LDP loopback detection. Query information of the peer session Query a MPLS LSP Run the Command. display mpls ldp session display mpls lsp 27..4.4 Hop Count Limit : 30 Path Vector Limit : 30 Loop Detection : On DU Re-advertise Timer : 10 Sec DU Re-advertise Flag : On DU Explicit Request : Off Request Retry Flag : On Label Distribution Mode : Independent Label Retention Mode : Liberal -------------------------------------------------------------------- Related Operation Table 27-16 lists the related operations for configuring the LDP loopback detection.4.. Table 27-16 Related operations for configuring the LDP loopback detection To.. the LDP MD5 authentication is not configured. By default. you can configure MD5 authentication to the TCP used by the LDP. Context l To enhance the security of the LDP session connection.. l Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-25 . Step 3 Run the display current-configuration command to query the configuration of the LDP MD5 authentication. Step 2 Run the md5-password command to configure the LDP MD5 authentication.255.255.3. MEth0 Interface ip address 192.1. Vlanif2 Interface ipaddress 10.1.255.0 mpls mpls ldp [meth] <meth0> interfacemeth0 descriptionHUAWEI.3.2 mpls label advertisenon-null lsp-triggerhost mplsl2vpn [mpls-ldp] <mpls-ldp> mpls ldp md5-password cipher 3.27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the mpls ldp command to enable the MPLS LDP globally.2 255.IKAY5^0NWQ=^Q`MAF4<1!! md5-password cipher 10.255. ----End Example To configure the connection password of the TCP used by the LDP as password.3.3. MA5600 Series.3 S.3.0 # return Related Operation Table 27-17 lists the related operations for configuring the LDP MD5 authentication.3.3 password huawei(config-mpls-ldp)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] [device-config] <device-config> board add 0/4 ADE [vlan-config] <vlan-config> vlan 140 mux port vlan 2 0/7 2 [config] <config> mplsvlan 2 stp enable [mpls] <mpls> mpls lsr-id 4.IKAY5^0NWQ=^Q`MAF4<1!! [vlanif] <vlanif2> interface vlanif2 description HUAWEI. MA5600 Series.168.1. which is displayed in cipher text.4. 27-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . and the peer LSR ID as 3.1.1.2 255. do as follows: huawei(config)#mpls ldp huawei(config-mpls-ldp)#md5-password cipher 3.3 S.3.4. In this way.. the LDP MTU signaling is enabled. Step 2 Run the mtu-signalling command to enable the LDP MTU signaling function. display mpls ldp session display mpls lsp display mpls ldp 27. Enabling/Disabling MTU signaling function may result in recreating original session. The LDP can automatically calculate the minimum MTU value of all the interfaces on each LSP. the system can avoid sending larger packets at the ingress LSR. Query information of the peer session Query the MPLS LSP Query the MPLS LDP Run the Command.. By default. Context l To detect path MTU correctly.. which may result in forwarding failure at the transit LSR. LSPs that are created based on this session will be deleted and needs to be recreated.11 Enable the LDP MTU Signaling Function This operation enables the LDP MTU signaling function.6. At the ingress LSR. l l l Procedure Step 1 Run the mpls ldp command to enable the MPLS LDP globally. ----End Example To enable the LDP MTU signaling function. Step 3 Run the display mpls ldp command and you can query the configuration of the LDP MTU signaling function. do as follows: huawei(config)#mpls ldp huawei(config-mpls-ldp)#mtu-signaling huawei(config)#display mpls ldp { <cr>||<K>|all<K>|verbose<K>|interface<K>|peer<K>|session<K>|remote-peer<K>|lsp <K> }: Command: display mpls ldp LDP Global Information -------------------------------------------------------------------Protocol Version : V1 Neighbor Liveness : 600 Sec Graceful Restart : Off FT Reconnect Timer : 300 Sec MTU Signaling : On Recovery Timer : 300 Sec LDP Instance Information -------------------------------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-27 . the IP router needs to know the MTU of each link connected to it.. the MPLS determines the size of the forwarded packets based on the calculated minimum MTU value.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Table 27-17 Related operations for configuring the LDP MD5 authentication To. Table 27-18 Related operation for enabling the LDP MD5 MTU signaling function To.2 Configuring a PW Template This operation enables you to configure a PW template..4.4.. Step 2 Run the display current-configuration command and you can find the MPLS L2VPN is enabled successfully. undo mtu-signalling 27. ----End Example To enable the MPLS L2VPN.7.7. Procedure Step 1 Run the mpls l2vpn command to enable the MPLS L2VPN.3 Binding a PVC with a PW Template This operation enables you to bind a PVC with a PW template.. Disable the LDP MTU signaling function Run the Command. 27. 27.4 Hop Count Limit : 30 Path Vector Limit : 30 Loop Detection : On DU Re-advertise Timer : 10 Sec DU Re-advertise Flag : On DU Explicit Request : Off Request Retry Flag : On Label Distribution Mode : Independent Label Retention Mode : Liberal -------------------------------------------------------------------- Related Operation Table 27-18 lists the related operation for enabling the LDP MD5 MTU signaling function..7. do as follows: huawei(config)#mpls l2vpn huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] 27-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 27.1 Enable the MPLS L2VPN This operation enables the MPLS L2VPN.27 Configuring MPLS Access SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Instance ID : 0 VPN-Instance : Instance Status : Active LSR ID : 4.7 PW Configuration This section describes how to configure a PW template.1 Enable the MPLS L2VPN This operation enables the MPLS L2VPN.7. 27. 27.7.4 Binding a VLAN with a PW Template This operation enables you to bind a VLAN with a PW template. 3..3 huawei(config-pw-template-pwt1)#pw-type atm sdu huawei(config)#display pw-template { <cr>|string<S><1.3. Step 2 Run the peer-address command to specify the peer IP address. ----End Example To create PW profile pwt1 with the peer IP address of 3. Step 3 Run the pw-type command to specify the PW template type...19> }: Command: display pw-template Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-29 . undo mpls l2vpn 27.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide # [mpls] <mpls> mpls lsr-id 4.4.3. Disable the MPLS L2VPN Run the Command.3 and the profile type of ATM in SDU mode.. do as follows: huawei(config)#pw-template pwt1 huawei(config-pw-template-pwt1)#peer-address 3.7.2 Configuring a PW Template This operation enables you to configure a PW template.4. Table 27-19 Related operation for enabling the MPLS L2VPN To.4 mpls lsp-trigger host mpls l2vpn # [mpls-ldp] <mpls-ldp> mpls ldp loop-detect hops-count 30 path-vectors 30 # [mpls-ldp-remote] <mpls-ldp-remote-remotepeer> mpls ldp remote-peer remotepeer # return 27 Configuring MPLS Access Related Operation Table 27-19 lists the related operation for enabling the MPLS L2VPN.3. Step 4 Run the display pw-template command to query the PW template. Procedure Step 1 Run the pw-template command to create a PW template. l Procedure Step 1 Run the pw-ac-binding pvc command to bind a PVC with a PW profile. G--IMA GROUPINDEX) VLAN ID Related Operation Table 27-20 lists the related operations for binding a PVC with a PW template.3 Binding a PVC with a PW Template This operation enables you to bind a PVC with a PW template. Static PW : 0. the VPI and VCI values must be changed at the egress of the PW template. do as follows: huawei(config)#pw-ac-binding pvc { frame/slot/port<S><1.27 Configuring MPLS Access Total PW template PW Template Name PeerIP Tnl Policy Name PW Type CtrlWord MTU MaxAtmCells Total PW SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide number : 1 : pwt1 : 3. To differentiate PVCs.15>|frame/slot<S><1.3. Step 2 Run the display pw-ac-binding command and you can find a PVC is bound with a PW template successfully. S--Slot.3 : -: atm sdu : Enable : 1500 : 1 : 0.15> }:0/2/0 { vpi<K> }:vpi 0 { vci<K> }:vci 35 { pw<K>|outvpi<K> }:pw { pw-id<U><1.7.4294967294> }:10 { pw-template<K> }:pw-template { pw-template-name<S><1. 27-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . P--Port) F/S/G VPI VCI (F--Frame. Context You can bind a PVC with a PW template in the following two modes: l NTO1 mode: One PW template can be bound with multiple PVCs. ----End Example To bind the PVC between the ADSL port 0/2/0 and the control board with PW template PWT1.19> }:pwt1 huawei(config)#display pw-ac-binding pw 10 Total : 1 (Up/Down : 1/0 Static/Dynamic : 0/1) ------------------------------------------------------------------------AC PW PW PW RECEIVE TRNS TEMPLATE ID ID STATE TYPE LABEL LABEL NAME -------------------------------------------------------------------------0/2/0 0 35 10 up dynamic 9351 19 pwt1 -------------------------------------------------------------------------Note : AC ID should be: F/S/P VPI VCI (F--Frame. The VPI and VCI values remain unchanged at the egress of the PW template. S--Slot. SDU mode: One PW template can be bound with a PVC.3. LDP PW : 0 27. Create a PW template Run the Command. pw-template Issue 04 (2007-11-30) Huawei Technologies Proprietary 27-31 . S--Slot. S--Slot. Create a PW template Bind a VLAN with a PW template Run the Command. Procedure Step 1 Run the pw-ac-binding vlan command to bind a VLAN with a PW profile. pw-template pw-ac-binding vlan 27..7. Table 27-21 Related operations for binding a VLAN with a PW template To..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 27 Configuring MPLS Access Table 27-20 Related operations for binding a PVC with a PW template To.4 Binding a VLAN with a PW Template This operation enables you to bind a VLAN with a PW template... ----End Example To bind standard VLAN 20 with PW template PWT1. do as follows: huawei(config)#pw-ac-binding vlan 20 pw 100 pw-template pwt1 huawei(config)#display pw-ac-binding pw 100 Total : 1 (Up/Down : 1/0 Static/Dynamic : 0/1) ------------------------------------------------------------------------AC PW PW PW RECEIVE TRNS TEMPLATE ID ID STATE TYPE LABEL LABEL NAME -------------------------------------------------------------------------0/2/0 0 35 100 up dynamic 9351 19 pwt1 -------------------------------------------------------------------------Note : AC ID should be: F/S/P VPI VCI (F--Frame... G--IMA GROUPINDEX) VLAN ID Related Operation Table 27-21 lists the related operations for binding a VLAN with a PW template. Step 2 Run the display pw-ac-binding command and you can find the VLAN is bound with the PW template successfully. P--Port) F/S/G VPI VCI (F--Frame... . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE 28 About This Chapter Configuring MPLS RSVP-TE This chapter describes the MPLS RSVP-TE technology and how to configure MPLS RSVP-TE on the MA5600 28.6 Tuning the Establishment of CR-LSP This operation enables you to tune the establishment of CR-LSP. 28. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-1 . 28.3 Configuring Basic MPLS TE Capability This operation enables you to configure the basic capability of MPLS TE.1 Overview This section describes applications of extended Resource ReSerVation Protocol (RSVP-TE) to the MA5600. 28.5 Configuring Advanced RSVP-TE Features This operation enables you to configure the advanced RSVP-TE features. 28.2 Configuration Example for Establishing an MPLS TE Tunnel by Using RSVP-TE This example shows how to establish an MPLS TE tunnel by using RSVP-TE.4 Configuring an MPLS TE Tunnel by Using Dynamic Signaling This operation enables you to configure an MPLS TE tunnel by using dynamic signaling. 28.7 Tuning the Establishment of an MPLS TE Tunnel This operation enables you to tune the establishment of an MPLS TE tunnel. 28. 2 Configuration Example for Establishing an MPLS TE Tunnel by Using RSVP-TE This example shows how to establish an MPLS TE tunnel by using RSVP-TE. For the MA5600. Service Specification In the case of scarcity of resources. NOTE For details of MPLS TE. you can create an LSP tunnel to a specified path. a slave shelf must be separately configured with the and the AIUG subboard.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28. l l Only the master shelf supports MPLS function. With MPLS TE. to subtend slave shelves. administrators must create some LSPs and bypass congestion nodes. Using this technology. Constrained Route-Label Switched Path (CR-LSP) processing: It processes various kinds of CR-LSPs. Networking Figure 28-1 shows the sample network for establishing an MPLS TE tunnel by using RSVPTE. Service Description MPLS TE is a technology that integrates TE with MPLS. l l To provide the MPLS function. refer to the Requirements for Traffic Engineering Over MPLS (RFC2702). to reserve resources and implement re-optimization. The master shelf supports the ETH PWE3 and the ATM PWE3 services. This meets the demands for the LSPs with large bandwidth or VIP customers. and the slave shelf supports only the ETH PWE3 service. (To support the ATM PWE3 service. the MA5600 can serve as only a PE device. this eliminates network congestion. 28-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .) 28. MPLS TE also provides protection against link or node failure through the use of path backup and fast reroute (FRR).1 Overview This section describes applications of extended Resource ReSerVation Protocol (RSVP-TE) to the MA5600. The major functions of MPLS TE are as follows: l l Static LSP processing: It creates and deletes LSPs. so as to serve as an independent PE to provide MPLS upstream function. Thus. MPLS TE helps to preempt the bandwidth resource of the LSP tunnels with low priority based on the priority and preemption parameter. 1/24 Before establishing an MPLS TE tunnel.2.1/32 MA5600_A 10.1/32 Port: 0/7/2 VLAN: 10 IP address of layer 3 interface (interface connected with router): 10.1. The IP addresses and masks of interfaces are configured as a sample network. Table 28-1 Data plan for establishing an MPLS TE tunnel by using RSVP-TE Item MA5600_A Data lsr-id: 1.1.1.1.1.2.1.2/24 IP address of the interface connected with MA5600_B: 10.2. make sure that: l l The network device and the line are in the normal state.1. After the configuration.2. Huawei Technologies Proprietary 28-3 Issue 04 (2007-11-30) .1.1.1.1.1/24 10.2/24 LSR-id 3. LSRs can ping each other successfully.2.1.1.2/24 Router lsr-id: 2.1/24 MA5600_B lsr-id: 3.1.3.1.2.3.2.2/32 10.2/32 IP address of the interface connected with MA5600_A: 10.2.3.2/24 LSR-id 2.3.3/32 MA5600_B Data Plan Table 28-1 lists the data plan for establishing an MPLS TE tunnel by using RSVP-TE.1/24 LSR-id 1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Figure 28-1 Sample network for establishing an MPLS TE tunnel by using RSVP-TE Router 10.1.3/32 Port: 0/7/2 VLAN: 20 IP address of layer 3 interface (interface connected with router): 10. enable MPLS TE. Enable globally the MPLS basic functions and the MPLS TE basic functions. Figure 28-2 Flowchart for establishing an MPLS TE tunnel Start Configure the MPLS basic capability. the static routes are configured. it is not described here.1. RSVP-TE and CSPF Configure OSPF TE Configure the MPLS TE attribute of links Configure MPLS TE tunnel Save the data End Procedure Step 1 Configure the MPLS basic capability.1. Otherwise.1 24 MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#mpls te MA5600_A(config-if-vlanif10)#mpls rsvp-te MA5600_A(config-if-vlanif10)#mpls te cspf NOTE The configuration of MA5600_B is the same as that of MA5600_A.28 Configuring MPLS RSVP-TE l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The OSPF protocol is configured on all MA5600 devices and routers. MA5600_A(config)#mpls lsr-id 1. Enable the MPLS basic functions and the MPLS TE functions on interfaces. and the configured routes are advertised successfully. RSVP-TE and CSPF. MA5600_A(config)#vlan 10 standard MA5600_A(config)#mpls vlan 10 MA5600_A(config)#port vlan 10 0/7 0 MA5600_A(config)#interface vlanif 10 MA5600_A(config-if-vlanif10)#ip address 10.1. 1.1 MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls te MA5600_A(config-mpls)#mpls rsvp－te MA5600_A(config-mpls)#mpls te cspf MA5600_A(config-mpls)#quit 2.1. Configuration Flowchart Figure 28-2 shows the flowchart for establishing an MPLS TE tunnel. So. and enable the MPLS TE. 28-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 1 Enabling MPLS TE Feature This operation enables the MPLS TE feature.0. it is not described here.3.3. MA5600_A(config)#interface vlanif MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#quit MA5600_B(config)#interface vlanif MA5600_B(config-if-vlanif20)#mpls MA5600_B(config-if-vlanif20)#mpls MA5600_B(config-if-vlanif20)#quit 10 te max-link-bandwidth 2048 te max-reservable-bandwidth 1024 20 te max-link-bandwidth 2048 te max-reservable-bandwidth 1024 Step 4 Configure the MPLS TE tunnel from MA5600_A to MA5600_B.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Step 2 Configure OSPF TE. you must perform further configuration besides basic configuration. do as follows to display the configuration result on MA5600_A: Run the display mpls te tunnel-interface tunnel command and you can find the configuration of the tunnel. Context The configuration of basic MPLS TE capability is required in various MPLS TE feature configurations. So.3 MA5600_A(config-if-tunnel10)#mpls te tunnel-id 10 MA5600_A(config-if-tunnel10)#mpls te signal-protocol rsvp-te MA5600_A(config-if-tunnel10)#mpls te bandwidth bc0 512 MA5600_A(config-if-tunnel10)#mpls te commit MA5600_A(config-if-tunnel10)#quit Step 5 Save the data. MA5600_A(config)#save MA5600_B(config)#save ----End Result After the configuration. MA5600_A(config)#ospf 100 MA5600_A(config-ospf-100)#opaque-capability enable MA5600_A(config-ospf-100)#area 0 MA5600_A(config-ospf-100-area-0.0. 28. 28.2 Creating an MPLS TE Tunnel This operation enables you to create an MPLS TE tunnel.3.0)#quit NOTE The configuration of MA5600_B is the same as that of MA5600_A. 28.0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-5 .0)#mpls-te enable standard-complying MA5600_A(config-ospf-100-area-0.3 Configuring Basic MPLS TE Capability This operation enables you to configure the basic capability of MPLS TE. To use the MPLS TE features. MA5600_A(config)#interface tunnel 10 MA5600_A(config-if-tunnel10)#tunnel-protocol mpls te MA5600_A(config-if-tunnel10)#destination 3.3. Step 3 Configure the MPLS TE attribute of links on MA5600_A and MA5600_B respectively. run the mpls te command to globally enable the MPLS TE feature. 1. The CR-LSPs on the interface are deleted when the MPLS TE feature is disabled in the interface view. please wait. OK! To enter the interface mode and enable the MPLS TE feature of the VLAN interface. In the MPLS view. Context l l You must enable the basic MPLS TE capability before enabling the MPLS TE feature. ----End To globally enable the MPLS feature. run the mpls te command to enable the MPLS TE feature on the interface. l Enter the MPLS mode. Run the mpls te command to enable the MPLS TE feature on the interface. Run the display mpls interface command to display information about the interface whose MPLS TE feature has been enabled. do as follows: huawei(config)#mpls { car-lsp<K>|qos<K>|lsr-id<K>|oam<K>|<cr>|ldp<K>|l2vpn<K>|te<K> }: Command: mpls huawei(config-mpls)#mpls te { tie-breaking<K>|path<K>|cspf<K>|<cr> }: Command: mpls te Info: Mpls te starting.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28. 2. In the interface view. when the MPLS TE feature is disabled.. Enter VLAN interface mode. do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls te { max-reservable-bandwidth<K>|max-link-bandwidth<K>|link<K>|bandwidth<K>|metric< K>|<cr> }: Command: mpls te huawei(config)#display mpls interface vlanif 20 { <cr>|verbose<K> }:verbose 28-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1 Enabling MPLS TE Feature This operation enables the MPLS TE feature. the MPLS TE feature is disabled.. 2. 3. run the mpls te command to globally enable the MPLS TE feature. You must globally enable MPLS TE and then enable the feature on corresponding interfaces. the feature on corresponding interfaces is also disabled and the CR-LSP tunnels are deleted. 1.3. In the MPLS view. l l l Procedure l In the MPLS view. By default. 100 Huawei Technologies Proprietary 28-7 Issue 04 (2007-11-30) .. Table 28-2 Related operation for enabling MPLS TE feature To. Step 3 Run the destination command to configure the destination address of the tunnel..2 Creating an MPLS TE Tunnel This operation enables you to create an MPLS TE tunnel.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Command: display mpls interface vlanif 20 verbose No : 1 Interface : vlanif20 Status : Up TE Attribute : Enable LSPCount : 0 CR-LSPCount : 0 MPLS Config MTU : Please set the MPLS MTU! Interface MTU : 1500 MPLS Effective MTU : 1500 TE FRR : Disabled 28 Configuring MPLS RSVP-TE Related Operation Table 28-2 lists the related operation for enabling MPLS TE feature. Step 2 Run the tunnel-protocol mpls te command to configure tunnel protocol to be MPLS TE. ----End Example Assume that: l Destination address: 202. The destination address of the tunnel is LSR ID of the egress node. Disable MPLS TE feature Run the Command.. Step 6 Run the display current-configuration command to display information about the tunnel. run the mpls te commit command to validate them. If MPLS TE parameters on a tunnel interface change. Step 5 Run the mpls te commit command to commit the current tunnel configuration.100. undo mpls te 28.3. Step 4 Run the mpls te tunnel-id command to configure tunnel ID. No peer address exists because the MPLS TE tunnel is unidirectional.. l l Procedure Step 1 Run the interface tunnel command to create a tunnel interface and enter tunnel interface mode. Context l The tunnel interface must have an IP address to implement the traffic forwarding feature.100. .4.100 NOTE The destination address of the tunnel is recommended to be configured as the address of the loopback port of the peer device.100.. mpls lsr-id 28.28 Configuring MPLS RSVP-TE l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Tunnel name: 10 Tunnel ID: 10 To create the MPLS TE tunnel.4. Table 28-3 Related operation for creating an MPLS TE tunnel To. such as backup and FRR.4. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#tunnel-protocol mpls te huawei(config-if-tunnel10)#destination 202.3 Configuring the MPLS TE Explicit Path 28-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2 Enabling OSPF TE This operation enables you to enable OSPF TE. The process for configuring an MPLS TE through the dynamic signaling protocol is as follows: 28.100. Configure LSR ID Run the Command. Context The dynamic signaling protocol adjusts the path of a TE tunnel based on dynamic changes of the network.4 Configuring an MPLS TE Tunnel by Using Dynamic Signaling This operation enables you to configure an MPLS TE tunnel by using dynamic signaling.100.1 Configuring Bandwidth of Links This operation enables you to configure bandwidth of links. huawei(config-if-tunnel10)#mpls te tunnel-id 10 huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202.100. 28.100 mpls te tunnel-id 10 # return Related Operation Table 28-3 lists the related operation for creating an MPLS TE tunnel... and applies advanced features. 28. l Procedure l Configure the maximum bandwidth of MPLS TE links. The mpls te max-reservable-bandwidth command is used to configure the maximum reservation bandwidth of MPLS TE links.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE This operation enables you to configure the MPLS TE explicit path. 2.255.5 Configuring CSPF This operation enables you to configure CSPF algorithm of an MPLS. Run the display current-configuration command to display maximum reservation bandwidth of MPLS TE links.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 2048 # <vlanif30> interface vlanif30 Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-9 . 28. ----End To set the maximum bandwidth of both MPLS TE links 4096 kbit/s and BC1 as 2048 kbit/s. 2.4 Configuring Constraints of an MPLS TE Tunnel This operation enables you to configure constraints for an MPLS TE tunnel. 28.4.255. 1.1 Configuring Bandwidth of Links This operation enables you to configure bandwidth of links.4.6 Establishing an MPLS TE Tunnel by Using RSVP-TE This operation enables you to establish an MPLS TE tunnel by using RSVP-TE. The bandwidth applies to only MPLS traffic.4.100. l Run the mpls te max-link-bandwidth command to configure the maximum bandwidth of MPLS TE links. Run the display current-configuration command to display the maximum bandwidth of MPLS TE links. Context l The mpls te max-link-bandwidth bandwidth-value command is used to set the maximum bandwidth of MPLS TE links. Configure the maximum reservation bandwidth.1 255.100. do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls te max-link-bandwidth 4096 bc1 2048 huawei(config-if-vlanif20)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif20> interface vlanif20 ip address 202. 28.4. 28. The bandwidth applies to both MPLS traffic and common Best-Effort traffic. Run the mpls te max-reservable-bandwidth command to configure the maximum reservation bandwidth of MPLS TE links. 1. Context By default.255.. Table 28-4 Related operations for configuring bandwidth of links To.4. Cancel the configuration of maximum bandwidth on MPLS TE links Cancel the configuration of maximum reservation bandwidth on MPLS TE links Run the Command. Step 3 Run the area command to enter the OSPF area view.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 2048 mpls te max-reservable-bandwidth 1024 bc1 512 # <vlanif30> interface vlanif30 # return Related Operation Table 28-4 lists the related operations for configuring bandwidth of links.255. 28-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1 255.2 Enabling OSPF TE This operation enables you to enable OSPF TE.28 Configuring MPLS RSVP-TE # return SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To set the maximum reservation bandwidth of both MPLS TE links 1024 kbit/s and BC1 as 512 kbit/s. undo mpls te max-link-bandwidth undo mpls te max-reservable-bandwidth 28... Step 2 Run the opaque-capability enable command to enable the OSPF opaque capability.100. the OSPF TE capability is disabled.. Procedure Step 1 Run the ospf command to enter OSPF mode.100. do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls te max-reservable-bandwidth 1024 bc1 512 huawei(config-if-vlanif20)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif20> interface vlanif20 ip address 202. do as follows: huawei(config)#ospf 100 huawei(config-ospf-100)#opaque-capability enable huawei(config-ospf-100)#area 100 huawei(config-ospf-100-area-0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Step 4 Run the mpls-te enable command to enable TE in current OSPF area. Table 28-5 Related operations for enabling OSPF TE To. In general..100)#mpls-te enable standard-complying huawei(config)#display current-configuration section ospf [MA5600V300R003: 3002] # [ospf] <ospf-100> ospf 100 opaque-capability enable area 0.3 Configuring the MPLS TE Explicit Path This operation enables you to configure the MPLS TE explicit path. The two kinds of relations that exist between adjacent nodes on an explicit path are as follows: – l Strict next-hop: Two nodes must be connected directly.. The explicit path consists of a series of nodes. An IP address in the explicit path is the IP address of interface on the node. Disable the MPLS TE feature in the current OSPF area Display the configuration of the OSPF Run the Command. the address of the loopback interface on a node is used as the destination address.0.100 mpls-te enable standard-complying # return Related Operation Table 28-5 lists the related operations for enabling OSPF TE.. Huawei Technologies Proprietary 28-11 Issue 04 (2007-11-30) .0..4. undo mpls-te display ospf Remarks In the OSPF area view - 28. Step 5 Run the display current-configuration command to display the configuration of the current OSPF.0. ----End Example To enable TE in OSPF area 100.0. Context l l MPLS TE explicit path is configured on the ingress node. 100.200.100.100..100.100 include strict huawei(config-explicit-path-huaweipath)#next hop 202.200 Loose Include Related Operation Table 28-6 lists the related operations for configuring the MPLS TE explicit path... Step 3 Run the list hop command to display the configuration of the MPLS TE explicit path. By default. Procedure Step 1 Run the explicit-path enable command to create an explicit path and enter explicit path view. ----End Example To configure an MPLE TE path named huaweipath with IP addresses 202.100 and 202.4 Configuring Constraints of an MPLS TE Tunnel This operation enables you to configure constraints for an MPLS TE tunnel.28 Configuring MPLS RSVP-TE – l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Loose next-hop: Other routers exist between the two nodes. Table 28-6 Related operations for configuring the MPLS TE explicit path To. Step 2 Run the next hop command to specify the next hop of the explicit path.100.X> }: Command: list hop Path Name : huaweipath Path Status : Enabled 1 202..200. display explicit-path undo explicit-path add hop modify hop delete hop 28.4. the explicit path includes the next hop in strict mode.200 include loose huawei(config-explicit-path-huaweipath)#list hop { <cr>|ip_addr<I><X. 28-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .100.200.200. do as follows: huawei(config)#explicit-path huaweipath enable huawei(config-explicit-path-huaweipath)#next hop 202.100 Strict Include 2 202.X.100.100. Display the configuration of the explicit path Delete an MPLS TE explicit path Insert a node to the explicit path Modify the node address of explicit address Delete a node from the explicit path Run the Command.X.100. The explicit path specifies nodes that must be passed or cannot be passed to reach a destination. 5 Configuring CSPF This operation enables you to configure CSPF algorithm of an MPLS.. Step 5 Run the display current-configuration command to display the information about the tunnel.100 mpls te tunnel-id 10 mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath # return Related Operation Table 28-7 lists the related operations for configuring constraints for an MPLS TE tunnel.4. Table 28-7 Related operations for configuring constraints for an MPLS TE tunnel To.. ----End Example To configure the constraints for an MPLS TE tunnel. Step 2 Run the mpls te bandwidth command to configure bandwidth for the tunnel. Cancel the configuration of bandwidth for an MPLS TE tunnel Cancel the configuration of the explicit path used by an MPLS TE tunnel Run the Command. Step 4 Run the mpls te commit command to commit the current tunnel configuration. Step 3 Run the mpls te path explicit-path command to configure the explicit path used for the MPLS TE tunnel. undo mpls te bandwidth undo mpls te path 28.100.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Procedure Step 1 Run the interface tunnel command to create or enter the tunnel interface view of the MPLS TE tunnel.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-13 . do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te bandwidth bc0 8192 huawei(config-if-tunnel10)#mpls te path explicit-path huaweipath huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202..100. the CSPF is notified of this deletion and modification. The CSPF then updates the link in the TEDB and stops the timer. the status of the link is Up... If the IGP deletes or modifies this link before the timer expires. Step 3 Run the mpls te cspf timer failed-link command to set the interval for starting up to the failed timer.10 mpls mpls te mpls te cspf mpls te cspf timer failed-link 100 # return Related Operation Table 28-8 lists the related operations for configuring the CSPF of an MPLS.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l l You must enable CSPF first and then you can configure relevant CSPF functions.. Table 28-8 Related operations for configuring CSPF of an MPLS To. Whenever a link is Down. l Procedure Step 1 Run the mpls command to enter the MPLS view.. CSPF of an MPLS area is disabled and the interval for starting up the failed timer is 10s. Step 2 Run the mpls te cspf command to enable CSPF of the node. If the timer expires and the IGP does not delete the link. Step 4 Run the display current-configuration command to display CSPF configuration of the MPLS. undo mpls te cspf undo mpls te cspf timer failed-link 28-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To enable CSPF of an MPLS and set the interval for starting up the failed timer as 100s. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls te cspf huawei(config-mpls)#mpls te cspf timer failed-link 100 huawei(config-mpls)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> mpls lsr-id 100.10. a CSPF failed link timer starts.10. By default. Disable the CSPF of an MPLS Restore the default interval for starting up the failed timer Run the Command. Step 4 In tunnel interface mode. In the VLAN interface view. run the mpls command and the mpls te command to enable the MPLS and the MPLS TE features. Enable RSVP-TE feature first before configuring other RSVP-TE functions.. run the mpls rsvp-te command to enable RSVP-TE on the VLAN interface. To run the mpls rsvp-te command. run the mpls rsvp-te command to enable the RCVP-TE feature. l l l Procedure Step 1 Run the mpls command to enter the MPLS view.. Step 5 In tunnel interface mode. ----End Example To establish an MPLS TE tunnel by using RSVP-TE. the RSVP-TE feature on each interface is disabled at the same time. run the mpls rsvp-te command to enable the RSVP-TE feature of interfaces. once the RSVP-TE feature is disabled globally. run the mpls te commit command to commit the current tunnel configuration. Context l In the MPLS view..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE 28. In the MPLS view. the RSVP-TE feature is disabled.6 Establishing an MPLS TE Tunnel by Using RSVP-TE This operation enables you to establish an MPLS TE tunnel by using RSVP-TE. Step 3 In VLAN interface mode.4. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls rsvp-te huawei(config-mpls)#quit huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls rsvp-te huawei(config-if-vlanif20)#quit huawei(config)#interface tunnel 100 huawei(config-if-tunnel100)#mpls te signal-protocol rsvp-te Related Operation Table 28-9 lists the related operation for establishing an MPLS TE tunnel by using RSVP-TE. run the mpls te signal-protocol rsvp-te command to specify RSVPTE as the signaling of the tunnel. Disable RSVP-TE feature Run the Command. undo mpls rsvp-te Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-15 .. Step 2 Run the mpls rsvp-te command to enable RSVP-TE. Table 28-9 Related operation for establishing an MPLS TE tunnel by using RSVP-TE To. By default. 5. Only after the RSVP Hello extension is enabled. Run the mpls rsvp-te hello command to enable the RSVP Hello mechanism in the VLAN interface view. 28. and offers some applications of MPLS TE advanced features. timeout multiplier of PSB and RSB and timeout multiplier of blockade state.5.5.7 Enabling RSVP Authentication This operation enables RSVP authentication. complete the following tasks: l l l Configuring the MPLS basic capability Configuring the basic MPLS TE capability Using RSVP-TE to establish the MPLS TE tunnel 28. Context l The RSVP Hello extension is used to detect the reachability of RSVP neighboring nodes.5. 28. Context RSVP-TE provides diversified configuration options. 28.6 Enabling RSVP-TE Reservation Confirmation Mechanism This operation enables RSVP-TE reservation confirmation mechanism. Before enabling RSVP Hello extension.2 Configuring RSVP Resource Reservation Style This operation enables you to configure RSVP resource reservation style.5 Enabling RSVP-TE Srefresh Function This operation enables RSVP-TE Summary Refresh (Srefresh) function. Before configuring advanced RSVP-TE features. run the mpls rsvp-te hello command to globally enable the RSVP Hello mechanism. It guarantees reliability and network resource availability. Huawei Technologies Proprietary Issue 04 (2007-11-30) l l 28-16 . When the RSVP Hello extension is enabled. including configuring the refresh interval for Path and Resv messages.1 Configuring RSVP Hello Extension This operation enables you to configure RSVP Hello extension.5.1 Configuring RSVP Hello Extension This operation enables you to configure RSVP Hello extension. By default.3 Configuring RSVP Timers This operation enables you to configure RSVP timers.5 Configuring Advanced RSVP-TE Features This operation enables you to configure the advanced RSVP-TE features. the RSVP Hello extension is disabled. you can configure parameters. 28. you must enable RSVP-TE feature first.5. 28. the refresh interval of Hello message is 3 seconds.5. 28. In the MPLS view. 28.5.4 Enabling RSVP Message Transmission Reliability This operation enables the reliability of RSVP message transmission.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28. 255. Step 4 Run the mpls rsvp-te timer hello command to configure the refresh interval of Hello message.10. Step 3 Run the mpls rsvp-te hello-lost command to configure the maximum loss times of Hello message. ----End Example Assume that: l l l VLAN interface: 20 Maximum times for consecutively receiving no Hello message: 6 Refresh interval of Hello message: 10s To configure the RSVP Hello extension.1 255.100.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 28 Configuring MPLS RSVP-TE By default. run the mpls rsvp-te hello command to enable the RSVP Hello extension of the VLAN interface.10. the maximum loss times of Hello message is 3.100. Step 2 Run the mpls rsvp-te hello command to globally enable RSVP Hello extension. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls rsvp-te hello huawei(config-mpls)#mpls rsvp-te hello-lost 6 huawei(config-mpls)#mpls rsvp-te timer hello 10 huawei(config-mpls)#quit huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls rsvp-te hello huawei(config-if-vlanif20)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> mpls lsr-id 100.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 4096 Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-17 . Step 6 Run the display current-configuration command to display the configuration.255. Step 5 In the VLAN interface view.10 mpls mpls te mpls rsvp-te mpls rsvp-te hello mpls rsvp-te timer hello 10 mpls rsvp-te hello-lost 6 mpls te cspf mpls te cspf timer failed-link 100 # return huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif20> interface vlanif20 ip address 202. Procedure Step 1 Run the mpls command to enter the MPLS view. Step 2 Run the mpls te resv-style command to specify resource reservation style for the tunnel. Step 3 Run the mpls te commit command to commit the current tunnel configuration. Step 4 In global config mode. run the display current-configuration command to display the configuration.. Context l l By default. ----End Example To specify resource reservation style FF for establishing a CR-LSP tunnel. do as follows: huawei(config)#interface tunnel 20 huawei(config-if-tunnel20)#mpls te resv-style ff huawei(config-if-tunnel20)#mpls te commit 28-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . undo mpls rsvp-te hello undo mpls rsvp-te hello-lost undo mpls rsvp-te timer hello 28. Table 28-10 Related operations for configuring RSVP Hello extension To.. the resource reservation style is Shared-Explicit (SE) style. Disable RSVP Hello extension mechanism Restore the default loss times of Hello message Restore the default refresh interval of Hello message Run the Command. Procedure Step 1 Run the interface tunnel command to enter the tunnel interface view.5.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide mpls te max-reservable-bandwidth 1024 bc1 1024 mpls rsvp-te mpls rsvp-te hello # <vlanif30> interface vlanif30 # return Related Operation Table 28-10 lists the related operations for configuring RSVP Hello extension..2 Configuring RSVP Resource Reservation Style This operation enables you to configure RSVP resource reservation style.. Only the RSVP-TE protocol has resource reservation style and styles available are: SE style and fixed filter (FF) style. The mpls rsvp-te timer refresh command is used to configure refresh interval. Table 28-11 Related operation for configuring the resource reservation style To. that is.. timeout multiplier of PSB and RSB and timeout multiplier of blockade state. l l l Procedure Step 1 Run the mpls command to enter the MPLS view.. the refresh interval of Path/Resv message is 30 seconds.. undo mpls te resv-style 28. ResvErr message creates blockade state on a node to solve the problem of "killer reservation" and forward or create smaller requests. the interval for sending a refresh message. the timeout multiplier of PSB and RSB is 3. By default. Blockade state timeout = Blockstate timeout multiplier x Path/Resv message refresh-time.5 x refresh-time. If no refresh message is received within the timeout time.3 Configuring RSVP Timers This operation enables you to configure RSVP timers.10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE huawei(config-if-tunnel20)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # <tunnel10> interface tunnel10 description tunnel-10 # <tunnel20> interface tunnel20 tunnel-protocol mpls te destination 100. the timeout multiplier of blockade state is 4.5.10.. Restore the default resource reservation style Run the Command. Timeout time = (keep-multiplier + 0. Context l RSVP maintains path and resource through refresh message. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-19 .10 mpls te tunnel-id 20 mpls te resv-style ff mpls te commit # return Related Operation Table 28-11 lists the related operation for configuring the resource reservation style. a fault occurs to the link and the reserved resource must be deleted. The mpls rsvp-te keep-multiplier command is used to configure timeout multiplier of PSB and RSB.5) x 1. including configuring the refresh interval for Path and Resv messages. Step 3 Run the mpls rsvp-te keep-multiplier command to configure the timeout multiplier of PSB and RSB. undo mpls rsvp-te timer refresh undo mpls rsvp-te keep-multiplier undo mpls rsvp-te blockade-multiplier 28-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the timeout multiplier of PSB and RSB to 5 and the timeout multiplier of blockade state to 5. Table 28-12 Related operations for configuring RSVP timers To..10.10. ----End Example To set the refresh interval for Path and Resv message to 50s. Restore the default refresh interval for Path and Resv messages Restore the default timeout multiplier of PSB and RSB Restore the default timeout multiplier of blockade state Run the Command.10 mpls mpls te mpls rsvp-te mpls rsvp-te hello mpls rsvp-te timer refresh 50 mpls rsvp-te timer hello 10 mpls rsvp-te hello-lost 6 mpls rsvp-te keep-multiplier 5 mpls rsvp-te blockade-multiplier 5 mpls te cspf mpls te cspf timer failed-link 100 # return Related Operation Table 28-12 lists the related operations for configuring RSVP timers. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls rsvp-te timer refresh 50 huawei(config-mpls)#mpls rsvp-te keep-multiplier 5 huawei(config-mpls)#mpls rsvp-te blockade-multiplier 5 huawei(config-mpls)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> mpls lsr-id 100. Step 5 Run the display current-configuration command to display the configuration. Step 4 Run the mpls rsvp-te blockade-multiplier command to configure the timeout multiplier of blockade state.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 2 Run the mpls rsvp-te timer refresh command to configure the refresh interval for Path and Resv messages.... configure the retransmission parameters. the transmission reliability of the RSVP message is improved. Thus.255. l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode.5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE 28. the retransmission interval and increment are 600 ms and 1 ms respectively. the reliability function of an interface is disabled. Step 4 Run the display current-configuration command to display the configuration.1 255. After enabling the Message_ID mechanism on the interface. Step 2 Run the mpls rsvp-te reliability command to enable reliability on the interface.100.4 Enabling RSVP Message Transmission Reliability This operation enables the reliability of RSVP message transmission.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 4096 mpls te max-reservable-bandwidth 1024 bc1 1024 mpls rsvp-te mpls rsvp-te hello mpls rsvp-te reliability mpls rsvp-te timer retransmission retransmit-value 600 increment-value 2 # <vlanif30> interface vlanif30 # return Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-21 . you must enable RSVP-TE feature first. By default. Context l Reliability refers to the Message_ID extension mechanism and it is used to confirm the RSVP message. Step 3 Run the mpls rsvp-te timer retransmission command to configure retransmission parameters.255. do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls rsvp-te reliability huawei(config-if-vlanif20)#mpls rsvp-te timer retransmission retransmit-value 600 increment-value 2 huawei(config-if-vlanif20)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif2> interface vlanif2 # <vlanif20> interface vlanif20 ip address 202. Before enabling the Message-ID mechanism. ----End Example To enable the reliability on the VLAN interface 20 and set the retransmission interval and increment to 600 ms and 2 ms respectively.100. .255. Srefresh message is used to refresh the state of path and reserved resources. Srefresh is disabled on the interface.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 4096 mpls te max-reservable-bandwidth 1024 bc1 1024 mpls rsvp-te mpls rsvp-te hello 28-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1 255.100.5..255. ----End Example To enable RSVP-TE Srefresh on VLAN interface 20. undo mpls rsvp-te reliability undo mpls rsvp-te timer retransmission 28.. Disable RSVP message transmission reliability Cancel the configuration of retransmission parameters Run the Command. Table 28-13 Related operations for configuring RSVP message transmission reliability To..28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 28-13 lists the related operations for configuring RSVP message transmission reliability. Step 3 Run the display current-configuration command to display the configuration.5 Enabling RSVP-TE Srefresh Function This operation enables RSVP-TE Summary Refresh (Srefresh) function.100. do as follows: huawei(config)#interface vlanif 20 huawei(config-if-vlanif20)#mpls rsvp-te srefresh huawei(config-if-vlanif20)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif2> interface vlanif2 # <vlanif20> interface vlanif20 ip address 202. Context l Enabling Srefresh prohibits the traditional time-driving refresh on the current interface. By default. l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode. Step 2 Run the mpls rsvp-te srefresh command to enable Srefresh on the interface. Table 28-14 Related operation for enabling RSVP-TE Srefresh To. undo mpls rsvp-te srefresh 28. These resources may still be preempted by other applications later. ----End Example To enable the reservation confirmation mechanism on a node. RSVP-TE reservation confirmation function is disabled.5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE mpls rsvp-te srefresh mpls rsvp-te reliability mpls rsvp-te timer retransmission retransmit-value 600 increment-value 2 # <vlanif30> interface vlanif30 # return Related Operation Table 28-14 lists the related operation for enabling RSVP-TE Srefresh.. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls rsvp-te resvconfirm huawei(config-mpls)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-23 ..6 Enabling RSVP-TE Reservation Confirmation Mechanism This operation enables RSVP-TE reservation confirmation mechanism. NOTE l Receiving the ResvConf message does not mean that resource reservation succeeds. Step 2 Run the mpls rsvp-te resvconfirm command to enable the reservation confirmation mechanism of the node. An object that requires confirming the reservation is carried along the Resv message sent by the receiver... Disable RSVP-TE Srefresh function Run the Command. Context l The reservation confirmation is initiated by the receiver of Path message. Step 3 Run the display current-configuration command to display the configuration. Procedure Step 1 Run the mpls command to enter the MPLS view. By default. It only means that resources are reserved successfully on the farthest upstream node where this Resv message arrives. RSVP-TE transmits authentication summary generated by authentication key and hash algorithm.5.10.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide mpls lsr-id 100. enable the RSVP-TE feature first.. Disable RSVP-TE reservation confirmation mechanism Run the Command.7 Enabling RSVP Authentication This operation enables RSVP authentication.. Table 28-15 Related operation for enabling RSVP-TE reservation confirmation mechanism To.10. Step 3 Run the display current-configuration command to display the configuration. Step 2 Run the mpls rsvp-te authentication command to enable RSVP authentication. ----End Example To enable the RSVP authentication on a node. By default. undo mpls rsvp-te resvconfirm 28.10 mpls mpls te mpls rsvp-te mpls rsvp-te hello mpls rsvp-te resvconfirm mpls rsvp-te timer refresh 50 mpls rsvp-te timer hello 10 mpls rsvp-te hello-lost 6 mpls rsvp-te keep-multiplier 10 mpls rsvp-te blockade-multiplier 10 mpls te cspf mpls te cspf timer failed-link 100 # return Related Operation Table 28-15 lists the related operation for enabling RSVP-TE reservation confirmation mechanism. A summary of all messages received at or sent from the interface is calculated by using the authentication key.. do as follows: huawei(config)#interface vlanif 20 28-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . After RSVP authentication is enabled.. the RCVP authentication is disabled. Context l Before enabling RSVP authentication on a VLAN interface. l l Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode. During the path computation. if there are several paths with the same metric.$6++O5YQ!! mpls rsvp-te reliability mpls rsvp-te timer retransmission retransmit-value 600 increment-value 2 # return Related Operation Table 28-16 lists the related operation for enabling RSVP authentication. The affinity property coordinates with link administrative group to decide what links the tunnel uses.255. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-25 .1 255.6 Tuning the Establishment of CR-LSP This operation enables you to tune the establishment of CR-LSP.. MPLS TE provides many ways to influence the CSPF computation for tuning the CR-LSP establishment. l Route pinning The feature that a CR-LSP is not reestablished as routes change is called route pinning. l Administrative group and affinity property The affinity property of the MPLS TE tunnel determines the links that the tunnel uses.100..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE huawei(config-if-vlanif20)#mpls rsvp-te authentication cipher huaweiuser huawei(config-mpls)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif2> interface vlanif2 # <vlanif20> interface vlanif20 ip address 202.. Disable the RSVP authentication Run the Command.100.0 mpls mpls te mpls te max-link-bandwidth 4096 bc1 4096 mpls te max-reservable-bandwidth 1024 bc1 1024 mpls rsvp-te mpls rsvp-te hello mpls rsvp-te srefresh mpls rsvp-te authentication cipher TBESB1:RIXa". undo mpls rsvp-te authentication 28.255.. l Tie-breaking CSPF only calculates the shortest path to reach the tunnel destination. Context CSPF uses the TEDB and constraints to calculate the appropriate paths and establishes CR-LSP through the signaling protocol. Table 28-16 Related operation for enabling RSVP authentication To.. you can select one of them. 6. ----End Example To set the tie-breaking method on the current node to random and that on tunnel 100 as maximal ratio of the idle bandwidth.6. Context l l The default setting in the MPLS view is random.28 Configuring MPLS RSVP-TE l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Reoptimization Dynamically optimizing CR-LSP is to periodically recompute routes for CR-LSP. run the mpls te tie-breaking command to configure tie-breaking methods on the tunnel interface for selecting the path policy when there are several paths with the same metric.1 Configuring Tie-Breaking of CSPF This operation enables you to configure tie-breaking of CSPF. Step 2 Run the mpls te tie-breaking command to configure tie-breaking methods on the current node for selecting the path policy when there are several paths with the same metric.6. Procedure Step 1 Run the mpls command to enter MPLS view.6.3 Configuring Administrative Group and Affinity Property This operation enables you to configure the administrative group and affinity property. The tunnel takes the tie-breaking policy configured in its tunnel interface view as a priority. it uses the method in the MPLS view. 28.2 Configuring Route Pinning of CSPF This operation enables you to configure the route pining of CSPF. 28. and the old one is deleted. then a new CR-LSP is established. Step 3 In tunnel interface mode.1 Configuring Tie-Breaking of CSPF This operation enables you to configure tie-breaking of CSPF.6. If there is no related configuration in that view. according to the route recomputed. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls te tie-breaking random huawei(config-mpls)#quit 28-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . NOTE The configuration described in this section must be used together with the CSPF and the CR-LDP or RSVPTE protocol. The services are switched from the old CR-LSP to the new CR-LSP. 28. Step 5 Run the display current-configuration command to display the configuration. 28.4 Configuring Reoptimization for CR-LSP This operation enables you to configure reoptimization for CR-LSP. Step 4 Run the mpls te commit command to commit the current configuration. 28. If the route by recomputation is better than the route in use. 6.100..2 Configuring Route Pinning of CSPF This operation enables you to configure the route pining of CSPF.10. Restore the default tie-breaking methods for selecting a path Run the Command..10 mpls mpls te mpls rsvp-te mpls rsvp-te hello mpls rsvp-te resvconfirm mpls rsvp-te timer refresh 50 mpls rsvp-te timer hello 10 mpls rsvp-te hello-lost 6 mpls rsvp-te keep-multiplier 10 mpls rsvp-te blockade-multiplier 10 mpls te cspf mpls te cspf timer failed-link 100 # return huawei(config)#display current-configuration section tunnel [MA5600V300R003: 2002] # [tunnel] <tunnel100> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202. undo mpls te tie-breaking 28. Table 28-17 Related operation for configuring tie-breaking of CSPF To.10. route pinning is disabled. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-27 .100.100 mpls te tunnel-id 10 mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te tie-breaking least-fill mpls te commit # return Related Operation Table 28-17 lists the related operation for configuring tie-breaking of CSPF. Context l By default..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te tie-breaking least-fill huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section mpls [MA5600V300R003: 3002] # [mpls] <mpls> mpls lsr-id 100.. . undo mpls te route-pinning 28. 28-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Disable the route pining of a tunnel interface Run the Command..100. then the MPLS TE reoptimization or auto bandwidth adjustment cannot be used at the same time. ----End Example To enable the tunnel pining of tunnel 100. Procedure Step 1 Run the interface tunnel command to enter the tunnel interface view of the MPLS TE tunnel. Step 3 In the Tunnel interface view. Step 4 Run the display current-configuration command to display the configuration. Table 28-18 Related operation for configuring route pining To.6..3 Configuring Administrative Group and Affinity Property This operation enables you to configure the administrative group and affinity property. Step 2 Run the mpls te route-pinning command to enable the route pining function..100.28 Configuring MPLS RSVP-TE l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide If the route pinning is enabled. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te route-pinning huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202.100 mpls te tunnel-id 10 mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te tie-breaking least-fill mpls te commit # return Related Operation Table 28-18 lists the related operation for configuring route pining. run the mpls te commit command to commit the current configuration. 255.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Context l l By default. Step 4 In tunnel interface mode.. Procedure Step 1 Run the interface vlanif command to enter VLAN interface mode.100. Modifying the affinity property of the tunnel affects the established LSP after the modification is committed.100.More ( Press 'Q' to break ) ---huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-29 . run the mpls te affinity property command to configure affinity property for the tunnel. The modification of administrative group and affinity attribute is valid only for new LSPs but not for the established ones. the values of administrative group. ----End Example To set the values of administrative group and affinity property to 0x0101 and the mask to 0x303.$6++O5YQ!! mpls rsvp-te reliability mpls rsvp-te timer retransmission retransmit-value 600 increment-value 2 # <vlanif30> interface vlanif30 ---. and TE tunnel path is recalculated. do as follows: huawei(config)#interface vlan 20 huawei(config-if-vlanif20)#mpls te link administrative group 0x0101 Info: The configuration will take into effect ONLY for the newly created LSP.1 255. Step 3 In tunnel interface mode. Step 2 Run the mpls te link administrative group command to configure administrative group of the VLAN interface. affinity property and mask are all 0x0. run the mpls te commit command to commit the current configuration.255. huawei(config-if-vlanif20)#quit huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te affinity property 0x101 mask 0x303 huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section vlanif [MA5600V300R003: 3002] # [vlanif] <vlanif2> interface vlanif2 # <vlanif20> interface vlanif20 ip address 202.0 mpls mpls te mpls te link administrative group 101 mpls te max-link-bandwidth 4096 bc1 4096 mpls te max-reservable-bandwidth 1024 bc1 1024 mpls rsvp-te mpls rsvp-te hello mpls rsvp-te srefresh mpls rsvp-te authentication cipher TBESB1:RIXa". Step 5 Run the display current-configuration command to display the configuration. return to the user view and run the mpls te reoptimization command to re-optimize the optimized tunnels immediately..6... Context l l By default. Step 4 Run the mpls te reoptimization command to reoptimize the TE tunnel. Step 3 Run the mpls te commit command to commit the current tunnel configuration.100 mpls te tunnel-id 10 mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te affinity property 101 mask 303 mpls te tie-breaking least-fill mpls te commit # return Related Operation Table 28-19 lists the related operations for configuring administrative group and affinity property.. reoptimization is disabled. When the mpls te reoptimization command is executed. Step 2 Run the mpls te reoptimization command to enable periodic reoptimization of the MPLS TE tunnel. l Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode. Restore the default administrative group Restore the default affinity property of an MPLS TE tunnel Run the Command.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202. the reoptimization timer resets and starts to count the time again. (Optional) Step 5 Run the display current-configuration command to display the configuration.100.4 Configuring Reoptimization for CR-LSP This operation enables you to configure reoptimization for CR-LSP. Table 28-19 Related operations for configuring administrative group and affinity property To. undo mpls te link administrative group undo mpls te affinity property 28. The CR-LSP reoptimization cannot be configured when the route pining is enabled.100. ----End 28-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The default timing reoptimization interval is 3600s. After configuring the timing reoptimization in the tunnel view. certain specific configuration is required for practical application to ensure the security and stability of data transmission..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Example To reoptimize the tunnel 100 and set the periodic reoptimization interval to 1000s.2 Configuring the Route Record and the Label Record This operation enables you to configure the route record and the label record. NOTE The configurations introduced in this section must be used together with the CR-LDP or the RSVP-TE protocol. 28. 28.3 Configuring Parameters of Tunnel Reestablishment Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-31 . Table 28-20 Related operation for configuring reoptimization of CR-LSP To. 28. undo mpls te reoptimization 28..1 Configuring Loop Detection This operation enables you to configure loop detection. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te reoptimization frequency 1000 huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202.7..100 mpls te tunnel-id 10 mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te affinity property 101 mask 303 mpls te tie-breaking least-fill mpls te reoptimization frequency 1000 mpls te commit # return Related Operation Table 28-20 lists the related operation for configuring reoptimization of CR-LSP.100.7. The MA5600 supports only the RSVP-TE protocol.100. Disable the reoptimization of CR-LSP on a tunnel Run the Command.7. Context During the establishment of the MPLS TE tunnel.7 Tuning the Establishment of an MPLS TE Tunnel This operation enables you to tune the establishment of an MPLS TE tunnel.. it is considered that a loop occurs and the establishment of LSP fails.7.100. Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode.7. or the hop count of the path exceeds the maximum value. 28. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te loop-detection huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202. Step 2 Run the mpls te loop-detection command to enable loop detection on tunnel creation. ----End Example To enable loop detection on tunnel 100. If the path information table contains the record of the local LSR. Step 4 Run the display current-configuration command to display the configuration. Step 3 Run the mpls te commit command to commit the current tunnel configuration. 28-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) .28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to configure the parameters of tunnel reestablishment.1 Configuring Loop Detection This operation enables you to configure loop detection.10 mpls te tunnel-id 10 mpls te loop-detection mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te affinity property 101 mask 303 mpls te tie-breaking least-fill mpls te reoptimization frequency 1000 mpls te commit # return Related Operation Table 28-21 lists the related operation for configuring loop detection. Context l l By default. loop detection is disabled. 28.100. The loop detection mechanism of TE allows a maximum hop count of 32.4 Configuring Tunnel Priority This operation enables you to configure tunnel setup priority and hold priority. 2 Configuring the Route Record and the Label Record This operation enables you to configure the route record and the label record.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 28 Configuring MPLS RSVP-TE Table 28-21 Related operation for configuring loop detection To.100. Step 3 Run the mpls te commit command to commit the current tunnel configuration.100 mpls te tunnel-id 10 mpls te loop-detection mpls te record-route label mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te affinity property 101 mask 303 mpls te tie-breaking least-fill mpls te reoptimization frequency 1000 mpls te commit # return Related Operation Table 28-22 lists the related operation for configuring route record and label record.. ----End Example To enable the route record and label record for tunnel 100 on tunnel establishment. Disable loop detection Run the Command. the route record and the label record are disabled. undo mpls te loop-detection 28. Procedure Step 1 Run the interface tunnel command to enter the tunnel interface view of the MPLS TE tunnel. Context By default.. Step 4 Run the display current-configuration command to display the configuration. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te record-route lable huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202. Step 2 Run the mpls te record-route command to enable the route record and the label record on tunnel establishment...100.7. Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-33 . .. Step 3 Run the mpls te timer retry command to specify the interval for tunnel reestablishment.100.100 mpls te tunnel-id 10 mpls te loop-detection mpls te record-route label mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te retry 3 mpls te timer retry 5 mpls te affinity property 101 mask 303 28-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) . By default.. undo mpls te record-route 28. ----End Example To specify the retry times for tunnel establishment as 3 and the interval for tunnel reestablishment as 5s. Step 5 Run the display current-configuration command to display the configuration. Context l If the establishment of a tunnel fails.3 Configuring Parameters of Tunnel Reestablishment This operation enables you to configure the parameters of tunnel reestablishment. the system attempts to re-establish the tunnel within a certain interval until the attempts exceed the maximum reestablishment times. Step 4 Run the mpls te commit command to commit the current tunnel configuration.7. Step 2 Run the mpls te retry command to specify the retry times for tunnel reestablishment. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te retry 3 huawei(config-if-tunnel10)#mpls te timer retry 5 huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202. the creation retry times are 5 and the interval for tunnel reestablishment is 10 seconds.100. Disable route record and label record on tunnel establishment Run the Command. l Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode..28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 28-22 Related operation for configuring route record and label record To. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide mpls te tie-breaking least-fill mpls te reoptimization frequency 1000 mpls te commit # return 28 Configuring MPLS RSVP-TE Related Operation Table 28-23 lists the related operations for configuring parameters of tunnel reestablishment. Step 2 Run the mpls te priority command to configure the setup priority and hold priority for the MPLS TE tunnel. the hold priority is the same as the setup priority.4 Configuring Tunnel Priority This operation enables you to configure tunnel setup priority and hold priority. Step 5 Run the display current-configuration command to display the configuration. l l Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode. Context l Both the setup priority and the hold priority range from 0 to 7. By default. Step 4 Run the mpls te commit command to commit the current tunnel configuration.. If only the tunnel setup priority is configured.7. Restore the default retry times for tunnel reestablishment Restore the default interval for tunnel reestablishment Run the Command.. Table 28-23 Related operations for configuring parameters of tunnel establishment To.. undo mpls te retry undo mpls te timer retry 28.. do as follows: huawei(config)#interface tunnel 10 huawei(config-if-tunnel10)#mpls te priority 6 3 huawei(config-if-tunnel10)#mpls te commit huawei(config-if-tunnel10)#quit Issue 04 (2007-11-30) Huawei Technologies Proprietary 28-35 . ----End Example To configure the setup priority as 6 and hold priority as 3 for tunnel 100. the higher the priority is. Step 3 Run the mpls te timer retry command to configure the interval for tunnel reestablishment. The setup priority should not be higher than the hold priority. The smaller the value is. the setup priority and the hold priority are 7. . undo mpls te priority 28-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) .100. Table 28-24 Related operation for configuring tunnel priority To...100 mpls te tunnel-id 10 mpls te loop-detection mpls te record-route label mpls te bandwidth bc0 8192 mpls te path explicit-path huaweipath mpls te retry 3 mpls te timer retry 5 mpls te priority 6 3 mpls te affinity property 101 mask 303 mpls te tie-breaking least-fill mpls te reoptimization frequency 1000 mpls te commit # return Related Operation Table 28-24 lists the related operation for configuring tunnel priority.100. Restore the default setup priority and hold priority of an MPLS TE tunnel Run the Command.28 Configuring MPLS RSVP-TE SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#display current-configuration section tunnel [MA5600V300R003: 3002] # [tunnel] <tunnel10> interface tunnel10 description tunnel-10 tunnel-protocol mpls te destination 202.. 29. 29. Issue 04 (2007-11-30) Huawei Technologies Proprietary 29-1 .1 Overview This section describes how to use the VLAN stacking attribute to implement the wholesale service and to extend the VLAN ID function.2 Configuration Example of the Wholesale Service This example shows how to configure the wholesale service so that the services provisioned by the ISP can be quickly delivered to the specified user group.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 29 Configuring the VLAN Stacking Wholesale Service 29 Configuring the VLAN Stacking Wholesale Service About This Chapter This chapter describes the VLAN stacking wholesale service and how to configure the service on the MA5600. NOTE In the wholesale service. different user groups can access the specified ISP network in batches based on different outer VLAN tags. To quickly deliver the services provided by the ISPs to a specified user group. the number of the users accessing the BRAS increases. the outer VLAN tag is used to identify the access device and the inner VLAN tag is used to identify the access users. refer to the chapter "VLAN Stacking" in the MA5600 Feature Description. 29-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . l Wholesale service In a layer 2 metropolitan area network (MAN). there may exist multiple Internet service providers (ISPs). For the features of the VLAN stacking and the details on the features. The following VLANs cannot be configured with the VLAN stacking attribute: l l l l Super VLANs Sub VLANs VLANs configured with the layer 3 interface System default VLAN 29. and forward packets based on the VLAN and the MAC address.1 Overview This section describes how to use the VLAN stacking attribute to implement the wholesale service and to extend the VLAN ID function. In this way.29 Configuring the VLAN Stacking Wholesale Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 29. Meanwhile. Service Description The MA5600 provides two tags (one is an inner tag and the other is an outer tag) in the 802. NOTE The VLAN ID extension needs the support of the BRAS. the number of users identified by VLAN IDs increases. the upper layer device must work in the layer 2 mode. Service Specifications The MA5600 supports up to 4000 VLANs configured with the VLAN stacking attribute. In this way. l VLAN ID extension In the VLAN ID extension.1Q format for a packet through the VLAN stacking attribute. The packet carries two VLAN tags and accesses the layer 2 switch network. The system forwards the packet in the layer 2 switch network according to the outer VLAN tag of the packet.2 Configuration Example of the Wholesale Service This example shows how to configure the wholesale service so that the services provisioned by the ISP can be quickly delivered to the specified user group. and obtain the corresponding services provided by the ISP. The BRAS identifies access users according to the layer 2 VLAN tags. you can use the outer VLAN tag of the packet to identify the ISP and use the inner VLAN tag of the packet to identify the user. Figure 29-1 Sample network for configuring the wholesale service Internet ISP1 BRAS VLAN ID: 60 VLAN ID: 61 BRAS ISP2 MA5600 Modem User 1 User 2 User 3 User 4 Data Plan Table 29-1 lists the data plan for configuring the wholesale service. the user can obtain the services provided by the ISPs. Based on the VLAN stacking feature. Then the layer 2 switch forwards the user packets to the specified ISP BRAS based on the outer VLAN tag. The ISP BRAS peels the outer VLAN tag and identifies the user based on the inner VLAN tag. the MA5600 adds the outer VLAN tag to differentiate ISPs and the inner VLAN tag to differentiate users. Table 29-1 Data plan for configuring the wholesale service Item ISP1 user group Data Upstream port: 0/7/0 Upstream VLAN ID (outer VLAN tag): 60 VLAN type: smart VLAN VLAN attribute: stacking Issue 04 (2007-11-30) Huawei Technologies Proprietary 29-3 . After passing the ISP BRAS authentication.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 29 Configuring the VLAN Stacking Wholesale Service Networking Figure 29-1 shows a sample network for configuring the wholesale service ISP1 provides the broadband services for users 1 and 2. and ISP2 provides the broadband services for users 3 and 4. and forwards the user packets to the layer 2 network. 29-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .29 Configuring the VLAN Stacking Wholesale Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data User 1: l l l ADSL2+ port: 0/2/0 VPI/VCI: 0/35 (the same as that of the modem) Inner VLAN tag: 11 User 2: l l l ADSL2+ port: 0/2/1 VPI/VCI: 0/35 (the same as that of the modem) Inner VLAN tag: 12 ISP2 user group Upstream port: 0/7/0 Upstream VLAN ID (outer VLAN tag): 61 VLAN type: smart VLAN VLAN attribute: stacking User 3: l l l ADSL2+ port: 0/3/0 VPI/VCI: 0/35 (the same as that of the modem) Inner VLAN tag: 11 User 4: l l l ADSL2+ port: 0/3/1 VPI/VCI: 0/35 (the same as that of the modem) Inner VLAN tag: 12 Configuration Flowchart Figure 29-2 shows the flowchart for configuring the wholesale service. huawei(config)#vlan 60-61 smart Step 2 Set the VLAN attribute. huawei(config)#service-port huawei(config)#service-port huawei(config)#service-port huawei(config)#service-port vlan vlan vlan vlan 60 60 61 61 adsl adsl adsl adsl 0/2/0 0/2/1 0/3/0 0/3/1 vpi vpi vpi vpi 0 0 0 0 vci vci vci vci 35 35 35 35 rx-cttr rx-cttr rx-cttr rx-cttr 0 0 0 0 tx-cttr tx-cttr tx-cttr tx-cttr 0 0 0 0 Step 5 Set the inner VLAN tag. huawei(config)#vlan attrib 60-61 stacking Step 3 Add an upstream port to the VLAN. huawei(config)#save ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 29-5 . huawei(config)#port vlan 60-61 0/7 0 Step 4 Add a service port to the VLAN. huawei(config)#stacking huawei(config)#stacking huawei(config)#stacking huawei(config)#stacking label label label label 0/2/0 0/2/1 0/3/0 0/3/1 11 12 11 12 Step 6 Save the data.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 29 Configuring the VLAN Stacking Wholesale Service Figure 29-2 Flowchart for configuring the wholesale service Start Create a VLAN Set the VLAN attribute as stacking Add an upstream port to the VLAN Add a service port to the VLAN Set the inner VLAN tag Save the data End Procedure Step 1 Create a VLAN. users 3 and 4 can obtain the services provided by ISP2. After passing the ISP2 BRAS authentication. users 1 and 2 can obtain the services provided by ISP1.29 Configuring the VLAN Stacking Wholesale Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Result After passing the ISP1 BRAS authentication. 29-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 30. the BPDUs of private networks (upstream/downstream packets with the MAC addresses ranging from 01-80-c2-00-00-00 to 01-80-c2-00-00-2f) can be transparently transmitted based on the QinQ function of the public network. Issue 04 (2007-11-30) Huawei Technologies Proprietary 30-1 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 30 Configuring the QinQ VLAN Leased Line Service 30 Configuring the QinQ VLAN Leased Line Service About This Chapter This chapter describes the QinQ VLAN leased line service and how to configure the service on the MA5600. 30. 30.2 Configuration Example of the QinQ VLAN Leased Line Service This example shows how to configure the leased line access based on the QinQ feature to provide a secure channel for data transmission between private networks of the enterprise.3 Enabling Transparent Transmission of BPDUs This operation enables transparent transmission of Bridge Protocol Data Units (BPDUs).1 Overview This section describes the application of the QinQ feature to the leased line access service. Then. 2 Configuration Example of the QinQ VLAN Leased Line Service This example shows how to configure the leased line access based on the QinQ feature to provide a secure channel for data transmission between private networks of the enterprise. and then sends the packet to the remote private network of the enterprise. By using the resources of the public network. l Connection type of the lease line access service – – Single PVC for single service Single PVC for multiple services (differentiated by encapsulation types) l QinQ VLAN application limitation The MA5600 supports up to 4000 QinQ VLANs.30 Configuring the QinQ VLAN Leased Line Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 30. The MA5600 uses the QinQ feature to add a VLAN tag of the public network (QinQ VLAN) for the packet that accesses the local device and carries the tag of the private network. Service Description The QinQ feature is applied to the broadband leased line access service.1 Overview This section describes the application of the QinQ feature to the leased line access service. The remote MA5600 peels the outer VLAN tag of the packet. 30-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Service Specifications l Lease line access mode The MA5600 uses the SHDSL access mode to provide a symmetric upstream/downstream bandwidth of 2 Mbit/s for the enterprise. Carrying the VLAN tag of the private network. For the features of QinQ and the details on the features. l Transparent transmission of a BPDU packet The MA5600 can transparently transmit a BPDU packet of a private network to a remote private network through the QinQ leased line access service. refer to the chapter "QinQ VLAN" in the MA5600 Feature Description. the QinQ feature provides a transparent and secure data channel for the private network of an enterprise. the packet is forwarded in the public network based on the VLAN tag of the public network and then the packet reaches the remote MA5600. The following VLANs cannot be configured as QinQ VLANs: – – – – Super VLANs Sub VLANs VLANs configured with the layer 3 interface System default VLAN 30. and forwards packets based on the VLAN and the MAC address.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 30 Configuring the QinQ VLAN Leased Line Service Prerequisite l l l The network devices and lines are in the normal state. Table 30-1 Data plan for configuring the QinQ VLAN leased line service Item MA5600_A Data SHEBPort:0/5/0 Upstream port: 0/7/0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 30-3 . Configure the QinQ leased line access for enterprise A on MA5600_A and MA5600_B respectively so that the private services and BPDU packets of enterprise A can be transparently transmitted through the public network. The two branches of enterprise A are connected to the MAN through MA5600_A and MA5600_B respectively. Networking Figure 30-1 shows a sample network for configuring the QinQ VLAN leased line service. The service boards are in the normal state. The upper layer network is in layer 2 mode. Figure 30-1 Sample network for configuring the QinQ VLAN leased line service MAN L2/L3 L2/L3 S H E B CON ETH ESC S H E B CON ETH ESC GE 0/7/0 GE 0/7/0 SCU Modem LSW MA5600_A SCU Modem LSW MA5600_B Enterprise A Enterprise B Data Plan Table 30-1 lists the data plan for configuring the QinQ VLAN leased line service. Figure 30-2 Flowchart for configuring the QinQ VLAN leased line service Start Create a VLAN Set the VLAN attribute as QinQ Enable transparent transmission of BPDU packets Add an upstream port to the VLAN Add a service port to the VLAN Save the data End The configuration of MA5600_A is the same as that of MA5600_B. 30-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .30 Configuring the QinQ VLAN Leased Line Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data Upstream VLAN ID: 50 VLAN type: smart VLAN VLAN attribute: QinQ BPDU transparent transmission: enable Traffic profile index: 5 (the default). In this section. the configuration of MA5600_A is taken as an example to describe how to configure the QinQ VLAN leased line service. Access rate: 2 Mbit/s VPI/VCI: 0/35 (the same as that of the modem) MA5600_B The same as the data plan of MA5600_A Configuration Flowchart Figure 30-2 shows the flowchart for configuring the QinQ VLAN leased line service. 3 Enabling Transparent Transmission of BPDUs This operation enables transparent transmission of Bridge Protocol Data Units (BPDUs). Context l When the transparent transmission of BPDUs is enabled. which is located on two sites. these BPDUs cannot be transparently transmitted. l Procedure Step 1 Run the bpdu tunnel enable command to enable transparent transmission of BPDUs. huawei(config)#vlan 50 smart Step 2 Set the VLAN attribute. the layer 2 BPDUs under the QinQ VLAN can be transparently transmitted. huawei(config)#bpdu tunnel enable Step 4 Add an upstream port to the VLAN. 30. the BPDUs of private networks (upstream/downstream packets with the MAC addresses ranging from 01-80-c2-00-00-00 to 01-80-c2-00-00-2f) can be transparently transmitted based on the QinQ function of the public network. huawei(config)#port vlan 50 0/7/0 Step 5 Add a service port to the VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 30 Configuring the QinQ VLAN Leased Line Service Procedure Step 1 Create a VLAN. Then. ----End Example To enable transparent transmission of the L2 BPDUs. do as follows: huawei(config)#bpdu tunnel enable huawei(config)#display bpdu tunnel config BPDU tunnel function is enabled Issue 04 (2007-11-30) Huawei Technologies Proprietary 30-5 . huawei(config)#vlan attrib 50 q-in-q Step 3 Enable transparent transmission of BPDU packets. Step 2 Run the display bpdu tunnel config command to display transparent transmission status of BPDUs. huawei(config)#save ----End Result The private networks of enterprise A. huawei(config)#service-port vlan 50 shdsl 0/5/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5 Step 6 Save the data. Otherwise. can communicate with each other in the normal state and the services can be transmitted between the two networks. Table 30-2 Related operation for enabling transparent transmission of BPDUs To… Disable transparent transmission of BPDUs Run the Command… bpdu tunnel disable 30-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .30 Configuring the QinQ VLAN Leased Line Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 30-2 lists the related operation for enabling transparent transmission of BPDUs. 2 Configuration Example of IGMP Proxy Multicast Service This example shows how to realize the IGMP proxy multicast service. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-1 .4 Configuration Example of Multicast Service in Subtending Mode This example shows how to configure the multicast service in subtending mode. including IGMP proxy and IGMP snooping. 31.9 Configuring a Program for a Static Subtending Port This operation enables you to add a program for a static subtending port. 31.5 Configuring Multicast Service in MSTP Networking This operation enables you to configure multicast service in MSTP networking. 31.6 Setting the IGMP Mode This operation enables you to set the IGMP mode.1 Overview This chapter describes multicast and its application to the MA5600. To subtend the MA5600 to a slave shelf with multicast service users. 31. 31. you need to define the port connecting to the slave shelf as a subtending port. 31. 31. 31.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service 31 Configuring the Multicast Service About This Chapter This chapter describes the multicast service and how to configure the service on the MA5600.7 Configuring an IGMP Upstream Port This operation enables you to add an IGMP upstream port and set its mode and assigned bandwidth rate. 31. 31.10 Configuring IGMP Global Parameters This section describes how to configure the IGMP global parameters. 31.11 Adding a Program This operation enables you to add one or more programs to the program library.8 Specifying a Subtending Port This operation enables you to specify a subtending port.3 Configuration Example of IGMP Snooping This example shows how to configure the IGMP snooping multicast service. 31-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .14 Configuring Multicast Users This section describes how to configure multicast users.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31. 31.16 Configuring the Logging Function This section describes how to configure the logging function. 31.12 Managing Multicast Bandwidth This section describes how to manage multicast bandwidth. 31.13 Configuring an Authority Profile This section describes how to configure an authority profile. 31.15 Configuring the Preview Function This section describes how to configure the preview function. Service Specification Designed with carrier-class multicast operability. The MA5600 supports operable and manageable controlled multicast services. remote learning. and data warehouse in the Internet. video conferencing. internet data center (IDC). the MA5600 supports V2/V3. and other point-to-multipoint fields. l l l The network devices and lines are normal. There exists the multicast source in the network and its IP address is known. l l l 31.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service 31. It is widely applied in streaming. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-3 . video. preview duration and preview interval Audience statistics supported Controllable multicast to control users' access to multicast groups and authority profiles. In IGMP proxy mode. The priorities of the four types of authority profiles are configurable to satisfy different requirements for multicast operations. The related service boards are normal. net gaming. video on demand (VOD). Service Description With the advent of multimedia.2 Configuration Example of IGMP Proxy Multicast Service This example shows how to realize the IGMP proxy multicast service. with the maximum number of configurable previews in a day. preview. paving the way for provisioning value-added broadband multicast services. the MA5600 supports V2. Authority profile types are: watch. The MA5600 supports two modes: IGMP proxy and IGMP snooping. In IGMP snooping mode. The MA5600 supports: l l 1024 multicast groups Multicast preview. Networking Figure 31-1 shows the sample network the IGMP proxy application. forbidden and idle. the MA5600 supports multicast protocols (from user to network). For details on the multicast service.1 Overview This chapter describes multicast and its application to the MA5600. refer to the chapter "Multicast" in the Feature Description. the multicast service is becoming increasingly popular in service applications. 1. Table 31-1 Data plan for configuring IGMP proxy Item Smart VLAN Upstream port Program library Data VLAN ID: 2 0/7/1 The multicast server provides three programs.1. the user is allowed to access program1 (224. with service port of 0/2/1.2 program 3: 224. with service port of 0/2/0.1.1.1.1. 31-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . program 1: 224.1 program 2: 224. with no authentication. VPI/VCI of 0/35.2) in the program library.1. Uplink port 0/7/1 and VLAN 2 are bound.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 31-1 Sample network of the IGMP proxy application Video server Internet Router A D G E GE0/7/1 MA5600 CON ETH MON Modem Modem PC PC Data Plan Table 31-1 lists the data plan for configuring IGMP proxy.1. User Multicast user 1. VPI/VCI of 0/35 and bound with authority profile 0 Multicast user 2.3 Authority profile Profile 0 In authority profile 0.1) and program2 (224.1.1. In this example. Therefore. you do not have to configure a line profile.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Item Port (on the upper layer router) connected to the MA5600 Modem Data IP address: 10. Step 2 Configure a VLAN. Huawei Technologies Proprietary 31-5 .0. the default ADSL2+ line profile (line profile 1002) is used. Issue 04 (2007-11-30) Create a VLAN. 1. Figure 31-2 Flowchart for configuring IGMP proxy Multicast service configuration Start Set IGMP Proxy mode Configure IGMP upstream port (Optional) Configure IGMP global parameters Configure the xDSL port Create a Smart VLAN Add the upstream port to the VLAN Set native VLAN for the port Configure program library (Optional)Configure preview attributes Configure the service port Configure authority profile VLAN configuration Configure multicast user End Procedure Step 1 Configure the xDSL port.0. Configuration Flowchart Figure 31-2 shows the flowchart for configuring IGMP proxy.254 VPI/VCI of modem connected to the port: 0/35. but cannot watch program 3.168. For details.0.1. Therefore. 31-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 4.2 sourceip 0/7/1 hostip 10. huawei(config)#btv huawei(config-btv)#igmp mode proxy NOTE By default.168. huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 3 Configure the multicast service. refer to "31.1 sourceip 0/7/1 hostip 10.10 Configuring IGMP Global Parameters.1.1.1. Configure the IGMP upstream port.3 Configuration Example of IGMP Snooping This example shows how to configure the IGMP snooping multicast service.2 vlan 2 bind program add name program1 ip 224.1. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 1 vlan 2 4. huawei(config)#save ----End Result After the configuration: l l User 1 can watch program 1 and program 2.31 Configuring the Multicast Service huawei(config)#vlan 2 smart SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2.168.254 program add name program2 ip 224. huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth max-program 8 huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth max-program 8 huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0 huawei(config-btv)#quit Step 4 Save the data. huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/1 100 3. 31. User 2 can watch all programs.1.1.0.0.2 vlan 2 bind huawei(config-btv)#igmp 192.254 5.254 program add name program3 ip 224. huawei(config)#port vlan 2 0/7 1 Configure the native VLAN of the port.3 sourceip 0/7/1 hostip 10. 1. huawei(config-btv)#igmp 192. the multicast mode is proxy.0. you do not have to set it usually. Add service ports to the VLAN. Set the multicast mode.1.2 vlan 2 bind huawei(config-btv)#igmp 192. Configure the global parameters. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch 6. Configure the authority profile. 2." Configure the program library. Add an upstream port to the VLAN. 3.0.0.1. Configure the multicast users. There exists the multicast source in the network and its IP address is known.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Prerequisite Before configuring IGMP snooping. Figure 31-3 Sample network for configuring the IGMP snooping Video server Internet Router A D G E GE0/7/1 MA5600 CON ETH MON Modem Modem PC PC Data Plan Table 31-2 lists the data plan for configuring IGMP snooping. Table 31-2 Data plan for configuring IGMP snooping Item Smart VLAN Upstream port Data VLAN ID: 2 0/7/1 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-7 . The related service boards are normal. make sure that: l l l The network devices and lines are normal. Networking Figure 31-3 shows a sample network for configuring the IGMP snooping. 1 program 2: 224. VPI/VCI of 0/35. Uplinnk port 0/7/1 and VLAN 2 are bound. Port (on the upper layer router) connected to the MA5600 Modem IP address: 10.0. program 1: 224.1.1.0.1.1.2) in the program library.1.3 Authority profile Profile 0 In authority profile 0. with service port of 0/2/0. 31-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.1. Configuration Flowchart Figure 31-4 shows the flowchart for configuring the IGMP snooping. with no authentication. User Multicast user 1.1.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Program library Data The multicast server provides three programs.2 program 3: 224. Multicast user 2. VPI/VCI of 0/35.1. the user is allowed to access program1 (224.254 VPI/VCI of modem connected to the port: 0/35. with service port of 0/2/1.1. and bound with authority profile 0.1) and program2 (224. you do not have to configure a line profile. 1. the default ADSL2+ line profile (line profile 1002) is used. Set the multicast mode. huawei(config)#port vlan 2 0/7 0 Configure the native VLAN of the port. huawei(config)#vlan 2 smart Add an upstream port to the VLAN. Add service ports to the VLAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Figure 31-4 Flowchart for configuring the IGMP snooping Multicast service configuration Start Set IGMP mode Configure IGMP upstream port (Optional) Configure IGMP Snooping global parameters Configure program library Configure the xDSL port Create a Smart VLAN Add the upstream port to the VLAN Set native VLAN for the port (Optional)Configure preview attributes Configure the service port Configure authority profile VLAN configuration Configure multicast user End Procedure Step 1 Configure the xDSL port. 3. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 1 vlan 2 4. Therefore. Create a VLAN. Step 2 Configure a VLAN. huawei(config)#btv huawei(config-btv)#igmp mode snooping Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-9 . 2. huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 3 Configure the multicast service. 1. In this example. Configure the global parameters. User 2 can watch all programs.1.3 vlan 2 bind 0/7/1 hostip 10.1.254 huawei(config-btv)#igmp program add name program2 ip 224.4 Configuration Example of Multicast Service in Subtending Mode This example shows how to configure the multicast service in subtending mode. 31. 31-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1. huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/1 100 3.0. 4. but cannot watch program 3. Configure the IGMP upstream port.1. Configure the authority profile.0.254 5.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2. refer to "31. huawei(config-btv)#igmp program add name program1 ip 224. Networking Figure 31-5 shows a sample network for configuring the subtended multicast service.2 vlan 2 bind 0/7/1 hostip 10.10 Configuring IGMP Global Parameters. huawei(config)#save ----End Result After the configuration: l l User 1 can watch program 1 and program 2.0. huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth max-program 8 huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth max-program 8 huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0 huawei(config-btv)#quit Step 4 Save the data." Configure the program library.1.0.0.1.0.254 huawei(config-btv)#igmp program add name program3 ip 224. For details.1 vlan 2 bind 0/7/1 hostip 10. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch 6. Configure the multicast users. Table 31-3 Data plan for configuring the subtended multicast service Item MA5600_A Data SCU board The SCU board provides an upstream port (0/7/0) to connect to the upper layer multicast router (with IP address of 10.0. VLAN Add port 0 on the SCU board to VLAN 100 as the upstream port of this VLAN. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-11 .254) and a subtending port (0/7/1) to connect to the MA5600_B.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Figure 31-5 Sample network for configuring the subtended multicast service Video server Internet Router CON ETH MON GE0/7/0 GE0/7/1 MA5600_A A D G E GE0/7/0 GE0/7/1 CON ETH MON MA5600_B Modem Modem PC PC Data Plan Table 31-3 lists the data plan for configuring the subtended multicast service.0. Add port 1 on the SCU board to VLAN 100 as the subtending port. User Add two users 0/2/0 and 0/2/1.1.0. Configuration Flowchart Figure 31-6 and Figure 31-7 show the flowchart for configuring multicast service in subtending mode.1.2 program 3: 224.1.1 program 2: 224. program 1: 224.1. Uplink port 0/7/0 and VLAN 100 are bound. Uplink port 0/7/0 and VLAN 100 are bound. MA5600_B VLAN Add port 0 on the SCU board to VLAN 100 as the upstream port of this VLAN. Bind port 0/2/0 with profile 0 and port 0/2/1 does not need authentication.1.1) and program 2 (224.2) in the program library.1.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data The multicast server provides three programs. users can watch program 1 (224. 31-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1. program 1: 224.3 The IP address of the port of the upper layer router that is interconnected to the MA5600 is 10.1. the ADSL board is bound with the default line profile (profile 1). The VPI/VCI of the modem connected to the ADSL port is 0/35 (default). The multicast server provides three programs.1.1.1 program 2: 224.254. Based on this profile.2 program 3: 224.1. ADSL board In slot 0/2.3 Authority profile Set profile 0 as the authority profile.1.1.1.1.1.0. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Figure 31-6 Flowchart for configuring multicast service in subtending mode (MA5600_A) Multicast service configuration Configure IGMP mode Start Set IGMP upstream port Create a VLAN (Optional) Configure IGMP global parameters Add upstream port Configure program library Set native VLAN for the port VLAN configuration Configure the subtending port End Figure 31-7 Flowchart for configuring multicast service in subtending mode (MA5600_B) Multicast service configuration Start Set IGMP Proxy mode Configure IGMP upstream port (Optional) Configure IGMP global parameters Configure the xDSL port Create a VLAN Add the upstream port to the VLAN Set native VLAN for the port Configure the service port Configure program library (Optional)Configure preview attributes Configure authority profile VLAN configuration Configure multicast user End Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-13 . – Set the multicast mode.1. huawei(config)#vlan 100 standard Add upstream ports to the VLAN.0.3 sourceip hostip 10.0. – – – Create a VLAN.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program 192.0.1. In this example.2 sourceip hostip 10.168. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port. Save the data. huawei(config-btv)#igmp cascade-port 0/7/1 static enable 3. huawei(config)#service-port vlan 100 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 100 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 3. huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 – Configure the program library.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure l Procedure for configuring MA5600_A 1. huawei(config-btv)#igmp program 192. 2.168. – – – Create a VLAN.0. huawei(config-btv)#quit huawei(config)#save l Procedure for configuring MA5600_B 1. huawei(config)#vlan 100 smart Add an upstream port to the VLAN.1. the ADSL port is bound with the default line profile (profile 1002). huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 2. – Set the multicast mode.1. huawei(config)#port vlan 100 0/7 0 Set the native VLAN of the port.0.1.1. huawei(config)#port vlan 100 0/7 0-1 Set the native VLAN of the ports.1. Huawei Technologies Proprietary Issue 04 (2007-11-30) 31-14 .2 vlan 100 bind 0/7/0 add name program1 ip 224. Configure the xDSL port.254 add name program2 ip 224. Configure a VLAN.1.254 – Configure the multicast subtending port. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 – Add service ports to the VLAN.168. Configure the multicast service.0.1 sourceip hostip 10.254 add name program3 ip 224.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program 192. Configure the multicast service. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port.1. Configure a VLAN. MA5600_C subtends MA5600_D through the GE port.1. Instance 1 is created. Three MA5600 devices (MA5600_A.1.1. MA5600_B and MA5600_C are configured in a same MSTP region named hwrg. Prerequisite l l l The network devices and lines are normal. User 2 can watch all programs. huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0 huawei(config-btv)#quit Save the data. All services are transmitted upstream to the IP network through MA5600_A.168.1 sourceip 192.1.huawei(config-btv)#quit huawei(config)#save ----End Result l l User 1 can watch program 1 and program 2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-15 .1. the VLAN to which the upstream ports and subtending ports of the devices belong is mapped to instance 1. but cannot watch program 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 – Configure the program library. The related service boards are normal.1.3 192.2 192. 31. huawei(config-btv)#igmp program add name program1 ip 224.1. There exists the multicast source in the network and its IP address is known. MA5600_B and MA5600_C) make up the MSTP ring network. In this figure: MA5600_A.168.5 Configuring Multicast Service in MSTP Networking This operation enables you to configure multicast service in MSTP networking. and as the region root of instance 1. MA5600_A is configured as the CIST root.1.168.1.3 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224.3 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224. Networking Figure 31-8 shows the sample network of the multicast service in MSTP networking. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch – Configure the multicast user.3 vlan 100 bind 0/7/0 – Configure the authority profile. 31-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 31-8 Sample network of the multicast service in MSTP networking Multicast Server IP Router 2 3 A D G E A D G E 7 0 1 2 3 SCU MA5600_A 2 3 A D G E A D G E 7 0 1 2 2 A D G E 0 1 2 3 7 MA5600_B SCU 2 A D G E ADSL2+ Modem PC SCU 7 0 MA5600_C SCU MA5600_D Data Plan Table 31-4 lists the data plan for the sample network of the multicast service in MSTP networking. 1. Provides the port 0/7/2 to connect with MA5600_D.1. VLAN 100 is bound.1.3 MA5600_B The SCU board: l l l Provides the port 0/7/0 to connect with MA5600_A. which are used as the upstream port of the VLAN.1.1.1. The multicast server provides three programs. 0/7/1 and 0/7/2 on the SCU board to VLAN 100.1.1. program 1: 224.1 program 2: 224.1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-17 .1. Provides the port 0/7/1 to connect with MA5600_B.0.1. Provides the port 0/7/2 to connect with MA5600_D. The native VLAN of the port is set to 100.0. The native VLAN of the port is set to 100.2 program 3: 224. l The multicast server provides three programs. Provides the port 0/7/2 to connect with MA5600_D.254).1. VLAN: l Add the ports 0/7/0 and 0/7/1 on the SCU board to VLAN 100. Provides the port 0/7/1 to connect with MA5600_C. which are used as the upstream port of the VLAN. Provides the port 0/7/3 to connect with MA5600_C. l l l VLAN: Add the ports 0/7/0. program 1: 224. Provides the port 0/7/1 to connect with MA5600_B.1 program 2: 224.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Table 31-4 Data plan for the sample network of the multicast service in MSTP networking Item MA5600_A Data The SCU board: l Provides the upstream port 0/7/0 to interconnect with the upper layer multicast router (10. Uplink port 0/7/0 and VLAN 100 are bound.2 program 3: 224.3 MA5600_C The SCU board: l l l Provides the port 0/7/0 to connect with MA5600_A. program 1: 224.3 Authority profile: Users bound with authority profile profile0 can watch program1 and program2.1.1. 0/7/1 and 0/7/2 on the SCU board to VLAN 100. Modem: The VPI/VCI of the modem connected to the port is 0/35.1. The multicast server provides three programs.1. Multicast user 2: The service virtual port is 0/2/1. without authentication.1.1.2 program 3: 224. which are used as the upstream port of the VLAN. Provides the port 0/7/2 to connect with MA5600_D. l Configuration Flowchart Figure 31-9 and Figure 31-10 show the flowchart for configuring the multicast service in MSTP networking mode. and preview program3. VPI/VCI is 0/35.2 program 3: 224.1.1.1. which is used as the upstream port of the VLAN.1 program 2: 224.3 MA5600_D VLAN: Add the port 0/7/0 on the SCU board to VLAN 100.1. program 1: 224. which are used as the upstream port of the VLAN. Multicast user: l Multicast user 1: The service virtual port is 0/2/0.1. and authority profile profile0 is bounded.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Data VLAN: l Add the ports 0/7/0 and 0/7/1 on the SCU board to VLAN 100. The native VLAN of the port is set to 100. Uplink port 0/7/0 and VLAN 100 are bound. VLAN 100 is bound. l l l The multicast server provides three programs.1 program 2: 224. VPI/VCI is 0/35. 31-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Add the ports 0/7/0.1. 1. – Enable the MSTP function. Enable MSTP. Huawei Technologies Proprietary 31-19 Issue 04 (2007-11-30) .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Figure 31-9 Flowchart for configuring multicast service in MSTP networking on MA5600_A. MA5600_B and MA5600_C Multicast service configuration Start Enable the RSTP function Create the VLAN Add the upstream port Set native VLAN for the port VLAN configuration End Set IGMP mode Configure IGMP upstream port Configure IGMP global parameters (optional) Configure program library Configure IGMP subtending port Figure 31-10 Flowchart for configuring multicast service in MSTP networking on MA5600_D Multicast service configuration Start Enable the RSTP function Configure the xDSL port Set IGMP Proxy mode Configure IGMP upstream port Configure IGMP global parameters (optional) Configure program library Configure preview attributes (optional) Configure authority profile Create the VLAN Add the upstream port Set native VLAN for the port Configure the virtual port VLAN configuration Configure multicast user End Procedure l Configuration of MA5600_A. 2 vlan 100 bind 0/7/0 add name program1 ip 224. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port.0.1. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg – – Configure MSTP instance 1.168.0.168.1. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg – – Configure MSTP instance 1. – – Enable the MSTP function. huawei(stp-region-configuration)#instance 1 vlan 100 Activate MSTP region configuration. 1. huawei(stp-region-configuration)#instance 1 vlan 100 Activate the MSTP region configuration. Configure the VLAN. huawei(config-btv)#igmp program 192. huawei(config-btv)#igmp uplink-port-modemstp huawei(config-btv)#igmp uplink-port 0/7/1 100 – Configure the program library.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program 192. Enable MSTP. huawei(stp-region-configuration)#active region-configuration STP actives region configuration.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program 192. Configure the multicast service. huawei(config)#vlan 100 standard Add the upstream port.1.168. it may take several minutes. Huawei Technologies Proprietary Issue 04 (2007-11-30) 31-20 .1.1.1. huawei(config)#port vlan 100 0/70-2 Set the native VLAN of the upstream port.1. huawei(config)#stp enable Configure the MSTP region name.254 – Configure the multicast subtending port. – – – Create the VLAN.254 add name program3 ip 224.0. – Set the multicast mode.0.3 sourceip hostip 10.1. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 huawei(config-if-scu-0/7)#native-vlan 2 vlan 100 3. huawei(config-btv)#igmp cascade-port 0/7/1 static enable huawei(config-btv)#igmp cascade-port 0/7/2 static enable 4. Save the data.0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#stp enable – Configure the MSTP region name.0. huawei(stp-region-configuration)#quit huawei(config)#stp instance 0 priority 0 huawei(config)#stp instance 1 priority 0 2. huawei(config-btv)#quit huawei(config)#save l Configuration of MA5600_B.2 sourceip hostip 10.1 sourceip hostip 10.are you sure to active region configuration? [Y/N][N]y – Configure the priority of MA5600_A in the instance.1.254 add name program2 ip 224. huawei(config)#vlan 100 standard Add the upstream port. huawei(config)#port vlan 100 0/70-1 Set the native VLAN of the upstream port. huawei(config)#vlan 100 standard Add the upstream port. 1.are you sure to active region configuration? [Y/N][N]y 2. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port.1. Configure the VLAN. – – – Create the VLAN. huawei(config)#port vlan 100 0/7 0-1 Set the native VLAN of the upstream port. Save the data. huawei(stp-region-configuration)#instance 1 vlan 100 Activate the MSTP region configuration. – Set the multicast mode. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-21 . huawei(config-btv)#quit huawei(config)#save l Configuration of MA5600_C. – – – Create the VLAN.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service huawei(stp-region-configuration)#active region-configuration STP actives region configuration.168. huawei(config-btv)#igmp cascade-port 0/7/1 quickleave enable 4.are you sure to active region configuration? [Y/N][N]y 2. huawei(config)#stp enable Configure the MSTP region name.2 vlan 100 huawei(config-btv)#igmp program add name program3 ip 224.2 sourceip 192. it may take several minutes. – – Enable the MSTP function.1.168.2 vlan 100 huawei(config-btv)#igmp program add name program2 ip 224. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg – – Configure MSTP instance 1. Enable MSTP. huawei(config-btv)#igmp program add name program1 ip 224.1.1. huawei(stp-region-configuration)#active region-configuration STP actives region configuration.1.1.1.3 sourceip 192. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 3.2 vlan 100 – Configure the multicast subtending port.1 sourceip 192.1. Configure the multicast service. huawei(config-btv)#igmp uplink-port-modemstp huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp uplink-port 0/7/1 100 – Configure the program library.168. Configure the VLAN. it may take several minutes. 2 vlan 100 huawei(config-btv)#igmp program add name program3 ip 224. Configure the xDSL port. Configure the multicast service. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port.1. – Set the multicast mode. In this example. huawei(config-btv)#igmp uplink-port-modemstp huawei(config-btv)#igmp uplink-port 0/7/0 100 – Configure the program library. huawei(config-btv)#igmp cascade-port 0/7/1 quickleave enable huawei(config-btv)#igmp cascade-port 0/7/2 quickleave enable huawei(config-btv)#quit huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 2 vlan 100 – Configure the program library.1.1. huawei(config-btv)#igmp program add name program1 ip 224.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 3.1.1.3 vlan 100 bind 0/7/0 – Configure the authority profile.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224.1. Save the data. Configure the VLAN. 2. huawei(config)#vlan 100 standard Add the upstream port. huawei(config-btv)#quit huawei(config)#save l Configuration of MA5600_D. – Set the multicast mode.1. Configure the multicast service.1. 1.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224. huawei(config)#service-port vlan 100 adsl 0/2/0 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 100 adsl 0/2/1 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 3.1.1 vlan 100 huawei(config-btv)#igmp program add name program2 ip 224. the ADSL2+ port uses the system default line profile (profile 1002). huawei(config-btv)#igmp uplink-port-modemstp huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp uplink-port 0/7/1 100 – Configure the multicast subtending port.3 vlan 100 4.1.1. huawei(config)#btv huawei(config-btv)#igmp mode proxy – Configure the IGMP upstream port.1. huawei(config)#port vlan 100 0/7 0 Set the native VLAN of the upstream port. – – – Create the VLAN. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 – Add the service virtual port. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch 31-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config-btv)#igmp program add name program1 ip 224. preview program name program3 preview-duration preview program name program3 preview-times 6 preview program name program3 preview-interval preview auto-reset-time 00:00:00 huawei(config-btv)#igmp 150 huawei(config-btv)#igmp huawei(config-btv)#igmp 60 huawei(config-btv)#igmp – Configure the multicast user. 31. The difference only lies in the internal protocol processing. Step 2 Run the igmp mode command to set the IGMP mode. set the time to 00:00:00 every day. the host function. Run the igmp preview auto-reset-time command to set the time to reset the preview attempt.6 Setting the IGMP Mode This operation enables you to set the IGMP mode. the preview attempts are 6 times. Save the data. unsolicited report function and static program adding function are not available. Step 3 Run the display igmp proxy command to query the current multicast mode. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-23 . NOTE l l Configure the preview parameters as follows: The preview time for program 3 is 150s. User 2 can watch all programs. In IGMP snooping mode. huawei(config-btv)#quit huawei(config)#save ----End Result l l User 1 can watch program 1 and program 2. l Procedure Step 1 Run the btv command to enter BTV mode. including IGMP proxy and IGMP snooping. In this example. and can preview program 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview – Configure the preview parameters. Context l The configuration in IGMP snooping is the same as that in IGMP proxy. prejoin function. and the permitted interval for preview is 60s. huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 no-auth huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0 4. 31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To set the IGMP proxy mode.1s) : 8 Specific query number : 2 V1 router present timeout(s) : 400 Unsolicited report interval(s) : 10 Uplink port mode : program Log switch : enable User action report switch : disable Preview switch : enable Recognition time(s) : 30 The time of reset preview-count : 04:00:00 Auto create log interval(h) : 2 Right mode : profile mode Bandwidth management switch : enable Bandwidth assigned for user(%) : 100 Report proxy switch : disable Leave proxy switch : disable IGMP Packet encapsulation : all IGMP ECHO switch : disable --------------------------------------------------------- 31. but it can work in broadcast or MSTP mode. the IGMP upstream port is the port that is specified when you configure the program. the IGMP upstream port supports the port protection group function. 31-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#btv huawei(config-btv)#igmp mode proxy Are you sure to change IGMP mode?(y/n)[n]: y huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 General query response time(0. then it cannot be used as an upstream port that works in program or protect mode. the IGMP packets are transmitted from the specified VLAN to upstream direction. In MSTP mode.7 Configuring an IGMP Upstream Port This operation enables you to add an IGMP upstream port and set its mode and assigned bandwidth rate.1s) : 10 Specific query response time(0.1s) : 100 Specific query interval(0. and the upper layer device specifies the upstream port that receives the multicast stream. the IGMP upstream port is the root port used by MSTP. By default. the IGMP upstream port works in program mode. In protect mode. If you set a port to a subtending port. In broadcast mode. Context The IGMP upstream port works in any of the following modes: In program mode. . Context l An upstream port that works in program.. you need to define the port connecting to the slave shelf as a subtending port. do as follows: huawei(config)#btv huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#display igmp uplink-port 0/7/0 ---------------------------------------IGMP version : IGMP V2 Program number : 2 V1 router present timer(s) : 0 Assigned bandwidth(%) : 100% Used bandwidth(%) : 0. Step 3 Run the igmp uplink-port command to add an IGMP upstream port. Step 4 Run the display igmp uplink-port command to query the details of the IGMP upstream port.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Procedure Step 1 Run the btv command to enter BTV mode. To subtend the MA5600 to a slave shelf with multicast service users. ----End Example To set that the IGMP upstream port works in program mode. Step 2 Run the igmp uplink-port-mode command to set the working mode of the upstream port. broadcast or protect mode cannot be specified as a subtending port. Huawei Technologies Proprietary 31-25 Issue 04 (2007-11-30) ..5000% ---------------------------------------- Related Operation Table 31-5 lists the related operations for configuring the IGMP upstream port. and set the assigned bandwidth rate as 100%. undo igmp uplink-port igmp uplink-port modify 31.8 Specifying a Subtending Port This operation enables you to specify a subtending port.. Table 31-5 Related operations for configuring the IGMP upstream port To. Delete an IGMP upstream port Modify an IGMP upstream port Run the Command. set port 0/7/0 as the upstream port. . 31-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . In forward mode. In discard mode. Step 2 Run the igmp cascade-port command to configure a static subtending port.31 Configuring the Multicast Service l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide If a subtending port is configured with the static attribute. The priority of the static attribute is higher than that of the quick leave attribute. unless the subtending port or the program is deleted manually. do as follows: huawei(config)#btv huawei(config-btv)#igmp cascade-port 0/7/1 static enable huawei(config-btv)#display igmp cascade-port 0/7/1 Command: display igmp cascade-port all ---------------------------------------------------------------------------Port | Active | IGMP | V2 Port Present | Static | Quick | Port | Program | Version | Timer(0. If a subtending port is configured with the quick leave attribute. when receiving leave packets. Delete an IGMP subtending port Run the Command. ----End Example To specify a subtending port of port 0/7/1. the IGMP packets are forwarded without process..1s) | Join | Leave | Mode ---------------------------------------------------------------------------0/7/1 0 IGMP V3 0 Yes No snooping ---------------------------------------------------------------------------Total: 1 Related Operation Table 31-6 lists the related operation for specifying a subtending port. undo igmp cascade-port 31. the MA5600 cuts off the video stream. – – Procedure Step 1 Run the btv command to enter BTV mode. the MA5600 does not process any leave packet because the programs added to the port are not subject to aging.. the IGMP packets are denied for process. The mode mode parameter of the command igmp cascade-port is used to configure the application mode of the subtending port in IGMP snooping.9 Configuring a Program for a Static Subtending Port This operation enables you to add a program for a static subtending port. the IGMP packets reported by user will be processed in normal snooping mode. Step 3 Run display igmp cascade-port command to query the IGMP subtending port. – l l l In snooping mode. instead of sending specific group queries. Table 31-6 Related operation for configuring a subtending port To.. 1.1.10 Configuring IGMP Global Parameters This section describes how to configure the IGMP global parameters. 31.168.1 to static subtending port 0/7/1. Procedure Step 1 Run the igmp static-join cascade-port command to configure a program for a static subtending port. do as follows: huawei(config)#btv huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224..1 ------------------------------------------------------Total: 1 Related Operation Table 31-7 lists the related operation for configuring a program for a static subtending port.1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-27 . 31.1.10.1.168..1s) : 0 Static join : enable Quick leave : disable Port Mode : snooping ------------------------------------------Active Program list: Index Program Name IP sourceip -----------------------------------------------------1 PROGRAM-1 224.1. Table 31-7 Related operation for configuring a program for a static subtending port To. undo igmp static-join cascade-port 31.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Context To add or delete a program to or from a subtending port.1. as well as the number of programs sent to the port. ----End Example To add program 224.1 huawei(config-btv)#display igmp cascade-port 0/7/1 ------------------------------------------Port : 0/7/1 IGMP version : IGMP V2 V1 router present timer(0. make sure that the subtending port is configured with static attributes.1 Enabling the IGMP Proxy Authorization This operation enables the IGMP proxy authorization.2 Setting the Robustness Variable This operation enables you to set the robustness variable.. Delete a program from the static subtending port Run the Command.1.. Step 2 Run the display igmp cascade-port command to display the settings of the IGMP subtending port.10.1 192.1 sourceid 192. the upstream port sends the V2 report to the upstream.10. 31.11 Enabling the User Action Report Function This operation enables the user action report function.10.12 Enabling the Proxy of the IGMP Report Packet This operation enables the proxy of the IGMP report packets. 31-28 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10.10. After the system issues a specific query.5 Setting the Number of Specific Queries This operation enables you to set the number of specific queries.10. Context By default.10 Setting the Preview Recognition Time This operation enables you to set the preview recognition time. 31.13 Enabling the Proxy of the IGMP Leave Packet This operation enables the proxy of the IGMP leave packet. When the preview recognition time is set. 31.10. Before the timer expires.10. 31.4 Setting the Maximum Response Time to the General Query This operation enables you to set the maximum response time to the general query. the user must respond to the query within the maximum response time. 31.10. After receiving the query packet of the V2 version from the upper layer router. the MA5600 enables an aging timer of V2 router to the upstream port. 31. The TTL for a V2 router refers to the period between the router's receiving a V2 query and its sending an IGMPV2 report. 31.7 Setting the Maximum Response Time to the Specific Query This operation enables you to set the maximum response time to a specific query. any preview that is not exceeding this duration will not be considered as valid. 31. 31.9 Setting the TTL for a V2 Router This operation enables you to set the time to live (TTL) for a V2 router. 31.14 Set the Permitted Encapsulation Mode of IGMP Packets This operation enables you to set the permitted encapsulation mode of IGMP packets.1 Enabling the IGMP Proxy Authorization This operation enables the IGMP proxy authorization.3 Setting the General Query Interval This operation enables you to set the interval of the general query issued by the querier. you need to enable the IGMP proxy authorization first.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31.10. the IGMP proxy authorization is enabled.10.10.6 Setting the Specific Query Interval This operation enables you to set the specific query interval. and will not be logged. 31.8 Setting the Unsolicited Report Interval This operation enables you to set the unsolicited report interval. 31. 31.15 Enabling IGMP Echo Function This operation enables you to enable the IGMP echo function.10.10. To enable authentication of the "auth" users.10. 168.. igmp proxy authorization disable Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-29 .1s) V3 General query response time(0.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192..1s) : 8 V3 Specific query response time(0. Table 31-8 Related operation for enabling the IGMP proxy authorization To. Disable the IGMP proxy authentication Run the Command.1 --------------------------------------------------------- Related Operation Table 31-8 lists the related operation for enabling the IGMP proxy authorization. Step 2 Run the igmp proxy authorization enable command to enable the IGMP proxy authorization.1.1s) : 100 : 100 : 10 V2 Specific query response time(0.1s) Specific query interval(0. Step 3 Run the display igmp proxy command to check whether the IGMP proxy authorization is enabled. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy authorization enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0...SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Procedure Step 1 Run the btv command to enter BTV mode. ----End Example To enable the IGMP proxy authentication. 1s) : 100 : 100 : 10 V2 Specific query response time(0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31. By default.1s) V3 General query response time(0. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router robustness 5 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 5 General query interval(s) : 125 V2 General query response time(0. and prone to packet loss. the variable is 2. l Procedure Step 1 Run the btv command to enter BTV mode. It determines the aging time of a member and the packet retransmit count.10.1s) : 8 V3 Specific query response time(0. you need to enhance the robustness.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.1. ----End Example To set the robustness variable of the system as 5. Step 2 Run the igmp proxy router robustness command to set the robustness variable of the system. If a subnet is unstable.1s) Specific query interval(0. Step 3 Run the display igmp proxy command to query the robustness variable.2 Setting the Robustness Variable This operation enables you to set the robustness variable. Context l The robustness variable defines the reliability of a system.168.1 --------------------------------------------------------- 31-30 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Table 31-9 Related operation for setting the robustness variable To… Restore the default robustness variable Run the Command… undo igmp proxy router robustness 31.3 Setting the General Query Interval This operation enables you to set the interval of the general query issued by the querier. the general query interval is 125s. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router gen-query-interval 200 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 200 V2 General query response time(0.1s) : 100 : 100 : 10 V2 Specific query response time(0. Context By default.1s) V3 General query response time(0.1s) : 8 V3 Specific query response time(0. ----End Example To set the query interval as 200s. Step 2 Run the igmp proxy router gen-query-interval command to set the interval of the general query issued by the querier.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count : : : : : : : : 400 10 program enable disable enable 30 04:00:00 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-31 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Related Operation Table 31-9 lists the related operation for setting the robustness variable.1s) Specific query interval(0.10. Procedure Step 1 Run the btv command to enter BTV mode. Step 3 Run the display igmp proxy to display the interval of the general query issued by the querier. The maximum response time to the general query must be smaller than the general query interval.168.31 Configuring the Multicast Service Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide : : : : : : 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. By increasing the maximum response time. The default setting is 100 in the unit of 0.1s.1. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router gen-response-time v2 200 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 31-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10. Step 3 Run the display igmp proxy to display the maximum response time to the general query. 10s. Table 31-10 Related operation for setting the general query interval To… Restore the default general query interval Run the Command… undo igmp proxy router gen-query-interval 31.4 Setting the Maximum Response Time to the General Query This operation enables you to set the maximum response time to the general query. Step 2 Run the igmp proxy router gen-response-time command to set the maximum response time to the general query. you can reduce the burst of response packet traffic. Context The maximum response time determines the time taken by a multicast user in responding to a query packet. that is. ----End Example To set the maximum response time as 20s. Procedure Step 1 Run the btv command to enter BTV mode.1 --------------------------------------------------------- Related Operation Table 31-10 lists the related operation for setting the general query interval. 5 Setting the Number of Specific Queries This operation enables you to set the number of specific queries. the MA5600 considers that the user has left if response is not received after it has queried the user according to the set specific query count and has waited for a period equal to the maximum response time. Context After receiving a leave packet from a user.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide IGMP mode Authorization Robustness variable General query interval(s) V2 General query response time(0. as long as the attribute of such a leave packet is not "fast leave".1s) V3 General query response time(0.168.1s) : : : : proxy enable 2 125 31 Configuring the Multicast Service : 200 : 100 : 10 V2 Specific query response time(0. The default setting is 2.1 --------------------------------------------------------- Related Operation Table 31-11 lists the related operation for setting the maximum response time to the general query. the MA5600 sends a query packet to the user.1s) : 8 V3 Specific query response time(0.10.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. Table 31-11 Related operation for setting the maximum response time to the general query To… Restore the default maximum response time for the general query Run the Command… undo igmp proxy router gen-response-time 31. With the set query number.1s) Specific query interval(0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-33 . 1 --------------------------------------------------------- Related Operation Table 31-12 lists the related operation for setting the number of specific queries.1s) V3 General query response time(0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the igmp proxy router sp-query-number command to set the number of specific queries.1s) Specific query interval(0.1.168. Step 2 Run the display igmp proxy command to display the number of specific queries. ----End Example To set the specific query count as 5. Table 31-12 Related operation for setting the number of specific queries To… Restore the default number of specific queries Run the Command… undo igmp proxy router sp-query-number 31-34 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1s) : 100 : 100 : 10 V2 Specific query response time(0. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router sp-query-number 5 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1s) : 8 V3 Specific query response time(0.1s) : 8 Specific query number : 5 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-35 . Step 2 Run the igmp proxy router sp-query-interval command to set the specific query interval.1s) : 100 : 100 : 20 V2 Specific query response time(0. Step 3 Run the display igmp proxy command to display the specific query interval.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service 31. Procedure Step 1 Run the btv command to enter BTV mode.10.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. Context The default setting is 10 in the unit of 0.1s) V3 General query response time(0.6 Setting the Specific Query Interval This operation enables you to set the specific query interval.1 --------------------------------------------------------- Related Operation Table 31-13 lists the related operation for setting the specific query interval. 1s.1s) Specific query interval(0. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router sp-query-interval 20 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. that is.1. ----End Example To set the specific query interval as 2s.1s) : 8 V3 Specific query response time(0.168.1s. Step 3 Run the display igmp proxy command to display the maximum response time to a specific query.8s.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-13 Related operation for setting the specific query interval To… Restore the default specific query interval Run the Command… undo igmp proxy router sp-query-interval 31.5s). Context The default setting is 8 in the unit of 0. ----End Example To set the maximum response time for a specific query as 5 (0. the user must respond to the query within the maximum response time.1s) Specific query interval(0.1s) : 5 V3 Specific query response time(0.1s) : 100 : 100 : 10 V2 Specific query response time(0. Procedure Step 1 Run the btv command to enter BTV mode.1s) V3 General query response time(0.1s. Step 2 Run the igmp proxy router sp-response-time command to set the maximum response time to a specific query.7 Setting the Maximum Response Time to the Specific Query This operation enables you to set the maximum response time to a specific query. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy router sp-response-time v2 5 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. 0. that is. The maximum response time to a specific query must be smaller than the specific query interval.10. After the system issues a specific query.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) : : : : : : : 400 10 program enable disable enable 30 31-36 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 1s) : 100 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-37 . the report interval is 10s. ----End Example To set the unsolicited report interval as 200s. By default.168.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : 31 Configuring the Multicast Service 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.8 Setting the Unsolicited Report Interval This operation enables you to set the unsolicited report interval. Procedure Step 1 Run the igmp proxy router report-interval command to set the unsolicited report interval. it sends reports to the upper layer router at the set interval. Step 2 Run the display igmp proxy command to display the unsolicited report interval. do as follows: huawei(config-btv)#igmp proxy router report-interval 200 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 General query response time(0.10.1.1 --------------------------------------------------------- Related Operation Table 31-14 lists the related operation for setting the maximum response time for the specific query. Context When the IGMP proxy works in unsolicited report mode. Table 31-14 Related operation for setting the maximum response time for the specific query To… Restore the default maximum response time for the specific query Run the Command… undo igmp proxy router sp-response-time 31. Table 31-15 Related operation for setting the unsolicited report interval To… Restore the default unsolicited report interval Run the Command… undo igmp proxy router report-interval 31. Before the timer expires. the MA5600 enables an aging timer of V2 router to the upstream port.10. Procedure Step 1 Run the btv command to enter BTV mode.1s) : 8 Specific query number : 2 V1 router present timeout(s) : 400 Unsolicited report interval(s) : 200 Uplink port mode : program Log switch : enable User action report switch : disable Preview switch : enable Recognition time(s) : 30 The time of reset preview-count : 04:00:00 Auto create log interval(h) : 2 Right mode : profile mode Bandwidth management switch : enable Bandwidth assigned for user(%) : 100 Report proxy switch : disable Leave proxy switch : disable IGMP Packet encapsulation : all IGMP ECHO switch : disable --------------------------------------------------------- Related Operation Table 31-15 lists the related operation for setting the unsolicited report interval. the upstream port sends the V2 report to the upstream. Step 3 Run the display igmp proxy command to query the TTL for the V2 router. the TTL for a V2 router is 400s. ----End Example To set the TTL of the V2 router as 200s.1s) : 10 Specific query response time(0. Step 2 Run the igmp proxy router time-to-live command to set the TTL for a V2 router. do as follows: 31-38 Huawei Technologies Proprietary Issue 04 (2007-11-30) . After receiving the query packet of the V2 version from the upper layer router.9 Setting the TTL for a V2 Router This operation enables you to set the time to live (TTL) for a V2 router. Context By default.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Specific query interval(0. The TTL for a V2 router refers to the period between the router's receiving a V2 query and its sending an IGMPV2 report. 1s) Specific query interval(0.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 200 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. Context By default.1s) V3 General query response time(0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service huawei(config)#btv huawei(config-btv)#igmp proxy router timeout v2 200 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-39 . Table 31-16 Related operation for setting the TTL for a V2 router To… Restore the default TTL for a V2 router Run the Command… undo igmp proxy router timeout v2 31.10. any preview that is not exceeding this duration will not be considered as valid.1s) : 100 : 100 : 10 V2 Specific query response time(0. the recognition time is 30s. and will not be logged. When the preview recognition time is set.168.1s) : 8 V3 Specific query response time(0.1.1 --------------------------------------------------------- Related Operation Table 31-16 lists the related operation for setting the TTL for a V2 router.10 Setting the Preview Recognition Time This operation enables you to set the preview recognition time. ----End Example To set the preview recognition time to 20s. Step 2 Run the igmp proxy recognition-time command to set the preview recognition time.1s) V3 General query response time(0. Step 3 Run the display igmp proxy command to display the preview recognition time.1s) : 8 V3 Specific query response time(0.1 --------------------------------------------------------- Related Operation Table 31-17 lists the related operation for setting the preview recognition time.1s) : 100 : 100 : 10 V2 Specific query response time(0.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 20 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.168. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy recognition-time 20 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. Table 31-17 Related operation for setting the preview recognition time To… Restore the default preview recognition time Run the Command… undo igmp proxy recognition-time 31-40 Huawei Technologies Proprietary Issue 04 (2007-11-30) .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the btv command to enter BTV mode.1.1s) Specific query interval(0. do as follows: huawei(config)#btv huawei(config-btv)#igmp user-action-report enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. the action report function for the BTV user is disabled.1s) Specific query interval(0. ----End Example To enable the BTV user action report function.1. Step 2 Run the igmp user-action-report command to set the user action report function.1s) : 100 : 100 : 10 V2 Specific query response time(0. Procedure Step 1 Run the btv command to enter BTV mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service 31. Context By default.11 Enabling the User Action Report Function This operation enables the user action report function.10.1 --------------------------------------------------------- Related Operation Table 31-18 lists the related operation for enabling the user action report function.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable enable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.1s) : 8 V3 Specific query response time(0. Step 3 Run the display igmp proxy command to display the status of the user action report function.168. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-41 .1s) V3 General query response time(0. 1s) : 10 Specific query response time(0. when the report packet of the user is sent. and only forwards the packet of adding the first user. When the proxy is disabled. Prerequisite The proxy of the IGMP report packet takes effect only in IGMP snooping mode. – – If yes. The proxy can only create and forward the IPoE IGMP report packet.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-18 Related operation for enabling the user action report function To… Disable the user action report function Run the Command… igmp user-action-report disable 31. l l Procedure Step 1 Run the igmp report-proxy command to enables the proxy of the IGMP report packets. Step 2 Run the display igmp proxy command to display status of the proxy of the IGMP report packets. do as follows: huawei(config-btv)#igmp report-proxy enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 General query response time(0.1s) : 100 Specific query interval(0. the system checks whether this user is the first to order the program.12 Enabling the Proxy of the IGMP Report Packet This operation enables the proxy of the IGMP report packets. the packet is forwarded to the upstream direction. ----End Example To enable the proxy of the IGMP report packet. all the legal user's IGMP report packets are forwarded to the upstream direction. Context l With the proxy of the IGMP report packet enabled. l When the proxy is enabled.10. the proxy substitutes the user to create the IGMP report packet in response to the upstream query packet. the packet is dropped. If no.1s) : 8 Specific query number : 2 V1 router present timeout(s) : 400 Unsolicited report interval(s) : 10 Uplink port mode : program Log switch : enable 31-42 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service User action report switch : enable Preview switch : enable Recognition time(s) : 30 The time of reset preview-count : 04:00:00 Auto create log interval(h) : 2 Right mode : profile mode Bandwidth management switch : enable Bandwidth assigned for user(%) : 100 Report proxy switch : disable Leave proxy switch : disable IGMP Packet encapsulation : all IGMP ECHO switch : disable --------------------------------------------------------- Related Operation Table 31-19 lists the related operation for enabling the proxy of the IGMP report packet. ----End Example To enable the proxy of the IGMP leave packet. do as follows: huawei(config-btv)#igmp leave-proxy enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-43 .13 Enabling the Proxy of the IGMP Leave Packet This operation enables the proxy of the IGMP leave packet.10. only the IPoE leave packets of the user are created and forwarded. all of the IPoE packets of the user are forwarded. l l Procedure Step 1 Run the igmp leave-proxy command to enable the proxy of the IGMP leave packet. Table 31-19 Related operation for enabling the proxy of the IGMP report packet To… Disable the proxy of the IGMP report packet Run the Command… igmp report-proxy disable 31. The proxy of the IGMP leave packet has no effect on the PPPoE packets. Context l When the proxy is enabled. When the proxy is disabled. Step 2 Run the display igmp proxy command to display the status of the proxy of the IGMP leave packet. When the permitted encapsulation mode of IGMP packets is PPP. Context l By default. When the permitted encapsulation mode of IGMP packets is IP. the permitted encapsulation modes of user-side packets are: PPPoE. that is.14 Set the Permitted Encapsulation Mode of IGMP Packets This operation enables you to set the permitted encapsulation mode of IGMP packets. l l Procedure Step 1 Run the btv command to enter BTV mode.10. the permitted encapsulation mode of user-side packets is PPPoE. Table 31-20 Related operation for enabling the proxy of the IGMP leave packet To… Disable the proxy of the IGMP leave packet Run the Command… igmp leave-proxy disable 31. IPoA and IPoE. 31-44 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1s) : 10 Specific query response time(0. the default encapsulation mode of IGMP packets is all.1s) : 100 Specific query interval(0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide General query interval(s) : 125 General query response time(0. Step 2 Run the igmp encapsulation command to set the permitted encapsulation mode of IGMP packets.1s) : 8 Specific query number : 2 V1 router present timeout(s) : 400 Unsolicited report interval(s) : 10 Uplink port mode : program Log switch : enable User action report switch : disable Preview switch : enable Recognition time(s) : 30 The time of reset preview-count : 04:00:00 Auto create log interval(h) : 2 Right mode : profile mode Bandwidth management switch : enable Bandwidth assigned for user(%) : 100 Report proxy switch : disable Leave proxy switch : enable IGMP Packet encapsulation : all IGMP ECHO switch : disable --------------------------------------------------------- Related Operation Table 31-20 lists the related operation for enabling the proxy of the IGMP leave packet. the permitted encapsulation mode of user-side packets is IPoA and IPoE. 1s) : 100 : 100 : 10 V2 Specific query response time(0. – When the IGMP echo is enabled.15 Enabling IGMP Echo Function This operation enables you to enable the IGMP echo function. When the IGMP echo is disabled. The IGMP echo function takes effect only in snooping mode.10.1. – Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-45 .1s) V3 General query response time(0.1s) : 8 V3 Specific query response time(0. the system sends IGMP over PPP message and IGMP over IP message to the upper layer device.1s) Specific query interval(0. the system sends only IGMP over PPP message to the upper layer device.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : ppp IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. do as follows: huawei(config)#btv huawei(config-btv)#igmp encapsulation ppp huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Step 3 Run the display igmp proxy command to query the permitted encapsulation mode of IGMP packets. Context l l By default. the IGMP echo function is disabled.168. ----End Example To set the permitted encapsulation mode of IGMP packets as ppp.1 --------------------------------------------------------- 31. 1s) : 100 : 100 : 10 V2 Specific query response time(0. ----End Example To enable the IGMP echo function.11 Adding a Program This operation enables you to add one or more programs to the program library. VLAN ID of the program and so on. do as follows: huawei(config)#btv huawei(config-btv)#igmp echo enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. Step 2 Run the igmp echo command to enable the IGMP echo function.1. configure the attributes of the program. Context l When adding a program. Step 3 Run the display igmp proxy command to query the state of the IGMP echo function.1s) V3 General query response time(0.1s) Specific query interval(0.1 --------------------------------------------------------- 31. The configurable attributes include program name. uplink port bound to a program. multicast IP address.168.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : enable Uplink port force to V2 switch : enable Default source IP : 192. Huawei Technologies Proprietary Issue 04 (2007-11-30) 31-46 .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the btv command to enter BTV mode.1s) : 8 V3 Specific query response time(0. 0.0.255 is used for transmitting the local protocol packets. l l Procedure Step 1 Run the igmp program add command to add a program.2 vlan 1 bind 0/7/0 bandwidth 2048 host enable prejoin enable unsolicited disable log enable huawei(config-btv)#display igmp program ip 224.0 Bandwidth(kbps) : 2048 Numbers of watching : 0 --------------------------------------------- Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-47 . do as follows: huawei(config-btv)#igmp program add name BTV-100 ip 224.1–224.1.1. Otherwise.2 --------------------------------------------Program index : 2 Validity : valid Program name : BTV-100 IP address : 224.0. ----End Example Assume that: l l l l l l l l l l Program name: BTV-100 IP address of the program: 224. The multicast IP address segment 224.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l l 31 Configuring the Multicast Service A program name contains up to 16 characters.1.0.1. The last 23 bits of the multicast IP address will vary with different multicast programs.2 Uplink port : 0/7/0 VLAN ID : 1 Host attribute : enable Log attribute : enable Prejoin attribute : enable Across VLAN attribute : enable Unsolicited attribute : disable Preview duration(s) : 120 Preview times : 8 Preview interval(s) : 120 Priority : 7 Host IP : 0.2 VLAN ID of the program: 1 Upstream port bound: 0/7/0 Bandwidth of the program: 2 Mbit/s Host function: enabled Prejoin function: enabled Unsolicited report: disabled Logging function: enabled Other parameters: default settings To add a program to the program library. Step 2 Run the display igmp program command to display the program.1. Do not assign the IP address in this segment to the multicast programs.0.1.1. the mapping MAC addresses will conflict. The configured upstream port of the program must be the same as that planned in the actual networking.1. refer to "Configuring an IGMP Upstream Port". For details. Deleting a program that a user is watching will force the user offline.12.12. 31. Modifying the VLAN. Modification of program IP address is not allowed. Table 31-21 Related operations for adding a program To… Rename a program Run the Command… igmp program rename Remarks A program name uniquely identifies a program in the program library.2 Setting Upstream Port Bandwidth This operation enables you to set the bandwidth of the upstream port. 31. l l l 31.12 Managing Multicast Bandwidth This section describes how to manage multicast bandwidth.1 Enabling the Bandwidth Management Function This operation enables multicast bandwidth management. l Delete a program igmp program delete Modify a program igmp program modify You can modify only one program attribute at a time.12.12. 31.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 31-21 lists the related operations for adding a program. upstream port or priority bound with a program will get the associated user offline.1 Enabling the Bandwidth Management Function This operation enables multicast bandwidth management.3 Setting User Bandwidth This operation enables you to configure the user bandwidth. 31. Context l Multicast bandwidth management involves: – Upstream port bandwidth Huawei Technologies Proprietary Issue 04 (2007-11-30) 31-48 . Batch modification of the program name is not allowed. the system checks as follows. the system deletes them from the user program list. – l If the used bandwidth exceeds the allocated one. the suspended program can be replayed. the system checks only the upstream port bandwidth. In this case. – – Procedure Step 1 Run the btv command to enter BTV mode. do as follows: huawei(config)#btv huawei(config-btv)#igmp bandwidthcac enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-49 . Step 3 Run the display igmp proxycommand to display the bandwidth management function. The user can get online only when the used bandwidth is less than the allocated one. the program ordered by the user will be suspended in descending order of the program index. the user can get online even if the user bandwidth exceeds the limited value. the system delivers the specific group query message to all the programs being watched. When the user gets online and the CAC function is enabled. – If the bandwidth used by the upstream port exceeds the allocated value. the system does not check the upstream port bandwidth and user bandwidth. the user cannot get online. some occupied bandwidth can be released. – l When the multicast bandwidth management function is enabled. If the user's residual bandwidth is not enough. If there are some programs which are not being watched while the MA5600 has regarded them being watched for some reason. the system checks the user bandwidth.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide – l 31 Configuring the Multicast Service User bandwidth When the multicast bandwidth management function is disabled. If there are some programs which are not being watched (while the MA5600 has regarded them being watched). Step 2 Run the igmp bandwidthcac command to enable the bandwidth management function. the number of programs being watched can be released. If the number of the programs being watched exceeds the maximum value. ----End Example To enable bandwidth management of IGMP proxy. In this case. the system deletes them from the user program list. If the bandwidth used by the upstream port does not exceed the allocated value. the system delivers the specific group query message to all the programs being watched. – If the number of the programs being watched is smaller than the maximum number of the programs that can be watched. If the number of programs being watched exceeds the maximum number of the programs that can be watched. Once the bandwidth used by the upstream port is equal to the allocated one. the system checks the user bandwidth when the user gets online. 1s) Specific query interval(0. Context This function takes effect when the multicast CAC function is enabled. l For an ADSL user. l 31-50 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The utilization is the ratio of the multicast CAC bandwidth to the physical port line rate. the utilization is the ratio of multicast CAC bandwidth to the activation rate of the ADSL port. Table 31-22 Related operation for enabling the bandwidth management function To… Disable IGMP proxy bandwidth management Run the Command… igmp bandwidthCAC disable 31.1s) : 8 V3 Specific query response time(0. For an SHDSL user.1 --------------------------------------------------------- Table 31-22 lists the related operation for enabling the bandwidth management function.2 Setting Upstream Port Bandwidth This operation enables you to set the bandwidth of the upstream port. refer to "Configuring an IGMP Upstream Port".1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.1s) V3 General query response time(0.1.168.12.12.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide : 100 : 100 : 10 V2 General query response time(0.3 Setting User Bandwidth This operation enables you to configure the user bandwidth. 31.1s) V2 Specific query response time(0. For details. the utilization is the ratio of multicast CAC bandwidth to the maximum downstream rate specified in the line profile of the SHDSL port. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Procedure Step 1 Run the btv command to enter BTV mode.1s) V3 General query response time(0.13.13.1 Setting the Authority Mode This operation enables you to set the authority mode. 31. Step 2 Run the igmp user-bandwidth-utilization command to set the user bandwidth.13 Configuring an Authority Profile This section describes how to configure an authority profile.168.1s) Specific query interval(0.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 50 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. ----End Example To set user bandwidth utilization to 50%.2 Modifying an Authority Profile This operation enables you to modify an authority profile. Step 3 Run the display igmp proxy command to display the user bandwidth.1s) : 8 V3 Specific query response time(0.1s) : 100 : 100 : 10 V2 Specific query response time(0. 31. do as follows: huawei(config)#btv huawei(config-btv)#igmp user-bandwidth-utilization 50 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0. 31.1.3 Renaming an Authority Profile Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-51 .1 --------------------------------------------------------- 31.13. 1s) Specific query interval(0. 31.1s) V3 General query response time(0. The default is profile mode. For example: l igmp profile rename. igmp profile { profile-name | profile-index }.13. Some multicast configuration commands can be used in certain authority mode.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) : : : : : : : 400 10 program enable disable enable 30 31-52 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1s) : 100 : 100 : 10 V2 Specific query response time(0. l Procedure Step 1 Run the btv command to enter BTV mode. ----End Example To set the authority mode as profile mode. Step 2 Run the igmp right-mode command to set the authority mode. igmp user grant-program must be run in user mode. are you sure to change the right mode?(y/n)[n]:y huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1 Setting the Authority Mode This operation enables you to set the authority mode. do as follows: huawei(config)#btv huawei(config-btv)#igmp right-mode profilemode The profile data will lose after this operation.1s) : 8 V3 Specific query response time(0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide This operation enables you to rename an authority profile. Context The MA5600 supports two authority modes: l l User mode (usermode): used for multicast user management. Profile mode (profilemode): used for multicast profile management. and igmp user bindprofile must be run in profile mode. Step 3 Run the display igmp proxy command to display the authority mode. the system names the 2000 profiles as profile 1. and profile N. Step 2 Run the igmp profile command to add the authority to watch program “BTV-1” to profile 1. ----End Example To add program “BTV1” with authority of watch to profile 1.1. Context By default. When modifying the program authority of an authority profile. The program authority can only be any one of watch.1. preview.1 watch ----------------------------------------------Total:1 Related Operation Table 31-23 lists the related operation for modifying an authority profile. profile 2.168. make sure that the authority mode is profile mode.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : 31 Configuring the Multicast Service 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.13. …. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-53 . do as follows: huawei(config)#btv huawei(config-btv)#igmp profile profile-name profile1 program-name BTV-1 watch huawei(config-btv)#display igmp profile profile-name profile1 Profile index : 1 Profile name : Profile1 Program number : 1 User Reference Number : 0 Program list ----------------------------------------------Program name IP address Right ----------------------------------------------BTV-1 224. Step 3 Run the display igmp profile command to display the configuration of the authority profile. forbidden and idle. Procedure Step 1 Run the btv command to enter BTV mode.1.2 Modifying an Authority Profile This operation enables you to modify an authority profile.1 --------------------------------------------------------- 31. 3 Renaming an Authority Profile This operation enables you to rename an authority profile. Step 2 Run the display igmp profile command to display the authority profile. Context l When renaming the program authority of an authority profile...More ( Press 'Q' to break ) ---- 31-54 Huawei Technologies Proprietary Issue 04 (2007-11-30) . ----End Example To rename profile 1 as “VIP-channel”.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-23 Related operation for modifying an authority profile To. The new authority profile name cannot be identical to an existing one. l l Procedure Step 1 Run the igmp profile rename command to rename an authority profile. make sure that the authority mode is profile mode. do as follows: huawei(config-btv)#igmp profile rename profile1 VIP-channel huawei(config-btv)#display igmp profile all ---------------------------------------------------------------------index Profile name Program number User Reference Number ---------------------------------------------------------------------0 Profile0 1 0 1 VIP-channel 0 0 2 Profile2 0 0 3 Profile3 0 0 4 Profile4 0 0 5 Profile5 0 0 6 Profile6 0 0 7 Profile7 0 0 8 Profile8 0 0 9 Profile9 0 0 10 Profile10 0 0 11 Profile11 0 0 12 Profile12 0 0 13 Profile13 0 0 14 Profile14 0 0 15 Profile15 0 0 16 Profile16 0 0 17 Profile17 0 0 18 Profile18 0 0 19 Profile19 0 0 ---... igmp right-priority 31.13. The authority profile name is not case sensitive. Set the priority for user authorities Run the Command. 31. Each BTV user can watch up to eight programs at the same time.14.1 Adding a BTV User This operation enables you to add a BTV user. In this case. You can add a user only when both the PVC for carrying IGMP packets and the PVC for carrying the program stream exist. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-55 . a BTV user can watch eight programs at the same time.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service 31. 31. l Procedure Step 1 Run the btv command to enter BTV mode. you must specify a PVC for carrying IGMP packets for this user. 31.14. l The configured authority profiles will be removed if you change the authority mode from the profile mode to the user mode.1 Adding a BTV User This operation enables you to add a BTV user.14.14. 31.2 Modifying the Attributes of a User This operation enables you to modify the attributes of a user.4 Binding a User with an Authority Profile This operation enables you to bind an auth user with an authority profile.3 Blocking a BTV User This operation enables you to block a BTV user. An authentication (auth) user must be bound with some authority profiles to watch the programs.5 Granting Program Authorities to a User This operation enables you to grant program authorities to a user or to modify the granted program authorities.14. 31.6 Enabling the Function of Monitoring the BTV User This operation enables the function of monitoring the BTV user. A blocked user cannot watch a program until the user is unblocked. 31. no authority needs to be configured for the user. The user who does not need authentication (no-auth) can watch all programs in the multicast server. By default. To authorize a user with the authority to watch a program: – – l l Select profilemode if you bind the line profile to the user port. An auth user can watch programs of an authority profile only when the user is bound with the profile in authority profile mode. Step 2 Run the igmp user add command to add a BTV user. Context l l When adding a BTV user.14.14 Configuring Multicast Users This section describes how to configure multicast users. 31.14. Select usermode if you bind the program to the user port. log switch. Context The user attributes include PVC. Step 2 Run the igmp user modify command to modify the attributes of a user. Procedure Step 1 Run the btv to enter BTV mode. Step 3 Run the display igmp user command to query the multicast user information.. quick leave. do as follows: huawei(config)#btv huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 no-auth huawei(config-btv)#display igmp user all Command: display igmp user all Operation is running. authorization.. Delete a BTV user Modify a BTV user Run the Command..14.. The 'auto' means VPI/VCI autosense. ----------------------------------------------------------------------------User Bind State Auth Quick IGMP Video Log Available profiles leave Interface Interface switch programs ----------------------------------------------------------------------------0/2/0 offline no-auth enable 0/35 0/35 enable 8 ----------------------------------------------------------------------------Total: 1 Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID or ETH and GEMPORT ID.. ----End Example To add a user under port 0/2/0 as a BTV user (no-auth user).2 Modifying the Attributes of a User This operation enables you to modify the attributes of a user. Table 31-24 Related operations for adding a BTV user To. You can modify only one attribute of a user at a time. and maximum number of channel programs to be watched. please waiting. igmp user delete igmp user modify 31.. ----End 31-56 Huawei Technologies Proprietary Issue 04 (2007-11-30) .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 3 Run the display igmp user command to display the BTV user. Related Operation Table 31-24 lists the related operations for adding a BTV user. l If the IP address or index of the program being watched is not specified.. Table 31-25 Related operations for modifying the attributes of a user To… Add a BTV user Delete a BTV user Run the Command… igmp user add igmp user delete 31. l Procedure Step 1 Run the btv command to enter BTV mode. Step 3 Run the display igmp user command to display the information on the BTV user. Context After a BTV user is blocked. the system will block the user port. Step 2 Run the igmp user block command to block a BTV user. do as follows: huawei(config)#btv huawei(config-btv)#igmp user modify port 0/2/0 auth Are you sure to modify user by port?(y/n)[n]:y Operation is running.3 Blocking a BTV User This operation enables you to block a BTV user. After the user gets offline. The 'auto' means VPI/VCI autosense.. Related Operation Table 31-25 lists the related operations for modifying the attributes of a user. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-57 . please waiting. If the IP address or index of the program being watched is specified. ----------------------------------------------------------------------------User Bind State Auth Quick IGMP Video Log Available profiles leave Interface Interface switch programs ----------------------------------------------------------------------------0/2/0 0 offline auth enable 0/35 0/35 enable 8 ----------------------------------------------------------------------------Total: 1 Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID or ETH and GEMPORT ID.. huawei(config-btv)#display igmp user all Operation is running. the user is disconnected from the program that the user is watching. please waiting. A blocked user cannot watch a program until the user is unblocked. the system will only block the specified program.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Example To define user 0/2/0 as a user who needs authorization.14. In addition. the user's access requests for any program after he goes offline will be denied until the user is unblocked. the user still can demand any program except the blocked one.. 4 Binding a User with an Authority Profile This operation enables you to bind an auth user with an authority profile.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To block user 0/2/0. "no-auth" user cannot be bound with any profile. However. When binding an authority profile with a BTV user. An auth user can watch programs of an authority profile only when the user is bound with the profile in authority profile mode.1s) : 0 Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID or ETH and GEMPORT ID. Table 31-26 Related operation for blocking a BTV user To… Unblock a BTV user Run the Command… undo igmp user block 31. Related Operation Table 31-26 lists the related operation for blocking a BTV user. 31-58 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#btv huawei(config-btv)#igmp user block port 0/2/0 huawei(config-btv)#display igmp user port 0/2/0 { <cr>|grant-program-list<K> }: Command: display igmp user port 0/2/0 User : 0/2/0 State : block Authentication : no-auth Quick leave : enable IGMP flow Type : IGMP flow Parameter : Video Interface : 0/35 Video flow Type : Video flow Parameter : Log switch : enable Grant programs : IGMP version : Available programs : 8 Mode : snooping Process After Auth Fail : forward Used bandwidth(kbps) : 0 The percentage of used bandwidth to port rate(%) : 0 quick leave time(0.14. The 'auto' means VPI/VCI autosense. Up to 256 profiles can be bound to a user. make sure that the authority mode is profile mode. Context A user port can be bound with multiple profiles. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-59 .. Unbind an authority profile from a user Run the Command..14. Step 3 Run the display igmp user command to display the authority profile bound with the user. Table 31-27 Related operation for binding a user with an authority profile To. Step 2 Run the igmp user bind-profile command to bind an authority profile.1s) : 0 Bind profile list --------------------------------------------index Profile name Program number --------------------------------------------0 Profile0 0 --------------------------------------------Total: 1 Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID Related Operation Table 31-27 lists the related operation for binding a user with an authority profile. undo igmp user bind-profile 31.. ----End Example To bind user 0/2/0with “profile0”.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Procedure Step 1 Run the btv command to enter BTV mode.. do as follows: huawei(config)#btv huawei(config-btv)#igmp user bind-profile port 0/2/0 profile-name profile0 huawei(config-btv)#display igmp user port 0/2/0 { <cr>|epon<K>|grant-program-list<K> }: Command: display igmp user port 0/2/0 User : 0/2/0 State : offline Authentication : auth Quick leave : enable IGMP Interface : 0/35 Type of service port : Parameter of service port: Log switch : enable Bind profiles : 1 IGMP version : Available programs : 1 Mode : snooping Process After Auth Fail : discard Used bandwidth(kbps) : 0 The percentage of used bandwidth to port rate(%): 0 quick leave time(0.5 Granting Program Authorities to a User This operation enables you to grant program authorities to a user or to modify the granted program authorities. 1 to 224.1. program authorities can be divided into forbidden. preview. ----End Example To grant users under port 0/2/0 with the authorities to watch programs from 224. do as follows: huawei(config-btv)#igmp user grant-program port 0/2/0 ip 224. Step 3 Run the display igmp user port grant-program-list command to display the user program authorities.1 watch --------------------------------------------Total:2 31.1 watch huawei(config-btv)#igmp proxy authorization enable huawei(config-btv)#display igmp user port 0/2/0 grant-program-list --------------------------------------------Program name IP address sourceip Right --------------------------------------------PROGRAM-0 224.1. slot or Smart VLAN. Run the debugging igmp all to enable the function of monitoring all BTV users.1. ----End 31-60 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.1.168. you must perform the following operations: l Run the terminal debugging command to enable the debugging information output function.1.1.2.168.14.1 watch PROGRAM-1 224. Or you can grant program authorities to all users using the igmp user grant-program all command.168.1 sourceip 192.2. In terms of the validity preference.6 Enabling the Function of Monitoring the BTV User This operation enables the function of monitoring the BTV user.2.1 192.1. Context Before enabling the function of monitoring the BTV user. l Procedure Run the debugging igmp command to enable the function of monitoring the BTV user.1 to-ip 224. watch and idle. make sure that the authority mode is user mode.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Context l You can grant program authorities to a user based on the port. l l Procedure Step 1 Run the btv command to enter BTV mode.1.1. Step 2 Run the igmp user grant-program command to grant program authorities to a user. When granting program authorities to a user or when modifying the granted program authorities.1.1.1 192.1. Table 31-28 Related operation for enabling the function of monitoring BTV users To… Disable the function of monitoring BTV users Run the Command… undo debugging igmp 31. Step 2 Run the igmp preview enable command to enable the IGMP preview function. When the preview auto reset time is set.4 Clearing the Preview Records Manually This operation enables you to clear all preview records manually.15. the system will clear the preview count to zero at the specified time. Context With the preview function disabled. users with preview authority cannot view any program. and preview interval.1 Enabling the Preview Function This operation enables the preview function.15.2 Setting the Preview Parameters This operation enables you to set the preview parameters. Procedure Step 1 Run the btv command to enter BTV mode. including the record of the preview logout time and count.15.15. including preview duration.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Example To monitor a BTV user port.3 Setting the Preview Auto Reset Time This operation enables you to set the preview auto reset time. do as follows: huawei(config)#debugging igmp port 0/2/0 Related Operation Table 31-28 lists the related operation for enabling the function of monitoring BTV users. 31.15 Configuring the Preview Function This section describes how to configure the preview function. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-61 .1 Enabling the Preview Function This operation enables the preview function. 31. preview times. 31. Step 3 Run the display igmp proxy command to check whether the preview function is enabled. 31.15. 31. 2 Setting the Preview Parameters This operation enables you to set the preview parameters. preview times.1s) Specific query interval(0.1.1s) : 8 V3 Specific query response time(0.1s) : 100 : 100 : 10 V2 Specific query response time(0.1 --------------------------------------------------------- Related Operation Table 31-29 lists the related operation for enabling the preview function.168. do as follows: huawei(config)#btv huawei(config-btv)#igmp preview enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. including preview duration. and preview interval.15.1s) V3 General query response time(0.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To enable the IGMP preview function. Table 31-29 Related operation for enabling the preview function To… Disable the IGMP preview function Run the Command… igmp preview disable 31. 31-62 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-63 . ----End Example To set the preview duration of program1 to 150s.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service Context When the preview function is disabled.15. By default: l l l The preview duration is 120s.3 Setting the Preview Auto Reset Time This operation enables you to set the preview auto reset time. do as follows: huawei(config-btv)#igmp preview program index 1 preview-duration 150 huawei(config-btv)#igmp preview program index 1 preview-times 5 huawei(config-btv)#igmp preview program index 1 preview-interval 100 huawei(config-btv)#display igmp program index 1 --------------------------------------------Program index : 1 Validity : valid Program name : cctv-1 IP address : 224.1. Context By default. the preview auto reset time is 04:00:00 am each day.1 Uplink Port : 0/7/0 VLAN ID : 1 Host attribute : enable Log attribute : enable Prejion attribute : disable Across VLAN attribute : enable Unsolicited attribute : disable Preivew duration(s) : 150 Preivew times : 5 Preivew interval(s) : 100 Priority : 0 Numbers of watching : 0 --------------------------------------------Watching IGMP cascade port : 0/7/1 --------------------------------------------- 31. the system will clear the preview count to zero at the specified time. The preview interval is 120s. Step 2 Run the display igmp program command to display the preview parameters. When the preview auto reset time is set. Procedure Step 1 Run the igmp preview program command to configure the preview parameters.1. all the users with the preview authority cannot watch any program. The preview times are eight. 1s) V3 General query response time(0.1s) Specific query interval(0. Step 2 Run the igmp preview auto-reset-time command to set the preview auto reset time.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the btv command to enter BTV mode.1s) : 100 : 100 : 10 V2 Specific query response time(0. ----End Example To set the preview auto reset time as 05:00:00 am each day. do as follows: huawei(config)#btv huawei(config-btv)#igmp preview auto-reset-time 05:00:00 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1s) : 8 V3 Specific query response time(0.168.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 05:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. Step 3 Run the display igmp proxy command to display the display the preview auto reset time.1.1 --------------------------------------------------------- Related Operation Table 31-30 lists the related operation for setting the preview auto reset time. Table 31-30 Related operation for setting the preview auto reset time To… Restore the default preview auto reset time 31-64 Run the Command… undo igmp preview auto-reset-time Huawei Technologies Proprietary Issue 04 (2007-11-30) . 2. including the record of the preview logout time and count. 2. l Run the btv command to enter BTV mode. Run the igmp preview reset record command to clear all the records of the preview logout time manually.4 Clearing the Preview Records Manually This operation enables you to clear all preview records manually. Procedure l Reset the record of the preview logout time manually. the user will not be allowed to preview the program again. ----End Example To clear all the records of the preview logout time manually. Context The system records the previous preview logout time automatically. Run the btv command to enter BTV mode. 1. 1. Run the igmp preview reset countcommand to clear all the records of the preview logout count manually. do as follows: huawei(config)#btv huawei(config-btv)#igmp preview reset record To clear all the records of the preview logout count manually.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 31 Configuring the Multicast Service To… Reset the record of the preview logout time manually Reset the record of the preview logout count manually Run the Command… igmp preview reset record igmp preview reset count 31. Reset the record of the preview logout count manually. do as follows: huawei(config)#btv huawei(config-btv)#igmp preview reset record Related Operation Table 31-31 lists the related operation for resetting the preview record. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-65 . If a user previews a program at an interval smaller than the value preset by running the igmp preview program command.15. 1s) : 100 : 100 : 10 31-66 Huawei Technologies Proprietary Issue 04 (2007-11-30) .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-31 Related operation for resetting the preview record To. igmp preview auto-reset-time 31.16 Configuring the Logging Function This section describes how to configure the logging function.3 Configuring Log Reporting This operation enables you to configure the log reporting function. ----End Example To enable the IGMP proxy logging function.2 Setting the Logging Interval This operation enables you to set the automatic log generation interval for a long-time online user. Step 2 Run the display igmp proxy command to display the status of the logging switch.1 Enabling the Logging Function This operation enables you to enable the logging function so that the operations can be logged.16. 31. 31.16.16.4 Collecting Log Statistics This operation enables you to collect statistics on user logs for audience statistics.1 Enabling the Logging Function This operation enables you to enable the logging function so that the operations can be logged. the logging function is enabled. do as follows: huawei(config-btv)#igmp proxy log enable huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.16. Context By default. 31.16.... 31. Procedure Step 1 Run the igmp proxy log enable command to enable the logging function.1s) V3 General query response time(0. 31. Set the preview auto reset time Run the Command.1s) Specific query interval(0.. the logging interval is two hours. This log can be used for billing in case that no log is generated when a user becomes offline abnormally after watching a program for a long time. When a user watches a program for a long time.1 --------------------------------------------------------- Related Operation Table 31-32 lists the related operations for enabling the logging function. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-67 . and the time exceeds the time interval for generating the log. By default.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide V2 Specific query response time(0.1.2 Setting the Logging Interval This operation enables you to set the automatic log generation interval for a long-time online user.168.16.1s) : 8 V3 Specific query response time(0. Step 2 Run the igmp proxy log-interval command to set the logging interval. Context The MA5600 can record the logs automatically. Table 31-32 Related operations for enabling the logging function To… Disable the IGMP proxy logging function Display the logs of IGMP users Run the Command… igmp proxy log disable display igmp log 31. the system generates a log automatically. Procedure Step 1 Run the btv command to enter BTV mode.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 31 Configuring the Multicast Service 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192. 1s) : 100 : 100 : 10 V2 Specific query response time(0. ----End Example To set the log generation interval as one hour.168.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) : : : : : : : 400 10 program enable disable enable 30 31-68 Huawei Technologies Proprietary Issue 04 (2007-11-30) .31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 3 Run the display igmp proxy command to display the set logging interval.1s) : 8 Specific query number : 2 V2 router present timeout(s) Unsolicited report interval(s) Uplink port mode Log switch User action report switch Preview switch Recognition time(s) The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : : : : : : : : 400 10 program enable disable enable 30 04:00:00 2 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.1s) : 100 : 100 : 10 V2 Specific query response time(0.1s) : 8 V3 Specific query response time(0.1s) V3 General query response time(0. do as follows: huawei(config)#btv huawei(config-btv)#igmp proxy log-interval 1 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 huawei(config-btv)#display igmp proxy -------------------------------------------------------Program number of license : 1024 IGMP mode : proxy Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1s) Specific query interval(0.1 --------------------------------------------------------Authorization : enable Robustness variable : 2 General query interval(s) : 125 V2 General query response time(0.1s) V3 General query response time(0.1.1s) : 8 V3 Specific query response time(0.1s) Specific query interval(0. 1.1. Context The logs are reported based on the combination of port. and time range.168.1.1. ----End Example To report the logs of the program with IP address 225.3 Configuring Log Reporting This operation enables you to configure the log reporting function.1. Procedure Run the igmp log report command to configure the log reporting function.16.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The time of reset preview-count Auto create log interval(h) Right mode Bandwidth management switch Bandwidth assigned for user(%) Report proxy switch Leave proxy switch : : : : : : : 31 Configuring the Multicast Service 04:00:00 1 profile mode enable 100 disable disable IGMP Packet encapsulation : all IGMP ECHO switch : disable Uplink port force to V2 switch : enable Default source IP : 192.1. Table 31-33 Related operation for setting the logging interval To… Restore the default logging interval Run the Command… undo igmp proxy log-interval 31.1.1 sourceip 192.168.168. and multicast source IP address 192.1 --------------------------------------------------------- Related Operation Table 31-33 lists the related operation for setting the logging interval.1 that are generated during the period from 2006-1-10 9:00:00 to 2006-1-10 18:30:00. do as follows: huawei(config)#btv huawei(config-btv)#igmp log report ip 225.1. program IP address.1 time 2006-1-10 9:00:00 end 2006-1-10 18:30:00 Reporting log has finished Reported log number: 50 Related Operation Table 31-34 lists the related operations for configuring log reporting. Issue 04 (2007-11-30) Huawei Technologies Proprietary 31-69 . If not. the command stops the log reporting.4 Collecting Log Statistics This operation enables you to collect statistics on user logs for audience statistics. an IP address.1.16. Procedure Step 1 Run the btv command to enter BTV mode.168.1 W 2006-04-15 18:51:58 2006-04-15 19:26:24 0/3/0 10.1 W 2006-04-15 19:29:48 2006-04-15 19:39:32 0/3/0 10.168.10.1 192.1. can be regarded as the dynamic on-demand information.1 W 2006-04-15 18:43:14 2006-04-15 18:51:57 ----------------------------------------------------------------------------Total: 4 Note: P(Mode) indicates preview. Context The log statistics mainly include the programs ordered and related time parameters. the system prompts errors.1. W(Mode) indicates watch.1 192.10. do as follows: huawei(config)#btv huawei(config-btv)#display igmp log all { <cr>||<K> }: Command: display igmp log all ----------------------------------------------------------------------------Port Program-IP sourceip Mode Join-time Leave-time ---------------------------------------------------------------------------0/3/0 10. - Clear user logs Display the log statistics igmp log reset display igmp log statistic 31. Step 2 Run the display igmp log command to display the logs.1 W 2006-04-15 19:26:25 2006-04-15 19:29:46 0/3/0 10. N(Mode) indicates no authority F(Mode) indicates preview times full out 31-70 Huawei Technologies Proprietary Issue 04 (2007-11-30) .10.1 192.31 Configuring the Multicast Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 31-34 Related operations for configuring log reporting To… Stopping log reporting Run the Command… igmp log stop-report Remarks If the system is reporting the user log. You can collect the statistics based on a pot.10.10.10.1.10. ----End Example To collect statistics on all user logs. or all users.168.1 192.168.10. VoIP and IPTV services.3 Configuration Example of Triple Play . 32.Based on the Service Encapsulation Type This operation enables you to configure the triple play service . 32.single PVC for multiple services (based on the service encapsulation type).multiple PVCs for multiple services.Based on the User-Side VLAN This example shows how to configure the triple play service . such as Internet.1 Overview This section describes the description and specifications of the triple play service. Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-1 .single PVC for multiple services (based on the user-side VLAN). 32.4 Configuration Example of Triple Play .Based on 802. 32. Users connect to multiple terminals through the home gateway to implement multiple services. 32.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service 32 Configuring the Triple Play Service About This Chapter This chapter describes the triple play service and how to configure the service on the MA5600.2 Configuration Example of Triple Play .5 Configuration Example of the Triple Play Service .1p.Multiple PVCs for Multiple Services This example shows how to configure the triple play service .1p This operation shows how to configure the triple play service by means of single PVC for multiple services based on 802. Table 32-1 Modes to provide the triple play service Mode Multiple PVC for multiple services Description It needs to configure the existing modem. l The VoIP and IPTV services adopt DHCP method. the terminals can obtain IP addresses from the corresponding DHCP servers. and data service. It adopts different PVCs to differentiate the service traffic. more and more users demand high bandwidth for abundant services such as video service. voice service. the VoIP. refer to the chapter "Triple Play" in the Feature Description. and Internet services are transmitted over one cable to the MA5600 through the home gateway or the optical access modem in a centralized manner. and transmit packets of different terminals to different DHCP servers.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32. For details on the triple play service.1 Overview This section describes the description and specifications of the triple play service. 32-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The MA5600 can identify different DHCP option60 domains. In this way. The DHCP option60 domain is used to identify different terminals. IPTV. l Table 32-1 shows the modes supported by the MA5600 to provide the triple player service. Point-to-Point over Ethernet (PPPoE) is used for Internet service access. In the triple play application. Service Description With the rapid development of the broadband services. Service Specifications The MA5600 can support the triple play service. Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-3 .2 Configuration Example of Triple Play .1p value: It differentiates the service based on the 802. Prerequisite Before configuring the triple play service. 32. The user packets are mapped to different upstream VLANs.Multiple PVCs for Multiple Services This example shows how to configure the triple play service . The user packets are labeled with different upstream VLAN IDs. The PVC resources are saved. All kinds of boards of the device run in the normal state.1p value of the user packets. Networking Figure 32-1 shows a sample network for configuring the triple play service-multiple PVCs for multiple services. make sure that: l l The network devices and lines are normal. The user packets are labeled with different upstream VLAN IDs. l When it differentiates the service traffic based on the userside 802. l When it differentiates the service traffic based on user-side VLAN: It differentiates the service traffic based on the VLAN ID contained in the packets sent from the user port PVC. l When it differentiates the service traffic based on user-side encapsulation type: It differentiates the service traffic based on the encapsulation type (IPoE/PPPoE) of the user packets sent from the user port PVC.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Mode Single PVC for multiple services Description It is unnecessary to configure the existing modem. and the previous VLAN IDs in the user packets are removed.multiple PVCs for multiple services. Data Plan Table 32-2shows the data plan for configuring the triple play service -multiple PVCs for multiple services.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 32-1 Sample network for configuring the triple play service -multiple PVCs for multiple services Multicase sever I Internet NM S OSS & RADIUS server/ RADIUS proxy TG IP Softswitch BRAS LAN switch A A D D E E F F IPTV DHCP server Router VoIP DHCP server CON ETH GE0/7/0 SCU MA5600 HG 1 DHCP PPPoE DHCP STB DHCP HG 2 PPPoE DHCP STB IP Phone PC TV IP Phone PC TV In Figure 32-1. Table 32-2 Data plan for configuring the triple play service -multiple PVCs for multiple services Item ADGE board Data Downstream ports 0/2/0 and 0/2/1. Internet: VPI/VCI 0/37 VoIP: VPI/VCI 0/36 32-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . both user 1 (home gateway 1) and user 2 (home gateway 2) adopt triple play networking. The ports use the default line profile. IPTV: DHCP option60 domain of STB video. Gateway 10.2. User 1 connected to port 0/2/0 can watch all programs. IP addresses of DHCP server group: 20. The IPTV and VoIP services coexist. bind upstream port0/7/0 with VLAN 4. Context l DHCP option60 domain value of the Set Top Box (STB) and Ethernet Phone (Ephone) varies with the terminals.2 and 20. bind upstream port 0/7/0 with VLAN 4.1. and bind different DHCP domains and DHCP-server groups to the VLAN to decide how to allocate IP addresses. Ensure that before configuring triple play service.2.1.1.1. IPTV 5.1. DHCP server group 2. In the actual application. That is.1.2. Program library Program BTV-1. Huawei Technologies Proprietary 32-5 l l l Issue 04 (2007-11-30) .1.2.3. profile 0 has the authority to watch BTV-1. Run the dhcp domain command to set the DHCP domain name. DHCP server group 1. when the VoIP and the IPTV services are used in a same VLAN. Internet 1.1. you need to add the service ports of the VoIP and the IPTV services to the same VLAN. multicast address 224.2 and 20. IP addresses of DHCP server group: 20.1.1. configure the master/slave IP address for the VLAN.1. refer to the user guides of the STB and the Ephone. multicast address 224. Priority 802.1p priority: VoIP 6.1. Authority profile IGMP user Profile 0.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Item Data IPTV: VPI/VCI 0/35 Traffic profile CAR value Internet: 1 Mbit/s VoIP: 1 Mbit/s IPTV: no restriction Uplink port VLAN 0/7/0 Internet: smart VLAN 2 VoIP: smart VLAN 3 IPTV: smart VLAN 4 DHCP VoIP: DHCP option60 domain voice. the service board and the upstream board have been added correctly.3. The configured domain name is a character string containing no space. In the configuration process.2.2. User 2 connected to port 0/3/0 can watch program BTV-1 only. gateway 10. Program BTV-2. the VLAN is configured with two gateway.2. IPTV and Internet services are transmitted through the same port. huawei(config)#vlan 2 smart huawei(config)#port vlan 2 0/7 0 2. In this example. the VoIP service has the highest priority. you need to make sure that the DHCP servers used by the VoIP and IPTV services interconnect with the DHCP L3 interface. Configure the traffic profile.32 Configuring the Triple Play Service l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide In the configuration process. huawei(config)#traffic table index 7 ip car 1024 priority 1 prioritypolicy pvc-Setting 32-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Configuration Flowchart Figure 32-2 shows the flowchart for configuring the triple play service-multiple PVCs for multiple services. Because VoIP.1p priority for each service. and the priority of the Internet service as 1. set the traffic profile index as 7. 1. when the VoIP and IPTV services are used in different VLANs (this configuration example considers this condition as an example). Configure the VLAN and the upstream port. In general. it is necessary to set the 802. Figure 32-2 Flowchart for configuring the triple play service-multiple PVCs for multiple services Start Internet Select service type VoIP Configure the VLAN and its upstream port Configure the traffic profile IPTV Configure the VLAN and its upstream port Configure the traffic profile Configure the VLAN and its upstream port Configure the traffic profile Configure the service port Configure the service port Configure the service port Configure DHCP Relay Configure DHCP Relay Configure IGMP Proxy End Procedure l Configure Internet service. and the Internet service has the lowest priority. 1. Configure the traffic profile.1. In this example.1. huawei(config)#service-port vlan 2 adsl 0/2/0 vpi 0 vci 37 rx-cttr 7 txcttr 7 huawei(config)#service-port vlan 2 adsl 0/3/0 vpi 0 vci 37 rx-cttr 7 txcttr 7 4. huawei(config)#save Configure IPTV service. huawei(config-if-vlanif3)#quit 5. huawei(config)#traffic table index 8 ip car 1024 priority 6 prioritypolicy pvc-Setting 3. huawei(config)#vlan 3 smart huawei(config)#port vlan 3 0/7 0 2.1 3 //The IP addresses of the DHCP server used by the VoIP service are 20. set the DHCP option60 domain of the VoIP service as voice. Create the VLAN and its upstream port. and the priority of the VoIP service as 6.2 is configured.1.1. Add the service port to the VLAN. and use the traffic profile created in the previous step. huawei(config)#dhcp domain voice //Please refer to the actual domain value of the DHCP option 60 huawei(config-dhcp-domain-voice)#dhcp-server 1 huawei(config-dhcp-domain-voice)#quit huawei(config)#interface vlanif 3 huawei(config-if-vlanif3)#ip address 10. l Save the data.2 and 20.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service 3. The master IP address 20. Configure DHCP relay. Set the traffic profile index as 8.1.1.1. Configure the service port.1. The IP address of the DHCP server can be either a master IP address or a slave IP address. 1. 1. The DHCP option60 domain is used to differentiate the service type. Create the VLAN and its upstream port. huawei(config)#save Configure VoIP service. Add the service port to the VLAN and use the traffic profile created in the previous step. Issue 04 (2007-11-30) Configure the traffic profile. the master IP address 20. Configure the service port. The VoIP service and the video service adopt DHCP mode.3 must interconnect with the DHCP L3 interface.3.1.1.1.2 20.1. huawei(config)#vlan 4 smart huawei(config)#port vlan 4 0/7 0 2. huawei(config)#service-port vlan 3 adsl 0/2/0 vpi 0 vci 36 rx-cttr 8 txcttr 8 huawei(config)#service-port vlan 3 adsl 0/3/0 vpi 0 vci 36 rx-cttr 8 txcttr 8 4.1.1.1.1. Huawei Technologies Proprietary 32-7 .1 24 huawei(config-if-vlanif3)#dhcp domain voice gateway 10.1 //The IP address of the DHCP L3 interface is 10. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 1 ip 20.1. In this example. l Save the data. the multicast proxy and programs need to be set.1 vlan 4 bind 0/7/0 huawei(config-btv)#igmp program add name BTV-2 ip 224.2.1.2.2. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 2 ip 20. huawei(config)#dhcp domain video //Please refer to the actual domain value of the DHCP option 60 huawei(config-dhcp-domain-video)#dhcp-server 2 huawei(config-dhcp-domain-video)#quit huawei(config)#interface vlanif 4 huawei(config-if-vlanif4)#ip address 10. Configure the service port. 5.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide In this example. The IP address of the DHCP server can be either a master IP address or a slave IP address. In this example. To provision video service. huawei(config)#service-port vlan 4 adsl 0/2/0 vpi 0 vci 35 rx-cttr 9 txcttr 9 huawei(config)#service-port vlan 4 adsl 0/2/1 vpi 0 vci 35 rx-cttr 9 txcttr 9 4.3. In this example.2.3 //The IP addresses of the DHCP server used by the VoIP service are 20.2 20.1 //The IP address of the DHCP L3 interface is 10.1.2. set the traffic profile index as 9 and the priority of IPTV service as 5.2 vlan 4 bind 0/7/0 huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1 watch huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 no-auth huawei(config-btv)#igmp user add port 0/2/1 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/1 profile-name profile0 6.3 must interconnect with the DHCP L3 interface.1 24 huawei(config-if-vlanif4)#dhcp domain video gateway 10.1.2. Add the service port to the VLAN and use traffic profile 9.2.1.2.2. the priority of the multicast packets borne by the PVC takes no effect. Configure the multicast data.2.2 and 20.2 is configured.2. huawei(config-if-vlanif4)#quit huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 4 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv)#igmp mode proxy huawei(config-btv)#igmp uplink-port-mode program huawei(config－btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp program add name BTV-1 ip 224.2.1.2. ----End 32-8 Save the data. CAUTION On the MA5600. huawei(config)#save Huawei Technologies Proprietary Issue 04 (2007-11-30) .2. if the PVC is configured with priority.2. set the DHCP option60 domain of the IPTV as video. huawei(config)#traffic table index 9 ip car off priority 5 priority-policy pvc-Setting 3. the master IP address 20.2. Configure DHCP relay.2. The slave IP address 20.2. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Result After the configuration. make sure that: l l The network devices and lines are normal.Based on the User-Side VLAN This example shows how to configure the triple play service .single PVC for multiple services (based on the user-side VLAN). All kinds of boards of the device run in the normal state.3 Configuration Example of Triple Play . Networking Figure 32-3 shows a sample network for configuring the triple play service . 32. The IPTV user connected to port 0/2/0 can watch all programs. the triple play service (Internet. Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-9 . VoIP and IPTV) is available. Prerequisite Before configuring the triple play service.single PVC for multiple services. The VoIP user can make VoIP phones. and the user connected to port 0/2/1 can watch program1 only. l l l The Internet user can realize dial-up access to the Internet in the PPPoE mode. both user1 (home gateway 1) and user2 (home gateway 2) adopt the triple play networking. Table 32-3 Data plan for configuring the triple play service . The ports use the default line profile. Data Plan Table 32-3 shows the data plan for configuring the triple play service .single PVC for multiple services.single PVC for multiple services Item ADGE board Data Service port 0/2/0 and 0/3/0.single PVC for multiple services Multicast Server Internet TG IP Softswitch BRAS LAN Switch A A D D G G G G OSS & RADIUS Server/ RADIUS Proxy NMS IPTV DHCP Server Router VoIP DHCP Server CON ETH GE0/7/0 SCU MA5600 Home gateway 1 DHCP PPPoE DHCP STB DHCP Home gateway 2 PPPoE DHCP STB IP Phone PC TV IP Phone PC TV In the Figure 32-3.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 32-3 Sample network for configuring the triple play service . VPI/VCI: 0/35 32-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . User 2 connected to port 0/3/0 can watch program BTV-1 only. Internet 1. profile 0 can watch program BTV-1 in the program library. Program library Program BTV-1.2.1.2. the service traffic is differentiated based on the user-side VLAN.single PVC for multiple services.1.2.1.3.1. Authority profile IGMP user Profile 0. Program BTV-2. gateway 10. refer to the user guides of the STB and the Ephone.1.2.2. bind upstream port 0/7/0 and VLAN 4. Context l l l DHCP option60 domain value of the STB and Ephone varies with the terminals. gateway 10.1p priority: VoIP 6.1. make sure that the service boards and the upstream board are added correctly.1.3.1. Run the dhcp domain command to set the DHCP domain name. The configured domain name is a character string containing no space. Priority 802. IP addresses are 20. bind upstream port 0/7/0 with VLAN 4. IPTV 5.1. User 1 connected to port 0/2/0 can watch all programs.1.2. multicast address 224.2 and 20.1.1.2 and 20.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Item Traffic profile CAR value Data Internet: 1 Mbit/s VoIP: 1 Mbit/s IPTV: no restriction Upstream port Upstream VLAN 0/7/0 Internet: smart VLAN 102 VoIP: smart VLAN 103 IPTV: smart VLAN 104 User-side VLAN Internet: smart VLAN 2 VoIP: smart VLAN 3 IPTV: smart VLAN 4 DHCP VoIP: DHCP option60 domain voice. Figure 32-4 shows the flowchart for configuring the triple play service . Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-11 . Configuration Flowchart NOTE In this configuration. Before configuring the triple play services. DHCP server group 2.1. DHCP server group 1. In the actual application.2. IPTV: DHCP option60 domain for STB video. multicast address 224. IP addresses are 20. huawei(config)#service-port vlan 102 adsl 0/2/0 vpi 0 vci 35 multi-service user-vlan 2 rx-cttr 7 tx-cttr 7 huawei(config)#service-port vlan 102 adsl 0/3/0 vpi 0 vci 35 multi-service user-vlan 2 rx-cttr 7 tx-cttr 7 4. Configure the traffic profile. huawei(config)#save 32-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Figure 32-4 Flowchart for configuring the triple play service . In this example. Add the service port to the VLAN and use the traffic profile created in the previous step. it is necessary to set the 802.1p priority for each service. Save the data. Configure the VLAN and its upstream port. Configure the service port.single PVC for multiple services Start Internet Selet service type VoIP Configure the VLAN and upstream port Configure the traffic profile IPTV Configure the VLAN and upstream port Configure the traffic profile Configure the VLAN and upstream port Configure the traffic profile Configure the virtual port Configure the virtual port Configure the virtual port Configure DHCP Relay Configure DHCP Relay Configure IGMP Proxy End Procedure l Configure Internet service. and the Internet service has the lowest priority. and Internet services are transmitted through the same port. huawei(config)#vlan 102 smart huawei(config)#port vlan 102 0/7 0 2. and the priority of the Internet service as 1. 1. Because the VoIP. the VoIP service has the highest priority. set the traffic profile index as 7. huawei(config)#traffic table index 7 ip car 1024 priority 1 prioritypolicy pvc-Setting 3. IPTV. In general. set the DHCP option60 domain of the VoIP service as voice. the priority of IPTV service as 5. huawei(config)#save Configure IPTV service. Configure the service port. huawei(config)#service-port vlan 104 adsl 0/2/0 vpi 0 vci 35 multi-service user-vlan 4 rx-cttr 9 tx-cttr 9 huawei(config)#service-port vlan 104 adsl 0/3/0 vpi 0 vci 35 multi-service user-vlan 4 rx-cttr 9 tx-cttr 9 Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-13 . Set the traffic profile index as 8 and the priority of the VoIP service as 6. l Save the data.1 24 huawei(config-if-Vlanif103)#dhcp domain voice gateway 10.2 20. 1.1. huawei(config)#traffic table index 9 ip car off priority 5 priority-policy pvc-Setting 3. set the traffic profile index as 9. Add the service port to the VLAN and use the traffic profile created in the previous step. The VoIP service and the video service adopt DHCP mode. huawei(config)#service-port vlan 103 adsl 0/2/0 vpi 0 vci 35 multi-service user-vlan 3 rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 103 adsl 0/3/0 vpi 0 vci 35 multi-service user-vlan 3 rx-cttr 8 tx-cttr 8 4. huawei(config)#traffic table index 8 ip car 1024 priority 6 prioritypolicy pvc-Setting 3.1. Configure the traffic profile. Configure the VLAN and its upstream port.1 3 huawei(config)#dhcp domain voice huawei(config-dhcp-domain-voice)# dhcp-server 1 huawei(config)#interface vlanif 103 huawei(config-if-Vlanif103)#ip address 10. huawei(config)#vlan 104 smart huawei(config)#port vlan 104 0/7 0 2. huawei(config)#vlan 103 smart huawei(config)#port vlan 103 0/7 0 2. In this example.1.1 5. 1. The DHCP option60 domain is used to differentiate the service type. Configure DHCP relay. Configure the service port.1. In this example. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 1 ip 20. Add the service port to the VLAN and use the traffic profile created in the previous step.1. Configure the traffic profile.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service l Configure VoIP service.1. Configure the VLAN and its upstream port.1. huawei(config-if-vlanif104)#quit huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 104 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv))#igmp mode proxy huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp program add name BTV-1 ip 224.3 huawei(config)#dhcp domain video huawei(config-dhcp-domain-video)#dhcp-server 2 huawei(config-dhcp-domain-video)#quit huawei(config)#interface vlanif 104 huawei(config-if-vlanif104)#ip address 10. set the DHCP option60 domain of the IPTV service as video. To provision the IPTV service. In this example. VoIP and IPTV) is available.2 vlan 104 bind 0/7/0 huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1 watch huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 user-vlan 4 no-auth max-program 8 huawei(config-btv)#igmp user add port 0/3/0 adsl 0 35 user-vlan 4 auth huawei(config-btv)#igmp user bind-profile port 0/3/0 profile-name profile0 6. Set multicast data.1. the multicast proxy and programs need to be set.1p This operation shows how to configure the triple play service by means of single PVC for multiple services based on 802.2. l l l The Internet user can realize dial-up access to the Internet in PPPoE mode.1p. 4. 32-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . the priority of the multicast packets borne by the PVC takes no effect.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide CAUTION On the MA5600. ----End Save the data.2. The VoIP user can make VoIP phones. The IPTV user connected to port 0/2/0 can watch all programs. 32.Based on 802.2.4 Configuration Example of Triple Play .1 24 huawei(config-if-vlanif104)#dhcp domain video gateway 10.1.2. huawei(config)#save Result After the configuration.1.1. Configure DHCP relay.2.1 vlan 104 bind 0/7/0 huawei(config-btv)#igmp program add name BTV-2 ip 224. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 2 ip 20.1 5.2. if the PVC is configured with priority.2. The user connected to port 0/3/0 can watch program BTV-1 only.2. the triple play service (Internet.2 20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-15 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Prerequisite Before configuring the triple play service. Networking Figure 32-5 shows a sample network for configuring the triple play service by means of single PVC for multiple services. both user 1 (home gateway 1) and user 2 (home gateway 2) adopt the triple play networking. All boards are in the normal state. make sure that: l l The network device and the line are in the normal state. Figure 32-5 Sample network for configuring the triple play service by means of single PVC for multiple services Multicast Server Internet TG IP Softswitch BRAS LAN Switch A A D D G G G G OSS & RADIUS Server/ RADIUS Proxy NMS IPTV DHCP Server Router VoIP DHCP Server CON ETH GE0/7/0 SCU MA5600 Home gateway 1 DHCP PPPoE DHCP STB DHCP Home gateway 2 PPPoE DHCP STB IP Phone PC TV IP Phone PC TV In Figure 32-5. Table 32-4 Data plan for configuring the triple play service by means of single PVC for multiple services Item ADGE Data Service ports 0/2/0 and 0/3/0 applies the default line profile.1.2.3 Program library Program BTV-1. 32-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1.1.1.1.2.3 IPTV: l l l l DHCP option60 domain of STB: video Gateway: 10.1. Authority profile Profile 0: Profile 0 has the authority to watch program BTV-1.1 DHCP server group: 1 IP addresses of DHCP server group 1: 20.2.2.1. bind upstream port 0/7/0 with VLAN 4.2 and 20. multicast address 224.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Data Plan Table 32-4 shows the data plan for configuring the triple play service by means of single PVC for multiple services.2. bind upstream port 0/7/0 and VLAN 4.1.2. Program BTV-2.1.1p Internet service: 2 VoIP service: 3 IPTV service: 4 DHCP VoIP: l l l DHCP option60 domain: voice gateway: 10.1 DHCP server group: 2 IP addresses of DHCP server group 2: 20.1. multicast address 224.2. VPI/VCI: 0/35 Traffic profile CAR value Internet service: 1 Mbit/s VoIP service: 1 Mbit/s IPTV service: not limited Upstream port Upstream VLAN 0/7/0 Internet service: smart VLAN 102 VoIP service: smart VLAN 103 IPTV service: smart VLAN 104 User VLAN Internet service: smart VLAN 2 VoIP service: smart VLAN 3 IPTV service: smart VLAN 4 User-side 802.2 and 20.1. The domain name is a character string containing no space. make sure that service boards and the upstream board have been added correctly. In the actual application. Figure 32-6 Flowchart for configuring the triple play service-single-PVC for multi-service Start Internet Selet service type VoIP Configure the VLAN and upstream port Configure the traffic profile IPTV Configure the VLAN and upstream port Configure the traffic profile Configure the VLAN and upstream port Configure the traffic profile Configure the virtual port Configure the virtual port Configure the virtual port Configure DHCP Relay Configure DHCP Relay Configure IGMP Proxy End Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-17 . User2: Port 0/3/0 can watch only BTV-1. Run the dhcp domain command to set the DHCP domain name.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Item IGMP user Data User1: Port 0/2/0 can watch all the programs.1p priority: l l l VoIP: 6 IPTV: 5 Internet: 1 Context l l l DHCP option60 domain value of the STB and IP phone varies with the terminals. Priority 802. the service traffic is differentiated based on the user-side VLAN. Figure 32-6 shows the flowchart for configuring the triple play service-single-PVC for multiservice. Configuration Flowchart NOTE In this configuration. refer to the user guides of the STB and the IP phone. Before configuring the service. 32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure l Configure the Internet service. set the DHCP option60 domain of the VoIP service as voice. and the priority of the Internet service as 1. 1. huawei(config)#traffic table index 8 ip car 1024 priority 6 prioritypolicy pvc-Setting 3.1. l Save the data. In this example. and the Internet service has the lowest priority. Because the VoIP. huawei(config)#vlan 102 smart huawei(config)#port vlan 102 0/7 0 2. huawei(config)#traffic table index 7 ip car 1024 priority 1 prioritypolicy pvc-Setting 3. Configure the service port. and Internet services are transmitted through the same port. huawei(config)#save Configure the VoIP service. Add the service port to the VLAN. 1. huawei(config)#service-port vlan user-8021p 3 user-vlan 3 rx-cttr huawei(config)#service-port vlan user-8021p 3 user-vlan 3 rx-cttr 103 adsl 0/2/0 vpi 0 vci 35 multi-service 8 tx-cttr 8 103 adsl 0/3/0 vpi 0 vci 35 multi-service 8 tx-cttr 8 4.1p priority for each service. the VoIP service has the highest priority.1. huawei(config)#vlan 103 smart huawei(config)#port vlan 103 0/7 0 2.2 20. Configure the service port. Configure the VLAN and its upstream port. and use the traffic profile created in the previous step. Add the service port to the VLAN. it is necessary to set the 802. huawei(config)#service-port vlan 102 adsl 0/2/0 vpi 0 vci 35 multi-service user-8021p 2 user-vlanuser-vlan 2 rx-cttr 7 tx-cttr 7 huawei(config)#service-port vlan 102 adsl 0/3/0 vpi 0 vci 35 multi-service user-8021p 2 user-vlan 2 rx-cttr 7 tx-cttr 7 4. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 1 ip 20.1 3 huawei(config)#dhcp domain voice // huawei(config-dhcp-domain-voice)#dhcp-server 1 huawei(config-dhcp-domain-voice)#quit huawei(config)#interface vlanif 103 32-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The VoIP service and VoIP service adopt DHCP mode. Configure the VLAN and its upstream port. IPTV. Configure the traffic profile.1. In general. In this example. and use the traffic profile created in the previous step. set the traffic profile index as 7. In this example. Configure the traffic profile. set the traffic profile index as 8 and the priority of the VoIP service as 6. The DHCP option60 domain is used to differentiate the service type. Set DHCP relay. 1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service huawei(config-if-vlanif103)#ip address 10. the multicast proxy and programs need to be set.2.1. Set DHCP relay. Set multicast data.1 vlan 104 bind 0/7/0 huawei(config-btv)#igmp program add name BTV-2 ip 224. set the DHCP optio60 domain of the IPTV service as video.1 huawei(config-if-vlanif103)#quit 5.2.2.2. huawei(config-if-vlanif104)#quit huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 4 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv))#igmp mode proxy huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp program add name BTV-1 ip 224. Configure the traffic profile. the priority of the multicast packets borne by the PVC takes no effect.2. Configure the service port. In this example.1.2 vlan 104 bind 0/7/0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-19 .2. Configure the VLAN and its upstream port.1. l Save the data. 1.3 huawei(config)#dhcp domain video huawei(config-dhcp-domain-video)# dhcp-server 2 huawei(config)#interface vlanif 104 huawei(config-if-vlanif104)#ip address 10. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 2 ip 20. Add the service port to the VLAN. huawei(config)#save Configure the IPTV service.1.1. huawei(config)#traffic table index 9 ip car off priority 5 priority-policy pvc-Setting 3. if the PVC is configured with priority.1 24 huawei(config-if-vlanif104)#dhcp domain video gateway 10.2 20.1.1.2. 4.1 5.1 24 huawei(config-if-vlanif103)#dhcp domain voice gateway 10. huawei(config)#service-port vlan 104 adsl 0/2/0 vpi 0 vci 35 multi-service user-8021p 4 user-vlan 4 rx-cttr 9 tx-cttr 9 huawei(config)#service-port vlan 104 adsl 0/3/0 vpi 0 vci 35 multi-service user-8021p 4 user-vlan 4 rx-cttr 9 tx-cttr 9 CAUTION On the MA5600. In this example. huawei(config)#vlan 104 smart huawei(config)#port vlan 104 0/7 0 2. set the traffic profile index as 9 and the priority of the VoIP service as 5. To provision the IPTV service.2. and use the traffic profile created in the previous step. Networking Figure 32-7 shows the sample network for configuring the triple play service . and IPTV) is available. VoIP users can set conversation to each other. l l l Internet users can access the Internet through PPPoE dial-up. The Internet service adopts the PPPoE mode. 32-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) .single PVC for multiple services (based on the service encapsulation type). huawei(config)#save Result After the configuration. Users connect to multiple terminals through the home gateway to implement multiple services. The MA5600 provides different QoS for the service streams based on the traffic priorities in the PVC.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1 watch huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 user-vlan 4 no-auth max-program 8 huawei(config-btv)#igmp user add port 0/3/0 adsl 0 35 user-vlan 4 auth huawei(config-btv)#igmp user bind-profile port 0/3/0 profile-name profile0 6.single PVC for multiple services (based on the service encapsulation type). The Internet. and the user connected at 0/3/0 can watch BTV-1 only. such as Internet. In this figure. VoIP. VoIP. both user 1 (home gateway 1) and user 2 (home gateway 2) adopt the triple play networking. VoIP and IPTV services. Prerequisite l l The network devices and lines are in the normal state. All boards of the device run in the normal state. ----End Save the data. and IPTV services use the same PVC to carry the service stream.5 Configuration Example of the Triple Play Service Based on the Service Encapsulation Type This operation enables you to configure the triple play service . The VoIP and IPTV services adopt the DHCP mode and obtain IP addresses in DHCP standard mode from the DHCP server. 32. the MA5600 differentiates the services based on the service encapsulation type. IPTV users: the user connected at port 0/2/0 can watch all the programs. the triple play service (Internet. After different service stream accesses the MA5600. Table 32-5 Data plan for configuring the triple play service .single PVC for multiple services (based on the service encapsulation type) Item ADGE Data Service ports 0/2/0 and 0/3/0 adopt the default line profile.single PVC for multiple services (based on the service encapsulation type).SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Figure 32-7 Sample network for configuring the triple play service . VPI/VCI: 0/35 CAR in the traffic profile Internet service: 1 Mbit/s VoIP service: 1 Mbit/s IPTV service: no restriction Uplink port Issue 04 (2007-11-30) 0/7/0 Huawei Technologies Proprietary 32-21 .single PVC for multiple services (based on the service encapsulation type) Multicase sever I Internet NM S OSS & RADIUS server/ RADIUS proxy TG IP Softswitch BRAS LAN switch A A D D E E F F IPTV DHCP server Router VoIP DHCP server CON ETH GE0/7/0 SCU MA5600 HG 1 DHCP PPPoE DHCP STB DHCP HG 2 PPPoE DHCP STB IP Phone PC TV IP Phone PC TV Data Plan Table 32-5 lists the data plan for configuring the triple play service . Program BTV-2. The priority of the Internet service is 1.1.2.1.2 and 20. and gateway is 10. Authority profile IGMP user Sets profile 0 with the authority to watch program BTV-1. Priority 802. The priority of the VoIP service is 6. The priority of the IPTV service is 5.2.1. with the multicast address of 224. User 1 connecting to port 0/2/0 can watch all programs. 32-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .3 Program library Program BTV-1. with the multicast address of 224.2.3 IPTV: DHCP option60 domain for the set top box (STB) is "video". It is bound with uplink port 0/7/0 and VLAN 4.1. and gateway is 10.2.2.2.1.2.32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Item Upstream VLAN Data Internet service: smart VLAN 102 VoIP service: smart VLAN 103 IPTV service: smart VLAN 104 Service encapsulatio n type DHCP Internet service: PPPoE VoIP service: IPoE IPTV service: IPoE VoIP: DHCP option60 domain is "voice".1 IP addresses of DHCP server group 2: 20.1.1.1 IP addresses of DHCP server group 1: 20.single PVC for multiple services (based on the service encapsulation type). User 2 connecting to port 0/3/0 can watch only program TV-1. It is bound with uplink port 0/7/0 and VLAN 4.1p priority is adopted. Configuration Flowchart Figure 32-8 shows the flowchart for configuring the triple play service .1.1.1.2 and 20.1. huawei(config)#traffic table index 7 ip car 1024 priority 1 prioritypolicy pvc-Setting 3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service Figure 32-8 Flowchart for configuring the triple play service . huawei(config)#vlan 102 smart huawei(config)#port vlan 102 0/7 0 2. and the Internet service has the lowest priority. In general. Save the data. set the traffic profile index as 7. the VoIP service has the highest priority. huawei(config)#save Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-23 . Since the VoIP. IPTV. it is necessary to set the 802. and the priority of the Internet service as 1. Configure the traffic profile. Add the service port to the VLAN. Configure a VLAN and add it to the uplink port. and Internet services are transmitted through the same port. huawei(config)#service-port vlan 102 adsl 0/2/0 vpi 0 vci 35 multi-service user-encp pppoe rx-cttr 7 tx-cttr 7 huawei(config)#service-port vlan 102 adsl 0/3/0 vpi 0 vci 35 multi-service user-encp pppoe rx-cttr 7 tx-cttr 7 4. 1. In this example.single PVC for multiple services (based on the service encapsulation type) Start Internet Select service type VoIP Configure the VLAN and its upstream port Configure the traffic profile IPTV Configure the VLAN and its upstream port Configure the traffic profile Configure the VLAN and its upstream port Configure the traffic profile Configure the service port Configure the service port Configure the service port Configure DHCP Relay Configure DHCP Relay Configure IGMP Proxy End Procedure l Configure the Internet service. and use the traffic profile created in the previous step. Add a service port to the VLAN.1p priority for each service. 32 Configuring the Triple Play Service SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l Configure VoIP service.1.1p priority of the VoIP service as 5. Configure the traffic profile.1 huawei(config-if-vlanif103)#quit 5. Set the traffic profile index as 8.1 24 huawei(config-if-vlanif103)#dhcp domain voice gateway 10. huawei(config)#traffic table index 9 ip car off priority 5 priority-policy pvc-Setting 3. Configure DHCP relay.1.1 3 huawei(config)#dhcp domain voice //Refer to the actual domain value of DHCP Option 60 huawei(config-dhcp-domain-voice)#dhcp-server 1 huawei(config-dhcp-domain-voice)#quit huawei(config)#interface vlanif 103 huawei(config-if-vlanif103)#ip address 10. In this example.1.1p priority of the VoIP service as 6. set the traffic profile index as 9 and the 802. set the DHCP domain of the VoIP service as "voice". huawei(config)#vlan 103 smart huawei(config)#port vlan 103 0/7 0 2. huawei(config)#service-port vlan 103 adsl 0/2/0 vpi 0 vci 35 multi-service user-encp ipoe rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 103 adsl 0/3/0 vpi 0 vci 35 multi-service user-encp ipoe 3 rx-cttr 8 tx-cttr 8 4. 1.1. l Save the data. Configure the traffic profile. Configure a VLAN and add it to the uplink port.1.2 20. huawei(config)#traffic table index 8 ip car 1024 priority 6 prioritypolicy pvc-Setting 3. Configure a VLAN and add it to the uplink port. In this example. huawei(config)#service-port 100 vlan 104 service user-encp ipoe rx-cttr 9 tx-cttr huawei(config)#service-port 101 vlan 104 service user-encp ipoe rx-cttr 9 tx-cttr adsl 0/2/0 vpi 0 vci 35 multi9 adsl 0/3/0 vpi 0 vci 35 multi9 32-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) . and the 802. Add a service port to the VLAN. and use the traffic profile created in the previous step. huawei(config)#save Configure IPTV service. huawei(config)#vlan 104 smart huawei(config)#port vlan 104 0/7 0 2. 1. Add the service port to the VLAN and use traffic profile 9. Add a service port to the VLAN. Add the service port to the VLAN. The voice and the video services adopt the DHCP access mode. The DHCP option60 domain is used to classify different service types.1. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 1 ip 20.1. 1.1 24 huawei(config-if-vlanif104)#dhcp domain video gateway 10.1 5.3 huawei(config)#dhcp domain video //Refer to the actual domain value of DHCP Option 60 huawei(config-dhcp-domain-video)# dhcp-server 2 huawei(config)#interface vlanif 104 huawei(config-if-vlanif104)#ip address 10.2.2.2.1. 4. if the PVC is configured with a priority.1. huawei(config)#save Result After the configuration. the triple play service (Internet.1 vlan 104 bind 0/7/0 huawei(config-btv)#igmp program add name BTV-2 ip 224.2.2. Set multicast data. l l l The Internet user can access the Internet in PPPoE dialup mode.2.1.2 20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 32-25 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 32 Configuring the Triple Play Service CAUTION On the MA5600. The IPTV user: The user connecting to port 0/2/0 can watch all the programs. and the user connecting to port 0/3/0 can watch only program BTV-1. ----End Save the data. the priority of the multicast packets carried by the PVC takes no effect. The VoIP user can make and receive phone calls.2 vlan 104 bind 0/7/0 huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1 watch huawei(config-btv)#igmp user add port 0/2/0 adsl 0 35 user-encp ipoe noauth max-program 8 huawei(config-btv)#igmp user add port 0/3/0 adsl 0 35 user-encp ipoe auth huawei(config-btv)#igmp user bind-profile port 0/3/0 profile-name profile0 6. VoIP and IPTV services) is available. huawei(config)#dhcp mode layer-3 option-60 huawei(config)#dhcp-server 2 ip 20.2. Configure DHCP relay. Set the DHCP relay data of the video service and set the DHCP option60 domain as "video".2. huawei(config-if-vlanif104)#quit huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 4 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv))#igmp mode proxy huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp program add name BTV-1 ip 224. . 8 Enabling the CFM Alarm Globally This operation enables the CFM alarm globally.5 Creating an MEP This operation enables you to create an Maintenance association End Point (MEP).3 Creating an MD This operation enables you to create an Maintenance Domain (MD). 33.1 Overview This chapter describes Ethernet Operation Administration & Maintenance (OAM) and its application to the MA5600. 33. Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-1 . 33.4 Creating an MA This operation enables you to create a Maintenance Association (MA). 33. 33.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM 33 About This Chapter Configuring the Ethernet OAM This chapter describes the Ethernet OAM technology and how to configure Ethernet OAM on the MA5600. 33.11 Enabling the Global Detection Function of an RMEP This operation enables the global detection function of a Remote Maintenance association End Point (RMEP). 33.6 Creating an RMEP This operation enables you to create a Remote Maintenance association End Point (RMEP).10 Enabling the CC Transmission of an MEP This operation enables the Continuity Check (CC) transmission of an MEP. 33.7 Enabling the CFM Globally This operation enables the Connectivity Fault Management (CFM) globally. 33.2 Configuration Example of Ethernet OAM This example shows how to configure the Ethernet OAM on the MA5600.9 Enabling the Administration Function of an MEP This operation enables the administration function of an MEP. 33. 33. 15 Configuring the Base Address of Multicast Destination MAC Addresses of CCMs/LTMs This operation enables you to configure the base address of multicast destination MAC addresses of CCMs/LTMs. To send CCMs/LTMs. 33. 33-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 33. This operation enables you to configure the loop detection function.12 Enabling RMEP Detection Function This operation enables the detection function of the RMEP. 33.16 Configuring Loop Detection Function Loopback Message (LBM) helps an MEP to locate a fault in an MA. 33. an MEP must be specified with a multicast address. 33. the multicast address is configurable to enhance the intercommunication and compatibility of the MA5600. Because the protocol does not specify the format of it.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33.13 Configuring Priorities for Transmitting CCMs/LTMs This operation enables you to configure priorities for transmitting Continuity Check Messages (CCMs)/LinkTrace Messages (LTMs) of an MEP.14 Configuring the Interval for an MA to Transmit a CC This operation enables you to configure the interval for an MA to transmit a CC.17 Configuring Linktrace Function LTMs are used to detect the Maintenance domain Intermediate Point (MIP) path between two MEPs. This operation enables you to configure an LTM. Figure 33-1 Sample network for configuring Ethernet OAM Router 0 / 7/ 0 MA5600_A 0 / 7 /1 MA5600_B Data Plan Table 33-1 lists the data plan for configuring Ethernet OAM. Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-3 . CFM defines the process for diagnosing a fault in an Ethernet domain. including connectivity check. NMS maintains the network based on the reported information on OAM status and alarms. CFM is a multipoint-tomultipoint application scenario and it provides end-to-end fault detection and diagnosis for the entire Ethernet network.2 Configuration Example of Ethernet OAM This example shows how to configure the Ethernet OAM on the MA5600. OAM starts from or terminates at the upstream network port. Networking Figure 33-1 shows a sample network for configuring Ethernet OAM. The MA5600 supports Ethernet OAM mechanism of CFM protocol. Service Specification IEEE P802. refer to the chapter "Ethernet OAM" in the Feature Description. 33. Service Description OAM is an effective method to reduce the cost on network maintenance and it connects to the access convergence network through the upstream network port. loop detection and link trace. For details on the Ethernet OAM protocol. You can perform OAM configuration management through NMS.1ag CFM provides an end-to-end fault detection method. including fault detection and diagnosis methods.1 Overview This chapter describes Ethernet Operation Administration & Maintenance (OAM) and its application to the MA5600.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM 33. Configuration Flowchart Figure 33-2 shows the flowchart for configuring Ethernet OAM. MEP-id: 2260. The router supports Ethernet OAM. CC-interval: 1m MA5600_B Port: 0/7/1 Smart VLAN: 200 MEP: 2/6/0. RMEP-id: 260. MEP-id: 260. make sure that: l l The network devices and the lines are normal. RMEP-id: 2260. 33-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . CC-interval: 1m Context Before configuring the Ethernet OAM.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 33-1 Data plan for configuring Ethernet OAM Item MA5600_A Data Port: 0/7/0 Smart VLAN: 100 MEP: 2/6/0. huawei(config)#cfm ma 2/6 name-format string huawei-6 vlan 100 Step 4 Configure an MEP. huawei(config)#cfm mep 2/6/0 mepid 260 direction outward port 0/7/0 priority 7 Step 5 Configure an RMEP. huawei(config)#vlan 100 smart huawei(config)#port vlan 100 0/7 0 Step 2 Configure an MD. huawei(config)#cfm remote-mep 2/6/0 remote-mepid 2260 Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-5 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM Figure 33-2 Flowchart for configuring Ethernet OAM Start Create and configure a VLAN Configure an MD Configure an MA Configure an MEP Configure a RMEP Set interval for the MA to transmit CCMs (Optional) Enable local CFM function globally Enable remote CFM function globally Save the data End Procedure Step 1 Create and configure a VLAN. huawei(config)#cfm md 2 name-format string huawei level 3 Step 3 Configure an MA. Procedure Step 1 Run the cfm md command to create an MD. ----End Result After the configuration. Context l Ethernet CFM provides a fault diagnosis process in an Ethernet domain. The administration domain of CFM comprises bridges while the maintenance domain is combined by bridges and maintenance levels. Multiple levels can exist on a bridge simultaneously to manage different MDs. huawei(config)#cfm remote-mep-detect enable Step 9 Save the data. provider domain and operator domain that use 7-5. huawei(config)#cfm ma 2/6 cc-interval 1m Step 7 Enable the local CFM globally. It divides the network into up to eight levels. huawei(config)#save NOTE Configuration on MA5600_B is the same as that on MA5600_A and it is not repeated here.3 Creating an MD This operation enables you to create an Maintenance Domain (MD). Of the statistics. TIP l l Huawei recommends classifying the administrator domain into three levels: customer domain. Up to three MDs can be created in the system. Step 2 Run the display cfm md command to query the configuration state of the MD. 4-3 and 2-0 levels respectively. huawei(config)#cfm enable Step 8 Enable the remote CFM globally. 33. ----End Example Assume that: l l MD index: 2 Name type: string Huawei Technologies Proprietary Issue 04 (2007-11-30) 33-6 .33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 6 (Optional) Set the interval for the MA to transmit CCMs. run the display cfm statistics mep command on the MA5600_A or MA5600_B and you can find packet statistics. neither "CCM Sent Pkt Num" nor "CCM Received Pkt Num" values zero. detection of the remote MEP in an MA is enabled. By default. ----End Example Assume that: Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-7 .. Context l The created MA must belong to an existing MD and associate with an existing VLAN. do as follows: huawei(config)#cfm md 2 name-format string huawei level 3 huawei(config)#display cfm md { <cr>|mdindex<U><0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l l 33 Configuring the Ethernet OAM Name: huawei Level: 3 To create the MD. The system supports 48 MAs and each MD can be configured with up to 48 MAs. l l l Procedure Step 1 Run the cfm ma command to create an MA... the interval for sending a CCM is 60s. undo cfm md Remarks The deleted MD must not be configured with any MA. The VLAN must not associate with any other MA. 33.2> }: Command: display cfm md ----------------------------------------------------------------------MD MD MD MD Index NameType Name Level ----------------------------------------------------------------------0 dns 1 7 1 dns feifei 6 2 string huawei 3 ----------------------------------------------------------------------Total: 3 Related Operation Table 33-2 lists the related operation for creating an MD. Table 33-2 Related operation for creating an MD To. Step 2 Run the display cfm md command to query the configuration state of the MA.4 Creating an MA This operation enables you to create a Maintenance Association (MA). Delete an MD Run the Command. By default.. ports on the MA5600 can function only as MEP. VLAN and maintenance level. Context l MA consists of Maintenance Points (MPs) and MP is defined to be on bridge ports. Only one MEP can be created within an MA. MEP initiates and responds to CFM messages while MIP does not initiate CFM messages but transparently transmits or responds to CFM messages. Moreover. Delete an MA Run the Command.33 Configuring the Ethernet OAM l l l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MA index: 2/47 MA name type: string MA name: huawei-ma-10 MA VLAN ID: 20 To create the MA. MP is a combination of bridge port. To create an MEP. undo cfm ma Remarks The deleted MA must not be configured with any MEP or RMEP. the priority of CFM message is 7 and the transmission of CCMs is enabled. You can configure only the created MA. the administrative state of MEP is enabled. Table 33-3 Related operations for creating an MA To. Huawei Technologies Proprietary Issue 04 (2007-11-30) l l l l l 33-8 . Configure the interval for an MA to send CCMs Enable the detection of remote MEP in an MA cfm ma cc-interval cfm ma remote-mep-detect enable 33. By default... do as follows: huawei(config)#cfm ma 2/10 name-format string huawei-ma-10 vlan 20 huawei(config)#display cfm ma 2/10 MA Index : 2/10 MA NameType : string MA Name : huawei-ma-10 MA VlanID : 20 MA CC Interval : 1m MA Remote-mep-detect : enable Related Operation Table 33-3 lists the related operations for creating an MA. the associated MD and MA must be created successfully.. on the VLAN that associates with the MA. MP can be an MEP or an MIP.5 Creating an MEP This operation enables you to create an Maintenance association End Point (MEP). Therefore.. there must be a port to be associated with the created MEP. Currently. ----End Example Assume that: l l l l l MEP index: 2/4/0 MEP ID: 100 MEP direction: outward MEP port: 0/15/0 MEP priority: 5 To create the MEP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM Procedure Step 1 Run the cfm mep command to create an MEP. do as follows: huawei(config)#cfm mep 2/4/0 mepid 100 direction outward port 0/15/0 priority 5 huawei(config)#display cfm mep 2/4/0 Command: MEP MEP MEP MEP MEP MEP MEP MEP display cfm mep 2/4/0 Index : 2/4/0 ID : 100 Direction : outward Port : 0/15/0 Admin Status : enable CC Status : enable Priority : 5 Alarm Status : - Related Operation Table 33-4 lists the related operation for creating an MEP. Context l l Unique MEP IDs must exist in an MA. A local MEP can be associated with up to six RMEPs... Huawei Technologies Proprietary 33-9 Issue 04 (2007-11-30) .6 Creating an RMEP This operation enables you to create a Remote Maintenance association End Point (RMEP).. Table 33-4 Related operation for creating an MEP To. undo cfm mep 33. Step 2 Run the display cfm mep command to query the configuration state of the MEP.. Delete an MEP Run the Command. Procedure Step 1 Run the cfm remote-mep command to create an RMEP. loop detection and linktrace are enabled. do as follows: huawei(config)#cfm remote-mep 2/4/5 remote-mepid 200 huawei(config)#display cfm ma 2/4 MA Index : 2/4 MA NameType : string MA Name : huawei-ma-4 MA VlanID : 50 MA CC Interval : 1m MA Remote-mep-detect : enable ----------------------------------------------------------------------MEP MEP MEP Admin CC Alarm Index MEPID Direction Port Status Status Priority Status ----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable enable 5 ----------------------------------------------------------------------Total: 1 ----------------------------------------------------------------------Remote MEP Remote MEP Remote MEP Index MEPID Mac-address ----------------------------------------------------------------------2/4/5 200 ----------------------------------------------------------------------Total: 1 Related Operation Table 33-5 lists the related operation for creating an RMEP... Delete an RMEP Run the Command. ----End Example To create an RMEP with remote-mepid 200 for local MEP 2/4/0.33 Configuring the Ethernet OAM l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MEPs that are mutually remote to each other must be in the same MA. the CFM packets are to be captured and the functions of Continuity Check. Context l When the CFM is enabled. Huawei Technologies Proprietary Issue 04 (2007-11-30) 33-10 ..7 Enabling the CFM Globally This operation enables the Connectivity Fault Management (CFM) globally. undo cfm remote-mep 33. Table 33-5 Related operation for creating an RMEP To.. Step 2 Run the display cfm ma command to query the configuration state of the MEP. do as follows: huawei(config)#cfm enable huawei(config)#display cfm { <cr>|md<K>|ma<K>|mep<K>|statistics<K> }: Command: display cfm CFM Global Status Remote-mep-detect Status Alarm Status CC/LT Base-mac-address : : : : enable disable enable 0180-c200-0100 Related Operation Table 33-6 lists the related operation for enabling the CFM globally.. the CFM is disabled. alarms detected by the CFM are reported. Step 2 Run the display cfm command to query the configuration state of the CFM. l Procedure Step 1 Run the cfm enable command to enable the CFM globally. Procedure Step 1 Run the cfm alarm enable command to enable the CFM alarm globally. When the CFM is disabled.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 33 Configuring the Ethernet OAM When the CFM is disabled. cfm disable 33.. alarms detected by the CFM are not reported. Context l l l When the CFM alarm is enabled. the CFM packets should not be captured and the functions of Continuity Check. Table 33-6 Related operation for enabling the CFM globally To. By default. Step 2 Run the display cfm command to query the configuration state of the CFM. By default. ----End Example To enable the CFM globally. the CFM alarm is enabled globally.8 Enabling the CFM Alarm Globally This operation enables the CFM alarm globally.. Disable CFM switch globally Run the Command. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-11 .. loop detection and linktrace are enabled. . do as follows: huawei(config)#cfm mep 2/4/0 enable huawei(config)#display cfm mep 2/4/0 Command: MEP MEP MEP MEP display cfm mep 2/4/0 Index : 2/4/0 ID : 100 Direction : outward Port : 0/7/0 33-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . By default. ----End Example To enable the administration function of MEP 2/4/0. Disable the CFM alarm globally Run the Command. l Procedure Step 1 Run the cfm mep enable command to enable the administration function of an MEP. cfm alarm disable 33. When the administrative function of an MEP is disabled.. the administration function of an MEP is enabled. do as follows: huawei(config)#cfm alarm enable huawei(config)#display cfm { <cr>|md<K>|ma<K>|mep<K>|statistics<K> }: Command: display cfm CFM Global Status Remote-mep-detect Status Alarm Status CC/LT Base-mac-address : : : : enable disable enable 0180-c200-0100 Related Operation Table 33-7 lists the related operation for enabling CFM alarm globally Table 33-7 Related operation for enabling CFM alarm globally To. Step 2 Run the display cfm mep command to query the configuration state of the MEP.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To enable the CFM alarm globally.9 Enabling the Administration Function of an MEP This operation enables the administration function of an MEP. the MEP is unable to send and receive CCMS. Context l MEP administrative state identifies the availability of MEP function... The loop detection function and linktrace functions are not permitted. Procedure Step 1 Run the cfm mep cc enable command to enable the CC transmission of an MEP. Table 33-8 Related operation for enabling the administration function of an MEP To. Disable the administration function of an MEP Run the Command. cfm mep disable 33... Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-13 . ----End Example To enable the CC transmission of MEP 2/4/0. the CC transmission of an MEP is enabled.10 Enabling the CC Transmission of an MEP This operation enables the Continuity Check (CC) transmission of an MEP. do as follows: huawei(config)#cfm mep huawei(config)#display MEP Index MEP ID MEP Direction MEP Port MEP Admin Status MEP CC Status MEP Priority MEP Alarm Status 2/4/0 cc enable cfm mep 2/4/0 : 2/4/0 : 100 : outward : 0/7/0 : enable : enable : 5 : - Related Operation Table 33-9 lists the related operation for enabling the CC transmission of an MEP...SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MEP MEP MEP MEP Admin Status CC Status Priority Alarm Status : : : : enable enable 5 - 33 Configuring the Ethernet OAM Related Operation Table 33-8 lists the related operation for enabling the administration function of an MEP. Step 2 Run the display cfm mep command to query the configuration state of the MEP. Context By default. . The global detection function of the RMEP is enabled. Context l The global detection function of an RMEP is used to avoid unnecessary alarm at the period of network CFM configuration. do as follows: huawei(config)#cfm remote-mep-detect enable huawei(config)#display cfm { <cr>|md<K>|ma<K>|mep<K>|statistics<K> }: Command: display cfm CFM Global Status : disable Remote-mep-detect Status : disable Alarm Status : enable CC/LT Base-mac-address : 0180-c200-0100 Related Operation Table 33-10 lists the related operation for enabling the global detection function of an RMEP. MEP of each administrative state is enabled.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 33-9 Related operation for enabling the CC transmission of an MEP To. By default. ----End Example To enable the global detection function of an RMEP.. Procedure Step 1 Run the cfm remote-mep-detect enable command to enable the global detection function of an RMEP. 33-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. the global detection function of an RMEP is disabled. The system detects the RMEP configured in the MA of the MEP. cfm mep cc disable 33.. and generates alarm on the CC packet loss and RDI. Disable the CC transmission of an MEP Run the Command.11 Enabling the Global Detection Function of an RMEP This operation enables the global detection function of a Remote Maintenance association End Point (RMEP). due to that the CFM function is enabled on each node at different times. The detection function of the remote MEP of the MA corresponding to each administrative state is enabled. Step 2 Run the display cfm command to query the configuration of the CFM. when the following four conditions are met: – – – – l l CFM is enabled globally. l l Procedure Step 1 Run the cfm ma remote-mep-detect enable command to enable the detection function of the RMEP. Disable the global detection function of an RMEP Run the Command. Context l When the detection function of the RMEP is enabled... the RMEP configured in the MA is not detected. When the detection function of the RMEP is disabled. Step 2 Run the display cfm ma command to query the configuration state of the MA. do as follows: huawei(config)#cfm ma 2/4 remote-mep-detect enable huawei(config)#display cfm ma 2/4 MA Index : 2/4 MA NameType : string MA Name : huawei-ma-4 MA VlanID : 50 MA CC Interval : 1m MA Remote-mep-detect : enable ----------------------------------------------------------------------MEP MEP MEP Admin CC Alarm Index MEPID Direction Port Status Status Priority Status ----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable enable 5 ----------------------------------------------------------------------Total: 1 ----------------------------------------------------------------------Remote MEP Remote MEP Remote MEP Index MEPID Mac-address ----------------------------------------------------------------------2/4/5 200 ----------------------------------------------------------------------Total: 1 Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-15 . Alarms are generated when the CC loss or RDI error occurs. By default.12 Enabling RMEP Detection Function This operation enables the detection function of the RMEP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM Table 33-10 Related operation for enabling the global detection function of an RMEP To. cfm remote-mep-detect disable 33. the RMEP configured in the MA is detected. ----End Example To enable the detection function of MA 2/4.. the detection function of the RMEP is enabled.. Context The priority for transmitting CCMs/LTMs of an MEP ranges 0-7.. cfm ma remote-mep-detect disable 33. ----End Example To set the priorities for transmitting CCMs/LTMs of MEP 2/4/0 to 3. Step 2 Run the display cfm mep command to query the configuration state of the MEP.13 Configuring Priorities for Transmitting CCMs/LTMs This operation enables you to configure priorities for transmitting Continuity Check Messages (CCMs)/LinkTrace Messages (LTMs) of an MEP. By default.. 33-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) .33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 33-11 lists the related operation for enabling detection function of the RMEP. Procedure Step 1 Run the cfm mep priority command to configure the priorities for transmitting CCMS/LTMs of an MEP. The smaller the priority value. Disable the detection of the RMEP Run the Command. the higher priority. do as follows: huawei(config)#cfm mep huawei(config)#display MEP Index MEP ID MEP Direction MEP Port MEP Admin Status MEP CC Status MEP Priority MEP Alarm Status 2/4/0 priority 3 cfm mep 2/4/0 : 2/4/0 : 100 : outward : 0/7/0 : enable : enable : 3 : - Related Operation Table 33-12 lists the related operation for configuring the priorities for transmitting CCMs/ LTMs of an MEP. Table 33-11 Related operation for enabling detection function of the RMEP To. the priority for transmitting CCMs/LTMs of an MEP is 7... SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM Table 33-12 Related operation for configuring the priorities for transmitting CCMs/LTMs of an MEP To. Step 2 Run the display cfm ma command to query the configuration state of the MA. Context l l By default. Prerequisite Before you configure the interval. the CC transmission state of MEPs in the MA must be disabled.. ----End Example To set the interval for an MA to send a CC to 10 minutes. the interval for an MA management entity to transmit a CC is 1 minute.14 Configuring the Interval for an MA to Transmit a CC This operation enables you to configure the interval for an MA to transmit a CC.. Enable the administration function of an MEP Run the Command. do as follows: huawei(config)#cfm ma 2/4 cc-interval 10m huawei(config)#display cfm ma 2/4 MA Index : 2/4 MA NameType : string MA Name : huawei-ma-4 MA VlanID : 50 MA CC Interval : 10m MA Remote-mep-detect : enable ----------------------------------------------------------------------MEP MEP MEP Admin CC Alarm Index MEPID Direction Port Status Status Priority Status ----------------------------------------------------------------------2/4/0 100 outward 0/7/0 enable disable 3 ----------------------------------------------------------------------Total: 1 ----------------------------------------------------------------------Remote MEP Remote MEP Remote MEP Index MEPID Mac-address ----------------------------------------------------------------------2/4/5 200 ----------------------------------------------------------------------Total: 1 Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-17 . cfm mep enable 33.. At present.. the MA5600 supports intervals of 1 minute and 10 minutes. Procedure Step 1 Run the cfm ma cc-interval command to configure the interval for an MA to transmit a CC. while that used by the MEP to LTMS match the MD level plus 8 (8–F).. To send CCMs/LTMs.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Related Operation Table 33-13 lists the related operation for configuring the interval for an MA to transmit a CC. the base multicast destination MAC address is 0180-C200-0000. ----End Example To configure the base multicast destination MAC address as 0180-C211-1110.. cfm mep cc { enable | disable } 33.15 Configuring the Base Address of Multicast Destination MAC Addresses of CCMs/LTMs This operation enables you to configure the base address of multicast destination MAC addresses of CCMs/LTMs. The multicast addresses used for sending the CCMs/LTMs are derived from the base multicast destination MAC address by changing the last digit of it. Procedure Step 1 Run the cfm base-mac-address command to configure the base multicast destination MAC address.. an MEP must be specified with a multicast address. The part of 0180-C2 is specified in the protocol and the part of xxx-xxx in the middle must be configured. Configure CC transmission state of an MEP Run the Command. Currently. Context l l By default. do as follows: huawei(config)#cfm base-mac-address 0180-C211-1110 huawei(config)#display cfm { <cr>|md<K>|ma<K>|mep<K>|statistics<K> }: Command: display cfm CFM Global Status Remote-mep-detect Status Alarm Status CC/LT Base-mac-address : : : : enable disable enable 0180-c211-1110 33-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . NOTE The base address of multicast destination MAC addresses refers to the addresses of MEPs in different MDs. The last digit of the multicast address used by MEP to send CCMs should be consistent with the MD level (0–7)to which it beglogs. Step 2 Run the display cfm command to query the configuration status of the CFM. the multicast address is configurable to enhance the intercommunication and compatibility of the MA5600. the format of the base MAC address is 0180-C2xx-xxx0.. Because the protocol does not specify the format of it. Table 33-13 Related operation for configuring the interval for an MA to transmit a CC To. The MEP at the source end generates an LBM and the index of destination MEP is added into the LBM. do as follows: huawei(config)#cfm loopback mep 2/4/0 dst-mac-address 0000-0000-0009 count 5 interval 10 priority 6 LBR Lost : Sequence-Num = 1 LBR Lost : Sequence-Num = 2 LBR Lost : Sequence-Num = 3 LBR Lost : Sequence-Num = 4 LB Operation: LBM-Sent = 4 . the priority of LBM is the same as that of CCM. Prerequisite Before enabling the MEP loop detection function.16 Configuring Loop Detection Function Loopback Message (LBM) helps an MEP to locate a fault in an MA. This operation enables you to configure the loop detection function. By generating an LBM.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM 33. l Procedure Step 1 Run the cfm loopback command to configure the loop detection function. the MEP activates the timer to calculate the time. ----End Example Assume that: l l l Count of LBMs: 5 Interval: 1000 ms Priority: 6 To configure that LBM from MEP 2/4/0 is sent to the equipment with the MAC address 0000-0000-0009. LBR-Received = 0 . Step 2 Run the display cfm statistics command to query the statistics of CFM. When the destination MEP receives the LBM. By default. The loopback is successful. you must enable the CFM function globally and enable the administrative state of the corresponding MEP. it sends a Loopback Reply (LBR) to the source MEP. LBR-Lost = 4 huawei(config)#display cfm statistics mep 2/4/0 Command: display cfm statistics mep 2/4/0 CCM Sent Pkt Num : 5037 CCM Received Pkt Num : 0 CCM Xcon Pkt Received Num : 0 CCM Error Pkt Received Num : 0 CCM Wrong Pattern Drop Num : 0 LBM Sent Pkt Num : 9 LBM Received Pkt Num : 0 LBM Wrong Pattern Drop Num : 0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-19 . the interval for sending LBMs is 1 x 100 ms. Context l LBM is a unicast message and the unicast MAC address is the address of MEP or MIP discovered by CC or linktrace (LT). the count of LBMs to be sent is 4. . But LTM is not multicasted and additional information on the message indicates the destination MAC address of the MEP.More ( Press 'Q' to break ) ---- Related Operation Table 33-14 lists the related operations for configuring loop detection function. In this way... Step 2 Run the display cfm statistics command to query the statistics of CFM packets.33 Configuring the Ethernet OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 0 0 0 0 0 0 0 0 0 0 0 0 LBM DstMac Mismatch Drop Num : LBR Sent Pkt Num : LBR Received Pkt Num : LBR Out of Order Num : LBR Wrong Pattern Drop Num : LBR Not Work Drop Num : LBR DstMAC Mismatch Drop Num : LBR SrcMAC Mismatch Drop Num : LBR Wrong TransID Drop Num : LBR Level Mismatch Drop Num : LTM Sent Pkt Num : LTM Received Pkt Num : ---. Configure linktrace function Enable administration function of CFM globally Enable the administration of an MEP Run the Command. ----End 33-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Before enabling the loop detection of an MEP.17 Configuring Linktrace Function LTMs are used to detect the Maintenance domain Intermediate Point (MIP) path between two MEPs. Context l An LTM is the message with a known multicast address. When the LTM is forwarded by MPs to the destination MEP in a unicast way. Table 33-14 Related operations for configuring loop detection function To. you must enable CFM function globally and enable the administration of the corresponding MEP. the priority of an LTM is the same as that of a CCM. the source MEP obtains the information on MPs along the transmission path and records the MAC addresses of these MPs. This operation enables you to configure an LTM. cfm link-trace cfm enable cfm mep enable 33. l l Procedure Step 1 Run the cfm link-trace command to configure Linktrace function. By default. each MP along the path responds an LTR to the source MEP.. Table 33-15 Related operations for configuring Linktrace function To. Configure loop detection function Enable administration of CFM globally Enable administration of an MEP Run the Command… cfm loopback cfm enable cfm mep enable Issue 04 (2007-11-30) Huawei Technologies Proprietary 33-21 ..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 33 Configuring the Ethernet OAM Example To set that LT packet from MEP 0/2/4 is sent to the equipment with MAC address 0000-0000-0001 and the priority is 6. do as follows: huawei(config)#cfm link-trace mep 2/4/0 dst-mac-address 0000-0000-0001 priority 6 huawei(config)#display cfm statistics mep 2/4/0 Command: display cfm statistics mep 2/4/0 CCM Sent Pkt Num : 5037 CCM Received Pkt Num : 0 CCM Xcon Pkt Received Num : 0 CCM Error Pkt Received Num : 0 CCM Wrong Pattern Drop Num : 0 LBM Sent Pkt Num : 9 LBM Received Pkt Num : 0 LBM Wrong Pattern Drop Num : 0 LBM DstMac Mismatch Drop Num : 0 LBR Sent Pkt Num : 0 LBR Received Pkt Num : 0 LBR Out of Order Num : 0 LBR Wrong Pattern Drop Num : 0 LBR Not Work Drop Num : 0 LBR DstMAC Mismatch Drop Num : 0 LBR SrcMAC Mismatch Drop Num : 0 LBR Wrong TransID Drop Num : 0 LBR Level Mismatch Drop Num : 0 LTM Sent Pkt Num : 1 LTM Received Pkt Num : 0 ---..More ( Press 'Q' to break ) ---- Related Operation Table 33-15 lists the related operations for configuring Linktrace function. . 34. 34.7 Switching Over Protection Group Manually This operation enables you to switch over the protection group manually.8 Enabling the Protection Group to Output the Debugging Information This operation enables the protection group to output the debugging information.1 Overview This section describes the MPLS OAM function and its applications on the MA5600. 34.4 Configuring the MPLS OAM Function of the Ingress This operation enables you to configure the MPLS OAM function of the ingress. 34. In this case.3 Configuration Example of MPLS OAM Protection Switchover This example shows how to configure MPLS OAM protection switchover. 34. 34. the traffic in the protection group can be switched over to the related channel.6 Configuring the Tunnel Protection Group This operation enables you to configure the tunnel protection group.5 Configuring the MPLS OAM Function of the Egress This operation enables you to configure the MPLS OAM function of the egress. 34. Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-1 . 34.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM 34 About This Chapter Configuring the MPLS OAM This chapter describes the MPLS OAM technology and how to configure the service on the MA5600.2 Configuration Example of Detection of MPLS OAM for Static LSP Connectivity This example shows how to configure the function of MPLS OAM to detect the static LSP connectivity. It provides the OAM mechanism independent of any upper or lower layer.2. The MPLS OAM mechanism is designed for this purpose. By the MPLS OAM mechanism. the system triggers the protection switchover.1. Figure 34-1 Sample network of detection of MPLS OAM for static LSP connectivity Tunnel 10 Tunnel-id 10 LSR-id 4.1 Overview This section describes the MPLS OAM function and its applications on the MA5600.1. When the fault occurs.2/32 34-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1/24 Router B 10. 34.2/24 10.1/24 LSR-id 1.4/32 10. it reports and handles the defects.4.3.1.2/24 10.1. Service Description Operation Administration & Maintenance (OAM) is a key method to reduce the network maintenance cost.4.4.1.2/24 MA5600_B LSR-id 2.2.3.1.1.1.2.1.1/24 MA5600_A Tunnel 20 Tunnel-id 20 Router A 10.34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34.1/32 10.1.2/24 LSR-id 3.4.1/24 10.1.1.3.2. Then.3. Service Specification MPLS supports multiple layer 2 (L2) and layer 3 (L3) protocols.2 Configuration Example of Detection of MPLS OAM for Static LSP Connectivity This example shows how to configure the function of MPLS OAM to detect the static LSP connectivity.3/32 10. Networking Figure 34-1 shows a sample network of detection of MPLS OAM for static LSP connectivity. the MA5600 detects and locates effectively the defects inside the network at the MPLS layer. 1.2.1.1.1/24 The static LSP passes Router A and targets MA5600_B.1/24 Prerequisite Before the configuration.1.4/32 IP address of the port connecting to MA5600_A: 10. After that.2/24 IP address of the port connecting to MA5600_B: 10.1/32 Port: 0/7/2 VLAN: 10 IP address of the port connecting to Router A: 10.4.1.3. LSRs can ping the peer LSRs.3.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM Data Plan Table 34-1 shows the data plan for detection of MPLS OAM for static LSP connectivity.1/24 Router B lsr-id: 4. make sure that: l l The network device and the line are in the normal state.4.1.4.3.1.2/24 The static LSP passes Router B and targets MA5600_A Router A lsr-id: 2.1.4.2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-3 .3/32 Port: 0/7/2 VLAN: 30 IP address of the port connecting to Router A: 10.1.2/24 Port: 0/7/3 VLAN: 31 IP address of the port connecting to Router B: 10.1.1. MA5600_B lsr-id: 3.2/24 IP address of the port connecting to MA5600_B: 10.2.1/24 Port: 0/7/3 VLAN: 11 IP address of the port connecting to Router B: 10.1. Set the IP addresses and the masks of the ports based on the sample network.2.3. Table 34-1 Data plan for detection of MPLS OAM for static LSP connectivity Item MA5600_A Data lsr-id: 1.2/32 IP address of the port connecting to MA5600_A: 10. MA5600_A(config)#mpls lsr-id 1.1. Enable the basic function of MPLS and the function of MPLS TE globally.1 24 MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#mpls te MA5600_A(config-if-vlanif10)#quit MA5600_A(config)#vlan 11 standard MA5600_A(config)#mpls vlan 11 MA5600_A(config)#port vlan 11 0/7 1 MA5600_A(config)#interface vlanif 11 34-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 1.1 MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls te MA5600_A(config-mpls)#quit 2. Configuration Flowchart Figure 34-2 shows the flowchart for detection of MPLS OAM for static LSP connectivity. Figure 34-2 Flowchart for detection of MPLS OAM for static LSP connectivity Start Enable the basic function of MPLS and MPLS TE function Configure the static LSP to be detected Configure the revertive tunnel static LSP Configure the MPLS OAM function of the ingress of the LSP Configure the MPLS OAM function of the egress of the LSP Save the data End Procedure Step 1 Enable the basic function of MPLS and the function of MPLS TE.34 Configuring the MPLS OAM l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configure the OSPF protocol on all MA5600 devices and routers.1.1. MA5600_A(config)#vlan 10 standard MA5600_A(config)#mpls vlan 10 MA5600_A(config)#port vlan 10 0/7 0 MA5600_A(config)#interface vlanif 10 MA5600_A(config-if-vlanif10)#ip address 10.1. and the configured routes are declared successfully. Enable the basic function of MPLS and the function of MPLS TE of the interface. 1 nexthop 10. and the egress is MA5600_B. The ingress is MA5600_A.1. MA5600_B(config)#static-lsp egress 200 incoming-interface vlanif 30 in-label 8210 Step 3 Configure the revertive tunnel static LSP.1.3 tunnel-id 10 MA5600_A(config)#mpls oam ingress enable all Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-5 . 1.3.2 out-label 20 3. Configure Router A as the intermediate node of the static LSP. MA5600_A(config)#interface tunnel 20 MA5600_A(config-if-tunnel20)#tunnel-protocol mpls te MA5600_A(config-if-tunnel20)#destination 3. MA5600_B(config)#static-lsp ingress tunnel-interface tunnel 10 destination 1.1 out-label 40 3. and the egress of the CR-LSP is MA5600_A.3. MA5600_B(config)#interface tunnel 10 MA5600_B(config-if-tunnel10)#tunnel-protocol mpls te MA5600_B(config-if-tunnel10)#destination 1. This procedure uses MA5600_A as an example Step 2 Configure the static LSP to be detected. 4. MA5600_A(config)#static-lsp egress 10 incoming-interface vlanif 10 in-label 8230 Step 4 Configure the MPLS OAM function of the ingress of the LSP to be detected. Configure MA5600_B as the egress of the static LSP. The configuration of the router is not described here.1. MA5600_A(config)#static-lsp ingress tunnel-interface tunnel 200 destination 3. 4. The intermediate node of the LSP is Router B.3. On MA5600_A.3 nexthop 10. with the ingress of MA5600_B.2.3. use the static LSP to configure the MPLS TE tunnel targeting MA5600_B.1. Configure MA5600_B as the ingress of the static LSP.1.3.4.1.1 MA5600_B(config-if-tunnel10)#mpls te tunnel-id 100 MA5600_B(config-if-tunnel10)#mpls te signal-protocol static MA5600_B(config-if-tunnel10)#mpls te commit MA5600_B(config-if-tunnel10)#quit 2. Configure MA5600_A as the egress of the static LSP.1. 1. use the static LSP to configure the MPLS TE tunnel that targets MA5600_A. The configuration of the router is not described here.3 MA5600_A(config-if-tunnel20)#mpls te tunnel-id 20 MA5600_A(config-if-tunnel20)#mpls te signal-protocol static MA5600_A(config-if-tunnel20)#mpls te commit MA5600_A(config-if-tunnel20)#quit 2. the intermediate node of the LSP is Router A. MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls oam MA5600_A(config-mpls)#quit MA5600_A(config)#mpls oam ingress tunnel 20 type ffd frequency 100 backward-lsp lsr-id 3.2. Configure Router B as the intermediate node of the static LSP.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MA5600_A(config-if-vlanif11)#ip address 10.3.1 24 MA5600_A(config-if-vlanif11)#mpls MA5600_A(config-if-vlanif11)#mpls te MA5600_A(config-if-vlanif11)#quit NOTE 34 Configuring the MPLS OAM The configuration of MA5600_A is the same as that of MA5600_B. On MA5600_B. Configure MA5600_A as the ingress of the static LSP. 1. Run the display mpls oam egress all command on MA5600_B and you can find that MA5600_B detects the fault.4/32 10.3.1.2.1.2. MA5600_B(config)#mpls MA5600_B(config-mpls)#mpls oam MA5600_B(config-mpls)#quit MA5600_B(config)#mpls oam egress lsp-name 20 type ffd frequency 100 backward-lsp tunnel 10 private MA5600_A(config)#mpls oam egress enable all Step 6 Save the data.4.2. MA5600_A(config)#save MA5600_B(config)#save ----End Result After the configuration. 34. Figure 34-3 Sample network of MPLS OAM protection switchover Tunnel 10 Tunnel-id 10 LSR-id 4.1.34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 5 Configure the MPLS OAM function of the egress of the LSP to be detected.1/24 MA5600_A Tunnel 20 Tunnel-id 20 10.1.2/24 LSR-id 3.1.2/32 34-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2/24 10.3 Configuration Example of MPLS OAM Protection Switchover This example shows how to configure MPLS OAM protection switchover.3.1.1.2.4.4.1.1/24 LSR-id 1. Networking Figure 34-3 shows a sample network of the MPLS OAM protection switchover.1.2/24 MA5600_B 10.1/32 10. run the shutdown command on Router A to disable the port connected to MA5600_B to simulate the link fault.3.1.3/32 LSR-id 2.3.1.1/24 10.4.1/24 Router B Tunnel 10 Tunnel-id 10 Router A 10.2/24 10. 2. LSRs can ping the peer LSRs.4.2/24 IP address of the port connecting to MA5600_B: 10.4/32 IP address of the port connecting to MA5600_A: 10. Huawei Technologies Proprietary 34-7 l Issue 04 (2007-11-30) .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM Data Plan Table 34-2 shows the data plan for the MPLS OAM protection switchover.4.1.2/24 Port: 0/7/3 VLAN: 31 IP address of the port connecting to Router B: 10.1/24 Router B lsr-id: 4.2.4. Otherwise.1. Set the IP addresses and the masks of the ports based on the sample network.2.1. Table 34-2 Data plan for the MPLS OAM protection switchover Item MA5600_A Data lsr-id: 1.1. and the configured routes are declared successfully. the static routes are configured.2/24 IP address of the port connecting to MA5600_B: 10.1.2/24 The revertive tunnel passes Router B and targets MA5600_A Router A lsr-id: 2.1.3.2/32 IP address of the port connecting to MA5600_A: 10.2.1. Configure the OSPF protocol on all MA5600 devices and routers.1/32 Port: 0/7/2 VLAN: 10 IP address of the port connecting to Router A: 10.1.4.3.1/24 Prerequisite l l The network device and the line are in the normal state.3. After that.1.3/32 Port: 0/7/2 VLAN: 30 IP address of the port connecting to Router A: 10.1/24 Port: 0/7/3 VLAN: 11 IP address of the port connecting to Router B: 10.3.1.1/24 The active tunnel passes Router A and targets MA5600_B The standby tunnel passes Router B and targets MA5600_B MA5600_B lsr-id: 3.1.1. 34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Configuration Flowchart Figure 34-4 shows the flowchart for configuring MPLS OAM protection switchover. RSVP-TE and CSPF Enable OSPF TE Configure the MPLS TE attributes of the link Configure the explicit path of MPLS TE Configure the MPLS TE tunnel Configure the tunnel protection group Configure the MPLS OAM function Save the data End Procedure Step 1 Enable the basic function of MPLS.1 MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls te MA5600_A(config-mpls)#mpls rsvp-te MA5600_A(config-mpls)#mpls te cspf MA5600_A(config-mpls)#quit 2. 1. RSVP-TE and CSPF.1. Enable the basic function of MPLS and the function of MPLS TE of the interface. and the function of MPLS TE globally. MA5600_A(config)#mpls lsr-id 1. and the functions of MPLS TE. MA5600_A(config)#vlan 10 standard MA5600_A(config)#mpls vlan 10 MA5600_A(config)#port vlan 10 0/7 0 MA5600_A(config)#interface vlanif 10 34-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Figure 34-4 Flowchart for configuring MPLS OAM protection switchover Start Enable the basic function of MPLS Enable the function of MPLS TE. Enable the basic function of MPLS.1. 1.1.0)#mpls-te enable standard-complying MA5600_A(config-ospf-100-area-0. This procedure uses MA5600_A as an example Step 4 Configure the explicit path of MPLS TE.1.4. On MA5600_A.2 include loose 2.4. MA5600_A(config)#interface vlanif MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#quit MA5600_A(config)#interface vlanif MA5600_A(config-if-vlanif11)#mpls MA5600_A(config-if-vlanif11)#mpls MA5600_A(config-if-vlanif11)#quit NOTE 10 te max-link-bandwidth 2048 te max-reservable-bandwidth 1024 11 te max-link-bandwidth 2048 te max-reservable-bandwidth 1024 The configuration of MA5600_A is the same as that of MA5600_B.1 include loose MA5600_B(config-explicit-path-2b1)#quit Step 5 Configure the MPLS TE tunnel.1.1. configure its explicit path to MA5600_A.1.1. This procedure uses MA5600_A as an example Step 2 Enable OSPF TE.1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-9 . MA5600_B(config)#explicit-path 1b2 enable MA5600_B(config-explicit-path-2b1)#next hop 10. configure its explicit path to MA5600_B.1.0)#quit NOTE The configuration of MA5600_A is the same as that of MA5600_B.2 include loose 10. MA5600_A(config)#explicit-path 1a2 enable MA5600_A(config-explicit-path-1a2)#next hop MA5600_A(config-explicit-path-1a2)#next hop MA5600_A(config-explicit-path-1a2)#quit MA5600_A(config)#explicit-path 1b2 enable MA5600_A(config-explicit-path-1b2)#next hop MA5600_A(config-explicit-path-1b2)#next hop MA5600_A(config-explicit-path-1b2)#quit 10.2. MA5600_A(config)#ospf 100 MA5600_A(config-ospf-100)#opaque-capability enable MA5600_A(config-ospf-100)#area 0 MA5600_A(config-ospf-100-area-0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MA5600_A(config-if-vlanif10)#ip address 10.0.1.2 include strict 10.1. 1. On MA5600_B. This procedure uses MA5600_A as an example Step 3 Configure the MPLS TE attributes of the link.0.2 include strict 10.1 24 MA5600_A(config-if-vlanif10)#mpls MA5600_A(config-if-vlanif10)#mpls te MA5600_A(config-if-vlanif10)#quit MA5600_A(config)#vlan 11 standard MA5600_A(config)#mpls vlan 11 MA5600_A(config)#port vlan 11 0/7 1 MA5600_A(config)#interface vlanif 11 MA5600_A(config-if-vlanif11)#ip address 10.3.2.0.1 24 MA5600_A(config-if-vlanif11)#mpls MA5600_A(config-if-vlanif11)#mpls te MA5600_A(config-if-vlanif11)#quit MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls rsvp-te MA5600_A(config-mpls)#mpls te cspf MA5600_A(config-mpls)#quit NOTE 34 Configuring the MPLS OAM The configuration of MA5600_A is the same as that of MA5600_B.1 include strict MA5600_B(config-explicit-path-2b1)#next hop 10.0. 3 MA5600_A(config-if-tunnel20)#mpls te tunnel-id 20 MA5600_A(config-if-tunnel2)#mpls te path explicit-path 1a2 MA5600_A(config-if-tunnel20)#mpls te signal-protocol rsvp-te MA5600_A(config-if-tunnel20)#mpls te bandwidth bc0 1500 MA5600_A(config-if-tunnel20)#mpls te commit MA5600_A(config-if-tunnel20)#quit 2. MA5600_A(config)#interface tunnel 10 MA5600_A(config-if-tunnel10)#tunnel-protocol mpls te MA5600_A(config-if-tunnel10)#destination 3. Configure the revertive tunnel from MA5600_B to MA5600_A.3. The intermediate node is Router B. On MA5600_A. Configure the standby tunnel from MA5600_A to MA5600_B.1. MA5600_B(config)#interface tunnel 10 MA5600_B(config-if-tunnel10)#tunnel-protocol mpls te MA5600_B(config-if-tunnel10)#destination 1. On MA5600_B.1. configure the MPLS OAM function of the egress.1. 1.3.3 MA5600_A(config-if-tunnel10)#mpls te tunnel-id 10 MA5600_A(config-if-tunnel10)#mpls te path explicit-path 1b2 MA5600_A(config-if-tunnel10)#mpls te signal-protocol rsvp-te MA5600_A(config-if-tunnel10)#mpls te bandwidth bc0 1500 MA5600_A(config-if-tunnel10)#mpls te commit MA5600_A(config-if-tunnel10)#quit 3. The intermediate node is Router A. MA5600_A(config)#interface tunnel 20 MA5600_A(config-if-tunnel20)#tunnel-protocol mpls te MA5600_A(config-if-tunnel20)#destination 3.34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 1. MA5600_B(config)#mpls MA5600_B(config-mpls)#mpls oam MA5600_B(config-mpls)#mpls oam egress lsr-id 1. Configure the active tunnel from MA5600_A to MA5600_B.3.1. configure the MPLS OAM function of the ingress.3 tunnel-id 10 MA5600_A(config)#mpls oam ingress enable all 2.3. The intermediate node is Router B.3.3.1 tunnel-id 20 type ffd frequency 100 backward-lsp tunnel 10 private MA5600_B(config-mpls)#mpls oam egress enable all MA5600_B(config-mpls)#quit Step 8 Save the data.1 MA5600_B(config-if-tunnel10)#mpls te tunnel-id 10 MA5600_B(config-if-tunnel10)#mpls te path explicit-path 2b1 MA5600_B(config-if-tunnel10)#mpls te signal-protocol rsvp-te MA5600_B(config-if-tunnel10)#mpls te bandwidth bc0 1500 MA5600_B(config-if-tunnel10)#mpls te commit MA5600_B(config-if-tunnel10)#quit Step 6 Configure the tunnel protection group. MA5600_A(config)#interface tunnel 20 MA5600_A(config-if-tunnel20)#mpls te protection tunnel 10 mode revertive wtr 30 MA5600_A(config-if-tunnel20)#mpls te commit MA5600_A(config-if-tunnel20)#quit Step 7 Configure the MPLS OAM function. MA5600_A(config)#mpls MA5600_A(config-mpls)#mpls oam MA5600_A(config-mpls)#quit MA5600_A(config)#mpls oam ingress tunnel 20 type ffd frequency 100 backward-lsp lsr-id 3. MA5600_A(config)#save MA5600_B(config)#save ----End 34-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Context l By default. to enable the MPLS OAM protection function for LSP tunnel 10. After the MPLS OAM function is enabled globally. enable the OAM function of the ingress first. and you can find that MA5600_B detects the fault and implements protection based on the configuration.80.80. Run the display mpls oam egress all command on MA5600_B. Therefore. l l l Procedure Step 1 Run the mpls command to switch over to MPLS mode. After the MPLS OAM parameters are set. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls oam huawei(config-mpls)#quit huawei(config-mpls)#mpls oam ingress tunnel 10 type ffd frequency 100 backward-lsp lsr-id 80.80 tunnel-id 20 huawei(config)#mpls oam ingress enable all huawei(config)#display mpls oam ingress { all<K>|Tunnel<K> }:all { <cr>|verbose<K>|slot<K> }: Command: display mpls oam ingress all Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-11 . the egress generates alarms.4 Configuring the MPLS OAM Function of the Ingress This operation enables you to configure the MPLS OAM function of the ingress. the parameters of the MPLS OAM of the egress must be the same as those of the ingress. the sources of all MPLS OAM are enabled.80. ----End Example Assume that the detection type is FFD. the ID of the reverse tunnel is 20. the MPLS OAM function is disabled globally. run the shutdown command on Router A to disable the port connected to MA5600_B to simulate the link fault. Step 4 In global config mode. you can configure the MPLS OAM instance. you must enable it before configuring the MPLS OAM function of the ingress. run the mpls oam command to enable the MPLS OAM function globally. run the display mpls oam ingress command to query the instance of the source MPLS OAM of the LSP. run the mpls oam ingress enable command to enable the MPLS OAM function of the ingress. the detection frequency is 100 ms.80. For a same LSP. run the mpls oam ingress command to set the MPLS OAM parameters of the ingress.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM Result After the configuration. 34. Step 2 In MPLS mode.80. Otherwise. Step 3 In global config mode. the LSR ID of the reverse tunnel is 80. Step 5 In global config mode. 5 Configuring the MPLS OAM Function of the Egress This operation enables you to configure the MPLS OAM function of the egress. Table 34-3 Related operations for configuring the MPLS OAM function of the ingress To. you can configure the MPLS OAM instance. run the display mpls oam egress command to query the instance of the source MPLS OAM of the LSP. Context l By default.34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide -------------------------------------------------------------------------------No. run the mpls oam egress enable command to enable the MPLS OAM function of the egress... undo mpls oam mpls oam egress 34. run the mpls oam command to enable the MPLS OAM function globally. the egress generates alarms. enable the OAM function of the ingress first. the parameters of the MPLS OAM of the egress must be the same as those of the ingress. For a same LSP. Step 3 In global config mode... l l l Procedure Step 1 Run the mpls command to switch over to MPLS mode. run the mpls oam egress command to set the MPLS OAM parameters of the egress. Tunnel-name Ttsi Type Frequency Status -------------------------------------------------------------------------------1 tunnel10 -FFD 100 ms Non-defect 2 tunnel20 -FFD 10 ms Stop -------------------------------------------------------------------------------Total Oam Num: 1 Total Start Oam Num: 0 Total Defect Oam Num: 0 Related Operation Table 34-3 lists the related operations for configuring the MPLS OAM function of the ingress. After the MPLS OAM parameters are set. Step 5 In global config mode. Therefore. ----End 34-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Step 4 In global config mode. Disable the MPLS OAM function globally Set the parameters of the MPLS OAM of the ingress Run the Command. Step 2 In MPLS mode. After the MPLS OAM function is enabled globally. you must enable it before configuring the MPLS OAM function of the egress. the MPLS OAM function is disabled globally. Otherwise. and the ID of the reverse tunnel is 20. Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-13 . and set the Tunnel-ID and peer address. the detection frequency is 100 ms. Table 34-4 Related operations for configuring the MPLS OAM function of the egress To.. Context l The following section lists the default settings of the parameters for configuring the tunnel protection group. do as follows: huawei(config)#mpls huawei(config-mpls)#mpls oam huawei(config-mpls)#quit huawei(config-mpls)#mpls oam egress lsr-id 100. to enable the MPLS OAM protection function for LSP named tunnel 10. Disable the MPLS OAM function globally Set the parameters of the MPLS OAM of the egress Run the Command. NOTE l In protection group revertive mode....100. with the step of 30s. if the active tunnel restores to the normal state.  l Before configuring the protection group.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM Example Assume that the detection type is FFD. Wait to Restore (WTR): It is 720s. After configuring or deleting the protection group. the traffic reverts from the standby tunnel to the active tunnel.6 Configuring the Tunnel Protection Group This operation enables you to configure the tunnel protection group.100 tunnel-id 10 type ffd frequency 100 backward-lsp tunnel 20 private huawei(config)#mpls oam engress enable all huawei(config)#display mpls oam egress { all<K>|lsp-name<K>|lsr-id<K> }:all { <cr>|verbose<K>|slot<K> }: Command: display mpls oam egress all Related Operation Table 34-4 lists the related operations for configuring the MPLS OAM function of the egress. the traffic reverts to the active tunnel for transmission when the WTR times out. – – Revertive: It is enabled.100. undo mpls oam mpls oam ingress 34. you must run the mpls te commit command to make it take effect. After the traffic reverts from the active tunnel to the standby tunnel. you must set the protocol for the tunnel interface as mpls te. The value ranges from 0 to 60. run the display mpls te protection tunnel command to query the state of the tunnel protection group.. undo mpls te protection tunnel mpls te protect-switch 34. Table 34-5 Related operations for configuring the tunnel protection group To. force. and manual.7 Switching Over Protection Group Manually This operation enables you to switch over the protection group manually. The priorities in descending order are clear. Delete a tunnel protection group Switch over the tunnel protection group manually Run the Command. 34-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . to configure a standby tunnel for tunnel 20. force.. Their switchover has priority restriction.. Step 5 In privilege mode. The manual work-lsp and manual protect-lsp have the same priority. Step 3 Run the mpls te protection tunnel command to configure the tunnel protection group. do as follows: huawei(config)#interface tunnel 20 huawei(config-if-tunnel20)#tunnel-protocol mpls te huawei(config-if-tunnel20)#mpls te protection tunnel 10 mode revertive wtr 30 huawei(config-if-tunnel20)#mpls te commit huawei(config-if-tunnel20)#quit huawei(config)#display mpls te protection tunnel 20 Related Operation Table 34-5 lists the related operations for configuring the tunnel protection group. Step 4 Run the mpls te commit command to deliver the configuration of the tunnel interface. the traffic in the protection group can be switched over to the related channel. manual work-lsp and manual protect-lsp. In this case. Context The parameters for protection group switchover are clear. lock. ----End Example Assume that tunnel ID is 10. Step 2 Run the tunnel-protocol mpls te command to enable the encapsulation protocol of the tunnel interface. lock..34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode. revertive mode is enabled and WTR is 900s. mpls te protection tunnel 34. Procedure In privilege mode. Step 5 In global config mode. Configure the tunnel protection group Run the Command. ----End Example To switch over the traffic from the standby channel to the active channel. Step 4 Run the mpls te commit command to deliver the configuration of the tunnel interface.. Table 34-6 Related operation for switching over the protection group manually To. Context Before enabling the protection group to output the debugging information. Step 3 Run the mpls te protect-switch command to switch over the protection group manually.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 34 Configuring the MPLS OAM Procedure Step 1 Run the interface tunnel command to enter tunnel interface mode. Step 2 Run the tunnel-protocol mpls te command to enable the encapsulation protocol of the tunnel interface. ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 34-15 . do as follows: huawei(config)#interface tunnel 20 huawei(config-if-tunnel20)#tunnel-protocol mpls te huawei(config-if-tunnel20)#mpls te protect-switch manual work-lsp huawei(config-if-tunnel20)#mpls te commit huawei(config-if-tunnel20)#quit huawei(config)#display mpls te protection tunnel 20 Related Operation Table 34-6 lists the related operation for switching over the protection group manually. log and alarm. run the debugging mpls te protect-switch command to enable the protection group to output the debugging information... and enable its debugging information output. run the display mpls te protection tunnel command to query the state of the tunnel protection group..8 Enabling the Protection Group to Output the Debugging Information This operation enables the protection group to output the debugging information. you must enable the terminal to send the debugging information. do as follows: huawei(config)#debugging mpls te protect-switch { all<K>|error<K>|process<K>|timer<K>|inter<K> }:all Command: debugging mpls te protect-switch all Related Operation Table 34-7 lists the related operations for enabling the protection group to output the debugging information..34 Configuring the MPLS OAM SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Example To enable the protection group to output the debugging information. Disable the protection group to output the debugging information Enable the terminal to send debugging information.. undo debugging mpls te protect-switch terminal monitor terminal debugging 34-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) ... Table 34-7 Related operations for enabling the protection group to output the debugging information To. log and alarm Enable the terminal to output the debugging information Run the Command. 7 Configuring the FAN Alarm Report This operation enables the report of the FAN running alarms to the EMU.9 Configuring the FAN Speed This operation enables you to configure the FAN speed. 35.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring 35 About This Chapter Configuring the Environment Monitoring This chapter describes the environment monitoring unit (EMU) supported by the MA5600 and how to configure the EMU. 35. 35.6 Configuring a POWER4845 EMU This operation enables you to configure a POWER4845 EMU.2 Configuration Example of an EMU This operation enables you to Configure an EMU. 35.1 Overview This chapter describes environment monitoring configuration on the MA5600. 35. 35. 35. 35. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-1 .5 Configuring an H561ESC EMU This operation enables you to configure an H561ESC EMU. 35.4 Configuring the H303ESC/H304ESC EMU This operation enables you to configure the H303ESC/H304ESC EMU.3 Adding an EMU This operation enables you to add an EMU.8 Setting the FAN Speed Adjustment Mode This operation enables you to set the fan speed adjustment mode. the rectifier module. Connect the environment monitoring cable from the EMU to the environment monitoring port (MON) on the SCU board of the MA5600. door-status switch. the DC distribution. Environment monitoring board (ESC. To perform environment monitoring on a device. The environment monitor module of the MA5600 comprises multiple EMUs. Service Description The MA5600 provides an environment monitor serial port to connect the serial port on a monitored device. no matter whether they are built in or not. water. l l Hardware Connection NOTE Before the delivery. Some devices to be monitored has a built-in monitoring unit. refer to the following description. Service Specifications Monitoring the environment of a device involves two aspects: l Environment parameters: Environment parameters refer to factors that may cause failure or even damage to the device. H304ESC and H561ESC) FAN EMU (FAN): It monitors the running of the fans. humidity. such as: l AC power module EMU (POWER4845): It monitors the environmental parameters such as temperature. such as H303ESC.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35. humidity. such as POWER4845. the EMU has been connected with the shelf. voltage. you can monitor the environment of the device from a remote end. The parameters include: temperature. The environment parameters such as temperature. and power. the environment monitoring functional modules must be provided. and adjusts the running speed of the fans. EMUs report their states to the SCU board through the MON port. l Power supply status: Power supply status covers the status of the mains input. These functional modules are referred to as environment monitor unit (EMU). Huawei Technologies Proprietary Issue 04 (2007-11-30) 35-2 . Do not change the connection. and door status sensor. and the battery. and ESC boards are connected almost in the same way to the MA5600. and receive commands from the SCU board. smoke. To install the EMU into other shelves or to connect EMU again.1 Overview This chapter describes environment monitoring configuration on the MA5600. By running master-slave node protocol or access network protocol between the two serial ports. MDF. and power supply can be monitored to guarantee that the MA5600 can work reliably in a suitable environment. humidity. Connecting the EMU with the shelf: l The POWER4845. including H303ESC. l l The slave node number of the H303ESC/H304ESC/H561ESC is always 30. Ensure the sub node numbers of the EMUs are consistent with the settings of their DIP switches. Table 35-1 Correspondence between the POWER4845 DIP switch and the slave node number DIP Switch Setting S1-4 OFF OFF OFF …… ON S1-3 OFF OFF OFF …… ON S1-2 OFF OFF ON …… ON S1-1 OFF ON OFF …… ON Meaning (Slave node number) 0 1 2 …… 15 Table 35-2 shows the correspondence between the H801ESC DIP switch and the slave node number. EMUs communicate with the MA5600 in master/slave node mode. Table 35-1 shows the correspondence between the POWER4845 DIP switch and the slave node number. ON means 0 and OFF means 1. Ensure that the slave node number is consistent with the setting of the DIP switches.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 35 Configuring the Environment Monitoring The FAN EMU is connected to the backplane through the interface on the rear panel. Table 35-2 Correspondence between the H801ESC DIP switch and the slave node number DIP Switch Setting S1-5 ON ON ON …… OFF S1-4 ON ON ON …… OFF S1-3 ON ON ON …… OFF S1-2 ON ON OFF …… OFF S1-1 ON OFF ON …… OFF Meaning (Slave node number) 0 1 2 …… 31 Table 35-3 shows the correspondence between the FAN DIP switch and the slave node number. and communicates with the MA5600 through the backplane. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-3 . You can set the slave node as required. ON means 1 and OFF means 0. ON means 0 and OFF means 1. The slave node number of the FAN/POWER4845/DIS is 0 by default. 2. Issue 04 (2007-11-30) 35-4 Huawei Technologies Proprietary . use the default settings.6 Procedure for Configuring POWER4845 EMU 35.2.3 Procedure for Configuring an H303ESC 35.2. Table 35-4 Data plan for EMU configuration Item H303ESC Data Serial number: 0 Slave node: 30 Name: mdesc Analogue parameter Temperature threshold (upper limit): 55°C Temperature threshold (lower limit): 5°C Digital parameter Level of the door state sensor: high Remarks For other analogue parameters.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 35-3 Correspondence between the FAN DIP switch and the slave node number DIP Switch Setting SW101-4 ON ON ON …… OFF SW101-3 ON ON ON …… OFF SW101-2 ON ON OFF …… OFF SW101-1 ON OFF ON …… OFF Meaning (Slave node number) 0 1 2 …… 15 35.2 Configuration Flowchart 35. use the default settings.2. 35.1 Data Plan Table 35-4 shows the data plan for EMU configuration.2.2. For other digital parameters.2 Configuration Example of an EMU This operation enables you to Configure an EMU.1 Data Plan 35.4 Verification for Configuring an H303ESC 35.5 Procedure for Configuring a DIS EMU 35.2. Start > H561ESC > FAN EMU > End.3 Procedure for Configuring an H303ESC Procedure Step 1 Add an H303ESC EMU.2. use the default settings. Start > POWER4845 EMU > FAN EMU > End.2 Configuration Flowchart Figure 35-1 shows the flowchart for configuring an EMU.2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-5 . With AC power supply. With DC power supply. Fan blocking alarm: forbid 35. 35. huawei(config)#emu add 0 H303ESC 0 30 fore mdesc NOTE The slave node number of H303ESC EMU is always 30. Start > H303ESC/H304ESC > DIS EMU > FAN EMU > End. Figure 35-1 Flowchart for configuring an EMU Start H303/304ESC H561ESC Power EMU FAN EMU End Three procedures are used to configure the EMU for the MA5600: l l l With DC power supply. For other alarms.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring Item FAN Data Fan speed adjustment mode: manual Speed level: 4 Remarks The fan speed level can be set under the condition that the fan speed adjustment mode is set as manual. 35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Step 2 Set the upper and lower limits of temperature alarm. huawei(config-if-fan-1)#fan alarmset block forbid Step 8 Save the data. huawei(config-if-h303esc-0)#quit huawei(config)#emu add 1 FAN 0 6 hwfan Step 5 Set the FAN speed adjustment mode. huawei(config-if-fan-1)#quit huawei(config)#quit huawei#save ----End 35.37 80 0 %R. huawei(config)#interface emu 0 huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 55 alarm-lower-limit 5 Step 3 Set the level of the door status sensor.00 127 -128 Normal -128.H.4 Verification for Configuring an H303ESC Result Run the display esc environment info command to query the environment information about the H303ESC.00 127 -128 Normal -128. huawei(config)#interface emu 1 huawei(config-if-fan-1)#fan speed mode manual Step 6 Set the speed level of the FAN. Normal -128.00 127 -128 Normal -128. with the type of FAN.00 127 -128 Environment Info--------------------------State Value |ID Name State Value Normal 1 |1 Door1 Normal 1 Normal 1 |3 Fire_Alarm Normal 1 Normal 1 |5 Fog Normal 1 Normal 1 |7 Peculiar_Smell Normal 1 Normal 1 |9 Normal 1 Normal 1 |11 Normal 1 Normal 1 |13 Normal 1 Normal 1 |15 Normal 1 Normal 1 |17 Normal 1 Normal 1 |19 Normal 1 35-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .2.00 127 -128 Normal -128. huawei(config-if-h303esc-0)#display esc environment info EMU ID: 0 H303ESC environment state Fan control mode :Auto Fan run state: Open ------------------Analog Environment Info-------------------------ID Name State Value AlmUpper AlmLower Unit 0 Temperature Normal 34. huawei(config-if-h303esc-0)#esc digital 1 available-level high-level Step 4 Add an EMU.00 127 -128 Normal -128.26 55 5 ℃ 1 Humidity 2 3 4 5 6 7 ---------------Digital ID Name 0 Wring 2 Door2 4 Theft_Alarm 6 Water_Alarm 8 Window_Broken 10 12 14 16 18 - Normal 31. huawei(config-if-fan-1)#fan speed adjust 4 Step 7 Set the FAN alarm report. 2.00 60 42 volt 1 input -48V 2 Normal 53.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring 20 Normal 1 |21 Normal 1 -------------------------------------------------------------------- Query the configuration of the FAN.H. huawei(config-if-dis-1)#display distribution environment info EMU ID: 1 distribution environment info ------------------Analog Environment Info-------------------------ID Name State Value AlmUpper AlmLower Unit 0 input -48V 1 Normal 52.00 80 0 %R. huawei(config)#emu add 1 dis 0 0 fore Step 2 Query the DIS state.00 55 5 ℃ 3 humidity Normal 36. Make sure that the DC distribution module is connected properly to the MA5600.5 Procedure for Configuring a DIS EMU Procedure Step 1 Add an EMU. Make sure that the DIP switches S1-1 to S1-5 on the environment monitor board of the module are set to ON. Make sure that the EMU type. following these steps to check the configuration: l l l l Make sure that the physical connection is correct. shelf ID. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-7 . Step 3 Query the environment information. huawei(config)#display emu 1 EMU ID: 1 ---------------------------------------------------------------------------EMU name : EMU type : DIS Used or not : Used EMU state : Fault Frame ID : 0 Subnode : 0 COM port : Fore --------------------------------------------------------------------------NOTE If the EMU state is fault. subnode number and serial port are correct.00 60 42 volt 2 temperature Normal 30. huawei(config-if-fan-1)#display fan system parameter EMU ID: 1 FAN configration parameter: -------------------------------------------------------------------FAN timing mode: Manual timing FAN speed level: 4 -------------------------------------------------------------------Alarm_name Permit/Forbid Read temperature fault Permit Fan block Forbid Temperature high Permit Power fault Permit -------------------------------------------------------------------- 35. You can configure the environment parameters of the AC power module according to the display. NOTE Procedures for configuring all these types of EMUs are similar.6 Procedure for Configuring POWER4845 EMU Procedure Step 1 Add a POWER4845 EMU.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 4 out_analog1(out_analog1) Normal -128. ----End 35.00 127 -128 ----------------Digital Environment Info--------------------------ID Name State Value |ID Name State Value 0 output ctrl digital 1Normal |1 output ctrl digital 2Normal 2 output ctrl digital 3Normal |3 output ctrl digital 4Normal 4 board +12V Normal |5 board +24V Normal 6 LightningproofBoard1Normal |7 LightningproofBoard2Normal 8 out_digital 1 Normal 0 |9 out_digital 2 Normal 0 10 out_digital 3 Normal 0 |11 out_digital 4 Normal 0 12 out_digital 5 Normal 0 |13 out_digital 6 Normal 0 14 out_digital 7 Normal 0 |15 out_digital 8 Normal 0 -------------------------------------------------------------------- You can configure the environment parameters of the DC distribution module according to the display. Run the display distribution environment info command to query the DIS environment information. run the display power run info command to query the running state of the POWER4845 module.2. run the display power environment info command to query the environment information about the POWER4845 module. Step 4 Set the upper and lower limit for temperature alarm. Step 5 Re-query the environment information. huawei(config)#emu add 0 POWER4845 0 10 fore Step 2 Query the power running state. Run the distribution temperature command to set the temperature alarm thresholds. Step 3 Query the environment information. In ESC mode. 35-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Note that the key words used in the commands are different.3 Adding an EMU This operation enables you to add an EMU. Refer to the above examples to configure the EMUs. ----End 35.00 127 -128 5 out_analog2(out_analog2) Normal -128. In ESC mode. . When the system monitors several EMUs at a time. select back mode for FAN.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring Context l There are several EMU types. including FAN. l Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-9 . H304ESC and H561ESC are always 30. ----End Example To add an H303ESC. H304ESC and H561ESC. emu del Remarks l The EMU type cannot be changed after you configure it. You can set the slave node. For the communication serial port. the slave nodes of the FAN and the POWER4845 are 0. For other EMUs. In this case. POWER4845. If an EMU in the shelf is replaced. the EMU can communicate with the control board correctly. and then add a new one. Step 2 Run the display emu command to query the EMU state. Make sure that the setting is consistent with that of the DIP switch. select the mode according to the requirements. By default. delete the EMU. first delete the EMU. and then add a new EMU... make sure that their slave nodes are different. If you need to change the EMU type. The slave nodes of the H303ESC. do as follows: huawei(config)#emu add 0 H303ESC 0 30 fore mdpower huawei(config)#dispaly emu 0 EMU ID: 0 -------------------------------------------------------------------EMU name : mdpower EMU type : H303ESC Used or not : Used EMU state : Normal Frame ID : 0 Subnode : 30 COM Port : Fore Related Operation Table 35-5 lists the related operations for adding an EMU. select fore mode for the control board. Delete an EMU Run the Command.. l l l l Procedure Step 1 Run the emu add command to add an EMU. Table 35-5 Related operations for adding an EMU To. H303ESC. closed or auto.. l 35-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) .4 Configuring the H303ESC/H304ESC EMU This operation enables you to configure the H303ESC/H304ESC EMU.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35. such as temperature and humidity. if the digital parameter is at a high level (1) when an alarm is reported. To. The default control status of the fan tray is auto. l l Set the analog parameters esc analog This command is used to set the upper and lower alarm thresholds of analog parameters. such as MDF state and door status sensor. The state of a digital parameter can be in a high level or low level. Set the fan control parameters Run the Command. you can run the command to set the high level as normal state.. Table 35-6 Commands for configuring the H303ESC/H304ESC EMU. the H304ESC provides management function on batteries. For example. If an alarm is reported but the system is normal. you can run the esc digital command to change the level of the digital parameter in order to eliminate the alarm. By default. Context NOTE Compared with the H303ESC. and stop working at 30°C. the fans start to work at 45° C. but does not provide the humidity monitor function. It means that you need to set the temperatures at which the fans start and stop working. Table 35-6 lists the commands for configuring the H303ESC/H304ESC EMU.. and normal state of the digital parameters. esc fan Remarks l The status of the fan tray can be opened.. l Set the digital parameters esc digital This command is used to set the digital parameters. .. Set the extended serial port parameters Run the Command. including the port ID. This command is used to set power-off voltages for transmission unit or subscriber lines. the serial port rate is 19200 bit/s. Specify the power module monitored by the H303ESC/ 304ESC Set 4810 power parameters Reset the H303/304ESC environment monitor board Set battery parameters (H304ESC only) esc power This command is used to add a power module before setting the parameters. - esc 810 reset esc battery This command is used to set the battery capacity. ----End Example To set the upper and lower limits of the temperature of the H303ESC EMU. The default DIP setting is ON. poweroff voltage. When you set the baud rate. Procedure Run the esc analog command to configure the H303ESC/H304ESC EMU. make sure the setting is consistent with the DIP switch setting of S7-4 at the lower right side of the board. baud rate. key word. the rate is 9600 bit/s. esc com Remarks This command is used to set the serial port parameters. The settings shall cover battery groups 0 and 1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring To. If S7-4=ON. The power module supported at present is power4810. and parity check methods. as well as whether to limit the current. and timed even charging duration. allowed power-off state.. do as follows: huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 60 alarm-lower-limit 5 Related Operation Table 35-7 lists the related operations for configuring the H303ESC/H304ESC EMU.. if S7-4=OFF. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-11 . stop bit. data bit. Set the analogue parameters Run the Command..35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 35-7 Related operations for configuring the H303ESC/H304ESC EMU To.. l Query the alarms Reset the EMU Query the EMU version number display esc alarm reset display version - 35..... such as door status sensor and fire alarms. Context Table 35-8 lists the commands for configuring an H561ESC EMU. Analog quantities have a value range and can fluctuate.5 Configuring an H561ESC EMU This operation enables you to configure an H561ESC EMU. 35-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) .. display outside-digital private-alarm display outside-analog private-alarm display esc system parameter display esc environment info Remarks Environment information comprises the analog parameters and digital parameters. or user defined alarms. and current. Query the user defined digital alarms Query the user defined analogue alarms Query the H303/304ESC system parameters Query the environment information Run the Command. l Analog parameters are obtained through analog parameter sensors such as the built-in temperature and humidity sensors on the H303/H304ESC. esc analog Remarks The analog parameters include alarm thresholds for temperature. Digital parameters are obtained through digital parameter sensors. humidity. voltage. Table 35-8 Commands for configuring an H561ESC EMU To.. 6 Configuring a POWER4845 EMU This operation enables you to configure a POWER4845 EMU.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring To. esc digital Remarks The digital parameters include the MDF and cabinet door status sensor. Set the digital parameters Run the Command... Query the H561ESC system parameters Query the environment information Query the alarms Query the user defined digital alarms Query the user defined analogue alarms Query the H561ESC version number Run the Command... ----End Example To run the esc digital command to set the level of the MDF... or user defined alarms. Context Table 35-10 lists the commands for configuring a POWER4845 EMU... display esc system parameter display esc environment info display esc alarm display outside-digital private-alarm display outside-analog private-alarm display version 35. do as follows: huawei(config-if-h561esc-0)#esc digital 1 available-level high-level Related Operation Table 35-9 lists the related operations for configuring an H561ESC EMU. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-13 . - Reset the H561ESC environment monitor board reset Procedure Run the mapping command to configure an H561ESC EMU. Table 35-9 Related operations for configuring an H561ESC EMU To. . the batteries provide power for the system. to ensure the power to generate an alarm when it works in an environment that does not match the set conditions. the power modules are switched on.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 35-10 Commands for configuring a POWER4845 EMU To.. Power 4845 supports up to 3 rectifier modules. power battery parameter Remarks This command is used to set the battery charging current-limit coefficient. When the output voltage from the batteries drops below the load power off voltage. Set the POWER4845 battery parameters Run the Command. the batteries will stop working. Power off occurs in two cases: load power off and battery power off.. the power supply for service load will be disconnected. By default. which means the modules supply power for the system. When the output voltage from the batteries drops below the battery power off voltage. the number of the battery group and the battery capacity. l Set the POWER4845 environment parameters power environment Set the number of the POWER4845 modules Set the POWER4845 module parameters power module-num power module-parameter Set the POWER4845 power-off parameters power off When the mains input stops working. equalized-charging time.. This command is used to set the switch-on and switch-off control of the POWER4845 module. l l 35-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This command is used to set the upper/lower alarm thresholds and upper/lower test limits for the environment humidity or temperature. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-15 . AC undervoltage. This command is used to set the charging mode and charging voltage for batteries connected with POWER4845.. to enable the rectifier module to power off automatically when the AC voltage or DC voltage is abnormal. Run the power temperature-off command to set the battery power-off voltage or the battery group power-off voltage. NOTE l l You can run the following commands to configure the parameters: l l l Run the power charge command to set the battery equalized-charging voltage or the battery float charging voltage. Run the power battery parameter command to set the DC undervoltage or the DC overvoltage. DC over-voltage and DC under-voltage alarm thresholds for a power. This command is used to set the load or battery high temperature power-off parameters and then to protect the load or battery. This command is used to set the battery auto-test period parameters and the discharging end-voltage to implement the battery auto-discharging test. Set the POWER4845 supply parameters Run the Command.. name to identify the digit and self-defined alarm to monitor the device digits timely. power supply-parameter Remarks This command is used to set the AC over-voltage.. Float charging voltage > (DC undervoltage + 2 V). Set the backup parameters of the POWER4845 power outside_digital Set the battery charging parameters power charge Set the power4845 test parameters power battery-test Set the high temperature power-off parameter power temperature-off Make sure that these conditions are met in the configuration: l DC overvoltage > battery even charging voltage > battery float charging voltage > DC undervoltage > loading power-off voltage > battery power-off voltage. This command is used to set such extended digital parameters as valid level.. DC overvoltage > (float charging voltage + 2 V).SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring To. .. Procedure Step 1 Run the interface emu command to enter FAN mode. Step 2 Run the fan alarmset command to configure the FAN alarm report. display power alarm display power environment info display power environment parameter display power run info display power system parameter display power battery-test info 35. Prerequisite The FAN EMU has existed and works in the normal state. do as follows: huawei(config-if-power4845-3)#power battery parameter 0. Step 3 Run the display fan system parameter command to query information about FAN alarm.2 60 1 130 Related Operation Table 35-11 lists the related operations for configuring a POWER4845 EMU. ----End Example To set the POWER4845 battery parameters..35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Run the command in Table 35-10 to configure a POWER4845 EMU.. ----End 35-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . Query the POWER4845 alarms Query the POWER4845 environment information Query the POWER4845 environment configuration Query the POWER4845 running information Query the POWER4845 configuration Query the POWER4845 battery test parameters Run the Command.7 Configuring the FAN Alarm Report This operation enables the report of the FAN running alarms to the EMU. Table 35-11 Related operations for configuring a POWER4845 EMU To. the mode is manual with the fan speed level of 5.. Context There are two fan speed adjustment modes: l l Automatic Manual By default. Query the running information about the fans Query the alarm information about the fans Run the Command.. do as follows: huawei(config)#interface emu 1 huawei(config-if-fan-1)#fan alarmset block forbid huawei(config-if-fan-1)#display fan system parameter EMU ID: 0 FAN configration parameter: -------------------------------------------------------FAN timing mode: Manual timing FAN speed level: 4 -------------------------------------------------------Alarm_name Permit/Forbid Read temperature fault Permit Fan block Forbid Temperature high Permit Power fault Permit -------------------------------------------------------- Related Operation Table 35-12 lists the related operations for configuring the FAN alarm report. the air flow increases in case of low or normal temperature. display fan environment info display fan alarm Remarks FAN environment monitor mode FAN environment monitor mode 35..SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring Example To disable the report of FAN block alarm.. Issue 04 (2007-11-30) Huawei Technologies Proprietary 35-17 . It is recommended that you change the mode to automatic.8 Setting the FAN Speed Adjustment Mode This operation enables you to set the fan speed adjustment mode. Table 35-12 Related operations for configuring the FAN alarm report To. If the mode is not set to automatic. Prerequisite The FAN EMU has existed and works in the normal state. . Prerequisite The FAN EMU has existed and works in the normal state. Step 2 Run the fan speed command to set the fan speed adjustment mode. Step 3 Run the display fan system parameter command to query the parameter setting.35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Procedure Step 1 Run the interface emu command to enter FAN mode.. ----End Example To set the fan speed adjustment mode as automatic. - 35.. use this command. Set the fan speed Set the fan alarm report to EMU Query the alarm information about fans Run the command. fan speed adjust fan alarmset display fan alarm Remarks Set the fan speed in manual mode. Table 35-13 Related operations for setting the fan speed adjustment mode To. 35-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) . do as follows: huawei(config)#interface emu 0 huawei(config-if-fan-0)#fan speed mode automatic huawei(config-if-fan-0)#display fan system parameter EMU ID: 0 FAN configration parameter: -------------------------------------------------------FAN timing mode: Auto timing FAN speed level: 4 -------------------------------------------------------Alarm_name Permit/Forbid Read temperature fault Permit Fan block Forbid Temperature high Permit Power fault Permit -------------------------------------------------------- Related Operation Table 35-13 lists the related operations for setting the fan speed adjustment mode.9 Configuring the FAN Speed This operation enables you to configure the FAN speed.. Step 3 Run the display fan system parameter command to query the setting of the FAN speed. other fans can run at high speed to compensate the air flow. Set the fan speed in manual mode. fan speed mode fan alarmset display fan alarm 35-19 Huawei Technologies Proprietary .. Low-speed running of fans can reduce dust concentration in the air filter...SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35 Configuring the Environment Monitoring Context FAN speed level ranges from 0 to 5. l The nominated fan speed is enough for heat dissipation when the system works in the permitted highest temperature. Step 2 Run the fan speed command to configure the FAN speed. do as follows: huawei(config)#interface emu 0 huawei(config-if-fan-0)#fan speed adjust 3 huawei(config-if-fan-0)#display fan system parameter EMU ID: 0 FAN configration parameter: -------------------------------------------------------FAN timing mode: Manual timing FAN speed level: 3 -------------------------------------------------------Alarm_name Permit/Forbid Read temperature fault Permit Fan block Forbid Temperature high Permit Power fault Permit ------------------------------------------------------- Related Operation Table 35-14 lists the related operations for setting the FAN speed.. When abnormality occurs or one of the fans fails. ----End Example To set the FAN speed as 3. Low-speed running of fans can prolong the lifetime of the fans. l l l l Procedure Step 1 Run the interface emu command to enter FAN mode. Set the fan speed adjustment mode Set the fan alarm report to EMU Query the alarm information about fans Issue 04 (2007-11-30) Run the Command. Table 35-14 Related operations for setting the FAN speed To. Level 0 refers to the lowest and level 5 refers to the highest fan speed level. 35 Configuring the Environment Monitoring SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 35-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 36.2 Data Plan This section describes the data plan for the sample MSTP network.4 Configuring MA5600-2 The following shows how to configure MA5600-2. 36. Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-1 . 36.5 Configuring MA5600-3 The following shows how to configure MA5600-3. 36.7 Configuring MA5600-5 The following shows how to configure MA5600-5.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example 36 About This Chapter MSTP Networking Example This chapter describes the MSTP networking example supported by the MA5600. 36.8 Verification All services configured on all DSLAMs run in the normal state. 36.1 Networking The section describes the typical networking in MSTP mode. 36.6 Configuring MA5600-4 The following shows how to configure MA5600-4.3 Configuring MA5600-1 The following shows how to configure MA5600-1. 36. 36-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) . is subtended with the MA5600-4. The MA5600-1 works together with the MA5600-5 to provide QinQ service through IP network.1 Networking The section describes the typical networking in MSTP mode. l l l The MA5600-1 is connected to the IP network. MA5600-2. and MA5600-3) form an MSTP ring network. through its GE port. Figure 36-1 shows a sample MSTP network of the MA5600.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36. The MA5600-3. Three MA5600s (MA5600-1. 2 Data Plan This section describes the data plan for the sample MSTP network.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example Figure 36-1 Sample MSTP network of the MA5600 SoftSwitch Multicast server ISP1 ISP2 ISP3 IP DHCP server iManager N2000 LAN switch BRAS 2 3 5 7 5 7 0 A D G E A D G E S H E A 0 1 2 S H E A SCU MA5600-1 1 A D G E 5 S H E A 7 0 1 2 SCU MA5600-5 2 3 5 7 0 1 A D G E A D G E S H E A SCU MA5600-2 2 3 5 SCU MA5600-3 7 0 HG STB A D G E A D G E S H E A SCU Ephone TV PC MA5600-4 ADSL2+ modem PC 36. Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-3 . Table 36-1 lists the service and data plan for the sample network of MA5600 in the Figure 36-1. 4 255.1/24 10.255.255.176. 0 Gateway: 10.8.1/2 4 10.255.176.1/2 4 Upstream: 0/7/0 GE port of the SCU board VLAN Upstream: 0/7/0 RSTP: 0/7/1-0/7/2 NMS: 10 QinQ: 50 Multicast: 100 ADSL2+: 1000-1063 (adopt VLAN authenticatio n) SHDSL: 1300-1331 (adopt VLAN authenticatio n) Upstream: 0/7/0-0/7/1 Upstream: 0/7/0-0/7/1 RSTP: 0/7/2 NMS: 10 Stacking: 60-62 (inner stacking: 111-113) Triple Play: 100-102 ADSL2+: 1000 (adopt PPPoE authentication) SHDSL: 1300 (adopt PPPoE authentication) NMS: 10 ADSL2+: 1000-1063 (adopt VLAN authenticatio n) SHDSL: 1300-1330 (adopt VLAN authenticatio n) NMS: 10 Multicast: 100 ADSL2+: 1000 (adopt PPPoE authenticatio n) SHDSL: 1300 (adopt PPPoE authenticatio n) NMS: 10 QinQ: 50 36-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .176.255.8.6 255.3 255.8.2 255.176.8.1/24 10.8.176. 0 Gateway: 10.176.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 36-1 Data plan for the sample MSTP network Item Service MA5600-1 l MA5600-2 l MA5600-3 l MA5600-4 ADSL2+ service SHDSL service Multicast service MA5600-5 QinQ leased line service (interoperate with the leased line service of MA5600-1) ADSL2+ service SHDSL service QinQ leased line service (interopera te with MA5600 -5) Multicast service ADSL2+ service SHDSL service Stacking Wholesale service Triple Play service ADSL2+ service SHDSL service l l l l l l l Inband NMS address 10.8.176.176.255.176.255. 0 Gateway: 10.255. 0 Gateway: 10.8.255.255.176.0 Gateway: 10.255.8.5 255.8.8.1/2 4 Upstream: 0/7/0 10. 39 217.4. The VLAN mapping to the DSLAN is configured in the upper layer IP network.1.10. The IP address of LAN switch at the MA5600 side is 10.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example Item Slot MA5600-1 ADSL2+: 0/3 SHDSL: 0/5 QinQ: 0/5/31 Multicast: 0/2/2.4.38 and 193.4.42 AC PS4845 power monitoring.40 193. The BRAS supports inner and outer VLAN Tags.4. ISP3) Triple Play: 0/2/31 MA5600-3 ADSL2+: 0/3 SHDSL: 0/5 MA5600-4 ADSL2+: 0/3 SHDSL: 0/5 Multicast: 0/2/2.2 (Active) 10.57. The VLAN ID of the traffic flow sent from the IP network to the DSLAM is 100.1/24 Upper layer device The upper layer device supports the DHCP option82 function. fan monitoring DHCP server1: 10.1/24. ISP2) 0/2/21-30 (map VLAN 62. ISP1) 0/2/11-20 (map VLAN 61.188.189.131.189.1.56.2 (Active) 10.10.131.188.3 (Standby) Gateway: 10. 0/2/3 MA5600-2 ADSL2+: 0/3 SHDSL: 0/5 Stacking: 0/2/0-10 (map VLAN 60. Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-5 . Stacking VLAN and QinQ VLAN function.1.251. The BRAS supports the PITP.4.251.4.1.3 (Standby) Gateway: 10.1/24 DHCP server2: 10.1p labels. The upper layer device classifies the downstream traffic.1.1.40 and 217. Different service carries different 802.71.71. 0/2/3 MA5600-5 QinQ: 0/5/31 User PVC PVC VPI/ VCI of all users: 0/35 VPI/VCI of triple play: l Video service: 0/35 Internet service: 0/36 Voice service: 0/37 PVC VPI/ VCI of all users: 0/35 PVC VPI/ VCI of all users: 0/35 PVC VPI/ VCI of all users: 0/35 l l NMS host Log host Time server EMU DHCP server 195.38 and 195. 2 0.71.0 huawei(config-acl-adv-3010)#rule permit ip source 217.0.8.255.71.1 preference 1 l Configure the route destined to the log host.38 0.0.8.176.251.0 255.0 destination 10. Configure the SNMP.255.255 10.56.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/2 4.40 0.188.0.255.0 destination 10.176.0.2 0.0.176.0.255.0 destination 10.38 0.176.176.0 255. l Configure the community name and access authority.42 0.0 10. huawei(config)#ip route-static 193.0 huawei(config-acl-adv-3010)#rule permit ip source 195.176. Huawei Technologies Proprietary Issue 04 (2007-11-30) 36-6 .188.0.2 0.0.0.57.0.39 0.8. l Configure the route destined to the NMS (Trap destination host).176.1 preference 1 l Configure the route destined to the time server.8.0 2.188.189. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure NMS.71.8.0. huawei(config)#ip route-static 195. Add the route.0 huawei(config-acl-adv-3010)#rule permit ip source 193.188.3 Configuring MA5600-1 The following shows how to configure MA5600-1. huawei(config)#vlan 10 standard Add the upstream port.0.176.176.0.0 10. huawei(config)#interface vlanif 10 Configure the IP address of the NMS VLAN interface.0. 1.0.255.8. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.176.2 0.8.0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.8.0.0.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36.255.8. huawei(config)#port vlan 10 0/7 0-2 Enter NMS VLAN interface mode.1 preference 1 3.251.251.1 preference 1 huawei(config)#ip route-static 217.2 0. l l l l Create the NMS VLAN.0 huawei(config-acl-adv-3010)#rule permit ip source 193.57.38 255.0.0 destination 10. Add the ACL rule.0 255.0. Configure the IP address of the inband NMS interface.8.176.2 0.131.255.0.8.131.0 destination 10.189.0 10.0 destination 10.40 0.189. Procedure Step 1 Confirm the board. huawei(config)#ip route-static 217.2 0. huawei(config-if-vlanif10)#ip address 10.255.0.255.176.0.2 255.0.255.131.0 huawei(config-acl-adv-3010)#rule permit ip source 195.8.56. 188. both the primary and secondary node addresses of the fan EMU are 0.40 syslog-2 activate ip 217.40 Step 5 Configure the EMU. In this example. This section takes the fan and PS4845 power supply as examples to show how to configure the environment monitoring unit (EMU). MA5600-3 and MA5600-4.38 securityname public huawei(config)#snmp-agent target-host trap address 195. huawei(config)#ntp-service unicast-server 193. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server.131. Therefore.42 source-interface vlanif 10 Step 4 Configure the log host. In this case. huawei(config)#stp enable Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-7 .251. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 60 to 62 standard vlan 60 to 62 0/7 0-2 101 to 102 standard vlan 101 to 102 0/7 0-2 Step 7 Enable MSTP.189. suppose they are 1.188. huawei(config)#snmp-agent sys-info contact HW-075512345678 Configure the device local information.57.188. Set the trap source address. 6. huawei(config)#snmp-agent sys-info version v2c 5.71. you need to set the DIP switch of the node address on the fan monitoring unit as 1. huawei(config)#snmp-agent trap enable standard Set the trap destination address.57. By default.251. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.39 securityname public 7. huawei(config)#emu add 0 power 4845 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-power4845-0)#power module-num 2 1 2 huawei(config-if-power4845-0)#quit Step 6 Configure SCU subtending MA5600-1 is subtended with MA5600-2. subtending shall be configured. Here. 1. Enable the MSTP function.131.56. huawei(config)#snmp-agent target-host trap address 195. the SNMP version must be the same as that of NMS.71. Enable trap sending.40 add 217.188.189. huawei(config)#snmp-agent sys-info location Shenzhen China Configure the SNMP version.40 syslog-1 activate ip 217.56. In this example.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Configure the contact information. the NMS version is set as SNMP V2C.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193. huawei(stp-region-configuration)#active region-configuration STP actives region configuration. The MA5600 supports the ADSL2+ service of multiple encapsulation modes. Set the MSTP region name.are you sure to active region configuration? [Y/N][N]y 5. For other encapsulation modes. Configure the ADSL2+ alarm profile. Set the priority of MA5600_1 in the instance.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2. 4. see the chapter "21 Configuring the ADSL2+ Service. You can configure the ADSL2+ alarm profile based on your needs. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg 3. huawei(stp-region-configuration)#quit huawei(config)#stp instance 0 priority 0 huawei(config)#stp instance 1 priority 0 Step 8 Configure ADSL2+ service. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. it may take several minutes. Configure MSTP instance 1. and PPPoE. IPoE." 1. PPPoA. huawei(stp-region-configuration)#instance 1 vlan 1 to 4094 Activate the configuration of the MSTP region. Configure the ADSL2+ line profile. such as IPoA. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit 36-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. You can configure the ADSL2+ line profile based on your needs. such as IPoA. huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 9 Configure the SHDSL service. The MA5600 supports the SHDSL service of multiple encapsulation modes. In this example. Add the service port. To add the service ports in batches. The configuration of the upstream port of the SCU board shall be the same as that of the peer end. Configure the upstream port. the default profile (profile 6) is used. Run the auto-neg command to set the port to work in auto negotiation mode. IPoE. and PPPoE. l Configure the SCU board. In this case. This section takes the PPPoE mode as an example to describe how Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-9 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. and run the duplex command duplex to change the port duplex mode. 4. the MUX VLAN is used to identify the users. l Configure the VLAN. huawei(config)#vlan 1000 to 1063 mux huawei(config)#port vlan 1000 to 1063 0/7 0-2 6. All ports of the 0/3 board provide ADSL2+ service. If the port works in non auto negotiation mode. Configure the ADSL2+ traffic profile. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. PPPoA. Activate the ADSL2+ port. The ADSL2+ users of MA5600-1 adopt the VLAN authentication. run the multi-service-port command. You can configure the ADSL2+ traffic profile by running the traffic table command based on your needs. change to the SCU config mode and run the speed command to change the port rate. Create VLAN 50. 4. Configure the SHDSL alarm profile. huawei(config)#vlan attrib 50 q-in-q Add the upstream port. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide to configure the SHDSL service. To configure the SHDSL line profile. To configure the SHDSL alarm profile. To add the service port. huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 10 Configure the QinQ leased line service. In this case. see the chapter "22 Configuring the SHDSL Service. The SHDSL users of MA5600-1 adopt the VLAN authentication. the default profile (profile 1) is used. For other encapsulation modes. huawei(config)#port vlan 50 0/7 0-2 Add the service port. 3. the following results shall be achieved: 36-10 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#vlan 50 mux Set VLAN 50 as QinQ VLAN. After the configuration. Configure the upstream port. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all profile-index 10 huawei(config-if-shdsl-0/5)#quit 4. Note that the VPI and VCI values of the service port must be the same as those on the modem. huawei(config)#traffic table index 7 ip car off priority 0 priority-policy pvcSetting huawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 Step 11 Configure the multicast service. run the shdsl line-profile add or shdsl line-profile quickadd command. In this case. huawei(config)#vlan 1300 to 1331 mux huawei(config)#port vlan 1300 to 1331 0/7 0-2 5. To activate the ports in batches. run the service-port command. run the shdsl alarm-profile add command. In this example." 1. Configure the SHDSL line profile. select the profile that supports PVC-priority policy. Ports 0-31 of board 0/5 provide the SHDSL service. The QinQ VLAN supports the PVC-priority scheduling policy only. Add the service port. 2. 1. Activate the SHDSL port. 3. run the multi-service-port command. the MUX VLAN is used to identify the users. MA5600-1 and MA5600-5 serve two branches of a company to provide the QinQ leased line service. huawei(config)#port vlan 100 0/7 0-2 Configure the native VLAN. Configure the VLAN.1. it is unnecessary to configure the xDSL. In this example. l Enable the multicast proxy.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l 36 MSTP Networking Example Users of port 0/2/2 must be authenticated. huawei(config)#vlan 100 smart Add the upstream port to the VLAN. l l l Create a VLAN.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224.1. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview l Configure the preview parameters. 2. l 1. set the preview duration for program 3 as 150s.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224.1. Users of port 0/2/3 do not need authenticating. and have rights to watch two programs and to preview one program. Configure the xDSL.3 vlan 100 bind 0/7/0 l Configure the authority profile. In this example.1. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 huawei(config-if-scu-0/7)#native-vlan 2 vlan 100 l Create the traffic profile. huawei(config-btv)#igmp preview program name program3 preview-duration 150 huawei(config-btv)#igmp preview program name program3 preview-times 6 huawei(config-btv)#igmp preview program name program3 preview-interval 60 Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-11 . the number of preview attempts as 6 each day and the preview interval as 60s. Configure the multicast service. huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 3.1. huawei(config-btv)#igmp program add name program1 ip 224. huawei(config-btv)#igmp uplink-port-mode program Configure the program library. huawei(config)#traffic table index 8 ip car off priority 5 priority-policy pvc-Setting l Add ADSL2+ port 0/2/2 and 0/2/3 to VLAN 100.1. huawei(config)#btv huawei(config-btv)#igmp mode proxy l l l Add the upstream port. The default line profile (profile 1002) is used. huawei(config-btv)#igmp uplink-port 0/7/0 100 Set the upstream port to work in program mode. 3. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS. In this way. Configure the multicast for the subtending port.2 224.1.3.1 224. 4. 1. It is unnecessary to configure it again.1.4 Configuring MA5600-2 The following shows how to configure MA5600-2. MA5600-1 is subtended with MA5600-3.3.1.1.1.2 224.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide To set the time to clear the previous preview attempts.1. In the MSTP ring network.3 224. run the igmp preview autoreset-time command. huawei(config-btv)#igmp preview auto-reset-time 00:00:00 l Configure the user data.1. Configure the IGMP proxy. MA5600-4 provides the multicast service.1. The program library is already configured in 11. In this example. Configure the program library. 1. it is necessary to configure the multicast subtending on MA5600-1 first. huawei(config-btv)#igmp cascade-port 0/7/1 huawei(config-btv)#igmp cascade-port 0/7/2 l Modify the subtending port.3 Step 13 Save the data. Add the upstream port. huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable huawei(config-btv)#igmp cascade-port modify 0/7/2 static enable l Add programs for the static subtending port.3.1. set the time to 00:00:00.1. Procedure Step 1 Confirm the board.1. Huawei Technologies Proprietary Issue 04 (2007-11-30) . It is unnecessary to configure it again. and MA5600-3 is subtended with MA5600-4. 36-12 Configure the IP address of the inband NMS interface. The IGMP proxy is already configured in 11. l Specify a subtending port. It is unnecessary to configure it again. huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp static-join static-join static-join static-join static-join static-join cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port 0/7/1 0/7/1 0/7/1 0/7/2 0/7/2 0/7/2 ip ip ip ip ip ip 224. According to the data plan.1 224.1. huawei(config-btv)#quit huawei(config)#save ----End 36. 2. The upstream port is already added in 11. huawei(config-btv)#igmp user add port 0/2/3 adsl 0 35 no-auth huawei(config-btv)#igmp user add port 0/2/2 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0 Step 12 Configure the subtending multicast service. 189. the NMS version is set as SNMP V2C.0.251.0.255.2 0.188.255.0. 6.0 255.0. huawei(config)#snmp-agent trap enable standard Set the trap destination address.176.56.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.0.189.1 preference 1 l Configure the route destined to the time server.8.57. huawei(config-if-vlanif10)#ip address 10.1 preference 1 3.0.0. l Configure the community name and access authority.0 destination 10.0. huawei(config)#snmp-agent sys-info contact HW-075512345678 Configure the device local information.0 destination 10.0 destination 10.251.255.0 huawei(config-acl-adv-3010)#rule permit ip source 195.0 255. huawei(config)#interface vlanif 10 Configure the IP address of the NMS VLAN interface.0 10. huawei(config)#snmp-agent sys-info location Shenzhen China Configure the SNMP version.255.0.0 10. Add the route.176. huawei(config)#ip route-static 217. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.57.0.0. Here.176.131.8.0 255.0.176.2 0.8.0 destination 10.0. l Configure the route destined to the NMS (Trap destination host).2 0.188.0. huawei(config)#ip route-static 195.0.56.176.176.8.189.0 destination 10.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.8.0 huawei(config-acl-adv-3010)#rule permit ip source 193.0 destination 10.8.38 0.0. huawei(config)#vlan 10 standard Add the upstream port.176.40 0.131.0 2.251.255.0 huawei(config-acl-adv-3010)#rule permit ip source 193.131.40 0.1 preference 1 l Configure the route destined to the log host.0.0. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Configure the contact information.0.0. Add the ACL rule.0 10.38 0.188. huawei(config)#snmp-agent sys-info version v2c 5.71.0.8. Huawei Technologies Proprietary 36-13 .176.0 10.255.2 0.8.0. In this example.176.8.8. the SNMP version must be the same as that of NMS.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide l l l l 36 MSTP Networking Example Create the NMS VLAN.1 preference 1 huawei(config)#ip route-static 217.8. Configure the SNMP.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4. huawei(config)#port vlan 10 0/7 0-1 Enter NMS VLAN interface mode.0 huawei(config-acl-adv-3010)#rule permit ip source 217.8.0.3 255. Issue 04 (2007-11-30) Enable trap sending.255.2 0.0.176.0 255.255. huawei(config)#ip route-static 193.0.2 0.255.176.71.255.39 0.2 0.0.42 0.176. huawei(config)#pitp enable pmode Step 9 Configure ADSL2+ service. it may take several minutes.57. huawei(stp-region-configuration)#active region-configuration STP actives region configuration.189. suppose they are 1.40 syslog-2 activate ip 217. and PPPoE. By default.71. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg 3. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server.39 securityname public 7. Configure MSTP instance 1.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#snmp-agent target-host trap address 195. Set the trap source address. In this case. MA5600-3 and MA5600-4. huawei(stp-region-configuration)#instance 1 vlan 1 to 4094 Activate the configuration of the MSTP region.38 securityname public huawei(config)#snmp-agent target-host trap address 195.188. This section takes the PPPoE mode as an example to describe how 36-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) . you need to set the DIP switch of the node address on the fan monitoring unit as 1. Therefore.251. huawei(config)#emu add 0 power4845 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-power4845-0)#power module-num 2 1 2 huawei(config-if-power4845-0)#quit Step 6 Configure SCU subtending MA5600-1 is subtended with MA5600-2. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.251.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.56.57. huawei(config)#ntp-service unicast-server 193. PPPoA. such as IPoA.71. subtending shall be configured. 1. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 1001 vlan 1301 vlan to 1063 standard 1001 to 1063 0/7 0-1 to 1063 standard 1063 0/7 0-1 Step 7 Configure MSTP.40 add 217.40 Step 5 Configure the EMU.42 source-interface vlanif 10 Step 4 Configure the log host. both the primary and secondary node addresses of the fan EMU are 0.131. The MA5600 supports the ADSL2+ service of multiple encapsulation modes.188.are you sure to active region configuration? [Y/N][N]y Step 8 Enable PITP.188.189. This section takes the fan and PS4845 power supply as examples to show how to configure the EMU. 4.188. In this example. Enable the MSTP function.131.56. IPoE. huawei(config)#stp enable Set the MSTP region name.40 syslog-1 activate ip 217. 2. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-15 . The ADSL2+ users of MA5600-2 adopt the PPPoE authentication. Configure the upstream port. 3. huawei(config)#vlan 1000 smart huawei(config)#port vlan 1000 0/7 0-1 5. change to the SCU config mode and run the speed command to change the port rate. For other encapsulation modes. Configure the ADSL2+ traffic profile. and run the duplex command duplex to change the port duplex mode. The configuration of the upstream port of the SCU board shall be the same as that of the peer end. In this example. Run the auto-neg command to set the port to work in auto negotiation mode. the smart VLAN is used to identify the users. l Configure the VLAN. All ports of ADSL2+ board 0/3 provides ADSL2+ service. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 4. huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 10 Configure the SHDSL service. If the port works in non auto negotiation mode. Activate the ADSL2+ port. To add the service port in batches. Add the service port. l Configure the SCU board.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example to configure the ADSL2+ service. the default profile (profile 6) is used. You can configure the ADSL2+ traffic profile by running the traffic table command based on your needs. You can configure the ADSL2+ line profile based on your needs. In this case. run the multi-service-port command." 1. see the chapter "21 Configuring the ADSL2+ Service. Configure the ADSL2+ line profile. IPoE. such as IPoA. huawei(config)#port vlan 60 to 62 0/7 0-1 Add the service port. Create a VLAN and set its attribute as stacking. run the shdsl line-profile add or shdsl line-profile quickadd command. 3. Configure the SHDSL traffic profile." 1.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide The MA5600 supports the SHDSL service of multiple encapsulation modes. To configure the SHDSL line profile. To configure the SHDSL traffic profile. run the traffic table command. run the multi-service-port command. 1. Activate the SHDSL port. To add the service ports in batches. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. 4. To configure the SHDSL alarm profile. ISP1 provides users of ports 0/2/0 to 0/2/10 on board with the multi-ISP wholesale service. Configure the upstream port. In this case. Add the upstream port. ISP3 provides users of port 21-30 with the multi-ISP wholesale service. the default profile (profile 1) is used. see the chapter "22 Configuring the SHDSL Service. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2. Configure the SHDSL line profile. PPPoA. In this example. l l Ports 0-30 of SHDSL board 0/5 provide the SHDSL service. huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 11 Configure the stacking multi-ISPs wholesale service. run the shdsl alarm-profile add command. huawei(config)#multi-service-port vlan 60 adsl 0/2 0-10 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#multi-service-port vlan 61 adsl 0/2 11-20 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#multi-service-port vlan 62 adsl 0/2 21-30 vpi 0 vci 35 rx-cttr 36-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) . For other encapsulation modes. Add the service port. Configure the SHDSL alarm profile. The SHDSL users of MA5600-2 adopt the PPPoE authentication. ISP2 provides users of ports 11-20 to with the multi-ISP wholesale service. the smart VLAN is used to identify the users. and PPPoE. huawei(config)#vlan 1300 smart huawei(config)#port vlan 1300 0/7 0-1 6. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all profile-index 10 huawei(config-if-shdsl-0/5)#quit 5. huawei(config)#vlan 60 to 62 smart huawei(config)#vlan attrib 60 to 62 stacking 2. 3. the default profile (profile 1) is used. In this example. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 100 smart vlan 100 0/7 0-1 101 mux vlan 101 0/7 0-1 102 smart vlan 102 0/7 0-1 2. Presume that the network access service uses traffic table 6. huawei(config)#traffic table index 7 ip car 1024 priority 7 priority-policy Pvc-Setting huawei(config)#traffic table index 8 ip car off priority 5 priority-policy PvcSetting 3. After the configuration. with the priority of 0.1. and the network access service has the lowest priority. Configure the traffic table.1.1. l Configure the DHCP server. l l Enable DHCP mode.1.4.1.1.1. 1.1.4.1.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 6 tx-cttr 6 36 MSTP Networking Example 4.1 l Enable the DHCP option82 function. and can preview the programs stored on server 224. The voice service has the highest priority.1. Configure the service port.3. The following shows how to create the new traffic tables for the voice service and video service respectively. huawei(config)#dhcp option82 enable huawei(config)#raio-mode xdsl-port-rate 5.1.3 huawei(config)#dhcp domain voice huawei(config-dhcp-domain-voice)#dhcp-server 2 l Configure the gateway mapped to the DHCP domain. huawei(config)#service-port vlan 100 adsl 0/2/31 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 101 adsl 0/2/31 vpi 0 vci 36 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 102 adsl 0/2/31 vpi 0 vci 37 rx-cttr 7 tx-cttr 7 4.2 10.1. huawei(config)#dhcp mode layer-3 option-60 Configure the DHCP server.4.2 10.1 and 224. huawei(config)#dhcp-server 1 ip 10. Configure DHCP relay mode for video service. Configure DHCP relay mode for voice service.1. huawei(config)#dhcp-server 2 ip 10. Huawei Technologies Proprietary 36-17 Issue 04 (2007-11-30) . Configure the upstream port and VLAN.2.1. Configure the inner label. the following results shall be achieved: Users of ports 0/2/31 can watch the programs stored on servers 224.4.1 24 huawei(config-if-vlanif100)#dhcp domain video gateway 10.3 huawei(config)#dhcp domain video huawei(config-dhcp-domain-video)#dhcp-server 1 l Configure the gateway mapped to the DHCP domain. huawei(config)#stacking label vlan 60 baselabel 111 huawei(config)#stacking label vlan 61 baselabel 112 huawei(config)#stacking label vlan 62 baselabel 113 Step 12 Configure the triple play service. huawei(config)#interface vlanif 100 huawei(config-if-vlanif100)#ip address 10. 3 Step 14 Save the data.1 vlan 100 huawei(config-btv)#igmp program add name program2 ip 224. huawei(config-btv)#quit huawei(config)#save ----End 36-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) .4.2 224. Configure the program library.1 224.1.1. The program library is already configured in 12.3 224. It is unnecessary to configure it again. Configure the video service.6. Set the upstream port. In the MSTP ring network.1 224. 4. huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp static-join static-join static-join static-join static-join static-join cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port 0/7/0 0/7/0 0/7/0 0/7/1 0/7/1 0/7/1 ip ip ip ip ip ip 224. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 1 huawei(config-if-scu-0/7)#native-vlan 1 vlan 1 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv)#igmp mode proxy huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp uplink-port 0/7/1 100 huawei(config-btv)#igmp uplink-port-mode mstp huawei(config-btv)#igmp program add name program1 ip 224. It is unnecessary to configure it again. 3.1.1.1.1. The upstream port is already added in 12.1 6.4. huawei(config-btv)#igmp cascade-port modify 0/7/0 static enable huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable l Add programs for the static subtending port. The IGMP proxy is already configured in 12. l Specify a subtending port. In this way.1. and MA5600-3 is subtended with MA5600-4. 1. 2. Configure the multicast for the subtending port.1.4.1. huawei(config-btv)#igmp cascade-port 0/7/0 huawei(config-btv)#igmp cascade-port 0/7/1 l Modify a subtending port.1 24 huawei(config-if-vlanif102)#dhcp domain voice gateway 10.4.1.1.1.3 vlan 100 huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview huawei(config-btv)#igmp user add port 0/2/30 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/31 profile-name profile0 Step 13 Configure the subtending multicast service.1.1. According to the data plan. it is necessary to configure the multicast subtending on MA5600-2 first.1.1.6.6.2 224. MA5600-1 is subtended with MA5600-3. It is unnecessary to configure it again.2 vlan 100 huawei(config-btv)#igmp program add name program3 ip 224.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#interface vlanif 102 huawei(config-if-vlanif102)#ip address 10.1.1. Configure the IGMP proxy. MA5600-4 provides the multicast service. 255.1 preference 1 huawei(config)#ip route-static 217.131.0.0.131.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195. l Configure the route destined to the NMS (Trap destination host).188.71.255.38 0.0 255.0. Add the ACL rule.57. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS.57.189.0 destination 10.0. huawei(config)#port vlan 10 0/7 0-2 Enter NMS VLAN interface mode.2 0. huawei(config)#ip route-static 217.131.4 255.0.8. huawei(config)#interface vlanif 10 Configure the IP address of the NMS VLAN interface.176.188. Configure the IP address of the inband NMS interface.5 Configuring MA5600-3 The following shows how to configure MA5600-3.0 destination 10.71.0.8.0 huawei(config-acl-adv-3010)#rule permit ip source 193.8.0 10.0. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.2 0. l Configure the community name and access authority.176.0 10.2 0.255.2 0.255.0.176.0 destination 10.38 0. Add the route. Procedure Step 1 Confirm the board.188.251.2 0.0.71.0 huawei(config-acl-adv-3010)#rule permit ip source 217.0 10.0.189.255. 1.176.8.0 destination 10.0.255.0.0.176.0.255. huawei(config-if-vlanif10)#ip address 10.42 0.0. l l l l Create the NMS VLAN.176.8.0.255.0.189.0.176. Huawei Technologies Proprietary 36-19 Issue 04 (2007-11-30) .8.39 0.8. huawei(config)#ip route-static 193.0.1 preference 1 l Configure the route destined to the log host. huawei(config)#vlan 10 standard Add the upstream port.0 10.0.8.40 0.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example 36.0.40 0.2 0.0 destination 10.0 destination 10. huawei(config)#ip route-static 195.0 255.0 255.255.255.8.1 preference 1 3.0 huawei(config-acl-adv-3010)#rule permit ip source 217.251.188.56.176.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4.176.56.8. Configure the SNMP.0.0.8.0 2.176.8.0 huawei(config-acl-adv-3010)#rule permit ip source 193.1 preference 1 l Configure the route destined to the time server.0 255.0 huawei(config-acl-adv-3010)#rule permit ip source 195.251.176.2 0.176. you need to set the DIP switch of the node address on the fan monitoring unit as 1. In this case.131. subtending shall be configured.42 source-interface vlanif 10 Step 4 Configure the log host.40 syslog-1 activate ip 217. Here.56. In this example. suppose they are 1. huawei(config)#snmp-agent sys-info version v2c 5.57. Set the trap source address.40 Step 5 Configure the EMU.188. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 60 to 62 standard vlan 60 to 62 0/7 0-1 101 to 102 standard vlan 101 to 102 0/7 0-1 100 standard vlan 100 0/7 0-2 Step 7 Enable MSTP. huawei(config)#snmp-agent sys-info contact HW-075512345678 Configure the device local information.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Configure the contact information. MA5600-3 and MA5600-4. the SNMP version must be the same as that of NMS. the NMS version is set as SNMP V2C.56.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.188.188.188. 36-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.40 syslog-2 activate ip 217.71.40 add 217. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server. By default.57. huawei(config)#snmp-agent sys-info location Shenzhen China Configure the SNMP version.39 securityname public 7. Therefore. 6.189.38 securityname public huawei(config)#snmp-agent target-host trap address 195. This section takes the fan and PS4845 power supply as examples to show how to configure the environment monitoring unit (EMU).251. huawei(config)#emu add 0 power4845 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-power4845-0)#power module-num 2 1 2 huawei(config-if-power4845-0)#quit Step 6 Configure SCU subtending MA5600-1 is subtended with MA5600-2.71. huawei(config)#snmp-agent target-host trap address 195. huawei(config)#ntp-service unicast-server 193.189. Enable trap sending.131. In this example. both the primary and secondary node addresses of the fan EMU are 0.251. huawei(config)#snmp-agent trap enable standard Set the trap destination address. 2. The MA5600 supports the ADSL2+ service of multiple encapsulation modes. such as IPoA. huawei(config)#stp region-configuration huawei(stp-region-configuration)#region-name hwrg 3. 4. Enable the MSTP function. and PPPoE. see the chapter "21 Configuring the ADSL2+ Service. IPoE. Configure the ADSL2+ alarm profile. it may take several minutes. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-21 . You can configure the ADSL2+ alarm profile based on your needs.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example 1. For other encapsulation modes. PPPoA.are you sure to active region configuration? [Y/N][N]y Step 8 Configure ADSL2+ service. huawei(config)#stp enable set the MSTP region name." 1. Configure MSTP instance 1. huawei(stp-region-configuration)#active region-configuration STP actives region configuration. You can configure the ADSL2+ line profile based on your needs. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. huawei(stp-region-configuration)#instance 1 vlan 1 to 4094 Activate the configuration of the MSTP region. Configure the ADSL2+ line profile. The configuration of the upstream port of the SCU board shall be the same as that of the peer end. If the port works in non auto negotiation mode. In this example. see the chapter "22 Configuring the SHDSL Service. and PPPoE. 4. All ports of ADSL2+ board 0/3 provides ADSL2+ service. To add the service port in batches. and run the duplex command duplex to change the port duplex mode. run the multi-service-port command. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. Add the service port. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. Configure the upstream port. the default profile (profile 6) is used. Run the auto-neg command to set the port to work in auto negotiation mode. the MUX VLAN is used to identify the users. PPPoA. You can configure the ADSL2+ traffic profile by running the traffic table command based on your needs. In this case. change to the SCU config mode and run the speed command to change the port rate. l Configure the SCU board." 36-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) .36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. l Configure the VLAN. huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 9 Configure the SHDSL service. Configure the ADSL2+ traffic profile. huawei(config)#vlan 1000 to 1063 mux huawei(config)#port vlan 1000 to 1063 0/7 0-1 6. The MA5600 supports the SHDSL service of multiple encapsulation modes. Activate the ADSL2+ port. such as IPoA. The ADSL2+ users of MA5600-3 adopt the VLAN authentication. For other encapsulation modes. IPoE. the default profile (profile 1) is used.1.1. the MUX VLAN is used to identify the users.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example 1.1. In this example. huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp uplink-port 0/7/1 100 huawei(config-btv)#igmp uplink-port-mode mstp l Configure the program library. huawei(config)#vlan 1300 to 1331 mux huawei(config)#port vlan 1300 to 1331 0/7 0-1 6. run the shdsl alarm-profile add command. Configure the subtending multicast. huawei(config-btv)#igmp cascade-port 0/7/0 huawei(config-btv)#igmp cascade-port 0/7/1 huawei(config-btv)#igmp cascade-port 0/7/2 l Modify the subtending port.2 vlan 100 huawei(config-btv)#igmp program add name program3 ip 224. In this case. 4.1. huawei(config)#btv huawei(config-btv)#igmp mode proxy l Configure the upstream port to work in the program mode. Huawei Technologies Proprietary 36-23 Issue 04 (2007-11-30) . 3. run the shdsl line-profile add or shdsl line-profile quickadd command. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2.1. run the traffic table command. Configure the SHDSL traffic profile. Activate the SHDSL port. huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 10 Configure the subtending multicast service. To add the service ports in batches. In this example. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#native-vlan 1 vlan 100 l Enable the multicast proxy.3 vlan 100 2.1 vlan 100 huawei(config-btv)#igmp program add name program2 ip 224. The SHDSL users of MA5600-3 adopt the VLAN authentication. Configure the upstream port. Configure the SHDSL line profile. Configure the upstream port. l Specify the subtending port. To configure the SHDSL line profile. l Configure the native VLAN. To configure the SHDSL alarm profile. huawei(config-btv)#igmp program add name program1 ip 224. Add the service port. Configure the SHDSL alarm profile. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all profile-index 10 huawei(config-if-shdsl-0/5)#quit 5. run the multi-service-port command. the default profile (profile 1) is used. To configure the SHDSL traffic profile. Ports 0-31 of board 0/5 provide the SHDSL service.1. 1. 1. huawei(config)#port vlan 10 0/7 0 Enter NMS VLAN interface mode. huawei(config-btv)#quit huawei(config)#save ----End 36.189.6 Configuring MA5600-4 The following shows how to configure MA5600-4.255. huawei(config)#interface vlanif 10 Configure the IP address of the NMS VLAN interface.1 preference 1 l Configure the route destined to the log host.2 224.1.0 255. Configure the IP address of the inband NMS interface.176. huawei(config)#ip route-static 193.0 255.8. Procedure Step 1 Confirm the board.1. huawei(config)#ip route-static 217.3 224.0 10.188.1.1.1.1.8.1.56.255.176.1.176.71. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.0 255.1.255.255.3 Step 11 Save the data.0 255.8.1 224.8.188.1 224.0 2.1. huawei(config)#vlan 10 standard Add the upstream port.255.1.1 224.1.1.2 224.8.1.1.0 10. huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp huawei(config-btv)#igmp static-join static-join static-join static-join static-join static-join static-join static-join static-join cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port cascade-port 0/7/0 0/7/0 0/7/0 0/7/1 0/7/1 0/7/1 0/7/2 0/7/2 0/7/2 ip ip ip ip ip ip ip ip ip 224.1 preference 1 huawei(config)#ip route-static 217.0 10.1.255.1 preference 1 l Configure the route destined to the time server.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-btv)#igmp cascade-port modify 0/7/0 static enable huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable huawei(config-btv)#igmp cascade-port modify 0/7/2 static enable l Add programs to the static subtending port.0 10. l Configure the route destined to the NMS (Trap destination host).131.255.2 224.176.255.57.255.255. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS.5 255.8.176.1.2 36-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) .176. 1. Add the route. l l l l Create the NMS VLAN. huawei(config)#ip route-static 195. Add the ACL rule.3 224.251.1 preference 1 3. huawei(config-if-vlanif10)#ip address 10. 2 0. huawei(config)#ntp-service unicast-server 193.0 destination 10.8.2 0. huawei(config)#snmp-agent target-host trap address 195. In this example. This section takes the fan and PS4845 power supply as examples to show how to configure the environment monitoring unit (EMU). huawei(config)#snmp-agent sys-info contact HW-075512345678 Configure the device local information.2 0.0 destination 10.0.0 destination 10. both the primary and secondary node addresses of the fan EMU are 0.176.251.188. Enable trap sending. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Configure the contact information.0.0.0.0.71.176.8.40 Step 5 Configure the EMU.71.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.0.42 source-interface vlanif 10 Step 4 Configure the log host.0 destination 10.0 huawei(config-acl-adv-3010)#rule permit ip source 217.2 0.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4.176.40 0.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example 0.0 destination 10.176.39 securityname public 7. 6.0.40 syslog-2 activate ip 217. Set the trap source address.0. you need to set the DIP switch of the node address on the fan monitoring unit as 1.2 0.176. In this case.188.131.56. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server.176.42 0.189.0 huawei(config-acl-adv-3010)#rule permit ip source 195.188.0.0. In this example.38 0. huawei(config)#emu add 0 power4845 0 0 fore huawei(config)#emu add 1 fan 0 1 back Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-25 .40 add 217.251.0.40 syslog-1 activate ip 217.189.188.131.188. Configure the SNMP.0.56.40 0. l Configure the community name and access authority.188.0.57.0.8.0 destination 10. Here.71.0.0.2 0.251.131.0 huawei(config-acl-adv-3010)#rule permit ip source 193.71.251. huawei(config)#snmp-agent trap enable standard Set the trap destination address.57.0.0.8.56. the SNMP version must be the same as that of NMS.189. huawei(config)#snmp-agent sys-info version v2c 5.57.131.189.8. suppose they are 1.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193. By default.0.0. huawei(config)#snmp-agent sys-info location Shenzhen China Configure the SNMP version.39 0.8.0.38 0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217. the NMS version is set as SNMP V2C.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.38 securityname public huawei(config)#snmp-agent target-host trap address 195.0. For other encapsulation modes. Configure the ADSL2+ alarm profile. PPPoA. This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. huawei(config)#pitp enable pmode Step 7 Configure ADSL2+ service. Configure the ADSL2+ line profile.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#interface emu 0 huawei(config-if-power4845-0)#power module-num 2 1 2 huawei(config-if-power4845-0)#quit Step 6 Enable PITP. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > The > The > The > The > number number number number of of of of Loss of Loss of Loss of Errored Frame Seconds (0~900) [0]: Signal Seconds (0~900) [0]: Power Seconds (0~900) [0]: Seconds (0~900) [0]: 36-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) . and PPPoE. see the chapter "21 Configuring the ADSL2+ Service." 1. You can configure the ADSL2+ line profile based on your needs. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. such as IPoA. The MA5600 supports the ADSL2+ service of multiple encapsulation modes. IPoE. You can configure the ADSL2+ alarm profile based on your needs. run the shdsl line-profile add or shdsl line-profile quickadd command. and run the duplex command duplex to change the port duplex mode. In this case. All ports of ADSL2+ board 0/3 provides ADSL2+ service." 1. For other encapsulation modes. The configuration of the upstream port of the SCU board shall be the same as that of the peer end. such as IPoA. Configure the upstream port. The MA5600 supports the SHDSL service of multiple encapsulation modes. IPoE. run the multi-service-port command. huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-3163 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 8 Configure the SHDSL service. Run the auto-neg command to set the port to work in auto negotiation mode. The ADSL2+ users of MA5600-4 adopt the PPPoE authentication. In this example.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. change to the SCU config mode and run the speed command to change the port rate. the smart VLAN is used to identify the users. To configure the SHDSL line profile. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. If the port works in non auto negotiation mode. To add the service port in batches. Add the service port. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. the default profile (profile 6) is used. Configure the SHDSL line profile. l Configure the SCU board. and PPPoE. huawei(config)#vlan 1000 smart huawei(config)#port vlan 1000 0/7 0 6. Activate the ADSL2+ port. You can configure the ADSL2+ traffic profile by running the traffic table command based on your needs. Configure the ADSL2+ traffic profile. see the chapter "22 Configuring the SHDSL Service. l Configure the VLAN. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-27 . PPPoA. 4. Configure the xDSL. 3. the default profile (profile 1) is used. Activate the SHDSL port. The SHDSL users of MA5600-4 adopt the PPPoE authentication. In this example. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 1 l Create a traffic profile. run the multi-service-portcommand. After the configuration.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 2. Users of port 0/2/3 do not need authenticating. 4. the default profile (profile 1) is used. The default line profile (profile 1002) is used. In this example. Huawei Technologies Proprietary Issue 04 (2007-11-30) 36-28 . Configure the upstream port. To configure the SHDSL alarm profile. run the traffic table command. Configure the VLAN. it is unnecessary to configure the xDSL. huawei(config)#vlan 100 smart Set the VLAN upstream port. huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 3. and have rights to watch two programs and to preview one program. the smart VLAN is used to identify the users. To add the service ports in batches. To configure the SHDSL traffic profile. run the shdsl alarm-profile add command. Configure the SHDSL alarm profile. Configure the multicast service. l Enable the multicast proxy function. l l l Create a smart VLAN. huawei(config)#traffic table index 8 ip car off priority 5 priority-policy Pvc-Setting l Add ADSL2+ ports 0/2/2 and 0/2/3 to VLAN 100. In this case. In this example. Add the service port. 2. huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 9 Configure the multicast service. l 1. huawei(config)#port vlan 100 0/7 0 Configure the native VLAN. Ports 0-30 of SHDSL board 0/5 provides the SHDSL service. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all profile-index 10 huawei(config-if-shdsl-0/5)#quit 5. Configure the SHDSL traffic profile. the following results shall be achieved: l Users of port 0/2/2 must be authenticated. huawei(config)#vlan 1300 smart huawei(config)#port vlan 1300 0/7 0 6. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#btv huawei(config-btv)#igmp mode proxy l l l 36 MSTP Networking Example Set the upstream port.3 vlan 100 bind 0/7/0 l Configure the authority profile.1. 1.1. huawei(config-btv)#igmp preview auto-reset-time 00:00:00 l Configure the user data. run the igmp preview autoreset-time command. the number of preview attempts as 6 each day and the preview interval as 60s. huawei(config-btv)#igmp preview program name program3 preview-duration 150 huawei(config-btv)#igmp preview program name program3 preview-times 6 huawei(config-btv)#igmp preview program name program3 preview-interval 60 To set the time to clear the previous preview attempts.1.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview l Configure the preview parameters. Huawei Technologies Proprietary 36-29 . Issue 04 (2007-11-30) Configure the IP address of the inband NMS interface. Procedure Step 1 Confirm the board. set the time to 00:00:00. huawei(config-btv)#igmp uplink-port 0/7/0 100 Set the upstream port to work in program mode. huawei(config)#save ----End 36. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS.1. In this example.1. huawei(config-btv)#igmp program add name program1 ip 224. set the preview duration for program 3 as 150s.7 Configuring MA5600-5 The following shows how to configure MA5600-5. huawei(config-btv)#igmp user add port 0/2/3 adsl 0 35 no-auth huawei(config-btv)#igmp user add port 0/2/2 adsl 0 35 auth huawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0 Step 10 Save the data. In this example.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224. huawei(config-btv)#igmp uplink-port-mode program Configure the program library.1. 0.189.8. huawei(config)#ip route-static 195.0 2. huawei(config)#vlan 10 standard Add the upstream port.2 0.176.0.0.0.255.255.131.8.38 0.2 0.0.0.38 255.176. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Configure the contact information.2 0.176.176.40 0.2 0.1 preference 1 l Configure the route destined to the time server.0.255.56.0.6 255.0.131.0.176.176.0.8.40 255. Add the route.38 255.8.8.0.251.255.0. 36-30 Enable trap sending.0.56.0 destination 10.255 10. l Configure the route destined to the NMS (Trap destination host).0 huawei(config-acl-adv-3010)#rule permit ip source 195.188.2 0.0 destination 10.0 destination 10.8.2 0.0. huawei(config)#interface vlanif 10 Configure the IP address of the NMS VLAN interface.0. Configure the SNMP.0 huawei(config-acl-adv-3010)#rule permit ip source 217.255.1 preference 1 3.8.0 huawei(config-acl-adv-3010)#rule permit ip source 193.0.0.57.0.8.189.0. huawei(config)#snmp-agent sys-info contact HW-075512345678 Configure the device local information.57. huawei(config)#ip route-static 193.40 255.0.251.255 10.176.39 0. Add the ACL rule.176.255.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4.42 0.0 destination 10.0.0.176. huawei(config)#snmp-agent sys-info version v2c 5.189. huawei(config)#ip route-static 217. huawei(config)#port vlan 10 0/7 0 Enter NMS VLAN interface mode. 6.188.0 huawei(config-acl-adv-3010)#rule permit ip source 193.131.8. huawei(config-if-vlanif10)#ip address 10. l Configure the community name and access authority. the NMS version is set as SNMP V2C.255.0 huawei(config-acl-adv-3010)#rule permit ip source 217. Huawei Technologies Proprietary Issue 04 (2007-11-30) . huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.176.255 10. huawei(config)#snmp-agent sys-info location Shenzhen China Configure the SNMP version.176.40 0.8.255.188.0.38 0.0.71.0 destination 10.0 destination 10.36 MSTP Networking Example l l l l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Create the NMS VLAN.8.251.0. Here.255.1 preference 1 huawei(config)#ip route-static 217.1 preference 1 l Configure the route destined to the log host.71.2 0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.255 10. In this example. the SNMP version must be the same as that of NMS.188.8.255.71. huawei(config)#snmp-agent trap enable standard Set the trap destination address.176. 188.131.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36 MSTP Networking Example huawei(config)#snmp-agent target-host trap address 195.42 source-interface vlanif 10 Step 4 Configure the log host. 4. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.56. In this case. 2.40 syslog-2 activate ip 217.71. Create VLAN 50.188.251.251. Note that the VPI and VCI values of the service port must be the same as those on the modem. select the profile that supports PVC-priority policy. suppose they are 1. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server.40 add 217.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193. MA5600-1 and MA5600-5 serve two branches of a company to provide the QinQ leased line service. you need to set the DIP switch of the node address on the fan monitoring unit as 1. To add the service port.189. In this example.131.39 securityname public 7. This section takes the fan and PS4845 power supply as examples to show how to configure the EMU.189. huawei(config)#vlan 50 mux Set VLAN50 as QinQ VLAN.188. 3. By default. huawei(config)#emu add 0 power4845 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-powe4845-0)#power module-num 2 1 2 huawei(config-if-power4845-0)#quit Step 6 Configure the QinQ leased line service. huawei(config)#port vlan 50 0/7 0 Add the service port.57. huawei(config)#ntp-service unicast-server 193. In this case.188. 1. huawei(config)#save ----End Issue 04 (2007-11-30) Huawei Technologies Proprietary 36-31 . huawei(config)#vlan attrib 50 q-in-q Add the upstream port. huawei(config)#traffic table index 7 ip car off priority 0 priority-policy pvcSetting huawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 Step 7 Save the data. run the service-port command.57.40 syslog-1 activate ip 217. The QinQ VLAN supports the PVC-priority scheduling policy only. both the primary and secondary node addresses of the fan EMU are 0.56.40 Step 5 Configure the EMU.71. Set the trap source address.38 securityname public huawei(config)#snmp-agent target-host trap address 195. 8 Verification All services configured on all DSLAMs run in the normal state.36 MSTP Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 36. 36-32 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example 37 Subtending Networking Example About This Chapter This chapter describes the subtending networking example supported by the MA5600.3 Configuring MA5600-1 The section describes how to configure the MA5600-1.4 Configuring MA5600-2 The section describes how to configure the MA5600-2. Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-1 . 37. 37.6 Configuring MA5600-4 The section describes how to configure the MA5600-4.7 Verification All services configured on all DSLAMs run in the normal state. 37. 37.1 Networking The section describes a sample subtended network.5 Configuring MA5600-3 The section describes how to configure the MA5600-3. 37.2 Data Plan The section describes the data plan for the sample subtended network. 37. 37. 37-2 Huawei Technologies Proprietary Issue 04 (2007-11-30) .1 Networking The section describes a sample subtended network. Figure 37-1 shows a sample subtended network of the MA5600.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37. The MA5600-2 is subtended with MA5600-3 through the GE port on the SCU board. As shown in Figure 37-1: l l The MA5600-1 is subtended with MA5600-2 through the GE port on the SCU board. 2 Data Plan The section describes the data plan for the sample subtended network.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example Figure 37-1 Sample subtended network of the MA5600 SoftSwitch Multicast server ISP1 ISP2 ISP3 DHCP server iManager N2000 IP LAN switch BRAS 2 3 5 6 7 0 1 5 7 0 A D G E A D G E S A H I E U A G S H E A SCU MA5600-1 2 3 5 7 0 1 SCU MA5600-4 6 7 A I U A 0 1 14 A D L A A D G E A D G E S H E A MMX ATM-DSLAM 2 3 5 SCU 7 0 MA5600-2 HG STB A D G E A D G E S H E A SCU Ephone TV PC ADSL2+ modem MA5600-3 PC 37. Table 37-1 lists the service and data plan of MA5600 for the sample subtended network in Figure 37-1. Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-3 . 8.255.176.8.8.255.1/24 Upstream: 0/7/0 10.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Table 37-1 Data plan for the sample subtended network MA5600-1 Service l MA5600-2 l MA5600-3 l MA5600-4 QinQ leased line service (for leased line interconnectio n between MA5600-4 and MA5600-1) ATMDSLAM ADSL ADSL2+ service SHDSL service VDSL service QinQ leased line service (for leased line interconne ction between MA5600 and MA5600 -4) Multicast service ADSL2+ service SHDSL service Stacking wholesale service Triple Play service ADSL2+ service SHDSL service Multicast service l l l l l l l l l Inband NMS address 10.4 255. 0 Gateway: 10.255.255. 0 Gateway: 10.176.2 255.176.1/24 Upstream: 0/7/0 Subtending: 0/7/1 10.176.255.8.255.176.176.176.6 255.8.8.3 255.255.176.8. 0 Gateway: 10.255.8.176.1/24 - GE port of the SCU board Upstream: 0/7/0 Subtending: 0/7/1 37-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) .255.5 255.176. 0 Gateway: 10.8.1/24 10.1/24 Upstream: 0/7/0 10.255.8. 0 Gateway: 10. 1/24 Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-5 .1.4.38 and 193.188. ISP1) 0/2/11-20 (map VLAN 61.131.56.71.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example MA5600-1 VLAN NMS: 10 QinQ: 50 Multicast: 100 ADSL2+: 1000-1063 (adopt VLAN authenticatio n) SHDSL: 1300-1330 (adopt VLAN authenticatio n) MA5600-2 NMS: 10 Stacking: 60-62 (inner label: 111-113) Triple Play: 100-102 ADSL2+: 1000 (adopt PPPoE authentication ) SHDSL: 1300 (adopt PPPoE authentication ) ADSL2+: 0/3 SHDSL: 0/5 Stacking: 0/2/0-10 (map VLAN 60.251.71.3 (standby) Gateway: 10.251. fan monitoring DHCP server1: 10.40 193.1.42 DC DIS monitoring. ISP2) 0/2/21-30 (map VLAN 62.189.1.1. 10.3 (standby) Gateway: 10.1. ISP3) Triple Play: 0/2/31 MA5600-3 NMS: 10 Multicast: 100 ADSL2+: 1000 (adopt PPPoE authentication ) SHDSL: 1300 (adopt PPPoE authentication ) MA5600-4 NMS: 10 QinQ: 50 ATMDSLAM - Slot and port ADSL2+: 0/3 SHDSL: 0/5 QinQ: 0/5/31 Multicast: 0/2/2.188.2 (active).131.40 and 217. 10.4.4.38 and 195.4.189.4.4.2 (active).57. 0/2/3 ADSL2+: 0/3 SHDSL: 0/5 QinQ: 0/5/31 ADSL: 0/14 NMS host Log host Time server EMU DHCP server 195.39 217.1.1/24 DHCP server2: 10. 1 preference 1 l Configure the route destined to the time server.251. 37.255.10.255.255. huawei(config)#ip route-static 193. huawei(config-if-vlanif10)#ip address 10.176. 1.255. huawei(config)#vlan 10 standard Add the upstream port.1 preference 1 37-6 Huawei Technologies Proprietary Issue 04 (2007-11-30) .38 255. Different services carry different 802. MA5600-1 can be replaced with a GE switch or a BRAS.131.255 10.255 10. and QinQ function. l l l l Create the NMS VLAN.131.1 preference 1 huawei(config)#ip route-static 195.71.255.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide MA5600-1 Upper layer device MA5600-2 MA5600-3 MA5600-4 ATMDSLAM The upper layer device supports the DHCP Option82 function.176.8.1/24. you can aggregate multiple upstream ports for use.8. Add the route. The BRAS supports inner and outer VLAN tags. huawei(config)#interface vlanif 10 Configure the IP address of the NMS interface. In the actual network planning. The BRAS supports the PITP.176.71.255. l Configure the route destined to the NMS (Trap destination address).176.189. The upper layer device classifies the downstream traffic.10.8.38 255.255. The VLAN ID of the traffic flow sent from the IP network to the DSLAM is 100. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS. huawei(config)#port vlan 10 0/7 0-1 Enter NMS VLAN interface mode. Procedure Step 1 Confirm the board.2 255. huawei(config)#ip route-static 195.8. The VLAN mapping to the DSLAM is configured at the upper layer device. Stacking.0 2. Configure the IP address of the inband NMS interface.255 10.255.1p labels. The IP address of the LAN switch at the MA5600 side is 10. The upstream port of theThe MA5600 supports the port aggregation function.39 255. NOTE l l In this networking.3 Configuring MA5600-1 The section describes how to configure the MA5600-1. 40 0.0. huawei(config)#snmp-agent target-host trap address 195.255.176.38 0.131.0.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4.0. In this example.0 huawei(config-acl-adv-3010)#rule permit ip source 217.0.38 0.176.0.251. huawei(config)#snmp-agent trap enable standard Set trap destination address.56.176.2 0.255 10.176.0.8.1 preference 1 huawei(config)#ip route-static 217.0.0.188.0 destination 10.131.188.8.255.0 destination 10.42 source-interface vlanif 10 Step 4 Configure the log host.188.176.176.8. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Set the SysContact.251.0 huawei(config-acl-adv-3010)#rule permit ip source 193.0.2 0.189.0.40 Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-7 .57. the SNMP version must be the same as that of the NMS.0 destination 10.255.38 securityname public huawei(config)#snmp-agent target-host trap address 195.2 0.255 10.8.2 0. huawei(config)#ip route-static 217.176.0 huawei(config-acl-adv-3010)#rule permit ip source 217.42 0.2 0. 6. huawei(config)#snmp-agent sys-info location Shenzhen China Set the SNMP version. Set the trap source address.71.189.189.0. Here.255.0 huawei(config-acl-adv-3010)#rule permit ip source 193.40 255.8. Add the ACL rule.251.0 huawei(config-acl-adv-3010)#rule permit ip source 195.42 255.0. l Set the community name and access authority. Configure the SNMP.0.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.71.0.0.56.189.251.188. the SNMP version is set as SNMP V2C.131.255.0 destination 10.255 10.188. huawei(config)#snmp-agent sys-info contact HW-075512345678 Set the SysLocation.40 0.0.57.40 syslog-1 huawei(config)#loghost activate ip 217.255.0.1 preference 1 l Configure the route destined to the log host.176.8.0.0 destination 10. huawei(config)#snmp-agent sys-info version v2c 5.1 preference 1 3.71.0.2 0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.0.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example huawei(config)#ip route-static 193. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server.8.131.176.0.56.0.56.0.0 destination 10. huawei(config)#loghost add 217.8. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.176.39 securityname public 7.0.0.2 0. huawei(config)#ntp-service unicast-server 193.39 0.189.40 255.8.251. Enable trap sending.8.188.71.0. both the primary and secondary node addresses of the fan EMU are 0. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 60 to 62 standard vlan 60 to 62 0/7 0-1 101 to 102 standard vlan 101 to 102 0/7 0-1 Step 7 Configure the ADSL2+ service. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. such as IPoA. This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. Therefore subtending shall be configured. and PPPoE.188. PPPoA.57. IPoE.57. By default. you need to set the DIP switch of the node address on the fan monitoring unit as 1. Configure the ADSL2+ line profile." 1. You can configure it based on your actual needs. MA5600-1 is subtended with MA5600-2 andMA5600-3.40 Step 5 Configure the EMU.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#loghost add 217. In this example. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: 37-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . You can configure it based on your actual needs. suppose they are 1. huawei(config)#emu add 0 dis 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-dis-0)#distribution humidity 95 10 huawei(config-if-dis-0)#distribution temperature 50 0 huawei(config-if-dis-0)#quit Step 6 Configure the SCU subtending. For other encapsulation modes. Configure the ADSL2+ alarm profile. see the chapter "21 Configuring the ADSL2+ Service. This section uses the fan and DC DIS monitoring as an example to show how to configure the EMU.188. In this case. The MA5600 supports the ADSL2+ service of multiple encapsulation modes.40 syslog-2 huawei(config)#loghost activate ip 217. 4. Configure the upstream port. run the speed and duplex command in SCU board config mode. huawei(config)#vlan 1000 to 1063 mux huawei(config)#port vlan 1000 0/7 0-1 huawei(config)#port vlan 1001 to 1063 0/7 0 6. Add the service port. l Configure the VLAN. the MUX VLAN is used to identify the users. Configure the ADSL2+ traffic profile. The settings must be the same as those of the peer end. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. To change the port working mode and the port rate. To add the virtual ports in batches. In this example. All ports of ADSL2+ board 0/3 provide the ADSL2+ service. run the traffic table command. the GE optical port of the GIU board works in full duplex mode with the rate of 1000 Mbit/s. The ADSL2+ users of MA5600-1 adopt the VLAN authentication. Activate the ADSL2+ port. By default. l Configure the SCU board. Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-9 .SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. In this case. run the multi-service-port command. the default profile (profile 6) is used. To configure the ADSL2+ traffic profile. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2. For other encapsulation modes. run the traffic table command. To configure the SHDSL alarm profile. Configure the SHDSL alarm profile. 2. see the chapter 22 Configuring the SHDSL Service. Configure the upstream port. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. 3. huawei(config)#port vlan 50 0/7 0 Add the service port. Add the service port. In this example. the default profile (profile 1) is used. huawei(config)#vlan 1300 to 1330 mux huawei(config)#port vlan 1300 0/7 0-1 huawei(config)#port vlan 1301 to 1330 0/7 0 6. 1. the default profile (profile 6) is used. 4. run the multi-service-port command. huawei(config)#vlan 50 mux Set VLAN 50 as QinQ VLAN. 1. PPPoA. To configure the SHDSL traffic profile. MA5600-1 and MA5600-4 serve two branches of a company to provide the QinQ leased line service. To configure the SHDSL line profile. 3. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all profile-index 10 huawei(config-if-shdsl-0/5)#quit 5. In this case. Huawei Technologies Proprietary Issue 04 (2007-11-30) . the MUX VLAN is used to identify the users. run the shdsl line-profile add or shdsl line-profile quickadd command. The SHDSL users of MA5600-1 adopt the VLAN authentication. To add the service ports in batches. huawei(config)#multi-service-port from-vlan 1300 port 0/5 0-31 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 9 Configuring the QinQ leased line service.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#multi-service-port from-vlan 1000 port 0/3 0-63 vpi 0 vci 35 rxcttr 6 tx-cttr 6 Step 8 Configure the SHDSL service. IPoE. l l Ports 0-31 of SHDSL board 0/5 provide the SHDSL service. huawei(config)#vlan attrib 50 q-in-q Add the upstream port. run the shdsl alarm-profile add command. In this example. such as IPoA. 37-10 Create VLAN 50. The MA5600 supports the SHDSL service of multiple encapsulation modes. Configure the SHDSL line profile. 4. Configure the SHDSL traffic profile. Activate the SHDSL port. and PPPoE. huawei(config-btv)#igmp uplink-port 0/7/0 100 Set the upstream port to work in program mode. Configure the multicast service. the egress will remove the tag of the packet. That is. run the service-port command. huawei(config)#traffic table index 7 ip car off priority 0 priority-policy pvcSetting huawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 Step 10 Configure the multicast service.1. huawei(config-btv)#igmp program add name program1 ip 224. select the profile that supports PVC-priority policy. huawei(config-btv)#igmp uplink-port-mode program Configure the program library. huawei(config)#btv huawei(config-btv)#igmp mode proxy l l l Set the upstream port.1. Configure the xDSL. After the configuration. l Enable the multicast proxy function. the tagged packet becomes to the untagged packet (without VLAN ID) after the tagged packet passes through the egress. huawei(config)#vlan 100 smart Configure the VLAN upstream port.1. In this example. NOTE When the VLAN ID of the tag packet is the same as that of the native VLAN of the egress. huawei(config)#interface scu 0/7 huawei(config-if-giu-0/7)#native-vlan 0 vlan 100 huawei(config-if-giu-0/7)#native-vlan 1 vlan 100 l Create the traffic profile. The default line profile (profile 1002) is used.2 vlan 100 bind 0/7/0 Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-11 .1. huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8 txcttr 8 huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8 txcttr 8 3. l 1. Note that the VPI and VCI values of the virtual port must be the same as those on the modem. and have rights to watch two programs and to preview one program. Users of port 0/2/3 do not need to be authenticated. huawei(config)#traffic table index 8 ip car off priority 5 priority-policy Pvc-Setting l Add ADSL2+ ports 0/0/2 and 0/0/3 to VLAN 100. Configure the VLAN. it is unnecessary to configure the xDSL. In this case. 2. l l l Create a VLAN.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224. huawei(config)#port vlan 100 0/7 0-1 Configure the native VLAN. the following results shall be achieved: l Users of port 0/2/2 need to be authenticated.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example To add the virtual port. The QinQ VLAN supports the PVC-priority scheduling policy only. 3. Configure the multicast for the subtending port. In this example.4 Configuring MA5600-2 The section describes how to configure the MA5600-2. set the time to 00:00:00.2 huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1. huawei(config-btv)#igmp preview program name program3 preview-duration 150 huawei(config-btv)#igmp preview program name program3 preview-times 6 huawei(config-btv)#igmp preview program name program3 preview-interval 60 To set the time to clear the previous preview attempts. huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224. huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable Add programs for the static subtending port.1. Set the upstream port. In this example. huawei(config-btv)#igmp user add port 0/2/3 no-auth huawei(config-btv)#igmp user add port 0/2/2 auth huawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0 Step 11 Configure the subtending multicast service. 4.3 Step 12 Save the data. 2. and the preview interval as 60s. 3. huawei(config-btv)#igmp preview auto-reset-time 00:00:00 l Configure the multicast user.3. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview l Set the preview parameters.1. the number of preview attempts as 6 each day. Configure the program library.3.3 vlan 100 bind 0/7/0 l Configure the authority profile. The program library is already configured in 10. The IGMP proxy is already configured in 10.1.37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config-btv)#igmp program add name program3 ip 224. run the igmp preview autoreset-time command.1. l l l Specify a subtending port.1. Configure the IGMP proxy.1. 37-12 Huawei Technologies Proprietary Issue 04 (2007-11-30) . The upstream port is already configured in 10. huawei(config-btv)#igmp cascade-port 0/7/1 Modify a subtending port.1 huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224. huawei(config-btv)#quit huawei(config)#save ----End 37. 1.1. set the preview duration for program 3 as 150s. SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example Procedure Step 1 Confirm the board. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS. 1. Configure the IP address of the inband NMS interface. l l l l Create the NMS VLAN. huawei(config)#vlan 10 standard Add the upstream port. huawei(config)#port vlan 10 0/7 0-1 Enter NMS VLAN interface mode. huawei(config)#interface vlanif 10 Configure the IP address of the NMS interface. huawei(config-if-vlanif10)#ip address 10.8.176.3 255.255.255.0 2. Add the route. l Configure the route destined to the NMS (Trap destination address). huawei(config)#ip route-static 195.71.131.38 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 195.71.131.39 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the time server. huawei(config)#ip route-static 193.189.251.38 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 193.189.251.42 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the log host. huawei(config)#ip route-static 217.188.56.40 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 217.188.57.40 255.255.255.255 10.8.176.1 preference 1 3. Add the ACL rule. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4. Configure the SNMP. l Set the community name and access authority. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l Set the SysContact. Huawei Technologies Proprietary 37-13 Issue 04 (2007-11-30) 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#snmp-agent sys-info contact HW-075512345678 l l Set the SysLocation. huawei(config)#snmp-agent sys-info location Shenzhen China Set the SNMP version. Here, the SNMP version must be the same as that of the NMS. In this example, the SNMP version is set as SNMP V2C. huawei(config)#snmp-agent sys-info version v2c 5. 6. Enable trap sending. huawei(config)#snmp-agent trap enable standard Set trap destination address. huawei(config)#snmp-agent target-host trap address 195.71.131.38 securityname public huawei(config)#snmp-agent target-host trap address 195.71.131.39 securityname public 7. Set trap source address. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server. huawei(config)#ntp-service unicast-server 193.189.251.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10 Step 4 Configure the log host. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.188.56.40 syslog-1 activate ip 217.188.56.40 add 217.188.57.40 syslog-2 activate ip 217.188.57.40 Step 5 Configure EMU. This section uses the fan and DC DIS monitoring as an example to show how to configure the EMU. By default, both the primary and secondary node addresses of the fan EMU are 0. In this example, suppose they are 1. In this case, you need to set the DIP switch of the node address on the fan monitoring unit as 1. huawei(config)#emu add 0 dis 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-dis-0)#distribution humidity 95 10 huawei(config-if-dis-0)#distribution temperature 50 0 huawei(config-if-dis-0)#quit Step 6 Configure SCU subtending MA5600-2 is subtended with MA5600-3. Therefore subtending shall be configured transparently transmit the VLAN data of MA5600-3. There are four VLANs configured on MA5600-3, with the VLAN ID of 10, 100, 1000 and 1300. These VLAN are already configured with subtending, and it is unnecessary to configure them again. Step 7 Configure the ADSL2+ service. The MA5600 supports the ADSL2+ service of multiple encapsulation modes, such as IPoA, PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. For other encapsulation modes, see the chapter 21 Configuring the ADSL2+ Service. 37-14 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example 1. Configure the ADSL2+ line profile. You can configure it based on your actual needs. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. Configure the ADSL2+ alarm profile. You can configure it based on your actual needs. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. Configure the ADSL2+ traffic profile. To configure the ADSL2+ traffic profile, run the traffic table command. Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-15 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide In this example, the default profile (profile 6) is used. 4. Activate the ADSL2+ port. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. Configure the upstream port. l Configure the SCU board. By default, the GE optical port of the GIU board works in full duplex mode with the rate of 1000 Mbit/s. To change the port working mode and the port rate, run the speed and duplex command in SCU board config mode. The settings must be the same as those of the peer end. l Configure the VLAN. The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, the MUX VLAN is used to identify the users. huawei(config)#vlan 1000 smart huawei(config)#port vlan 1000 0/7 0-1 6. Add the service port. All ports of ADSL2+ board 0/3 provide the ADSL2+ service. To add the virtual ports in batches, run the multi-service-port command. huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 8 Configure the SHDSL service. The MA5600 supports the SHDSL service of multiple encapsulation modes, such as IPoA, PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. For other encapsulation modes, see the chapter "22 Configuring the SHDSL Service." 1. Configure the SHDSL line profile. To configure the SHDSL line profile, run the shdsl line-profile add or shdsl line-profile quickadd command. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2. Configure the SHDSL alarm profile. To configure the SHDSL alarm profile, run the shdsl alarm-profile add command. In this example, the default profile (profile 1) is used. 3. Configure the SHDSL traffic profile. To configure the SHDSL traffic profile, run the traffic table command. In this example, the default profile (profile 6) is used. 4. Activate the SHDSL port. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all 10 huawei(config-if-shdsl-0/5)#quit 37-16 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example 5. Configure the upstream port. The SHDSL users of MA5600-2 adopt the PPPoE authentication. In this case, the smart VLAN is used to identify the users. huawei(config)#vlan 1300 smart huawei(config)#port vlan 1300 0/7 0-1 6. Add the service port. l l Ports 0-31 of SHDSL board 0/5 provide the SHDSL service. To add the service ports in batches, run the multi-service-port command. huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 9 Configure the stacking multi-ISP wholesale service. l l l ISP1 provides users of ports 0/0/0 to 0/1/10 with the multi-ISP wholesale service. ISP2 provides users of ports 0/0/11 to 0/1/20 with the multi-ISP wholesale service. ISP3 provides users of ports 0/0/21 to 0/1/30 with the multi-ISP wholesale service. Create a stacking VLAN. huawei(config)#vlan 60 to 62 smart huawei(config)#vlan attrib 60 to 62 stacking huawei(config)#stacking outer-ethertype 0x8000 1. 2. 3. Add the upstream port. huawei(config)#port vlan 60 to 62 0/7 0 Add the service port. huawei(config)#multi-service-port vlan 60 adsl 0/2 0-10 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#multi-service-port vlan 61 adsl 0/2 11-20 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 huawei(config)#multi-service-port vlan 62 adsl 0/2 21-30 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 4. Configure the inner label. huawei(config)#stacking label vlan 60 baselabel 111 huawei(config)#stacking label vlan 61 baselabel 112 huawei(config)#stacking label vlan 62 baselabel 113 Step 10 Configure the triple play service. After the configuration, the following results shall be achieved: Uses of port 0/2/31 can watch the programs stored on servers 224.1.1.1 and 224.1.1.2, and can preview the programs stored on server 224.1.1.3. 1. Configure the upstream port and the VLAN. huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port huawei(config)#vlan huawei(config)#port 100 smart vlan 100 0/7 0-1 101 mux vlan 101 0/7 0 102 smart vlan 102 0/7 0 2. Configure the traffic table. The voice service has the highest priority, and the network access service has the lowest priority. Presume that the network access service uses traffic table 6, with the priority of 0. The following shows how to create the new traffic tables for the voice service and video service respectively. huawei(config)#traffic table index 7 ip car 1024 priority 7 priority-policy Pvc-Setting Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-17 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#traffic table index 8 ip car off priority 5 priority-policy PvcSetting 3. Configure the service port. huawei(config)#service-port vlan 100 adsl 0/2/31 vpi 0 vci 35 rx-cttr 8 tx-cttr 8 huawei(config)#service-port vlan 101 adsl 0/2/31 vpi 0 vci 36 rx-cttr 6 tx-cttr 6 huawei(config)#service-port vlan 102 adsl 0/2/31 vpi 0 vci 37 rx-cttr 7 tx-cttr 7 4. Configure DHCP relay mode for video service. l l Enable DHCP mode. huawei(config)#dhcp mode layer-3 option-60 Configure the DHCP server. huawei(config)#dhcp-server 1 ip 10.1.1.2 10.1.1.3 huawei(config)#dhcp domain video huawei(config-dhcp-domain-video)#dhcp-server 1 l Configure the gateway mapped to the DHCP domain. huawei(config)#interface vlanif 100 huawei(config-if-vlanif100)#ip address 10.1.1.1 24 huawei(config-if-vlanif100)#dhcp domain video gateway 10.1.1.1 l Enable DHCP Option82. huawei(config)#dhcp option82 enable 5. Configure DHCP relay mode for voice service. l Configure the DHCP server. huawei(config)#dhcp-server 2 ip 10.4.4.2 10.4.4.3 huawei(config)#dhcp domain voice huawei(config-dhcp-domain-voice)#dhcp-server 2 l Configure the gateway mapped to the DHCP domain. huawei(config)#interface vlanif 102 huawei(config-if-vlanif102)#ip address 10.4.4.1 24 huawei(config-if-vlanif102)#dhcp domain voice gateway 10.4.4.1 l Enable the DHCP option82. huawei(config)#dhcp option82 enable 6. Configure the video service. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 huawei(config-if-scu-0/7)#quit huawei(config)#btv huawei(config-btv)#igmp mode proxy huawei(config-btv)#igmp uplink-port 0/7/0 100 huawei(config-btv)#igmp uplink-port-mode program huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100 bind 0/7/0 huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview huawei(config-btv)#igmp user add port 0/2/31 auth huawei(config-btv)#igmp user bind-profile port 0/2/31 profile-name profile0 Step 11 Configure the subtending multicast service. 37-18 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example 1. 2. 3. 4. Configure the upstream port. The upstream port is already configured in 10.6. Configure the IGMP proxy. The IGMP proxy is already configured in 10.6. Configure the program library. The program library is already configured in 10.6 Configure the multicast for the subtending port. l l l Specify a subtending port. huawei(config-btv)#igmp cascade-port 0/7/1 Modify a subtending port. huawei(config-btv)#igmp cascade-port modify 0/7/1 static enable Add programs for the static subtending port. huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.1 huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.2 huawei(config-btv)#igmp static-join cascade-port 0/7/1 ip 224.1.1.3 Step 12 Save the data. huawei(config-btv)#quit huawei(config)#save ----End 37.5 Configuring MA5600-3 The section describes how to configure the MA5600-3. Procedure Step 1 Confirm the board. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS. 1. Configure the IP address of the inband NMS interface. l l l l Create the NMS VLAN. huawei(config)#vlan 10 standard Add the upstream port. huawei(config)#port vlan 10 0/7 0 Enter NMS VLAN interface mode. huawei(config)#interface vlanif 10 Configure the IP address of the NMS interface. huawei(config-if-vlanif10)#ip address 10.8.176.4 255.255.255.0 2. Add the route. l Configure the route destined to the NMS (Trap destination address). huawei(config)#ip route-static 195.71.131.38 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 195.71.131.39 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the time server. huawei(config)#ip route-static 193.189.251.38 255.255.255.255 10.8.176.1 preference 1 Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-19 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#ip route-static 193.189.251.42 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the log host. huawei(config)#ip route-static 217.188.56.40 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 217.188.57.40 255.255.255.255 10.8.176.1 preference 1 3. Add the ACL rule. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4. Configure the SNMP. l Set the community name and access authority. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l l l Set the SysContact. huawei(config)#snmp-agent sys-info contact HW-075512345678 Set the SysLocation. huawei(config)#snmp-agent sys-info location Shenzhen China Set the SNMP version. Here, the SNMP version must be the same as that of the NMS. In this example, the SNMP version is set as SNMP V2C. huawei(config)#snmp-agent sys-info version v2c 5. 6. Enable trap sending. huawei(config)#snmp-agent trap enable standard Set trap destination address. huawei(config)#snmp-agent target-host trap address 195.71.131.38 securityname public huawei(config)#snmp-agent target-host trap address 195.71.131.39 securityname public 7. Set trap source address. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server. huawei(config)#ntp-service unicast-server 193.189.251.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10 Step 4 Configure the log host. huawei(config)#loghost add 217.188.56.40 syslog-1 huawei(config)#loghost activate ip 217.188.56.40 37-20 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#loghost add 217.188.57.40 syslog-2 huawei(config)#loghost activate ip 217.188.57.40 37 Subtending Networking Example Step 5 Configure EMU. This section uses the fan and DC DIS monitoring as an example to show how to configure the EMU. By default, both the primary and secondary node addresses of the fan EMU are 0. In this example, suppose they are 1. In this case, you need to set the DIP switch of the node address on the fan monitoring unit as 1. huawei(config)#emu add 0 dis 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-dis-0)#distribution humidity 95 10 huawei(config-if-dis-0)#distribution temperature 50 0 huawei(config-if-dis-0)#quit Step 6 Configure the ADSL2+ service. The MA5600 supports the ADSL2+ service of multiple encapsulation modes, such as IPoA, PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describe how to configure the ADSL2+ service. For other encapsulation modes, see the chapter 21 Configuring the ADSL2+ Service. 1. Configure the ADSL2+ line profile. You can configure it based on your actual needs. huawei(config)#adsl line-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected >Do you want to name the profile (y/n) [n]:n > Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1 > Will you set basic configuration for modem? (y/n)[n]:n > Please select channel mode 0-interleaved 1-fast (0~1) [0]: > Will you set interleaved delay? (y/n)[n]:n >Please select form of transmit rate adaptation in downstream: > 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]: > Will you set SNR margin for modem? (y/n)[n]:n > Will you set parameters for rate? (y/n)[n]:y > Minimum transmit rate in downstream (32~32000 Kbps) [32]: > Maximum transmit rate in downstream (32~32000 Kbps) [24544]:8000 > Minimum transmit rate in upstream (32~3000 Kbps) [32]: > Maximum transmit rate in upstream (32~3000 Kbps) [1024]: Add profile 10 successfully 2. Configuring the ADSL2+ alarm profile. You can configure it based on your actual needs. huawei(config)#adsl alarm-profile add 10 Start adding profile Press 'Q' to quit the current configuration and new configuration will be neglected <ATU-C > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Link Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0] > Enable and disable the initial failure trap 0-disable 1-enable (0~1)[0]:1 > The number of failed fast retrain seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of positive difference between the current and the past transmit Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-21 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide rate in interleaved mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in fast mode (0~31968kbps) [0]: > Threshold of negative difference between the current and the past transmit rate in interleaved mode (0~31968kbps) [0]: <ATU-R > > The number of Loss of Frame Seconds (0~900) [0]: > The number of Loss of Signal Seconds (0~900) [0]: > The number of Loss of Power Seconds (0~900) [0]: > The number of Errored Seconds (0~900) [0]: > The number of severely errored seconds (0~900) [0]: > The number of unavailable seconds (0~900) [0]: > Threshold of positive difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of positive difference between the current rate in interleaved mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in fast mode (0~2968kbps) [0]: > Threshold of negative difference between the current rate in interleaved mode (0~2968kbps) [0]: Add profile 10 successfully and the past transmit and the past transmit and the past transmit and the past transmit 3. Configure the ADSL2+ traffic profile. To configure the ADSL2+ traffic profile, run the traffic table command. In this example, the default profile (profile 6) is used. 4. Activate the ADSL2+ port. huawei(config)#interface adsl 0/3 huawei(config-if-adsl-0/3)#deactivate all huawei(config-if-adsl-0/3)#alarm-config all profile-index 10 huawei(config-if-adsl-0/3)#activate all profile-index 10 huawei(config-if-adsl-0/3)#quit 5. Configure the upstream port. l Configure the SCU board. By default, the GE optical port of the GIU board works in full duplex mode with the rate of 1000 Mbit/s. To change the port working mode and the port rate, run the speed and duplex command in SCU board config mode. The settings must be the same as those of the peer end. l Configure the VLAN. The ADSL2+ users of MA5600-1 adopt the VLAN authentication. In this case, the MUX VLAN is used to identify the users. huawei(config)#vlan 1000 smart huawei(config)#port vlan 1000 0/7 0 6. Add the service port. All ports of ADSL2+ board 0/3 provides the ADSL2+ service. To add the virtual ports in batches, run the multi-service-port command. huawei(config)#multi-service-port vlan 1000 adsl 0/3 0-63 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 7 Configure the SHDSL service. The MA5600 supports the SHDSL service of multiple encapsulation modes, such as IPoA, PPPoA, IPoE, and PPPoE. This section takes the PPPoE mode as an example to describe how to configure the SHDSL service. For other encapsulation modes, see the chapter 22 Configuring the SHDSL Service. 37-22 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example 1. Configure the SHDSL line profile. To configure the SHDSL line profile, run the shdsl line-profile add or shdsl line-profile quickadd command. huawei(config)#shdsl line-profile quickadd 10 line two-wire rate 2048 2048 psd symmetric transmission Annex-A remote disable probe disable snr-margin ds-curr 10 ds-worst 10 us-curr 10 us-worst 10 bitmap 0x03 2. Configure the SHDSL alarm profile. To configure the SHDSL alarm profile, run the shdsl alarm-profile add command. In this example, the default profile (profile 1) is used. 3. Configure the SHDSL traffic profile. To configure the SHDSL traffic profile, run the traffic table command. In this example, the default profile (profile 6) is used. 4. Activate the SHDSL port. huawei(config)#interface shdsl 0/5 huawei(config-if-shdsl-0/5)#deactivate all huawei(config-if-shdsl-0/5)#alarm-config all 1 huawei(config-if-shdsl-0/5)#activate all 10 huawei(config-if-shdsl-0/5)#quit 5. Configure the upstream port. The SHDSL users of MA5600-3 adopt the PPPoE authentication. In this case, the smart VLAN is used to identify the users. huawei(config)#vlan 1300 smart huawei(config)#port vlan 1300 0/7 0-1 6. Add the service port. l l Ports 0-31 of SHDSL board 0/5 provide the SHDSL service. To add the service ports in batches, run the multi-service-port command. huawei(config)#multi-service-port vlan 1300 shdsl 0/5 0-31 vpi 0 vci 35 rx-cttr 6 tx-cttr 6 Step 8 Configure the multicast service. After the configuration, the following results shall be achieved: l Users of port 0/2/2 need to be authenticated, and have rights to watch two programs and to preview one program. Users of port 0/2 do not need to be authenticated. Configure the xDSL. In this example, it is unnecessary to configure the xDSL. The default line profile (profile 1002) is used. l 1. 2. Configure the VLAN. l l l Create a smart VLAN. huawei(config)#vlan 100 smart Set the VLAN upstream port. huawei(config)#port vlan 100 0/7 0 Configure the native VLAN. huawei(config)#interface scu 0/7 huawei(config-if-scu-0/7)#native-vlan 0 vlan 100 l Create the traffic profile. huawei(config)#traffic table index 8 ip car off priority 5 priority-policy pvc-Setting Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-23 37 Subtending Networking Example l SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Add ADSL2+ port 2 and 3 to VLAN 100. huawei(config)#service-port vlan 100 adsl 0/2/2 vpi 0 vci 35 rx-cttr 8 txcttr 8 huawei(config)#service-port vlan 100 adsl 0/2/3 vpi 0 vci 35 rx-cttr 8 txcttr 8 3. Configure the multicast service l Enable the multicast proxy function. huawei(config)#btv huawei(config-btv)#igmp mode proxy l l l Configure the upstream port. huawei(config-btv)#igmp uplink-port 0/7/0 100 Configure the upstream port to work in program mode. huawei(config-btv)#igmp uplink-port-mode program Configure the program library. huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program2 ip 224.1.1.2 vlan 100 bind 0/7/0 huawei(config-btv)#igmp program add name program3 ip 224.1.1.3 vlan 100 bind 0/7/0 l Configure the authority profile. huawei(config-btv)#igmp profile profile-name profile0 program-name program1 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program2 watch huawei(config-btv)#igmp profile profile-name profile0 program-name program3 preview l Configure the preview parameters. In this example, set the preview duration for program 3 as 150s, the number of preview attempts as 6 each day, and the preview interval as 60s. huawei(config-btv)#igmp preview program name program3 preview-duration 150 huawei(config-btv)#igmp preview program name program3 preview-times 6 huawei(config-btv)#igmp preview program name program3 preview-interval 60 To set the time to clear the previous preview attempts, run the igmp preview autoreset-time command. In this example, set the time to 00:00:00. huawei(config-btv)#igmp preview auto-reset-time 00:00:00 l Configure the user data. huawei(config-btv)#igmp user add port 0/2/3 no-auth huawei(config-btv)#igmp user add port 0/2/2 auth huawei(config-btv)#igmp user bind-profile port 0/2/2 profile-name profile0 Step 9 Save the data. huawei(config-btv)#quit huawei(config)#save ----End 37.6 Configuring MA5600-4 The section describes how to configure the MA5600-4. 37-24 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example Procedure Step 1 Confirm the board. huawei>enable huawei#config huawei(config)#board confirm 0 Step 2 Configure the NMS. 1. Configure the IP address of the inband NMS interface. l l l l Create the NMS VLAN. huawei(config)#vlan 10 standard Add the upstream port. huawei(config)#port vlan 10 0/7 0 Enter NMS VLAN interface mode. huawei(config)#interface vlanif 10 Configure the IP address of the NMS interface. huawei(config-if-vlanif10)#ip address 10.8.176.5 255.255.255.0 2. Add the route. l Configure the route destined to the NMS (Trap destination address). huawei(config)#ip route-static 195.71.131.38 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 195.71.131.39 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the time server. huawei(config)#ip route-static 193.189.251.38 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 193.189.251.42 255.255.255.255 10.8.176.1 preference 1 l Configure the route destined to the log host. huawei(config)#ip route-static 217.188.56.40 255.255.255.255 10.8.176.1 preference 1 huawei(config)#ip route-static 217.188.57.40 255.255.255.255 10.8.176.1 preference 1 3. Add the ACL rule. huawei(config)#acl 3010 huawei(config-acl-adv-3010)#rule permit ip source any destination any huawei(config-acl-adv-3010)#rule deny ip source any destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 195.71.131.39 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.38 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 193.189.251.42 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.56.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#rule permit ip source 217.188.57.40 0.0.0.0 destination 10.8.176.2 0.0.0.0 huawei(config-acl-adv-3010)#quit huawei(config)#packet-filter inbound ip-group 3010 port 0/7/0 huawei(config)#packet-filter inbound ip-group 3010 port 0/7/1 4. Configure the SNMP. l Set the community name and access authority. huawei(config)#snmp-agent community read public huawei(config)#snmp-agent community write private l Set the SysContact. Huawei Technologies Proprietary 37-25 Issue 04 (2007-11-30) 37 Subtending Networking Example SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide huawei(config)#snmp-agent sys-info contact HW-075512345678 l l Set the SysLocation. huawei(config)#snmp-agent sys-info location Shenzhen China Set the SNMP version. Here, the SNMP version must be the same as that of the NMS. In this example, the SNMP version is set as SNMP V2C. huawei(config)#snmp-agent sys-info version v2c 5. 6. Enable trap sending. huawei(config)#snmp-agent trap enable standard Set trap destination address. huawei(config)#snmp-agent target-host trap address 195.71.131.38 securityname public huawei(config)#snmp-agent target-host trap address 195.71.131.39 securityname public 7. Set trap source address. huawei(config)#snmp-agent trap source vlanif 10 Step 3 Configure the time server. huawei(config)#ntp-service unicast-server 193.189.251.38 source-interface vlanif 10 huawei(config)#ntp-service unicast-server 193.189.251.42 source-interface vlanif 10 Step 4 Configure the log host. huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost huawei(config)#loghost add 217.188.56.40 syslog-1 activate ip 217.188.56.40 add 217.188.57.40 syslog-2 activate ip 217.188.57.40 Step 5 Configure EMU. This section uses the fan and DC DIS monitoring as an example to show how to configure the EMU. By default, both the primary and secondary node addresses of the fan EMU are 0. In this example, suppose they are 1. In this case, you need to set the DIP switch of the node address on the fan monitoring unit as 1. huawei(config)#emu add 0 dis 0 0 fore huawei(config)#emu add 1 fan 0 1 back huawei(config)#interface emu 0 huawei(config-if-dis-0)#distribution humidity 95 10 huawei(config-if-dis-0)#distribution temperature 50 0 huawei(config-if-dis-0)#quit Step 6 Configure the QinQ leased line service. MA5600-4 and MA5600-1 serve two branches of a company to provide the QinQ leased line service. 1. 2. 3. 4. Create VLAN 50. huawei(config)#vlan 50 mux Set VLAN 50 as QinQ VLAN. huawei(config)#vlan attrib 50 q-in-q Add the upstream port. huawei(config)#port vlan 50 0/7 0 Add the service port. To add the virtual port, run the service-port command. Note that the VPI and VCI values of the virtual port must be the same as those on the modem. 37-26 Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide 37 Subtending Networking Example The QinQ VLAN supports the PVC-priority scheduling policy only. In this case, select the profile that supports PVC-priority policy. huawei(config)#traffic table index 7 ip car off priority 0 priority-policy pvcSetting huawei(config)#service-port vlan 50 shdsl 0/5/31 vpi 0 vci 35 rx-cttr 7 tx-cttr 7 Step 7 Save the data. huawei(config)#save ----End 37.7 Verification All services configured on all DSLAMs run in the normal state. Issue 04 (2007-11-30) Huawei Technologies Proprietary 37-27 SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide A Acronyms and Abbreviations A A AAA ABR ACL B BDR BMS BPDU BRAS BRAS BRAS BTV Acronyms and Abbreviations Authentication, Authorization and Accounting Area Border Router Access Control List Backup Designated Router HUAWEI iManager N2000 broadband integrated network management system Bridge Protocol Data Unit Broadband Remote Access Server Broadband Remote Access Server Broadband Remote Access Server Broadband TV C CAR CC CFM CIDR CLI COS CPE Committed Access Rate Connection Confirm Connectivity Fault Management Classless Inter-Domain Routing Command Line Interface Class of Service Customer Premises Equipment Issue 04 (2007-11-30) Huawei Technologies Proprietary A-1 A Acronyms and Abbreviations SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide CRC Cyclic Redundancy Code D DHCP DHCP option82 DoD DoS DR DSLAM DU D-V Dynamic Host Configuration Protocol DHCP relay agent option 82 Downstream on Demand Denial of Service Designated Router Digital Subscriber Line Access Multiplexer Downstream Unsolicited Distance Vector Routing Algorithm E EMU Environment Monitoring Unit F FE FEC FTP FIFO Fast Ethernet Forward Error Correction File Transfer Protocol First In First Out G GE Gigabit Ethernet I ICMP IGMP IGP IMA IP IPoA IPoE A-2 Internet Control Message Protocol Internet Group Management Protocol Interior Gateway Protocol Inverse Multiplexing for ATM Internet Protocol Internet Protocol Over ATM IP over Ethernet Huawei Technologies Proprietary Issue 04 (2007-11-30) SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide A Acronyms and Abbreviations ISP Internet Service Provider L LAN LSA LSDB LSP Local Area Network Link State Advertisement Link State DataBase Label Switched Path M MA MAC MBS MD MDU MEP MIB MIP MRU MSTP MTU Maintenance Association Medium Access Control Maximum Burst Size Maintenance Domain Multi-dwelling Unit Maintenance association End Point Management Information Base Maintenance association Interspace Point Maximum Receive Unit Multiple Spanning Tree Protocol Maximum Transmission Unit N NBMA NHLFE NIC NMS Non Broadcast Multiple Access Next Hop Label Forwarding Entry Network Information Center Network Management System O OSPF Open Shortest Path First P PITP Policy Information Transfer Protocol Issue 04 (2007-11-30) Huawei Technologies Proprietary A-3 . A Acronyms and Abbreviations SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide PPPoA PPPoE PQ PPP PSN PSTN Point-to-Point Protocol over ATM Point-to-Point Protocol over Ethernet Priority Queuing Peer-Peer Protocol Packet Switched Network Public Switched Telephone Network Q QoS Quality of Service R RADIUS RARP RFC RIP RMON Remote Authentication Dial in User Service Reverse Address Resolution Protocol Remote Feature Control Routing Information Protocol Remote Network Monitoring S SNMP SSH STB STP Simple Network Management Protocol Secure Shell Set Top Box Spanning Tree Protocol T TCP/IP TFTP TOS TTL Transmission Control Protocol/Internet Protocol Trivial File Transfer Protocol Type of Service Time To Live U UDP User Datagram Protocol A-4 Huawei Technologies Proprietary Issue 04 (2007-11-30) . SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide A Acronyms and Abbreviations V VLAN VOD VT VTP VTY Virtual LAN Video On Demand Virtual Terminal VLAN Trunk Protocol Virtual Type Terminal W WRR Weighted Round Robin Issue 04 (2007-11-30) Huawei Technologies Proprietary A-5 . . 8-16 accessible address segment. 28-16 agent configuration. 11-5 ATM-DSLAM. 17-10 basic ACL rule. 21-35 enabling IPoA conversion. 31-54 setting authority mode. 21-25 adding line profile. 17-11 basic ACL. granting. 6-5 ADSL2+ activating ADSL2+ port. 31-48 enabling bandwidth management. 31-54 unbinding from a user. configuring. enabling. 31-53 renaming authority profile. 31-48 setting upstream port bandwidth. 21-35 configuring IPoA/IPoE conversion. 11-6 ARP. 17-25 advanced ACL. enabling. 17-19 adding user. 8-19 authority mode. 21-33 ADSL2+. 17-21 basic ACL rule. 20-3 anti ICMP attack. 17-21 advanced RSVP-TE feature. configuring. 31-50 enabling. 17-23 layer 2 ACL rule. 20-11 ACL. setting. 20-5 anti IP attack. 31-50 basic ACL configuring. 21-18 ADSL2+ port. 17-13 ACL rule advanced ACL rule. specifying. 19-11 anti MAC spoofing. 8-3 configuring authentication scheme. 8-2 advantage. enabling. 19-10 apply cause of route policy. 22-29 SHDSL multi-Pair. 12-63 ARP. 21-18 ADSL2+ port rate threshold. 8-16 specifying.adding. 22-28 i-1 Huawei Technologies Proprietary . 21-43 ADSL2+ alarm profile. 8-17 AAA. 21-36 querying port information. configuring. 17-20 basic MPLS TE capability. configuring. 17-16 customized ACL. 31-50 setting user bandwidth. 31-60 authority profile binding with a user. configuring. 26-3 authentication scheme configuring. static ARP entry. definition. creating. creating. 21-36 configuring port rate measurement threshold. 20-4 anti IP spoofing.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Index Index A AAA. 17-11 advanced ACL rule. adding. 17-10 categories. defining. enabling. 11-2 enabling. 8-16 creating domain. 4-8 Issue 04 (2007-11-30) definition. configuring. 17-22 setting step. 13-14 bandwidth management disabling. 17-20 customized ACL rule. 17-18 creating. 11-2 ARP proxy configuring. activating. 17-15 layer 2 ACL. 31-52 B backup root bridge. 31-58 modifying. 31-59 authority profile configuration modifying authority profile. 21-28 adding extended line profile. 21-28 ADSL2+ line profile. 21-3 advanced ACL configuring. enabling. 28-5 binding SHDSL EFM multi-port. 31-52 authority of program. 17-3 configuring time range. 4-3 anti DoS attack. 17-3 activating. 21-33 adding alarm profile. 31-53 renaming. 33-11 CLI characteristic. 7-3 i-2 E edit characteristic. 3-13 enabling trap reporting. 10-18 gateway. 3-6 egress configuring MPLS OAM. configuring. 10-9 DHCP option60 domain creating. 17-5 default route setting cost. setting. 31-55 binding with authority profile. 27-11 Issue 04 (2007-11-30) Huawei Technologies Proprietary . configuring. 31-58 CPU usage. 31-58 blocking. 12-40 dynamic MAC address aging time. 3-19 switching terminal language. 2-2 community name. 17-23 D default logging interval (2 hours). 10-20 binding VLAN interface. 10-13 DHCP server group binding MAC address segment. 3-15 setting terminal type. 2-19 Connectivity Fault Management (CFM). 3-20 showing version. 3-18 enabling interactive command execution. 35-4 enabling MPLS. 10-16 gateway. 31-67 default matching sequence. setting. 25-5 DHCP. 7-2 BTV user adding. 10-17 creating. 10-6 DHCP relay. configuring. 3-13 command line interface (CLI). 31-60 modifying. 10-3 setting working mode. configuring. 3-9 CLI display characteristic. 17-15 customized ACL rule. 10-15 binding with option60 domain. 3-13 locking terminal. 13-26 device protection. 4-13 control board. 4-10 configuration example remote user authentication. 10-12 DHCP standard mode. 3-16 setting timeout exit time. 20-8 board status. 2-12 through remote serial port. 10-3 DHCP server setting working mode. 3-18 obtaining online help information. 10-6 standard mode. 2-7 through SSH. showing. 34-12 EMU. 3-6 error prompt. 15-4 C CBR. 13-33 device subtending. resetting. 4-19 read-only community name. creating. 31-61 granting with program authority. 3-10 CLI operation clearing terminal screen. configuring. 31-60 unblocking. 8-4 configuring terminal through inband management channel. 12-21 default routing metric. tuning. 10-4 DHCP MAC address segment creating. 33-10 enabling alarm. 2-3 through outband management channel. configuring. 3-8 edit characteristic. 10-4 DR priority. 17-6 CFM enabling. 3-8 CLI error prompt. 31-56 disabling the monitoring function. configuring. 3-19 showing memory usage. 13-20 designated port setting parameter. 3-7 parameter prompt. 2-15 through local serial port.Index SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide black list. 3-19 CR-LSP establishment. 3-17 showing CPU usage. 10-9 option60 mode. 28-25 customized ACL configuring. 3-16 setting system time. 3-7 saving history command. 3-20 CLI trap reporting. 3-11 setting system name. 10-3 DHCP see also DHCP relay. 3-2 display characteristic. 12-23 default setting handshake interval. configuring. 4-10 designated bridge setting parameter. 31-57 deleting. 3-5 interaction characteristic. 31-56 monitoring. 10-19 DHCP MAC address segment mode. specifying. 10-21 range. 33-3 contact information on system. 3-10 intelligent matching. enabling. 3-14 testing network state. 10-14 DHCP configuration MAC address segment mode. 10-18 DHCP option60 mode. 4-18 handshake interval default setting. 12-62 IGMP global parameters general query interval. configuring. 4-19 short handshake interval. 16-3 firewall. 17-13 layer 2 ACL rule. 25-20 Ethernet port aggregation. setting.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Index Encapsulation Type. 4-17 related operations. 12-52 IP address inband NMS interface. 31-60 modifying. enabling. 31-67 specific query restoring to default value (1s). 31-60 inaccessible address segment.enabling. 31-42. setting. 25-16 Ethernet port. 4-20 IP address of peer router. 32-20 engine ID configuring for local SNMP entity. configuring. 31-32 H handshake function. 4-17 Ethernet OAM. defining. 25-10 enabling aggregation. 1-6 linktrace function. 31-31 logging. adding. 16-5 I if-match clause of route policy. 31-37 interval for sending Hello packet. 3-9 Huawei Group Management Protocol see also PITP. 25-13 setting native VLAN. binding. configuring. 31-32 setting. 25-16 enabling flow control. 31-57 disabling the monitoring function. 12-32 interval for general query restoring to default value (125s). 31-61 granting with program authority. 3-13 interface enabling packet transmit/receive. mirroring. 20-9 format of user name setting. 31-35 unsolicited report restoring to default value (10s). 16-5 IP packet debugging. 31-39 proxy authorization . 25-17 extended ADSL2+ line profile. 4-19 related operation. 31-28 robustness variable. 8-14 G general query interval. 21-25 F finwait timer. 31-41 IGMP snooping parameters. 31-35 TTL for V1 router. 1-3 license ESN. 31-31 maximum response time to. 4-19 long handshake interval. 4-19 Hello packet poll interval. 31-36 number of specific queries. 31-58 blocking. 20-12 inband NMS routes. 31-33 preview recognition time. 12-53 history command saving. 31-38 Issue 04 (2007-11-30) L layer 2 ACL configuring. 31-55 binding with authority profile. 3-7 interactive command execution enabling. 19-8 IP connection enabling IP packet debugging. 31-32 maximum response time to specific query. 17-22 leave proxy switch see proxy of IGMP leave packet. configuring. 31-32 restoring to default interval (125s). 31-43 IGMP user adding. 8-21 local serial port terminal define type. 31-43 License function license application. configuring. enabling. 4-19. configuring. 31-30 specific query interval. 34-11 intelligent matching. 16-2 configuring. setting. 19-3 unsolicited report interval. creating. 33-3 Ethernet port configuring physical attribute. 31-36 setting. 2-5 i-3 Huawei Technologies Proprietary . 2-18 ingress configuring MPLS OAM. 31-31 maximum response time to general query. 31-38 setting. 33-20 local RSA key pair. 3-5 interaction characteristic. 31-37 user action report function. 4-19. 1-7 License Server. 12-31 IP address. 4-19 setting. 31-56 monitoring. 4-22 outband NMS interface. configuring. 31-69 restoring default logging interval.Index SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide network topology. 31-66 reporting. 4-17 location of system. 5-6 log host configuring. 31-50 setting user bandwidth. 31-61 granting with program authority. 19-9 manager. 28-8 MPLS TE tunnel establishment. 2-3 setting parameter. 34-12 MPLS OAM of ingress. setting. activating. 31-33 setting. 34-11 MPLS TE. 13-3 MSTR. 33-18 multicast preview clearing logout time records. 27-2 enabling. 31-60 IGMP user deleting. 13-17 multicast bandwidth management enabling bandwidth management. 31-69 enabling logging. 13-13 MSTRsetting maximum hop .8s). 12-54 LSP type. 31-67 stopping reporting. 13-5 MSTP. tuning. 34-2 protection switchover. 33-7 MAC address maximum count. 27-28 configuring static LSP. enabling. 20-6 MAC address pool. creating. 31-48 setting upstream port bandwidth. 33-19 LSA retransmit interval between adjacent router. definition. configuring. 31-32 maximum response time to specific query restoring to default value (0. 31-36 MD. 31-58 blocking. 31-67 loop detection function. 27-12 definition. configuricfg_cli_0639. 3-20 MEP creating. 31-70 configuring log reporting. 31-66 setting logging interval. 13-15 setting working mode. setting. 31-62 multicast user adding. 28-31 MSTP. 33-6 memory usage showing . binding. 31-50 multicast base address. 13-26 setting priority. 31-70 disabling. 34-6 MPLS OAM of egress. 31-56 monitoring. 2-9 MPLS basic configuration. 13-33 MSTR parameter. 34-2 detection of static LSP connectivity. 13-20 setting parameter of designated port. 2-9 calling modem. 31-69 setting interval. 31-37 setting. configuring. 13-17 maximum OSPF route count. 31-60 Issue 04 (2007-11-30) Huawei Technologies Proprietary . configuring. 27-12 LTM configuring. 31-67 enabling. configuring. 5-4 logging collecting statistics. 31-70 logging configuration collecting log statistics. 31-61 restoring default auto-reset time. 5-3 deactivating. 31-55 binding with authority profile. 31-56 disabling the monitoring function. 13-6 setting MSTR parameter. 13-37 configuring device protection. 15-3 MAC address filtering. 27-15 configuring PW. 33-17 MA. 2-4 starting HyperTerminal. configuring. 27-11 MPLS OAM. 33-12 enabling CC transmission. 12-55 LSA transmit delay. 33-8 enabling. 15-5. 31-58 modifying. 4-2 maximum hop of MST region. 13-3 activating MSTR. 15-5. setting. 13-13 clearing statistic. 31-64 setting auto-reset time. 33-13 i-4 modem parameter setting called modem. 5-5 deleting. setting. 31-57 deleting. configuring. 4-13 log querying. 33-20 M MA interval for transmitting CC. 27-10 configuring LDP. 31-65 disabling. 31-56 unblocking. 15-6 MAC address. 31-62 enabling. 12-46 maximum response time to general query restoring to default value (10s). 31-63 setting parameters. configuring. 28-2 MPLS TE tunnel configuration using dynamic signaling. 13-6 setting network diameter. 13-18 setting parameter of designated bridge. 2-4 local SNMP engine ID. 3-7 path cost setting calculation standard. 14-19 NTP ID authentication. 6-10 poison reverse. 12-45 OSPF preference. 14-9 NTP broadcast mode. 12-50 OSPF route import from other protocol. 12-47 OSPF area config mode. 14-3 NMS route. configuring. obtaining. 31-40 setting. 14-25 configuring master clock. 13-18 network management station see manager. 31-43 enabling. 31-42 disabling. 31-63 setting preview parameters. 31-58 MUX VLAN. 14-9 number of specific queries restoring to default value (2). 34-15 manual switchover. 12-44 SPF calculation interval. 12-40 setting preference. 12-53 interval for sending Hello packet. 12-39 entering OSPF area config mode. configuring. 34-13 debugging information output. 12-46 NBMA adjacent router. 31-62 preview recognition time restoring to default value (30s). 14-16 multicast mode. configuring. 12-43 Transparent transmission. granting. 31-60 protection group configuring tunnel protection group. 12-40 OSPF routes network type. configuring. 12-59 OSPF router ID. enabling. 12-39 OSPF route Issue 04 (2007-11-30) . 31-61 restoring default auto-reset time. enabling. 31-62 preview configuration clearing logout time records. 9-7 N NBMA adjacent router. 31-65 enabling preview. 14-18 configuring NTP ID authentication. configuring. 19-3 present timeout. setting. 17-6 NTP broadcast mode. 12-9 outband NMS routes. 3-20 Network Time Protocol (NTP). 31-42 Huawei Technologies Proprietary i-5 O online help information. configuring. configuring. 14-18 NTP mode. setting. setting. 14-16 NTP master clock. 12-44 OSPF process. configuring. 31-64 setting auto-reset time. 31-63 setting parameters. enabling. 12-55 LSA transmit delay. 14-13 NTP server/client mode. 12-50 packet authentication. 31-44 enabling. 31-65 disabling. 14-3. 12-41 OSPF cost. 12-43 OSPF timer dead time between adjacent router. 14-13 server/client mode. 31-33 MTU field. configuring. 14-6 NTP peer mode. 12-49 disabling packet transmission. 12-47 enabling process. 31-43 disabling. 12-58 setting default parameter. 14-6 peer mode. 4-21 nrt-VBR. 4-3 network state testing. 2-14 P parameter prompt. 34-14 proxy authorization (IGMP). 12-43 router ID. 12-48 OSPF stub area. 12-49 OSPF logging. 14-3. 12-43 network diameter. 31-61 setting preview auto-reset time. 33-16 program authority. 12-42 OSPF. 12-47 OSPF packet authentication. 31-34 setting. 14-19 client. 12-53 Hello packet poll interval. 12-52 LSA retransmit interval.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Index unblocking. 14-3 NTP multicast mode. 13-19 permitted reenter number. 12-45 enabling logging. enabling. 12-54 subnet for area. 14-20 server. 31-39 priority for transmitting CCM/LTM. 12-55 stub area. modifying. 31-43 proxy of IGMP report packet. configuring. 31-38 preview clearing logout time records. 12-50 OSPF packet transmission. configuring. 3-11 OSPF cost. configuring. configuring. 31-62 enabling. 12-34 Policy Information Transfer Protocol (PITP). 12-41 maximum route count. disabling. configuring. see TTL. entering. 31-28 proxy of IGMP leave packet. 14-19 configuring access authority. 8-18 RADIUS serverresponse timeout interva of RADIUS server response timeout interval.Index SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide PVC and PW template. 31-42 response time to general query restoring to default value (10s). 7-6 deleting. 8-14 RADIUS server template specifying. 8-1 report proxy switch see proxy of IGMP report packet. 22-30 adding alarm profile. 22-31 SHDSL alarm profile. 12-60 defining apply clause. 8-8 RADIUS server IP address & port number. configuring. 33-15 robustness variable restoring to default value. 12-26 RIP process statistic. 12-30 RIP preference. configuring. 31-30 root bridge. configuring. 8-11 setting. 8-13 user name format. 8-12 specifying server template. 9-18 adding to VLAN in batches. 12-18 enabling split horizon. 17-6 S service board confirming. 8-10 type. 12-19 RIP-2 authentication mode. 27-30 Q QoS traffic entry. 22-27 configuring clock mode. 22-24 adding line profile. 12-19 summary route IP address. binding. 12-13 route summarization between areas. configuring. 31-33 setting. 31-39 remote serial port terminal network topology. 22-32 querying port information. importing. 12-30 enabling packet receive/transmit . 31-32 response time to specific query restoring to default value (0. 12-30 configuring additional metric. 7-7 resetting. 2-7 remote serial portstarting HyperTerminal . 8-9 shared key. 12-24 resetting. 13-14 route additional metric. 31-40 setting. 22-24 Issue 04 (2007-11-30) Huawei Technologies Proprietary . 12-36 RIP version. 12-32 RIP packet transmission. 8-11 RADIUS. 12-29 setting version. 12-30 RIP process. 12-57 rt-VBR. 31-31 setting. 7-7 service port adding to VLAN. disabling. 8-3 maximum retransmit count of RADIUS request. 12-24 route policy defining. 12-33 importing route of other protocol. 12-18 RIP timer. 2-9 remote serial port terminalmodem requirement . 4-10 receiving host route. 8-10 SHDSL activating SHDSL port.8s). configuring. 9-22 shared key of RADIUS server setting. 12-25 disabling RIP packet transmission. 12-63 defining if-match clause. 31-37 setting. setting. 12-35 configuring timer. 2-10 remote user authentication configuring. 12-34 enabling process. 2-8 setting parameter. 12-56 routes imported by OSPF. 22-21 binding alarm profile. 18-2 R RADIUS ANS port. 9-20 setting description. setting. 12-27 route of other protocol. clearing. configuring. adding. enabling. disabling. 33-9 enabling detection. 12-26 configuring RIP-2 authentication mode. 8-12 RADIUS request maximum retransmit count. 12-35 RMEP creating. 8-14 introduction. 12-62 route policy. 12-35 route filtering policy. 12-32 enabling poison reverse. specifying. configuring. 12-36 configuring zero field check. 8-7 read/write authorities. 31-36 RIP clearing process statistic. 12-35 configuring preference. 7-6 prohibiting. 12-25 recognition time of preview restoring to default value (30s). 12-20 i-6 disabling receiving host route. 4-11 source interface. 31-33 SPF calculation interval. 31-39 setting. 9-9 synwait timer. enabling. configuring. 8-8 terminal clearing screen. 3-16 Issue 04 (2007-11-30) setting time. 4-3 sending. configuring. 12-33 SSH advantage. 3-15 showing version. 4-9 socket buffer. configuring. enabling. setting.1p-based). 31-36 times. 16-2 system setting contact information. 3-16 switching language. 22-27 SHDSL EFM multi-port binding. setting. setting. 17-18 timeout exit time. setting. 32-3 configuring (single PVC). 31-37 upstream port adding to VLAN. 8-13 U UBR. configuring. 4-2 setting version. 4-15 configuring V3 user. configuring. 7-3 smart VALN. adding. setting. 32-9 TTL (time to live). 8-24 definition. managing. setting. configuring. 25-14 transparent transmission of RIP packet. 31-38 TTL for V1 router restoring to default value (400s). 4-16 SNMP V3 group. 31-38 setting. 4-13 setting location information. setting. 3-17 traffic entry configuring. 3-18 locking. 22-30 shelf description. 16-2 configuring. 12-32 super VALN. 31-50 Huawei Technologies Proprietary i-7 . 16-4 telnet inband NMS. activating. specifying. 7-8 summary route IP address. 2-19 version. 12-16 static route. 2-12 running. 4-12 source route filtering. 22-28 SHDSL port. 18-2 traffic suppression mode. 31-38 type of RADIUS server setting. 8-3 LAN inband. 4-8 SNMP MIB view. enabling. 2-12 logging in. 4-13 setting name. 4-15 SNMP V3 user. adding. 3-19 T TCP connection configuring socket buffer. 22-21 SHDSL multi-Pair. 8-4 configuring local RSA key pair. 8-22 configuring user. enabling. 2-15 outband NMS. 15-2 static route adding. configuring. configuring. 17-6 unsolicited report interval restoring to default value (10s). 12-55 split horizon. 31-35 maximum response time to. 32-2 configuring (802. 9-17 upstream port bandwidth. 16-4 TCP debugging. binding. 4-9 SNMP agent see agent. 9-5 static ARP entry. 2-20 outband. configuring. 16-4 enabling TCP debugging. 8-4 WAN inband. 9-5 SNMP configuring MIB view. 4-14 SNMP version. 11-5 static MAC address.SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide Index SHDSL alarm profile. 17-19 subboard. 32-15 configuring (multi-PVC). 8-21 configuring public key. configuring. 2-20 SSH. 4-16 configuring V3 group. adding. 2-13 template of RADIUS server specifying. 22-29 SHDSL line profile. 8-18 template of RADIUS server. 2-15 LAN. 12-3 step of ACL rule. 4-12 Triple play. 3-18 setting type. 32-20 triple play service. enabling. 4-14 definition. 25-14 traffic suppression. 2-21 outband. 8-21 standard VLAN. setting. 20-5 specific query interval. 2-15 WAN. 3-14 time range configuring. setting. 16-4 source interface for sending traps. 12-37 trap definition. 23-24 VDSL2 line template. 23-40 VDSL2 channel profile. 6-7 user action report disabling. 10-14 working mode of MSTP. 23-37 VDSL2 line profile adding. 31-58 blocking a BTV user. setting. 31-50 user level. 9-13 type. 31-60 modifying a BTV user. 23-46 VDSL2 port information. setting. modifying. 6-10 user authority. 23-46 adding alarm template. 6-7 related operation. setting. 23-35 binding alarm template. configuring. 31-57 granting with program authority. 9-20 adding upstream port. 6-13 disconnecting online user. adding. 23-45 definition. 31-41 user attribute. 10-13 working mode of DHCP.adding. 31-55 binding authority profile. 6-2 creating. changing. 6-9 user profile modifying. 23-43 VDSL2 alarm template. 23-35 VDSL2 port activating. 6-5 user profile. 23-31 adding line alarm profile. 6-7 modifying appended information. 9-18 adding service port in batches. 31-60 user password. setting. adding. 6-2 user bandwidth. 6-11 modifying level. 23-47 VLAN. 23-24 VDSL2 activating port. 23-43 adding channel alarm profile. 23-45 VDSL2 channel alarm profile. 9-4 configuring attribute. 23-40 adding channel profile. binding. adding. querying. adding. 9-15 W working mode of DHCP server. 9-15 i-8 Huawei Technologies Proprietary Issue 04 (2007-11-30) . 9-17 attribute. 13-5 V VDSL adding line profile. binding. 23-31 VDSL2 line alarm profile. 23-47 VDSL2 alarm template. 23-3 querying port information. 9-3 VLAN and PW template. 6-12 modifying bound profile.adding. 6-8 modifying permitted reenter number. 6-5 deleting. 9-3 adding service port. 31-56 monitoring BTV user. 27-31 VLAN attribute. 23-37 adding line template. 31-42 enabling. 6-8 user management adding a BTV user.Index SmartAX MA5600/MA5603 Multi-service Access Module Configuration Guide user adding.
Copyright © 2024 DOKUMEN.SITE Inc.