ZXR102609/2818S/2826S/2852S Access Switch User’s Manual Version 1.0 ZTE CORPORATION ZTE Plaza, Keji Road South, Hi-Tech Industrial Park, Nanshan District, Shenzhen, P. R. China 518057 Tel: (86) 755 26771900 800-9830-9830 Fax: (86) 755 26772236 URL: http://support.zte.com.cn E-mail:
[email protected] LEGAL INFORMATION Copyright © 2005 ZTE CORPORATION. The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of this document or any portion of this document, in any form by any means, without the prior written consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners. This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or noninfringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein. ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter herein. The contents of this document and all policies of ZTE CORPORATION, including without limitation policies related to support or training are subject to change without notice. Revision History Date 2005/11/01 Revision No. R1.3 Serial No. sjzl20060311 Description ZTE CORPORATION Values Your Comments & Suggestions! Your opinion is of great value and will help us improve the quality of our product documentation and offer better services to our customers. Please fill out the following questionnaire and fax to: (86) 755-26772236; Or mail to: Publications R&D Department, ZTE CORPORATION, ZTE Plaza, A Wing, Keji Road South, Hi-Tech Industrial Park, Shenzhen, P. R. China 518057. Thank you for your cooperation! Your Comments & Suggestions Document Name Product Version ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual V1.0 Document Revision Number R1.3 Equipment Installation Date Presentation: (Introductions, Procedures, Illustrations, Completeness, Level of Detail, Organization, Appearance) Good Your evaluation of this document Accessibility: (Contents, Index, Headings, Numbering, Glossary) Good Fair Average Poor Bad N/A Fair Average Poor Bad N/A Intelligibility: (Language, Vocabulary, Readability & Clarity, Technical Accuracy, Content) Good Fair Average Poor Bad N/A Please check the suggestions which you feel can improve this documentation: Improve the overview/introduction Improve the Contents Improve the organization Your suggestions for improvement of this document Include more figures Add more examples Add more detail Other suggestions ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ ____________________________________________________________________ # Please feel free to write any comments on an attached sheet. If you wish to be contacted regarding your comments, please complete the following: Name Postcode Telephone Company Address E-mail Make it more concise/brief Add more step-by-step procedures Add more troubleshooting information Make it less technical Add more/better quick reference aids Improve the index Contents About this User’s Manual.................................................. xxiii Purpose of this User’s Manual........................................................ xxiv Typographical Conventions ............................................................ xxv Mouse Operation Conventions....................................................... xxvi Safety Signs ................................................................................xxvii How to Get in Touch.................................................................... xxviii Customer Support ...................................................................................xxviii Documentation Support ...........................................................................xxviii Chapter 1..............................................................................29 Safety Description ...............................................................29 Safety Instructions..........................................................................29 Sign Description..............................................................................30 Chapter 2..............................................................................31 System Overview.................................................................31 Product Overview............................................................................31 Functions .......................................................................................32 Networking Mode............................................................................33 Workgroup Networking Mode ...................................................................... 33 MAN Broadband Access Networking Mode.................................................... 34 Technical Features and Parameters ..................................................36 Chapter 3..............................................................................37 Structure & Principle ...........................................................37 Working Principle ............................................................................37 Hardware Structure.........................................................................39 ZXR10 2609................................................................................................ 39 ZXR10 2818S ............................................................................................. 40 ZXR10 2826S ............................................................................................. 42 ZXR10 2852S ............................................................................................. 43 Sub-boards ....................................................................................45 FFEI............................................................................................................ 45 FGEI........................................................................................................... 46 FGFI ........................................................................................................... 47 FGFE .......................................................................................................... 48 Power Supply Module ......................................................................48 ZXR10 2609................................................................................................ 48 ZXR10 2818S/2826S .................................................................................. 49 ZXR10 2852S ............................................................................................. 49 Chapter 4 ............................................................................. 51 Installation and Debugging ................................................ 51 Installing the Equipment..................................................................51 Installing the Switch on Desktop .................................................................. 51 Installing the Switch onto a Cabinet ............................................................. 52 Installation of Cables.......................................................................56 Installing Power Cables................................................................................ 56 Installing Configuration Cables ..................................................................... 58 Installing Network Cables ............................................................................ 59 Installing Fibers........................................................................................... 60 Labels......................................................................................................... 61 Cable Lightning Protection Requirements ..........................................65 System Debugging..........................................................................68 Connection Configuration............................................................................. 68 Power-on Procedure.................................................................................... 71 Indicator Status .......................................................................................... 73 System Boot Procedure............................................................................... 74 Chapter 5..............................................................................77 Usage and Operation ...........................................................77 Configuration Modes........................................................................77 Configuration Through Console Port Connection ........................................... 78 Configuration Through TELNET Session........................................................ 78 Configuration Through SNMP Connection ..................................................... 80 Command Mode .............................................................................81 User Mode.................................................................................................. 81 Global Configuration Mode........................................................................... 82 SNMP Configuration Mode ........................................................................... 82 Layer 3 Configuration Mode......................................................................... 83 File System Configuration Mode................................................................... 83 NAS Configuration Mode ............................................................................. 84 Cluster Management Configuration Mode ..................................................... 84 Usage of Command Line..................................................................85 Online Help................................................................................................. 85 Command Abbreviations ............................................................................. 87 History Command....................................................................................... 87 Functional Key............................................................................................ 87 Chapter 6..............................................................................89 System Management...........................................................89 File System Management.................................................................89 File system Introduction.............................................................................. 89 File System Operations ............................................................................... 90 TFTP Configuration..........................................................................91 Import and Export of Configuration ..................................................93 .....................................................................126 Introduction ................................................................................................................................................................................................................................................................ 96 Version Upgrade When the System is Normal................................................................................................................................................................. 111 Port Mirroring ...................................................94 Software Version Upgrade ...................120 Introduction ............................. 120 Basic Configuration..........................................Backup and Recovery of Files................................. 113 Basic Configuration......... 126 Configuration Example ............................................ 129 ...............................................................113 Introduction ................................ 122 Configuration Example ................................................................... 115 Basic Configuration.......................................................................................105 Basic Configuration........................................................................................................................................................................96 Viewing the Version Information ....................................................................................... 115 VLAN Configuration .........122 Introduction ................................................................................................................................................115 Introduction ................................... 121 LACP Configuration .................... 124 IGMP Snooping Configuration................................................................................ 114 Configuration Example ..................... 98 Chapter 7 ............................................................................................................................................................................................... 122 Basic Configurations ..................... 105 Port Information....... 105 Service Configuration................ 117 MAC Table Operations ........................................................................................................................................................................................................................................... 97 Version Upgrade When the System is Abnormal ......................... 126 Basic Configuration....................... 116 Configuration Example ............................................................................................................................................. 105 Port Configuration ............... ...........................................................................................................................................................................................................................................................................................................................................................................................................149 Access Service Configuration....................................138 Introduction..................................................................................148 ARP Table Entry Configuration .............................143 Basic Configuration ...........................147 Static Route Configuration...........................................................................................................164 Basic Configuration .................................133 Configuration Example .........................................................................................169 Remote-Access.......................135 QoS Configuration......................................................................................146 Introduction...............................................................................................................................................................139 Configuration Example ........169 ..150 Introduction.....................................................................................131 Introduction....................................................................166 Configuration Example ...............................................131 Basic Configuration .........................................................143 Introduction...............................................................145 Layer 3 Configuration ......................................................................................................................................................................................................................................................................................................................161 QinQ Configuration....................141 PVLAN Configuration .........................................................................................169 Network Management .........................................................................................................................................144 802...146 IP Port Configuration..........150 Basic Configuration ................................................164 Introduction...............................MSTP Configuration.............................................................................144 Configuration Example .1x Transparent Transmission Configuration .....138 Basic Configuration ......................167 Chapter 8.155 Configuration Example .............................................................................................................. ............ 190 ZTP Configuration................................................................... 171 Basic Configuration............ 187 ZDP Configuration ................................................................................................................................................................................................................................ 178 Configuration Example .................................................. 203 Items of Monthly Maintenance .................. 203 Maintenance ...................... 179 RMON .......................................................................................................................................................................................................................................................203 Items of Daily Maintenance.....................................................................................................................................181 Introduction ................................................ 194 Configuration Example . 170 SSH............................................................................................................................................................................................................................................................................ 197 Chapter 9 .............................................................. 181 Basic Configuration.................................................................................................................................................................................................... 192 Cluster Configuration................................................................... 204 Maintenance Period .....206 Single-Port Loop Test ...........171 Introduction ....177 Introduction ................................................................................................................................................................. 185 Cluster Management ............................................... 169 Configuration Example ...................187 Introduction ................. 205 Common Test Methods...................................................................................................... 206 ... 172 SNMP.................................................................... 177 Basic Configuration............................................................................. 172 Configuration Example ....................................... 181 Configuration Example ................ 203 Routine Maintenance............... 169 Basic Configuration..................................................................................................................................................................................................................................................................................................................................................................Introduction ......... .......................................208 Failed to Configure through the Console Port...............221 exit ..........223 reboot .......................................................................................................................................................................215 Chapter 10 ...........................................................................................................223 readconfig ...........................................219 config tffs ..........................................................................................................215 Failed to Interconnect Two Devices in the Same VLAN.....................224 set date................................................................................................................207 Common Troubleshooting.............................................................................................219 create User............................................................................................................................224 set loginauth........................................................................................................................................................................222 list........................................................................................................................................................................................................................................................................208 Failed to Connect Through Telnet..............................................................................................222 ping ...................................................................................................................................................211 Missing enable Password ...........218 adminpass................................................................224 ..........................Virtual Circuit Test.............222 loginpass................218 config router.................................................................................................................................................223 saveconfig ...............................................................................................................................................................................................................220 delete User..............................................219 config snmp.........................217 Command Reference ........................................................................................................................210 Failed to Log In to the Switch Through Telnet..................................................................220 enable..................................................................217 Introduction ........................221 hostname...................211 Missing User Name or Password ............................................................................................................217 Management Commands.....221 line-vty........................................................................... ...........233 clear port ........................................................................................................................... 230 format ........................................................... 227 show vct ..................... 229 copy ............................................................ 234 set port auto ......................................................................................................................................... 226 show start-config................... 228 version ......................................................................................................................................................................................................................................... 237 ............................... 231 rename................................................................... 236 set port default-priority................................................................ 227 sysLocation.............................................................................. 230 ls............................................................................................................................................................... 226 show terminal .................................................................................................................................. 232 Port Configuration ................................ 228 terminal monitor ............................................................ 234 set port.............................................................................. 225 show loginauth.............................................. 227 show user .......................... 235 set port dscp-priority ........................................................................................................ 231 md ................................................................................................................229 cd.................................................................................................................................................................................................................................................................................................... 226 show specialVlan1 .............................................. 225 show running-config............................................................................................................ 233 create port name ...................... 229 File System .................................................................................................................................................................................. 235 set port bandwidth .............................................. 228 terminal log ................................................................... 231 remove.......................................................................................................................................................................................................................................................................set specialVlan1 ....................................... 232 tftp ................. 225 show date-time............................................................................ ...................242 set port sa-priority ......set port description ................................................................................244 set port speedadvertise....................252 ................................................................................239 set port macaddress ............................................................................................................251 set port pvid ..................................240 set port poe.................248 show trunk ...............................................................................................244 set port user-priority ......................247 show port statistics ..........................................................................................................................................................249 set mirror delete source-port.......................................................................................................................241 set port priority...........................................252 set trunk pvid ................................................................................................................................................................................................................................................240 set port multicast-filter.........246 set trunk multicast-filter ...........................................................................................247 show port qos............................238 set port flowcontrol .........................................................................................................................243 set port security.................................................................................................................................................................237 set port duplex ....................................................................................................245 set port vlan-priority ..............................................................................................................................................................................................243 set port speed ....................................249 set mirror add source-port ............................................249 set mirror dest-port ...........................................................251 create vlan name...........................................................................................................................251 clear vlan name ..............................250 show mirror..........250 VLAN Configuration ...............................................................................................................................................246 show port..........................................................................248 Port Mirroring .....................................................................................................................................241 set port remapping-tag ..............................................................................................................................................238 set port ingress_limit_mode .......... ................................................................. 263 LACP Configuration ...................................................................................................................................................... 266 set lacp priority ................................................................................................................................................................................................................. 267 ............................................................................... 264 set lacp aggregator mode ... 255 set vlan delete trunk................................................................ 259 set fdb delete ........................................................................................................................................ 266 set lacp port timeout .................................................................................................. 262 show fdb vlan............................... 262 show fdb port............... 259 set fdb filter .................................................................................................................. 267 show lacp................................................................................................................................................................................................................................263 set lacp............................................................................258 set fdb add................................................................................................................................................................................................. 258 set fdb agingtime ............................................................. 264 set lacp aggregator delete port........................ 263 set lacp aggregator add port . 254 set vlan delete port..................................................................................................... 253 set vlan add port .................................set vlan............................................................................................................ 267 show lacp aggregator .................................................................................................................. 255 set vlan fid .. 256 set vlan priority ....................................................................................................................... 262 show fdb vlan port........................................................................................... 260 show fdb................................................... 257 MAC Address Table Configuration .... 260 show fdb agingtime....... 265 set lacp port mode ..................................... 253 set vlan add trunk ...................................................................................................... 256 show vlan ........................................................ 261 show fdb mac ................................................................................................... 261 show fdb dynamic port ............................................................................................................. ....269 set igmp snooping crossvlan...................................................................277 clear stp name............270 set igmp snooping fastleave ..............................................................................................................................................................274 set igmp snooping vlan add group .......................................................................................................................................................................................................271 set igmp snooping query vlan................................................................................................................................................................................................277 clear stp instance.....................272 set igmp snooping response_interval ...........278 set stp edge-port .................273 set igmp snooping timeout ......................................................................................................................................................................................................................281 set stp instance bridgeprio..................................................................................................................................281 set stp hopmax....276 MSTP Configuration.......................................................................................................................................................................279 set stp forceversion...............................................268 IGMP Snooping Configuration.................................279 set stp forwarddelay ....................show lacp port ........................................................................................................................................................................................................................269 set igmp snooping add vlan........280 set stp hmd5-digest..281 set stp hmd5-key.................................................270 set igmp snooping delete vlan ...........................................276 show igmp snooping vlan.............................................................278 set stp agemax......................................................271 set igmp snooping lastmember_query ............................................................................................................................282 set stp instance port cost....................................................282 ............................................................................269 set igmp snooping ................................................................................................................................................................................................................277 set stp....280 set stp hellotime ..272 set igmp snooping query_interval ..275 show igmp snooping ...............................274 set igmp snooping vlan delete group.............................................................................. ............................................ 294 show qos priority-map................................................................................................................................................. 290 show stp instance................................. 285 set stp name....................................................................................................... 291 show stp trunk .............................................................................. 292 QoS Configuration...................set stp instance port priority..........294 set pvlan session................................................................................................................................................................. 293 set qos priority-map ip-priority................................................................................................................................................................................................................................. 286 set stp port linktype............................. 284 set stp instance vlan...............1xrelay ............ 284 set stp instance trunk priority............................................... 294 PVLAN Configuration .................................................................................................... 287 set stp port packettype.. 288 set stp trunk .............................................................................. 290 show stp port............................................................................................. 288 set stp trunk linktype........................................ 293 show qos queue-schedule....................... 296 show 802............................................................................. 289 show stp...........................296 set 802.. 292 set qos priority-map user-priority.............................................................................................................................1x Transparent Transmission Configuration ........................................................ 296 Layer 3 Configuration ......................... 295 802........................................................................................... 286 set stp port ............................................................................................................................................292 set qos queue-schedule ........... 283 set stp instance trunk cost ..297 ........................................................................... 287 set stp relay.................................. 294 show pvlan ............................................................................................................................................................................................................................................1xrelay................................................................................ 289 set stp trunk packettype ..................................... 288 set stp revision................................................................................................................................... ..............................................................313 ..................306 show iproute........................................................................................................................................................................................................................309 aaa-control port port-mode ....................................................................312 dot1x server-timeout ...........................................................................................313 dot1x tx-period................................................................................................................312 dot1x supplicant-timeout............arp add ..................................................................................309 aaa-control port multiple-hosts.......302 set ipport ipaddress...........................308 aaa-control port keepalive period........................................................312 dot1x re-authenticate period ......................................................................................................................................................304 show arp .........................306 Access Service Configuration........307 aaa-control port keepalive...........................................................................................................................................................................................303 set ipport vlan...........................................308 aaa-control port max-hosts ..................................................................................................................................................................................298 arp ipport timeout..........................................................................................................................310 aaa-control port protocol ................................................297 arp delete.............................................................300 iproute ..............................................................................................................................299 clear iproute .............................................................................................................................299 clear ipport ................................307 aaa-control port accounting....................................................................305 show ipport ....................................................................................................................................................................301 set ipport............................311 dot1x quiet-period ..........................................307 aaa-control port dot1x ...............302 set ipport mac .....................................................................310 dot1x max-request ............................................................................311 dot1x re-authenticate ..............................................................................................................................................................298 clear arp........................................................ ............................ 315 radius isp ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... 321 show client index................................................................................................................................................................................................................................................. 319 radius nasname ............................................. 322 show radius ................................................................................................................................................................................................................................................323 set qinq customer port..............................325 ............... 317 radius isp delete accounting...................................................... 314 clear client index ....................................................... 322 show client port...................................................................................... 314 clear client vlan .... 318 radius isp client .. 317 radius isp description.................................... 324 set qinq uplink port........................................................................................................................................... 314 clear client port .....................................clear client ......................................................................... 325 Remote-access Configuration.................................... 320 radius retransmit................................................................................................ 320 show aaa-control port.................................... 321 show client........................................................... 317 radius isp delete authentication.................................................. 316 radius isp defaultisp............ 319 radius isp sharedsecret......................................... 316 radius isp add authentication ........... 318 radius isp fullaccount ..................................... 320 radius timeout........................................................................................................................................................................................... 324 show qinq ........ 321 show dot1x......................................................................... 323 set qinq tpid...... 315 radius isp add accounting .. 322 show client mac .................................................................. 323 QinQ Configuration.................................................................................................................................................................................................. ........................................................................................................................................................................................343 Cluster Management Configuration...................................................................................................................................................................330 set community view........................................331 set trap ......................................................341 show history.......................341 show event..............................................................................................................................................329 create community.........................................................................................332 show snmp.....................333 set event.............339 show alarm .............329 create view....................................................................................343 show statistics .....................................................................................333 set alarm................................................................................................................325 set remote-access.........................................................................................................................................................................................................................................................................................................................................................342 show rmon .....................................................................................................................................................................328 clear view.................................................336 set history ......................................................................325 clear remote-access ipaddress.............................337 set rmon .....326 set remote-access ipaddress .............................327 SNMP Configuration ............................................................................................................................................................343 ..................326 show remote-access .........................................................................................................................clear remote-access all..........................................................................................................................................................................................................................................339 set statistics.........................................327 SSH Configuration.......................................................................................................................327 show ssh ......................................................327 set ssh ........333 RMON Configuration...............................331 set traphost............................................................................328 clear traphost ......................................................328 clear community.................. ...................................................................... 357 show group member ................................................................................................................................................................................................................................. 352 set ztp hop................................................................................... 349 set group tftpsvr.............. 347 set group holdtime .......................................................................................................................................................................................................... 350 set zdp timer...................................................................................................................................................... 350 set zdp holdtime....................................... 350 set zdp port ......................................................................................................................... 351 set zdp trunk........... 355 set ztp trunk ....... 344 save member....................................................................... 358 ................... 353 set ztp hopdelay............................................................................ 356 set ztp vlan ................................................................................................... 358 show zdp neighbour ........................................................................................................... 357 show zdp ................................................................. 352 set ztp ................................ 345 set group add mac .............................................................................................................................................................. 347 set group handtime .............. 348 set group name...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... 356 show group................................................................................................................ 349 set zdp ............................... 357 show group candidate .. 346 set group delete member ................................................................................................................................................................. 354 set ztp portdelay ..........................erase member ..................................................................... 353 set ztp port ................................................................ 345 set group candidate.............................................. 347 set group independent............... 343 reboot member....................................................................... 346 set group commander ipport... 344 set group add device ....................................... 354 set ztp timer .................................... ........................................................371 Tables ...........................362 show loopDetect ........................show ztp ...........................................................................................................358 show ztp device .....361 set loopDetect trunk protect .....................................................................................................................................................................................................................................359 show ztp mac .................................................................................................................................363 Appendix A............................360 set loopDetect port protect..........................................................................................................359 ztp start .......................................360 set loopDetect port .......360 set loopDetect blockDelay ................................365 Abbreviations..........................................361 set loopDetect trunk........373 .......................................360 Single-port Loop Test ........................................................................................................................................................................................................................................365 Figures .................................................................................................................. .This page is intentionally blank. Cancel the support to the QINQ function. The MSTP is not supported now.) 4. Their functions are simplified on the basis of functions of the ZXR10 2609/2818S/2826S/2852S. 2. QoS functions Cancel the function of determining priority of data packet based on static resource MAC address (SA) and VLAN priority. Cancel the support to the 802. Reduce eight LACP groups of 2852SLE (On the 2852S. or switch in the universal part. ZXR10 2609LE/2818SLE/2826SLE/2852SLE access switch series are a simplified version of the ZXR10 2609/2818S/2826S/2852S access switch.About this User’s Manual This manual applies to the following access switch models: ZXR10 2609 access switch ZXR10 2818S access switch ZXR10 2826S access switch ZXR10 2852S access switch ZXR10 2609/2818S/2826S/2852S (V1. 16 groups are supported. Confidential and Proprietary Information of ZTE CORPORATION xxiii . But the hardware structure of ZXR10 2609LE/2818SLE/2826SLE/2852SLE access switch series is the same as ZXR10 2609/2818S/2826S/2852S. Only the Spanning Tree Protocol (STP) and RSTP are supported.0) access switch is also referred to as ZXR10 2609/2818S/2826S/2852S for short. Cancel the support to the OUT port speed restriction function. 3. The function simplification involves the following parts: 1.1p subscriber priority remap function on the port. the ZXR10 Chapter 3 Structure & Principles introduces the structure and working principles of the ZXR10 2609/2818S/2826S/2852S. Chapter 5 Usage & Operations introduces the configuration methods. Chapter 4 Installation and Debugging introduces the installation and debugging methods of the ZXR10 2609/2818S/2826S/2852S. command mode. Chapter 10 Command Reference introduces the supported by the ZXR10 2609/2818S/2826S/2852S. Chapter 1 Safety Instructions introduces the safety signs and their meanings. Purpose of this User’s Manual This manual consists of ten chapters and one appendix. commands xxiv Confidential and Proprietary Information of ZTE CORPORATION . the rest common contents are applicable to all switches. Chapter 6 System Management introduces the system management of the ZXR10 2609/2818S/2826S/2852S. service data Chapter 8 Network Management introduces the network management configuration of the ZXR10 2609/2818S/2826S/2852S.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Except for those specified as the contents for LE serial switches. Chapter 7 Basic Configuration introduces the configuration of ZXR10 2609/2818S/2826S/2852S. and usage of command line. Chapter 2 System Overview introduces 2609/2818S/2826S/2852S system briefly. Chapter 9 Maintenance introduces the routine maintenance of the ZXR10 2609/2818S/2826S/2852S. dialog box names. check boxes. drop-down lists. menu options. window names Keys on the keyboard and buttons on screens and company name Text that you type. parameter values Links on screens Menus. program code. input fields. TABLE 1 TYPOGRAPHICAL CONVENTIONS Typeface Meaning References to other guides and documents.About this User’s Manual Appendix A Abbreviations Typographical Conventions ZTE documents employ the following typographical conventions. files and directory names. radio button names. and function names Optional parameters Mandatory parameters Select one of the parameters that are delimited by it Note: Provides additional information about a certain topic Checkpoint: Indicates that a particular step needs to be checked before proceeding further Tip: Indicates a suggestion or hint to make things easier or more productive for the reader Italics “Quotes” Bold CAPS Constant width [] {} | Confidential and Proprietary Information of ZTE CORPORATION xxv . Refers to quickly clicking the primary mouse button (usually the left mouse button) twice. Refers to pressing and holding a mouse button and moving the mouse. xxvi Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mouse Operation Conventions TABLE 2 MOUSE OPERATION CONVENTIONS Typeface Click Double-click Right-click Drag Meaning Refers to clicking the primary mouse button (usually the left mouse button) once. Refers to clicking the secondary mouse button (usually the right mouse button) once. Erosion: Beware of erosion. Laser: Beware of strong laser beam. Confidential and Proprietary Information of ZTE CORPORATION xxvii . Microwave: Beware of strong electromagnetic field. Electrostatic: The device may be sensitive to static electricity. No flammables: No flammables can be stored. Caution: Indicates a potentially hazardous situation. which if not avoided. Electric shock: There is a risk of electric shock. Warning: Indicates a potentially hazardous situation. No smoking: Smoking is forbidden. which if not avoided.About this User’s Manual Safety Signs TABLE 3 S AFETY SIGNS Safety Signs Meaning Danger: Indicates an imminently hazardous situation. could result in minor or moderate injury. This signal word should be limited to only extreme situations. will result in death or serious injury. It may also be used to alert against unsafe practices. No touching: Do not touch. could result in death or serious injury. which if not avoided. or suggestions regarding your product.com. comments. or you can fax your comments and suggestions to (86) 755 26772236. comments.cn.zte.com. Customer Support If you have problems. Documentation Support ZTE welcomes your comments and suggestions on the quality and usefulness of this document. You can also call our customer support center at (86) 755 26771900 and (86) 800-9830-9830.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual How to Get in Touch The following sections provide information on how to obtain support for the documentation and the software. questions. contact us by e-mail at support@zte. xxviii Confidential and Proprietary Information of ZTE CORPORATION .com. you can contact us by e-mail at doc@zte. forum and service request.cn. which contains various interesting subjects like documentation. or suggestions on the documentation. You can also explore our website at http://support. For further questions. knowledge base.cn. Confidential and Proprietary Information of ZTE CORPORATION 29 . and maintenance of this equipment. you will learn about: Safety instructions Sign description Safety Instructions Only the properly trained professional personnel are qualified for the installation. The safety precautions in this manual can only be used as a supplement to local safety regulations. operation. operation and maintenance. production and use of equipment.Chapter 1 Safety Description In this chapter. ZTE Corporation assumes no responsibility for consequences resulting from violation of general specifications for safety operations or of safety rules for design. Observe the local safety specifications and relevant operating procedures in equipment installation. to avoid personal injury or damage to the equipment. 30 Confidential and Proprietary Information of ZTE CORPORATION . Note: Contents that you need to pay special attention to besides the safety precautions.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Sign Description Contents deserving special attention when configuring the equipment are explained in the following format: Caution: Ignoring safety precautions may result in equipment faults. commercial buildings. Confidential and Proprietary Information of ZTE CORPORATION 31 . campus networks. They can serve as the access equipment at the subscriber side in the information intelligent residential areas. providing different number of Ethernet ports.Chapter 2 System Overview In this chapter. hotels. efficient. enterprise (government) network or the convergence equipment of small-size network to provide fast. and cost-effective access and convergence solutions. you will learn about: An overall introduction to the ZXR10 2609/2818S/2826S/2852S Rich software/hardware functions of the ZXR10 2609/2818S/2826S/2852S Networking mode of the ZXR10 2609/2818S/2826S/2852S Technical features of the ZXR10 2609/2818S/2826S/2852S Parameters of the ZXR10 2609/2818S/2826S/2852S Product Overview ZXR10 2609/2818S/2826S/2852S access switches are located at the access layer of the enterprise network and broadband IP metropolitan area network (MAN). Priority classification by DA. VCT function and faulty circuit test. The size of the MAC address table is 8K. SA. Support the STP defined in the 802.1w. fixed priority scheduling. Full wirespeed switching is implemented at all ports.1s. 11. RSTP defined in the 802. and port multi-queue at the switch. The ZXR10 2609/2818S/2826S/2852S has the following functions: 1. 5. 2. At most 16 port groups can be bundled and each group contains at most eight ports. multiqueue. weighted priority scheduling. Port ingress and egress mirroring. 6.1d. 9. 14. or TOS/DSCP. Multi-VLAN IGMP snooping. 12. 10. The maximum number of VLANs can be up to 4094. 802.3ad and port static bundling.1q-compliant VLAN and private border VLAN. 13. 15. Broadcast storm suppression. Single port loop test. 8. Support LACP port bundling defined in 802. 3. Port ingress and egress bandwidth restriction. MAC address self-learning capability. VID. and MSTP defined in the 802. Port MAC address bundling and address filtering.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Functions The ZXR10 2609/2818S/2826S/2852S adopts the Store and Forward mode and supports the layer-2 switching at wire-speed. 32 Confidential and Proprietary Information of ZTE CORPORATION . Detailed port flow statistics. 7. The VLAN stacking function is also supported. Support the 802. 4. Configuration of NM static route.3x-compliant flow control (full duplex) and backpressure flow control (half duplex). Telnet remote login. and Secure shell V2. trunking management technology ZGMP. Uploading and downloading of TFTP version.0. 17. Confidential and Proprietary Information of ZTE CORPORATION 33 .1x transparent transmission and authentication. The following introduces two typical network modes. Figure 1 shows the typical networking structure. 18.System Overview 16. SNMP network management. Workgroup Networking Mode The ZXR10 2609/2818S/2826S/2852S can be flexibly employed in workgroup-level networks like enterprise and department networks. 802. centralized network management of ZXNM01. The extension slot can provide the 100M or 1000M high-speed optical interface to connect with backbone network or high-speed server.Chapter 2 . The ZXR10 2609/2818S/2826S/2852S provides 8 to 48 10/100M interfaces and the number of interfaces can be extended through cascading of the switches. Networking Mode The ZXR10 2609/2818S/2826S/2852S features flexible networking mode. Support the Console configuration. the ZXR10 2609/2818S/2826S/2852S can be equipped at the access layer of the residential blocks or the convergence layer of the buildings and directly provide 10/100M access of subscribers or connect to the switch at the access layer such as ZXR10 1816.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 1 TYPICAL WORKGROUP NETWORKING STRUCTURE IP backbone network 100M/1000M ZXR10 2609/2818S/2826S/2852S Server 10/100M 10/100M ZXR10 2609/2818S/2826S/2852S 10/100M 10/100M 10/100M 10/100M 10/100M 10/100M MAN Broadband Access Networking Mode In the construction of broadband MAN. 34 Confidential and Proprietary Information of ZTE CORPORATION . and AAA server. 100M/1000M optical interface can be configured to connect to the convergence node of the residential block and build a broadband service network for an information residential block together with the network management systems such as Broadband Access Server (BRAS). With the flexible uplink port of the ZXR10 2609/2818S/2826S/2852S. Figure 2 shows the typical networking structure.Chapter 2 .System Overview The ZAN (Customer Premises Network) equipment can be included via in-band or out-band mode into the NMS of the entire MAN. F I G U R E 2 T Y P I C A L N E T W O R K I N G O F M AN B R O A D B A N D A C C E S S AAA server IP backbone network BRAS Email/DNS/ DHCP server 100M/1000M ZXR10 3906 100M N× 10/100M ZXR10 2609 100M ZXR10 2818S 10/100M 10/100M ZXR10 2826S Network/Property management server 1000M ZXR10 2852S/2826S Confidential and Proprietary Information of ZTE CORPORATION 35 . or managed with the network management and service management system independently established in the residential complex. 6× 436× 200 ≈2 ZXR10 2852S 43.6 × 442 × 280 ≈2.6× 436× 200 ≈2 ZXR10 2826S 43.5 Dimensions (HxWxD. TABLE 4 TECHINCAL FE ATURES AND P AR AMETERS Item Model ZXR10 2609 35× 21× 130 ZXR10 2818S 43. Wave shape distortion <5% DC power supply: –57V to –40V 36 Confidential and Proprietary Information of ZTE CORPORATION . 48Hz~62Hz. mm) Weight (Fully equipped. ≈1 kg) Maximum power consumption (W) Power supply 7 9 14 19 AC power supply: 100V~240V.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Technical Features and Parameters The ZXR10 2609/2818S/2826S/2852S is in compliance with the following standards: Q/SZX 193-2005 ZXR10 2609/2818S/2826S/2852S Access Switch Table 4 lists the techincal features and parameters of the ZXR10 2609/2818S/2826S/2852S. Confidential and Proprietary Information of ZTE CORPORATION 37 . Control module: It consists of main processor and some external functional chips. Functionally. and enterprise to meet users’ diversified requirements on the number of interfaces. The control module controls and manages the switching module to meet the requirements of different network applications. residential areas. campus. 1. you will learn about: Structure and working 2609/2818S/2826S/2852S principles of of the the ZXR10 ZXR10 System hardware structure 2609/2818S/2826S/2852S Working Principle The ZXR10 2609/2818S/2826S/2852S is a series of layer-2 NMenabled low and medium-range Ethernet switching products launched by ZTE Corporation. interface module. and power supply module.Chapter 3 Structure & Principle In this chapter. the switch consists of control module. switching module. Figure 3 shows the system principle. This series of products features powerful functions and outstanding performance. They are intended for the access layer of the networks in the commercial buildings. It provides an external serial port for the data operation and maintenance. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 2. The standard interface is used to connect the interface module and the switching module.) The interface module completes connection with external users and transceiving of data packets. FIGURE 3 ZXR10 2609/2818S/2826S/2852S WORKING PRINCIPLE Interface module (hundred megabit or gigabit interface) Switching module Hundred megabit or gigabit service interface of the customer Power module Control module The ZXR10 2609/2818S/2826S/2852S (except the ZXR10 2609) uses the 19” subrack that is in compliance with the international 38 Confidential and Proprietary Information of ZTE CORPORATION . 3. 4. the chip is integrated with data packet transceiver and can directly provide hundred megabit or gigabit service interface for users. It consists of dedicated Ethernet switching processing chips. In addition. (The interface module is used in the ZXR10 2818S and ZXR10 2826S only. The switching module processes and exchanges the data packets sent by each port. The power supply module supplies power for other modules of the system. Interface module: It consists of interface board. It adopts the 220V AC or –48V DC power supply. Switching module. Power supply module. The insertion and removal is convenient and flexible. It has vents on the rear. right.Structure & Principle standard. All the components or parts are installed on the bottom case. FIGURE 4 FRONT P ANEL OF THE ZXR10 2609 Confidential and Proprietary Information of ZTE CORPORATION 39 . The major hardware of the ZXR10 2609/2818S/2826S/2852S is the Ethernet switching main board. The uplink port on the expansion slot of the ZXR10 2818S and ZXR102826S can be configured with different sub-boards as needed. there are power indicators. On the front panel or the top of the shell of the ZXR10 2609/2818S/2826S/2852S. It employs independent power supply and natural dissipation method. and one serial configuration port. It features light weight and simple structure. The interface board is inserted from the front side and is fixed with two captive screws. which is 1U high.Chapter 3 . ZXR10 2609 Figure 4 shows the front panel of the ZXR10 2609. The box is composed of a bottom case and a shell. fixed Ethernet electrical interfaces. and left sides of the box. which is indispensable in any type of configuration. The subrack can be used as standalone equipment or installed in a standard cabinet. The AC or DC power socket and power switch are located on the rear panel. RUN indicators. Hardware Structure The ZXR10 2609/2818S/2826S/2852S adopts the box structure. which allows easy installation and uninstallation. Ethernet optical interfaces. Nine fixed 10/100 Base-T Ethernet ports. If the version is unavailable. the PWR indicator is on and the RUN indicator is off. The BootROM starts to load the version. including two system indicators and nine interface indicators. used to realize the management and configuration of various services. the states of indicators do not change. ZXR10 2818S Figure 5 shows the front panel of the ZXR10 2818S. Indicators There are 11 indicators on the top of the shell of the ZXR10 2609. it indicates that the LINK is normal. If the version is loaded normally. The nine interface indicators correspond to the nine fixed Ethernet electrical interfaces. The system indicators include power indicator (PWR) and running indicator (RUN). These ports support full duplex/half duplex and 10/100M and MDI/MDIX auto-sensing function. When the indicator is on. 2. it indicates that data sending or receiving is underway. If the indicator is flashing. the RUN indicator flashes at 1Hz.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual The Ethernet switching main board of ZXR10 2609 is FEBN. 40 Confidential and Proprietary Information of ZTE CORPORATION . 2. Interfa ces ZXR10 2609 provides the following types of access ports: 1. The following explains their status: After the system is powered up. other ports are also equipped with VCT auto detection function. Except the 9th port. 1. One Console port. FGFI. One Console port. FGEI.Structure & Principle FIGURE 5 FRONT P ANEL OF THE ZXR10 2818S The Ethernet switching main board of the ZXR10 2818S is FEBE. They can be configured according to the actual application. used to realize the management and configuration of various services. 2. The system indicators include power indicator (PWR) and running indicator (RUN). and VCT auto detection function. see Sub-boards. there are 18 indicators. 10/100M and MDI/MDIX auto-sensing function. The following explains their states: After the system is powered up. Sixteen fixed 10/100 Base-T Ethernet ports. These ports support full duplex/half duplex. including 2 system indicators and 16 interface indicators. and FGFE. 1.Chapter 3 . the PWR indicator is on and the RUN indicator is off. One expansion slot for the uplink sub-boards that can provide single/double-channel 100M optical interface. For the description of the sub-boards. The ZXR10 2818S can also be configured with the following sub-boards: FFEI. Interfa ces ZXR10 2818S provides the following types of access ports. 3. Indicators On the top of the shell and front panel of the ZXR10 2818S. 2channel 1000M optical interface. 2-channel 1000M electrical interface. or 1000M optical-electrical interface. 1. The indicators on the top of the shell and the front panel of the FEBE are the same. Confidential and Proprietary Information of ZTE CORPORATION 41 . FGEI. see Sub-boardsSub-boards. 2. 2. 10/100M and MDI/MDIX auto-sensing function. When the indicator is on. They can be configured flexibly according to the actual application. it indicates that data sending or receiving is underway. 2-channel 1000M electrical interface. 1. FGFI. If the version is loaded normally. 2channel 1000M optical interface. the states of indicators do not change. or 1000M optical-electrical interface.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual The BootROM starts to load the version. These ports support full duplex/half duplex. 42 Confidential and Proprietary Information of ZTE CORPORATION . One expansion slot for the uplink sub-boards that can provide single/double-channel 100M optical interface. If the version is unavailable. Interfa ces The ZXR10 2826S provides the following types of access ports. FIGURE 6 FRONT P ANEL OF THE ZXR10 2826S The Ethernet switching main board of ZXR10 2818S is FEBT. The ZXR10 2818S can also be configured with the following sub-boards: FFEI. The 16 interface indicators correspond to the 16 fixed Ethernet electrical interfaces. Twenty four fixed 10/100 Base-T Ethernet ports. ZXR10 2826S Figure 6 shows the front panel of the ZXR10 2826S. For introduction to the sub-boards. the RUN indicator flashes at 1Hz. it indicates that the LINK is normal. If the indicator is flashing. and VCT auto detection function. and FGFE. There are two indicators on each fixed Ethernet electrical port. The half/full duplex indicator is on when the Ethernet electrical port works in the full duplex mode. the PWR indicator is on and the RUN indicator is off. ZXR10 2852S Figure 7 shows the front panel of the ZXR10 2852S. used to realize the management and configuration of various services. One Console port. 2. off when the Ethernet electrical port works in the half duplex mode. the states of indicators do not change. The link activation indicator flashes when the link is activated. If the version is unavailable. The BootROM starts to load the version. the RUN indicator flashes at 1Hz. Indicators On the front panel of the ZXR10 2826S. If the version is loaded normally. The following explains their states: After the system is powered on.Chapter 3 . and flashes when there is conflict. The left one is the half/full duplex indicator and the right one is the link activation indicator. there are 50 indicators.Structure & Principle 3. 1. The system indicators include power indicator (PWR) and operation indicator (RUN). FIGURE 7 FRONT P ANEL OF THE ZXR10 2852S The Ethernet switching main board of the ZXR10 2852S is FEBF. Confidential and Proprietary Information of ZTE CORPORATION 43 . including 2 system indicators and 48 interface indicators. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Interfa ces ZXR10 2852S provides the following types of access ports. If the indicator is 44 Confidential and Proprietary Information of ZTE CORPORATION . ii. 10/100M and MDI/MDIX auto-sensing function. the RUN indicator flashes at 1Hz. 1. When the indicator is on. The interface indicators include: i. 2. The BootROM starts to load the version. One Console port. it indicates that the LINK is normal. it indicates that the LIKK is normal. Two fixed 10/100/1000 Ethernet electrical ports and two fixed 1000 Ethernet electrical ports. Indicators On the front panel of the ZXR10 2852S. The ACT1 and ACT2 on the left correspond to two fixed gigabit optical interfaces. These ports support full duplex/half duplex. including four system indicators and 52 interface indicators. the PWR indicator is on and the RUN indicator is off. The 48 round indicators on the upper part of the front panel correspond to 48 fixed Ethernet electrical ports. and one running indicator (RUN). 2. Forty eight fixed 10/100 Base-T Ethernet ports. the states of indicators do not change. The following explains their status: After the system is powered up. there are 56 indicators. one power indicator (PWR). The system indicators include two CONSOLE port indicators. When the indicator is on. If the indicator is flashing. If the version is unavailable. it indicates that data sending or receiving is underway. If the version is loaded normally. They can be configured flexibly according to the actual application. and VCT auto detection function. 1. 3. used to realize the management and configuration of various services. FFEI The FFEI provides one channel of 100M Ethernet uplink optical interface for the ZXR10 2818S/2826S. providing different types of interface and transmission distance: 1.Structure & Principle flashing. The left one is the half/full duplex indicator and the right one is the link activation indicator. it indicates that data sending or receiving is underway. and FGFE. Sub-boards The ZXR10 2816S and ZXR10 2826S can be configured with the following sub-boards according to the actual networking requirements: FFEI. The link activation indicator flashes when the link is activated. iii. Each fixed gigabit Ethernet port has two indicators. Figure 8 shows this sub-board. off when the Ethernet electrical port works in the half duplex mode.Chapter 3 . The half/full duplex indicator is on when the Ethernet electrical port works in the full duplex mode. FGEI. SF-1FE-S40KSC: Extend distance to 40 km over singlemode fiber cable. There are three FFEI models. and flashes when there is conflict. FGFI. FIGURE 8 SF-1FE-S40KSC SUB-BOARD Confidential and Proprietary Information of ZTE CORPORATION 45 . Its model number is SF-2GE2RJ45. SF-1FE-M02KSC Extend distance to 2 km over dual-mode fiber cable. The ACT indicator flashes when data sending or receiving is underway. FIGURE 9 SF-1FE-S15KSC SUB-BOARD 3. Figure 10 shows this sub-board. 46 Confidential and Proprietary Information of ZTE CORPORATION . Figure 9 shows this sub-board. FIGURE 10 SF-1FE-M02KSC SUB-BOARD On the front panel of FFEI. The LNK indicator is on when the link is normal. SF-1FE-S15KSC Extend distance to 15 km over singlemode fiber cable. as shown in Figure 11.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 2. FGEI The FGEI provides two channels of gigabit Ethernet uplink electrical ports for the ZXR10 2818S/2826S. there are two indicators: link activation indicator (ACT) and link status indicator (LNK). Confidential and Proprietary Information of ZTE CORPORATION 47 . FGFI The FGFI provides two channels of gigabit Ethernet uplink optical ports for the ZXR10 2818S/2826S. Each gigabit electrical port has two indicators: link activation indicator and link status indicator The link activation indicator flashes when data sending or receiving is underway.Chapter 3 . The link status indicator is on when the link is normal. it indicates that the LIKK is normal. as shown in Figure 12. FIGURE 12 SF-2GE-2SFP SUB-BOARD (FGFI) On the panel of the FGFI. there are four indicators. They correspond to two gigabit optical interfaces. Its model number is SF-2GE2SFP. If the indicator is flashing. When the indicator is on. it indicates that data sending or receiving is underway.Structure & Principle FIGURE 11 SF-2GE-2RJ45 SUB-BOARD (FGEI) On the panel of the FGEI. there are two indicators: ACT1 and ACT2. The link status indicator is on when the link is normal. The gigabit optical port has an ACT indicator. The gigabit electrical port has two indicators: link activation indicator and link status indicator. as shown in Figure 13. Its model number is SF-2GE-SFPRJ45. it indicates that the LIKK is normal. Power Supply Module ZXR10 2609 ZXR10 2609 supports two power supply modes: 110V/220V AC power supply and POE powered mode. there are three indicators. The link activation indicator flashes when data sending or receiving is underway. When the indicator is on. it indicates that data sending or receiving is underway. the self-contained AC adapter can be directly used to convert the AC power into 5V DC power. When the AC power supply is used. If the indicator is flashing. 48 Confidential and Proprietary Information of ZTE CORPORATION . FIGURE 13 SF-2GE-SFPRJ45 SUB-BOARD (FGFE) On the panel of the FGFE.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FGFE The FGFE provides one channel of gigabit Ethernet uplink electrical port and one channel of gigabit Ethernet uplink optical port for the ZXR10 2818S/2826S. ZXR10 2818S/2826S ZXR10 2818S/2826S supports two power supply modes: -48V DC power supply and 110V/220V AC power supply. When the AC power supply is adopted. When the AC power supply is adopted. When the -48V DC power supply is adopted. Figure 16 and Confidential and Proprietary Information of ZTE CORPORATION 49 . ZXR10 2818S also supports the POE power mode. FIGURE 14 SUPPLY) REAR PANEL OF THE ZXR10 2818S/2826S (DC POWER -48VGND GNDP -48V FIGURE 15 REAR PANEL OF THE ZXR10 2818S/2826S (AC POWER SUPPLY) 100-240V~ 60-50Hz ZXR10 2852S ZXR10 2852S supports two power supply modes: -48V DC power supply and 110V/220V AC power supply. When the -48V DC power supply is adopted. use the AC power cables.Structure & Principle When the POE powered mode is used. Figure 14 and Figure 15 respectively show the rear panel of the swtich when the 48V DC power supply and 110V/220V AC power supply are adopted. a dedicated POE device is needed to split the RJ45 signals of the 48V power provided by the POE power sourcing equipment into Ethernet signal and 48V power signal and convert the power into 5V DC power needed by the ZXR10 2609. use the AC power cables. use the 48V DC power cables. but the powered device must be the first Ethernet port. use the 48V DC power cables.Chapter 3 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Figure 17 respectively show the rear panel of the swtich when the 48V DC power supply and 110V/220V AC power supply are adopted. FIGURE 16 REAR PANEL OF THE ZXR10 2852S (DC POWER SUPPLY) -48VGND GNDP -48V OFF ON FIGURE 17 REAR P ANEL OF THE ZXR10 2852S (AC POWER SUPPLY) OFF ON 100-240V~ 60-50Hz 50 Confidential and Proprietary Information of ZTE CORPORATION . The four feet support the switch and form a lower air exhaust vent for the dissipation of the power supply module. The 19” standard cabinet can be provided by the customer. Installing the Switch on Desktop If the switch is placed on the desktop. you will learn about: Installation and debugging procedures of the ZXR10 2609/2818S/2826S/2852S Installation of Cables Cable Lightning Protection Requirements Installing the Equipment The ZXR10 2609/2818S/2826S/2852S can be installed either on the desktop or a 19” standard cabinet (except the ZXR10 2609). install the cabinet as per 19” Standard Cabinet Installation Manual. Confidential and Proprietary Information of ZTE CORPORATION 51 . If ZTE provides the cabinet. Figure 18 shows the installation method. install four plastic feet (the plastic feet and screws are delivered with the switch) on the bottom plate of the switch.Chapter 4 Installation and Debugging In this chapter. 52 Confidential and Proprietary Information of ZTE CORPORATION .Foot Installing the Switch onto a Cabinet To install the switch onto a 19” cabinet. two flanges should be installed on both sides of the box of the switch (the flanges and screws come with the equipment).ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 18 INSTALLING PLASTIC FEET ZXR10 2609 DC 5V Console 1 2 3 4 5 6 7 8 9 2 4 6 8 10 12 14 16 SF-2GE-2RJ45 ZXR10 2818S ESD 2 RUN PWR Console 1 3 5 4 6 LNK/ACT 8 10 12 14 16 7 9 11 13 15 1 3 5 7 9 11 13 15 2 4 6 8 10 12 14 16 18 20 22 24 SF-2GE-2RJ45 ZXR10 2826S ESD RUN PWR Console 1 3 5 7 9 11 13 15 17 19 21 23 ZXR10 2852S TX RX TX RX CONSOLE 52 51 50/49 2/1 4/3 6/5 8/7 10/9 12/11 14/13 16/15 18/17 20/19 22/21 24/23 26/25 28/27 30/29 32/31 34/33 36/35 38/37 40/39 42/41 44/43 46/45 48/47 1 . as shown in Figure 19.Box 2 . Chapter 4 . as shown in Figure 20. Confidential and Proprietary Information of ZTE CORPORATION 53 .Flange 3 .Box 2 .Screw On both sides of the 19” cabinet. install two symmetric holders to support the switch.Installation and Debugging FIGURE 19 INSTALLING FL ANGES 2 4 6 8 10 12 14 16 SF-2GE-2RJ45 ZXR10 2818S ESD 2 RUN PWR Console 1 3 5 4 6 LNK/ACT 8 10 12 14 16 7 9 11 13 15 1 3 5 7 9 11 13 15 2 4 6 8 10 12 14 16 18 20 22 24 SF-2GE-2RJ45 ZXR10 2826S ESD RUN PWR Console 1 3 5 7 9 11 13 15 17 19 21 23 ZXR10 2852S TX RX TX RX CONSOLE 52 51 50/49 2/1 4/3 6/5 8/7 10/9 12/11 14/13 16/15 18/17 20/19 22/21 24/23 26/25 28/27 30/29 32/31 34/33 36/35 38/37 40/39 42/41 44/43 46/45 48/47 1 . 54 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 20 INSTALLING HOLDERS 2 1 3 1 . as shown in Figure 21.Screw After the holders are installed.Holder 2 .Cabinet 3 . push the switch along the holders and fix the flanges onto the cabinet. Chapter 4 .Installation and Debugging FIGURE 21 FIXING EQUIPMENT 2 4 6 8 10 12 14 16 SF-2GE-2RJ45 ZXR10 2818S ESD 2 RUN PWR Console 1 3 5 4 6 LNK/ACT 8 10 12 14 16 7 9 11 13 15 1 3 5 7 9 11 13 15 2 4 6 8 10 12 14 16 18 20 22 24 SF-2GE-2RJ45 ZXR10 2826S ESD RUN PWR Console 1 3 5 7 9 11 13 15 17 19 21 23 ZXR10 2852S TX RX TX RX CONSOLE 52 51 50/49 2/1 4/3 6/5 8/7 10/9 12/11 14/13 16/15 18/17 20/19 22/21 24/23 26/25 28/27 30/29 32/31 34/33 36/35 38/37 40/39 42/41 44/43 46/45 48/47 1 Cabinet 2 Box 3 Screw Confidential and Proprietary Information of ZTE CORPORATION 55 . Figure 22 shows the AC power cable.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Installation of Cables Cables of the ZXR10 2609/2818S/2826S/2852S include power cables. except that the core diameter is smaller. AC power cables look basically the same as the standard printer power cables. For the ZXR10 2609. FIGURE 22 AC POWER CABLE One end of the AC power cable is connected to the AC power socket on the AC power supply module of the ZXR10 2818S/2826S/2852S. directly use the self-contained AC adapter connection equipment and socket. Install AC power cables. network cables. Installing Power Cables Power cables are classified into AC power cables and DC power cables according to the type of power supply module: 1. 56 Confidential and Proprietary Information of ZTE CORPORATION . Figure 23 shows the –48 power socket on the DC power supply module of the ZXR10 2609/2818S/2826S/2852S. and fibers. 2. and the other end to the 220V AC power socket. configuration cables. Install DC power cables. The yellow-green wire is connected with GNDP. Confidential and Proprietary Information of ZTE CORPORATION 57 . and the other end to the corresponding terminal of –48V DC power supply. The brown wire is connected with -48VGND. On end B: The blue wire is connected to -48V power supply. as shown in Figure 24.Chapter 4 . FIGURE 24 DC POWER CABLE D -48VGND -48V GNDP Label End B End A Where.Installation and Debugging FIGURE 23 –48 POWER SOCKET The DC power cable is a 3-core power cable. the plug is on end A. One end of the DC power cable is connected to the power socket on the DC power supply module of the ZXR10 2818S/2826S/2852S. The other end is an RJ45 port. One end of the cable is a DB9 serial port. The ZXR10 2609/2818S/2826S/2852S is delivered with serial port configuration cable. which is connected to the Console port on the ZXR10 2609/2818S/2826S/2852S. FIGURE 25 SERIAL PORT CONFIGURATION CABLE Magnified view of end A TABLE 5 PINOUT OF SERIAL PORT CONFIGURATION CABLE End A 2 3 5 4 6 7 8 58 Color White Blue White Orange White Green White Brown End B 3 6 4 5 7 2 8 1 Confidential and Proprietary Information of ZTE CORPORATION . Figure 25 shows the appearance of a configuration cable and Table 5 provides the cable pinout. which is connected with the serial port on the computer.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Installing Configuration Cables The serial port configuration cable is used for the configuration and routine maintenance of the ZXR10 2609/2818S/2826S/2852S. Installation and Debugging Installing Network Cables Both ends of the network cable are crimped with RJ45 connectors.Chapter 4 . TABLE 6 RJ45 PINOUT OF STRAIGHT-THROUGH CABLE A End 1 2 3 6 Cable Colors White/orange Orange White/green Green B End 1 2 3 6 59 Confidential and Proprietary Information of ZTE CORPORATION . with one-to-one connection correspondence at two ends of the cable. The specific pinout is shown in Table 6. and crimping round wire AWG24-28#. rated voltage 125V. FIGURE 26 STRUCTURE OF NETWORK CABLE End A By the sequence of crimping the lines in the connector. Name of the cable connector: 8P8C straight cable crimping connector Model: E5088-001023 Technical parameters: Rated current 1. as shown in Figure 26.5A. the cables can be classified into: Straight-through cable RJ45. Fibers are classified into single-mode and multi-mode fibers. 60 Confidential and Proprietary Information of ZTE CORPORATION . Note not to mis-insert the fibers. They are respectively marked as TX and RX on the panel.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual A End 4 5 7 8 Cable Colors Blue White/blue White/brown Brown B End 4 5 7 8 Crossover cable RJ45J with two twisted pairs at two ends of the cable corresponding to each other in the crossover mode. TABLE 7 RJ45J PINOUT OF CROSSOVER CABLE A End 1 2 3 6 4 5 7 8 Cable Colors White/orange Orange White/green Green Blue White/blue White/brown Brown B End 3 6 1 2 4 5 7 8 Installing Fibers Each optical port of the ZXR10 2609/2818S/2826S/2852S is connected to two fibers: one for receiving and one for transmission. The specific pinout is shown in Table 7. You can configure 6 types of fibers as listed in Table 8 according to your application requirements. Figure 27 shows the structure and dimensions of the label. Optical fibers inside the protection tube should not entangle with one another. and they shall be bent into a round shape at the bending position. make sure to protect the fibers against any damages with plastic corrugated protection tubes. if any. The meanings of the labels shall clearly reflect the corresponding numbers and relationship between cabinets and between rows. The labels at the two ends of the optical fiber shall be clear and legible. Confidential and Proprietary Information of ZTE CORPORATION 61 .Installation and Debugging TABLE 8 FIBER TYPES Mode Type of Connector on the Switch SC-PC connector (square and flat head) Type of Connector on the Peer End FC/PC connector Single-mode fiber SC/PC connector ST/PC connector FC/PC connector multi-mode fiber SC-PC connector (square and flat head) SC/PC connector ST/PC connector For fiber layout out of the cabinet.Chapter 4 . Labels 1. The pattern and meanings of the labels attached to the connector The label attached to the connector is called transverse English label on panels and connectors. Figure 28 shows the structure and dimensions of the label. TIC 10/100Base-T 1——Connection position. the first 10/100Base-T network port of the TIC board.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 27 TRANSVERSE ENGLISH LABEL ON P ANELS AND CONNECTORS Meanings of the contents on the labels are as follows: RJ45——Cable code Port A——End A of the cable connector. The pattern and meanings of the label attached to the cable The label attached to the cable is called roll-type selfcover laser print label model II. corresponding to End B or another end. It refers to the straight line length of the cable from the connector at one end to the connector at the other end. 2. 62 Confidential and Proprietary Information of ZTE CORPORATION . 5m——Length of the finished cable. Chapter 4 .30m #1-L5-DTI1 D25~32 The contents of the label in the above figure have the same meanings as those of the label in Figure 27. Before the cabinet equipment is delivered. Figure 29 shows the structure and dimensions of the label. It is used when the horizontal English label cannot be used because the cable connector is small or the cable does not look nice with a horizontal English label. These two types of label are used in different places. 3. This label attached to the cable is called Transverse English Type I Label. The transverse English label on panels and connectors is only applicable to the connectors where the attachment area is larger than the label area or to panels.Installation and Debugging FIGURE 28 ROLL-TYPE SELF-COVER LASER PRINT LABEL MODEL II Transparent area Transparent area Printable area HD182 Port B 1. The contents of the label in the above figure have the same meanings as those of the label in Figure 27 Confidential and Proprietary Information of ZTE CORPORATION 63 . The roll-up selfmulching laser printing label is rolled around the cable with its own scotch adhesive tapes. all the internal interconnected cables shall be attached with flag-type direction labels. the row number and column number of the cabinet at the side of the connected remote optical interface device as well as the layer No. Rack No. Column No The two sides of the engineering label on the optical fiber are marked “L” and “R” with the specific meanings as follows: When the label is pasted on the fiber at the ZXR10 2609/2818S/2826S/2852S side. FIGURE 30 P ATTERN AND MEANINGS OF THE ENGINEERING LABEL ON THE OPTICAL FIBER Optical fible(R) Optical fible(L) The side marked with "L" must be filled in Fill in the ODF. of the fiber in 64 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 29 TRANSVERSE ENGLISH TYPE I LABEL 4. Row No. The meaning of the content and the structure of a fiber engineering label are as shown in Figure 30. Serial No. Serial No. The side marked with "R" must be filled in Row No. Layer No. the cascading cable of switch A is the uplink cable of switch B. except the uplink. and switches B and C are access switches. of the fiber and fiber number shall be filled in the L area of the label. are distributed inside the building to avoid the attack of lightning induction. The Ethernet switch shall be placed in the corridor. Where. That is. The damage of direct lightning strike is hard to avoid. Switches A. and C are cascaded. The rest subscriber lines are distributed inside the building and connected to the subscriber terminals from bottom to top in the corridor. Figure 31 shows the cabling of Ethernet switch in a fourfloor building with three units. Ensure that all subscriber lines. preferably on the first floor. of ZXR10 2609/2818S/2826S/2852S where the fiber is located as well as the layer No. and cascading lines. Cable Lightning Protection Requirements According to the degree of hazard.Installation and Debugging the cabinet and the fiber No. and lightning. Confidential and Proprietary Information of ZTE CORPORATION 65 . downlink. The following lightning protection requirements are proposed to reduce the equipment failure rate in the areas where lightning is frequent. To avoid the direct sunshine.Chapter 4 . the row No. the switch cannot stay in an outdoor place where no weather-proof measures are taken. and the cascading cable of switch B is the uplink cable of switch C. In this case. switch A in Unit 1 is the convergence switch of the whole building. rains. and column No. If the label is attached on the optical interface equipment of the customer. lightning is classified into direct lightning strike and lightning induction. B. But proper lightning protection measure can effectively prevent the lightning induction. 1. contents filled on the label are just contrary to those at the ZXR10 2609/2818S/2826S/2852S side. should be filled in the R area of the label. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 31 CABLING OF THE ETHERNET SWITCH IN A BUILDING Unit 1 Corridor 4st floor 7 8 Unit 2 Corridor Unit 3 Corridor 3st floor 5 6 2st floor 3 4 Switch . 1 to 8 stands for subscribers... The lightning protection capability of the lightning protection bar must reach 6 KV or above and the current discharge capability must reach 5 KA. Switch . 2.. If the electrical port is used. lightning protection bars must also be added. and cascading Ethernet ports that are led outdoors. 1st floor 1 Uplink cable 2 Cascading cable A B Cascading cable C In the above figure. lightning protection bars must be added. Switch . It is recommended to use the optical port as the uplink port of the convergence switch in the building. The cascading cable refers to the cable connecting two switches... downlink. 66 Confidential and Proprietary Information of ZTE CORPORATION .. The grounding cable of the lightning protection bar must have a diameter of 16 mm2 and a length less than 30 cm. In special case when the common subscriber lines must be distributed outdoors. Reinforced lightning protection measures must be taken and lightning protection bars must be added for the uplink. Chapter 4 . FIGURE 32 CABLING OF A CONVERGENCE SWITCH Ethernet switch 。。。 Lightning protection bar Uplink cable (optical interface) Subscriber line Shell ground Less than 30 cm Uplink cable or cascading cable 3.Installation and Debugging Figure 32 shows the cabling of a convergence switch. such as lightning protection socket and lightning protection bar. the uplink port is the optical port and lightning protection bars are added for the downlink or cascaded cables. Whichever grounding method is used. The lightning bars are connected to the earth through the shell. If the test shows that grounding system is not satisfied. The lightning Confidential and Proprietary Information of ZTE CORPORATION 67 . it is recommended to equip an independent grounding post and the grounding cable must be 16 mm2 in diameter and as short as possible. must be added to the power supply. It is prohibited that the switch directly gets the power from the outdoor overhead power cable. A lot of residential buildings with proper grounding have a grounding resistance of 1 ohm. 4. Where. If the switch must directly get the power from the outdoor overhead power cable. The rest subscriber lines are distributed inside the building. the grounding resistance must be less than 5 ohm and cannot exceed 10 ohm. special lightning protection measures. The grounding system with good ground grid is preferred for the switch. appropriate power supply. power supply. Click Start > Programs > Accessories > Communication > HyperTerminal to connect the HyperTerminal. as shown in Figure 33. Proper grounding. including grounding. 68 Confidential and Proprietary Information of ZTE CORPORATION . 1. reasonable wiring. The Console port connection configuration adopts the VT100 terminal mode. several measures must be implemented at the same time.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual protection bar for the power supply must have better lightning protection index than that for the port cable. Taking one measure is far from enough to prevent the lightning strike. 5. Connect the PC to the ZXR10 2609/2818S/2826S/2852S. Therefore. and wiring. System Debugging Connection Configuration The ZXR10 2609/2818S/2826S/2852S debugging is implemented through the Console. The lightning strike lead-in mechanism also varies a lot. and suitable lightning protection measures will definitely reduce the chance of the switch damage resulted from lighting strike. Whether the Ethernet switch will suffer lightning strike is affected by a lot of factors. The following takes the configuration of HyperTerminal provided by the Windows operating system as an example. Installation and Debugging FIGURE 33 CREATING A CONNECTION 2.Chapter 4 . Select COM1 or COM2 according to the serial port connected to the configuration cable. Confidential and Proprietary Information of ZTE CORPORATION 69 . See Figure 34. Port attribute settings include the following contents: Baud rate: 9600 Data bit: 8 Parity: None Stop bit: 1 Data flow control: None 70 Confidential and Proprietary Information of ZTE CORPORATION . as shown in Figure 35. Set the attributes of the selected serial port.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 34 CONNECTION CONFIGURATION INFORM ATION 3. and voltage of the power supply in the equipment room meet the requirements listed in Table 9.Installation and Debugging FIGURE 35 PORT ATTRIBUTE SETTINGS Check that all settings are correct.Chapter 4 . Confidential and Proprietary Information of ZTE CORPORATION 71 . humidity. Then power on the ZXR10 2609/2818S/2826S/2852S to initialize the system and then enter the configuration mode. check the environment in the equipment room and the hardware installation. Check whether the temperature. 1. Power-on Procedure Before powering on the ZXR10 2609/2818S/2826S/2852S. 4m in front of the equipment when the front and rear protection boards are removed. and the accumulated running period in a year is no more than 15 days. 2. i. 72 Confidential and Proprietary Information of ZTE CORPORATION . 2. iii. Turn on the external power supply. iv. The short-term working condition means that the continuous running period is no more than 48 hours. Turn on the power switch at the back of the switch. Equipment labels shall be complete. The rack is properly grounded. ii. correct and legible. Equipment is installed reliably in the 19” standard cabinet. Check other hardware conditions. The power switch of the equipment is turned off. the temperature and humidity are measured 2m above the floor and 0. To power on the ZXR10 2852S. do as follows: 1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual TABLE 9 TEMPERATURE AND HUMIDITY TABLE Temperature (oC) Check Item Relative Humidity (%) Short-term Working Condition (note 2) Long Term Operatin g Conditio n 30% 70% to Short Term Operatin g Conditio n 20% 90% to Long-term Working Condition (note 1) Range Notes: 15°C to 30°C -5°C to 45°C In normal working environment of the ZXR10 2609/2818S/2826S/2852S. 3. with the grounding resistance meeting relevant technical requirements. Check whether the power cables and other cables are correctly and reliably connected. Indicator Status After the switch is powered on. the PWR indicator is on and the RUN indicator is off. the states of indicators do not change. The BootROM starts to load the version. do as follows: 1. To power down the ZXR10 2852S. If the version is unavailable. If the version is loaded normally. Turn off the power switch at the back of the switch. Confidential and Proprietary Information of ZTE CORPORATION 73 .Installation and Debugging To power on the ZXR10 2609\2818S\2826S. 2. Turn off the external power supply. Turn on the external power supply. Connect the power cable at the back of the Ethernet switch. do as follows: 1. 2. Turn off the external power supply. 2. the system indicators change in the following way: 1. The power-down procedure is on contrary to the power-on procedure. Remove the power cable at the back of the Ethernet switch. 2. do as follows: 1. To power down the ZXR10 2609/2818S/2826S. the RUN indicator flashes at 1 Hz. After the system is powered on.Chapter 4 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual System Boot Procedure The procedure to start the system is as follows: After the system is powered on, start the hardware. After the hardware test is passed, the following information appears on the management terminal: Welcome to use ZTE eCarrier!! Copyright(c) 2004-2006, ZTE Co., Ltd. System Booting...... CPU: WindBond ARM7TDMI Version: VxWorks5.5.1 BSP version: 1.2/0 Creation date: May 23 2005, 00:07:21 Press any key to stop auto-boot... 7 After the above information appears, wait for about 7 seconds and then press any key to enter the boot status. Then modify the startup parameters. If the system does not detect any input within the specified time, the system begins to automatically load the version and displays the following information: auto-booting... boot device unit number processor number 74 : wbdEnd : 1 : 0 Confidential and Proprietary Information of ZTE CORPORATION Chapter 4 - Installation and Debugging host name : tiger file name : vxWorks inet on ethernet (e) : 10.40.89.106 host inet (h) : 10.40.89.78 gateway inet (g) : 10.40.89.78 flags (f) : 0x80 Attaching to TFFS... done. Loading file :kernel Uncompressing... Uncompressed 2310452 bytes Ok. Loading image... 7018512 Starting at 0x108000... (Omitted) Welcome ! ZTE Corporation. All rights reserved. login : After the system is started successfully, the prompt character “login:” is displayed, requesting you to input the login user name and password. The default user name is admin and password is zhongxing. Confidential and Proprietary Information of ZTE CORPORATION 75 This page is intentionally blank. Confidential and Proprietary Information of ZTE CORPORATION 76 Chapter 5 Usage and Operation In this chapter, you will learn about: Common configuration 2609/2818S/2826S/2852S methods of the ZXR10 Command mode of the ZXR10 2609/2818S/2826S/2852S Command line usage of the ZXR10 2609/2818S/2826S/2852S Configuration Modes The ZXR10 2609/2818S/2826S/2852S provides several configuration modes. As shown in Figure 36, you can select a configuration mode according to the network connected. 1. Configuration through serial port connection 2. Configuration through TELNET session 3. Configuration through SNMP connection Confidential and Proprietary Information of ZTE CORPORATION 77 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 36 ZXR10 2609/2818S/2826S/2852S CONFIGURATION MODES FTP/TFTP server Telnet host SNMP network management system Serial port HyperTerminal ZXR10 Configuration Through Console Port Connection Configuration through console port connection is the main configuration mode of the ZXR10 2609/2818S/2826S/2852S. For the operation procedure, refer to Connection. You can also configure the connection when the equipment is running. Configuration Through TELNET Session Telnet mode is often used for configuring a remote switch. You can log in to the remote switch through the Ethernet port of the local host. The login username and password must be configured on the switch and you can ping the IP address of the layer 3 port on the switch successfully on the local host. (For configuration of IP address of the layer 3 port, see Layer 3 Configuration.) Use the command create user to create a user and the same command to set the login password. 78 Confidential and Proprietary Information of ZTE CORPORATION Chapter 5 - Usage and Operation Note: The default username is admin and the password is zhongxing. Suppose the IP address of the layer 3 port is 192.168.3.1 and this address can be pinged from the local host. Then perform the remote configuration as follows: 1. Run the Telnet command on the host, as shown in Figure 37. FIGURE 37 RUN THE TELNET Confidential and Proprietary Information of ZTE CORPORATION 79 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 2. Click OK. A Telnet window appears, as shown in Figure 38. FIGURE 38 SWITCH REMOTE LOGIN WINDOW 3. Enter the username and password to enter the user mode of the switch. Configuration Through SNMP Connection Simple Network Management Protocol (SNMP) is the most popular network management protocol. You can use one NM server to manage all the equipment on the network through this protocol. SNMP adopts the server/client-based management mode. The background NM server serves as an SNMP server, and the foreground network equipment. The ZXR10 2609/2818S/2826S/2852S serves as the SNMP client. The 80 Confidential and Proprietary Information of ZTE CORPORATION the commands of the ZXR10 2609/2818S/2826S/28502S are allocated to different modes according to the functions and authorities. A command can be executed only in the specified mode. you can enter the user mode after entering the login username and password. The management and configuration of the ZXR10 2609/2818S/2826S/2852S are implemented through the NM software. The ZXR10 2609/2818S/2826S/2852S command modes include: 1. The prompt character in the user mode is the host name followed by “>”. NAS configuration mode 7. Cluster management configuration mode User Mode When you log in to the switch through the HyperTerminal or Telnet. as shown below: zte> Confidential and Proprietary Information of ZTE CORPORATION 81 . Layer 3 configuration mode 5. The background NM server must be installed with the NM software that supports SNMP. SNMP configuration mode 4. User mode 2.Chapter 5 .Usage and Operation foreground and background share the same MIB management database and communicate with each other via the SNMP. refer to SNMP. Command Mode To facilitate the configuration and management of the switch. For the SNMP configuration on the ZXR10 2609/2818S/2826S/2852S. Global configuration mode 3. File system configuration mode 6. you can use the command config snmp to enter the SNMP configuration mode. you can configure various functions of the switch.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual The default host name is zte. Thus. enter the enable command and the corresponding password to enter the global configuration mode. In the user mode. Global Configuration Mode In the user mode. you need to use the command adminpass to set the password for entering the global configuration mode to prevent the login of unauthorized users. SNMP Configuration Mode In the global configuration mode. To return to the user mode from the global configuration mode. as follows: zte>enable password :**** zte(cfg)# In the global configuration mode. as shown below: zte(cfg)#config snmp zte(cfg-OSPF)#? 82 Confidential and Proprietary Information of ZTE CORPORATION . Note: The command Show can be executed in any mode. You can modify the host name by using the command hostname. you can execute the command exit to exit the switch configuration or execute the command show to display the system configuration and operation information. use the exit command. Chapter 5 . and so on. use the command exit or press Ctrl+Z. Confidential and Proprietary Information of ZTE CORPORATION 83 . execute the command config router to enter the Layer 3 configuration mode. To return to the global configuration mode from the file system configuration mode. displaying file or directory. you can set the SNMP and RMON parameters. you can configure the Layer 3 port. Layer 3 Configuration Mode In the global configuration mode. formatting Flash. uploading/downloading files through TFTP. and ARP entities. execute the command config tffs to enter the file system configuration mode. File System Configuration Mode In the global configuration mode. To return to the global configuration mode from the Layer 3 configuration mode. deleting file or directory. changing file directory. modifying file name.Usage and Operation In the SNMP configuration mode. you can operate on the switch file system. use the command exit or press Ctrl+Z. as shown below: zte(cfg)#config tffs zte(cfg-typenum)# In the file system configuration mode. as shown in the following example: zte(cfg)#config router zte(cfg-OSPF)#? In the Layer 3 configuration mode. To return to the global configuration mode from the SNMP configuration mode. static router. including adding file directory. use the command exit or press Ctrl+Z. copying files. 84 Confidential and Proprietary Information of ZTE CORPORATION . execute the command config group to enter the cluster management configuration mode. use the command exit or press Ctrl+Z. as shown below: zte(cfg)#config nas zte(cfg-OSPF)#? In the NAS configuration mode.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual NAS Configuration Mode In the global configuration mode. as shown below: zte(cfg)#config group zte(cfg-OSPF)#? In the cluster management configuration mode. you can configure the switch access service. To return to the global configuration mode from the configuration mode. use the command exit or press Ctrl+Z. To return to the global configuration mode from the cluster management configuration mode. NAS Cluster Management Configuration Mode In the global configuration mode. including the user access authentication and management. execute the command config nas to enter the NAS configuration mode. you can configure the switch cluster management service. a keyword or a parameter. enter a question mark (?) behind the DOS prompt of the system.Chapter 5 . enter a question mark "?" behind the DOS prompt of the system. the next keyword or parameter to be input will be listed. You can use the online help to get keywords and parameter list of any command.Usage and Operation Usage of Command Line Online Help In any command mode. 1. In any command mode. For example: zte(cfg)#? config clear create zte(cfg)# 3. Note that there is no space between the character (string) and the question mark. a list of available commands in the command mode will appear. and a list of all commands in the mode and the brief description of the commands will appear. For example: zte>? enable exit help system show zte> show config information enable configure mode exit from user mode Description of the interactive help 2. commands or a list of keywords starting with the character or string can be displayed. and also a brief explanation will be given. Note Confidential and Proprietary Information of ZTE CORPORATION 85 . Input a question mark behind a command. Input a question mark behind a character or string. If you enter a wrong command.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual that a space must be entered before the question mark. For example: zte(cfg)#conf ter % Command not found (0x40000066) zte(cfg)# In the following example. For example: zte(cfg)#? snmp router tffs nas group mode zte(cfg)# enter SNMP config mode enter router config mode enter file system config mode enter nas config mode enter group management config 4. keyword. zte(cfg)#? create zte(cfg)#? port vlan user zte(cfg)#create user % Parameter not enough (0x40000071) create descriptive name for port create descriptive name for vlan create user zte(cfg)#create user ? <name> user name zte(cfg)#create user wangkc 86 Confidential and Proprietary Information of ZTE CORPORATION . or parameter and press Enter. the online help is used to help create a username. the message “Command not found” will be displayed on the interface. TABLE 10 FUNCTIONAL KEYS Functional Key Ctrl-P or Usage Recover the last command (Roll back in the historical Confidential and Proprietary Information of ZTE CORPORATION 87 . a command or keyword can be shortened into a character or string that can uniquely identify this command or keyword. Table 10 lists the functional keys.Usage and Operation zte(cfg)# Command Abbreviations In the ZXR10 2609/2818S/2826S/2852S. the command exit can be shortened as ex.Chapter 5 . For example. and the command show port shortened as sh po. History Command The user interface supports the function of recording input commands. The function is very useful in re-invoking of a long or complicated command. To re-invoke a command from the record buffer. Press… Ctrl+P or Ctrl+N or To… Recover the last command (Roll back in the historical records of commands) Recover the next command (Roll forward in the historical records of commands) Functional Key The ZXR10 2609/2818S/2826S/2852S provides a lot of functional keys for the user interface to facilitate user operations. do one of the following. A maximum of 20 history commands can be recorded. Recover the next command (Roll forward in the historical records of commands). Ctrl-N or Ctrl-B or Ctrl-F or Tab Ctrl-A Ctrl-E Ctrl-K Ctrl-H Backspace Ctrl-C Ctrl-L Ctrl-Y Ctrl-Z or Delete the character on the left of the cursor. When the command output exceeds one page. 88 Confidential and Proprietary Information of ZTE CORPORATION . the output is split into several pages automatically and the prompt “----.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Functional Key Usage records of commands). Clear screen. Recover the last command executed. If there is only one command. Cancel the command and display the prompt character. Delete the characters from the cursor to the end.Press Q or Ctrl+C to break -----” appears at the bottom of the current page.more ----. Display commands starting with the character or string. Skip to the beginning of the command line. Move left in the command line currently indicated by the prompt. make this command a complete one. Skip to the end of the command line. Move right in the command line where the prompt is currently located. Return to the global configuration mode. You can press any key to turn pages or press Q or Ctrl+C to stop the output. z.cfg. you will learn about: File System Management File system and related operations TFTP Configuration Import and Export of Configuration Backup and Recovery of Files Software Version Upgrade File System Management File system Introduction In the ZXR10 2609/2818S/2826S/2852S. The name of the configuration file is running.Chapter 6 System Management In this chapter. the FLASH memory is the major storage device. should be conducted in the FLASH memory. The name of the version file is kernel. such as version upgrading and configuration saving. Operations. Both the version file and configuration file of the switch are saved in the FLASH memory. Confidential and Proprietary Information of ZTE CORPORATION 89 . Copy a file. tftp 8. Renaming a File rename 5. Display the current directory list. remove 4. format 90 Confidential and Proprietary Information of ZTE CORPORATION . cd 6. config tffs 2. ls 7. Modify the current directory. Format the FLASH memory. Delete a file or directory. Create a directory.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual File System Operations The ZXR10 2609/2818S/2826S/2852S provides a lot commands for file system operations. Upload or download a version through TFTP. copy 9. md 3. Enter the file system configuration mode. The frequently-used commands include: 1. Run the tftpd software at the background host. In the following.System Management TFTP Configuration The switch version file and configuration file can be backed up or restored by using TFTP. 1. FIGURE 39 TFTPD SERVER INTERFACE Confidential and Proprietary Information of ZTE CORPORATION 91 . The interface as shown in Figure 39 appears. the FTP Server software "tftpd" is taken as an example to describe the configuration of the background FTP Server.Chapter 6 . The TFTP server application software is started at the background to communicate with the ZXR10 2609/2818S/2826S/2852S (TFTP client) to implement the file backup and recovery. 92 Confidential and Proprietary Information of ZTE CORPORATION . for example. In the dialog box that appears. Figure 40 shows the dialog box after the setting is completed. G:\Switch. Click OK to complete the setting. you can perform the TFTP operations on the switch. for example. Click the first Browse to select the home directory for the version file or configuration file. click Browse and select the directory for the version file or configuration file. Click the second Browse to select the file. D:\IMG. After the TFTP configuration is completed. For details. FIGURE 40 TFTPD SETTINGS DIALOG BOX 3. see the later sections. Click Tftpd90 > Configure.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 2. Contents of the config.102 upload config.1. which makes it easy to configure and manage the switch.txt Confidential and Proprietary Information of ZTE CORPORATION 93 . zte(cfg-tffs)#tftp 192. Export the configuration information. This file can also be uploaded to the TFTP server for viewing.txt can be edited manually as needed and then downloaded to the switch by using the command tftp. Import the configuration information.1. 1.102 download config.txt in the FLASH and send them to the switch for resolution and execution. zte(cfg-tffs)#tftp 192. You can use the command show running-config toFile to export the execution result of show running-config to a config.txt and save it in the FLASH memory.168.System Management Import and Export of Configuration The ZXR10 2609/2818S/2826S/2852S provides the import and export functions of configuration information.Chapter 6 .txt 2.168. You can use the command readconfig to read the configuration commands in the config. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Note: It is recommended to use the command readconfig when the switch configuration is null. back up the configuration data using the command tftp.txt conflicts with the existing one of the switch. Back up the configuration file. execution of the command in the config. 1. Thus. Backup and Recovery of Files The files mentioned here refer to the configuration file and version file in the FLASH memory. When a command is used to modify the switch configuration. If the configuration command in the config. you need to execute the command saveconfig to save the current configuration into the FLASH memory.txt will encounter errors and abort. Otherwise. When the switch is restarted. (Some commands follow a certain sequence upon execution).txt. the execution of readconfig may encounter errors and abort when a certain command in the config. the data is running in the memory in real time. all the contents newly configured will be lost.txt is read. note the execution sequence of commands. The following shows the saveconfig command: zte(cfg)#saveconfig To prevent damage to the configuration data. 94 Confidential and Proprietary Information of ZTE CORPORATION . When manually editing the config. 168. Recovery is very important in the case of upgrade failure.102 download running. You can execute the following command to download the configuration file in the background TFTP server to the FLASH memory: zte(cfg-tffs)#tftp 192.1. For details. Recover the version file. you can use the command tftp to upload the foreground version file to the background TFTP server.System Management The following command can be used to back up a configuration file in the FLASH memory to the background TFTP Server: zte(cfg-tffs)#tftp 192. For example: zte(cfg-tffs)#tftp 192.1. Back up the version file. 2.168.z 4.txt and then back up the file to the TFTP server. For detailed method. Version file recovery is used to retransmit the background backup version file to the foreground through TFTP. Similar to the configuration file.cfg You can also use the command show running-config toFile to write the configuration information into the config. refer to Software Version Upgrade. The version recovery operation is basically the same with the version upgrade procedure.102 upload running.102 upload kernel. Confidential and Proprietary Information of ZTE CORPORATION 95 . Recover the configuration file.Chapter 6 .cfg 3.168. refer to Import and Export of Configuration.1. fasteth: 16. Version upgrade can be carried out in one of the following cases: When the operation of switch system is normal and when the operation of the switch system is abnormal. check the version information before and after the upgrade.f0. version upgrading is needed only when the original version does not support some functions or the equipment cannot run normally due to some special reasons. Improper version upgrade operation may result in upgrade failure and startup failure of the system. the maintenance personnel shall be familiar with the principles and operations of the ZXR10 2609/2818S/2826S/2852S and master the upgrading procedure.23 Module 0 : ZXR10 2818s. gbit : 0. Therefore.d0. The System's Software Info: Version number : 1. you can execute the command version to display the system hardware and software version information.d0.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Software Version Upgrade Normally. before version upgrading. Viewing the Version Information If the system state allows. In the global configuration mode. The displayed contents are as follows: zte(cfg)# The System's Hardware Info: Switch's Mac Address: 00.0 version make date : May 30 2005 version make time : 09:24:51 96 Confidential and Proprietary Information of ZTE CORPORATION .12. start the TFTP server software and set the TFTP server as per instructions in Confidential and Proprietary Information of ZTE CORPORATION 97 . The two IP addresses must be in the same network segment so that the host can ping the switch. Set the IP address of the Ethernet port on the switch. Connect an Ethernet port of the switch to the network port of the background host using a network cable.Chapter 6 . 3. 2.System Management System has run 0 years 0 days 0 hours 0 minutes 52 seconds zte(cfg)# Version Upgrade When the System is Normal If the switch runs normally. On the background host. upgrade the version as follows: 1. Connect Console port of the switch to the serial port of the background host using the self-contained configuration cable. Check whether the connections are correct. Set the IP address of the background host used for upgrade. change the name of the old version file and keep it in the FLASH memory.168..................ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual TFTP Configuration....... The following shows how to download the version file from the TFTP server to the FLASH memory: zte(cfg-tffs)#tftp 192. Restart the switch. Connect Console port of the switch to the serial port of the background host using the self-contained configuration cable.. Connect an Ethernet port of the switch to the 98 Confidential and Proprietary Information of ZTE CORPORATION .979.........157 bytes downloaded zte(cfg-typenum)# 7.102 download kernel. On the switch.... check the version under running and confirm whether the upgrading is successful. If the FLASH memory has sufficient space.... 5... 1......... Use the command tftp to upgrade the version. use the command version to check the information of current operating version....z ..... upgrade the version as follows: 1..........z 6.... Enter the file system configuration mode and execute the command remove to delete the old version file in the FLASH memory.............. After successful startup. Version Upgrade When the System is Abnormal When the switch cannot be started normally or runs abnormally....... ... zte(cfg)#config tffs zte(cfg-tffs)#remove kernel...........1.... 4.... . Enter c in the [ZxR10 Boot] state and press Enter to enter the parameter modification status. press any key as prompted to enter the [VxWorks Boot] state. Ltd.' = clear field. 09:05:12 Press any key to stop auto-boot. Check whether the connections are correct. Generally.. System Booting.. Welcome to use ZTE eCarrier!! Copyright(c) 2004-2006. 2.... ^D = Confidential and Proprietary Information of ZTE CORPORATION 99 . CPU: WindBond ARM7TDMI Version: VxWorks5.Chapter 6 .. [ZxR10 Boot]: c '.1 BSP version: 1. At the HyperTerminal. Creation date: Jul 29 2005.5.. quit '-' = go to previous field. Restart the switch.System Management network port of the background host using a network cable.2/0 ZTE Co. Set the IP addresses of the Ethernet port and the TFTP server. these two addresses are set to the same network segment. 5 [ZxR10 Boot]: 3. /* */ Use the default value./* */Use the default value./* */Use the default value.78 */Use the default value./* user (u) : 10.78 */Use the default :(Use the default value) (Use the default ftp password (pw) (blank = use rsh): value) flags (f) target name (tn) startup script (s) other (o) [ZxR10 Boot]: : 0x80 : : : */Use the default value.89.40./* */ IP address of processor number: 0 host name file name : tiger : vxWorks inet on ethernet (e) : 10.89./* */IP address of the : 10.40./* */Use the default value./* */Use the default value.106 the Ethernet port /* inet on backplane (b): host inet (h) TFTP server/* gateway inet (g) value. Set the IP address of the background host as the same with the IP address of the above TFTP server. 5./* 4.40.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual boot device : wbdEnd1 */Use the default value. Start the TFTP server software on the background server and configure the TFTP server as per description in 100 Confidential and Proprietary Information of ZTE CORPORATION .89./* */Use the default value. test flash passed perfectly! Welcome to boot manager! Type for help [BootManager]:? ls directory list.89.78 : 10.40. done.106 host inet (h) gateway inet (g) flags (f) : 10.Chapter 6 .Full Duplex Board 2818s ! Marvell has been initialized ! boot device unit number processor number host name file name : wbdEnd : 0 : 0 : tiger : vxWorks inet on ethernet (e) : 10.89.. Attaching network interface lo0.System Management TFTP Configuration.40.40. Attaching to TFFS..89./* */Display the current Confidential and Proprietary Information of ZTE CORPORATION 101 .78 : 0x80 Attached TCP/IP interface to wbdEnd0.. 6. Warning! no netmask specified. input zte to enter the [BootManager] state of the switch.. [ZxR10 Boot]: zte Load wbdEnd Begin W90N740 MAC0: 10MB . In the [ZxR10 Boot] state. Input ? to display the command list for this state. 78 kernel./* md mf cd dir_name file_name absolue-pathname */Create a directory./* */Delete the specified file./* [BootManager]: 7.CFG KERNEL. done! [BootManager]:ls RUNNING./* */Change the current directory./* reboot format del file_name */Display the current */Display the FLASH */Display the switch type and */Restart the switch. use the command tftp to upgrade the version../* */Create a file.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual pwd absolution path../* tftp ip_address file_name */Download/upload a version file through TFTP /* update file_name rename */Upgrade boot/* file_name newname */Rename the file.Z [BootManager]: 102 Confidential and Proprietary Information of ZTE CORPORATION . In the [BootManager] state.40.z Loading. /* devs information.89./* */Format the FLASH. /* show mac address. The following shows how to download the version file from the TFTP server to the FLASH memory: [BootManager]:tftp 10. execute the command reboot to restart the switching by using the new version. Confidential and Proprietary Information of ZTE CORPORATION 103 . If the switch cannot be started normally. If the switch is started normally. it indicates the version upgrade fails. repeat the above upgrade procedure.System Management In the [BootManager] state. use the command version to check whether the new version is running in the memory. In this case.Chapter 6 . Confidential and Proprietary Information of ZTE CORPORATION 104 . Port parameters are configured in the global configuration mode. flow control. Confidential and Proprietary Information of ZTE CORPORATION 105 . you can configure the following port parameters: auto negotiation. you will learn about: Configuration methods for various services of the ZXR10 2609/2818S/2826S/2852S Port Configuration Basic Configuration On the ZXR10 2609/2818S/2826S/2852S. The configuration includes the following contents: 1. duplex mode. and so on. port priority.Chapter 7 Service Configuration In this chapter. the auto-sensing function is disabled automatically. After the duplex mode or rate of the port is set. rate. Set the port status. set port 2. MAC address number restriction. set port auto The auto-sensing function is enabled by default. Set the port auto-sensing function. set port duplex For all the Ethernet optical port and the Ethernet electrical port working at 1000 Mbps.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 3. set port speed The rate of 100M/1000M Ethernet optical port cannot be changed. There are three methods to set the ingress bandwidth restriction: To restrict the rate of connectionless data packets. If the flow control is used to restrict the rate of connectionless or connection-oriented data packets. set port bandwidth The port bandwidth restriction is set by the unit of kbps. Set the duplex mode of the port. for example. To restrict the rate of connection-oriented data packets. the granularity shall be 1K when the configured value is relatively small. the duplex mode can only be full duplex and cannot be changed. filtering the broadcast packets. the granularity of rate restriction shall be 64K and the range shall be from 64K to 1536K. 5. you can use the command set port ingess_limit_mode to select the type of the filtering data packets for the rate restriction. The ingress bandwidth and egress bandwidth of the port can be set separately according to actual requirements. 4. Set the port bandwidth. for example. Set the port rate. 106 Confidential and Proprietary Information of ZTE CORPORATION . the port must be set to the 10M half duplex mode and the granularity shall be 1K when the configured value is relatively small. For the ingress rate restriction. data packets of TCP connection. When the rate configured is relatively small. As the restriction rate increases. zte(cfg)# set port 1 bandwidth ingress on rate 500 zte(cfg)# set port 1 ingess_limit_mode broadcast zte(cfg)# show port 1 qos Port: 1 PortQoSParams: IngressRateLimit : 500 IngressType broadcast SAPriority disable UserPriority disable DefaultPriority : 0 Confidential and Proprietary Information of ZTE CORPORATION 107 EgressRateLimit: 0 RateLimitMode : : normal : disable VlanPriority : : enable DscpPriority : . The port egress bandwidth restriction function is not supported on the ZXR10 2609/2818SLE/2826SLE/2852SLE. the accuracy of bandwidth restriction is rather high. and restrict the broadcast packet to 500K. the port rate becomes the maximum rate of the port. For a 100M port. Configuration example (use the port bandwidth restriction to realize the suppression of broadcast storm): Set the broadcast suppression function for port 1. the rate restriction range is between 64k and 256M. When the restriction rate configured is larger than the maximum bandwidth of the port.Chapter 7 .Service Configuration Note: Setting the type of filtering packet of ingress bandwidth restriction to the broadcast packets can be use to perform the broadcast suppression function. the maximum bandwidth is 100M. the accuracy of bandwidth restriction decreases gradually. When the ingress or egress bandwidth restriction is set. set port speedadvertise 12. Set the priority of a port. the MAC address learning function is enabled. no restriction.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual PortPriorityRemapTable: COS(802.1p user priority). 9. set port poe 11. set port security When the setting is “enable”. the number of MAC addresses is 0. set port default-priority 8. Set the external power supply mode of a port. Set the number of MAC addresses. Set the port rate advertisement. 13. create port name 14. set port macaddress By default. RMP(Remapped priority) COS 0 RMP 0 zte(cfg)# 1 1 2 2 3 3 4 4 5 5 6 6 7 7 6. the MAC address learning function is disabled. Set the address learning function of a port. Set the multicast filter of a port. set port flowcontrol 7. set port multicast-filter 10. Create a port name. that is. Set the flow control of a port. Add the port description. When the setting is “disable”. 108 Confidential and Proprietary Information of ZTE CORPORATION . (4.Service Configuration set port description 15. The queue priority of data packets is mapped with the SA priority in the following way: (0. Port QOS function Each port supports the configuration of data packet priority.1P user priority can be used to determine the priority of data packets when and only when the Confidential and Proprietary Information of ZTE CORPORATION 109 .3) 1. (2. You can enable or disable any type of priority determination mechanism on the port. set port user -priority The port 802. and the source MAC priority determination function is enabled. set port vlan -priority The configured VLAN priority can be used to determine the priority of data packets when and only when the priority of VLAN of the received data packets is enabled. The priority of the data packets entering the port is determined by the parameters of the data packets and settings of the port.1P user priority.5) 2.7) 3 Enable/Disable the port VLAN priority.Chapter 7 .3) 1. (6. and the port VALN priority determination function is enabled. The queue priority of data packets is mapped with the SA priority in the following way: (0.7) 3 Enable/Disable the port 802. The priority determination mechanism of the received data packets on the port can be different.5) 2. (The sequence of various priority determination modes is described in QoS Configuration.1) 0. (6. (2.1) 0. (4. Enable/Disable port source MAC priority function set port sa-priority The configured source MAC address priority can be used to determine the priority of the data packets when and only when the source MAC address of the received data packets is a static MAC address. The queue priority of data packets is determined by the 802. The queue priority of data packets is determined by the IP DSCP priority and queue priority mapping table. and remapping-tag functions. set port remapping-tag When the data packets received by the port are TAG data packets.1P user priority determination function is enabled. The default value of this mapping table is: 0 0. 6 6. set port dscp -priority The port layer 3 DSCP priority can be used to determine the priority of data packets when and only when the received data packets are IP ones and the layer 3 DSCP determination function is enabled.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual received data packets are TAG ones and the port 802. 5 5.1P user priority remapping table. 3 3. vlanpriority. Table 11 lists the default settings of port parameters. 7 7 It is not recommended to change the default values. 2 2.1P user priority and queue priority mapping table. 110 Confidential and Proprietary Information of ZTE CORPORATION . 4 4. and then use this priority as the new 802. 1 1. Enable/Disable the port layer 3 DSCP priority.1P user priority for future priority determination. the switch first uses this mapping table to re-map the priority in the data packets. Note: The ZXR10 2609/2818SLE/2826SLE/ 2852SLE does not support the sa-priority. Set the port 802. show port View the configuration and current duplex mode of the port 1. Display the configuration and duplex mode of the port.Chapter 7 .Service Configuration TABLE 11 DEFAULT SETTINGS OF PORT P ARAMETERS Parameter Port status Auto-sensing function Flow control Bandwidth restriction Port priority Default Configuration enable enable disable disable 0 Port Information You can use the command show to view the port information.3 : half : disabled Link Speed : down : 10 Mbps zte(cfg)# Confidential and Proprietary Information of ZTE CORPORATION 111 . zte(cfg)#show port 1 Port: 1 PortParams: PortEnable DefaultVlanId : enabled : 1 PortAutoNeg FlowControl Security : enabled : disabled : disabled MediaType : 100BaseT Multicastfilter: disabled SpeedAdvertise : MaxSpeed PortMacLimit PortStatus: PortClass Duplex : 802. 1. zte(cfg)#show port 1 qos Port: 1 PortQoSParams: IngressRateLimit: 0 IngressType SAPriority UserPriority : normal : disable : enable : 0 EgressRateLimit: 0 RateLimitMode VlanPriority DscpPriority : broadcast : disable : disable DefaultPriority PortPriorityRemapTable: COS(802.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 2. Display the QoS configuration data of the port.1p user priority). show port qos View the QoS configuration data of port 1. RMP(Remapped priority) COS 0 RMP 0 zte(cfg)# 1 1 2 2 3 3 4 4 5 5 6 6 7 7 Note: If the IngressRateLimit or EgressRateLimit is set to 0. show port statistics View the statistics data of port 24 (port name: uplink) zte(cfg)#show port 1 statistics Port: 1 PortName: ReceivedBroadcastFrames: 0 ReceivedMulticastFrames: 0 InPause : 0 ReceivedFrames : 0 ReceivedBytes CrcError : 0 : 0 112 Confidential and Proprietary Information of ZTE CORPORATION . it indicates that the port is not configured with the bandwidth restriction function. 3. Display the statistics data of the port. Port Mirroring Introduction Port mirroring is used to mirror the data packets of the switch port (ingress mirroring port) to an ingress destination port (ingress monitoring port). Confidential and Proprietary Information of ZTE CORPORATION 113 .Chapter 7 . Remove the statistics data of the port. all the statistics data of the port will be cleared.Service Configuration InMACRcvErr Fragments Frames64Bytes Frames65_127Bytes : 0 : 0 Jabber UndersizeFrames : 0 : 0 : 0 : 0 Frames256_511Bytes Frames1024_UpBytes : 0 : 0 Frames128_255Bytes: 0 Frames512_1023Bytes: 0 OversizeFrames SendUnicastFrames : 0 : 0 SendBytes SendFrames SendMulticastFrames SendMultiCollision SendExcessCollision SendDefferTrans : 0 : 0 : 0 : 0 : 0 : 0 SendNoneUnicastFrames:0 SendBroadcastFrames: 0 SendSingleCollision: 0 SendLateCollision: 0 SendCollision OutPause : 0 : 0 zte(cfg)# 4. After the command is executed. or mirror the data packets of the switch port (egress mirroring port) to an egress destination port (egress monitoring port). You can use the command clear por to remove the statistics data of the port. The ingress monitoring port and the egress monitoring port can be configured on the same port. Add a mirroring port. Port 1 is the ingress and egress monitoring ports.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Through mirroring. show mirror 114 Confidential and Proprietary Information of ZTE CORPORATION . set mirror add source-port 3. Basic Configuration The configuration of the port mirroring function includes the following contents: 1. because of CRC errors) are not mirrored. set mirror dest-port 2. Port mirroring provides an effective tool for the maintenance and monitoring of the switch. Display the port mirroring configuration. the data packets flowing in or out of a certain port can be monitored. Set a monitoring port. Note: In the default case. But multiple source ingress monitoring ports and source egress monitoring ports can be configured at the same time. The GOOD data packets received by the ingress mirroring port are mirrored onto the monitoring ports. The switch can be configured with only one ingress monitoring port and one egress monitoring port. the switch does not have the mirroring port. But the data packets directly discarded on the ingress port (for example. Delete a mirroring port set mirror delete source-port 4. Service Configuration Configuration Example To mirror the data packets received by port 1 and port 16 onto the monitoring port 10. which enables the administrator to Confidential and Proprietary Information of ZTE CORPORATION 115 . zte(cfg)#show mirror Ingress mirror information: source-port: 1. configure a follows: zte(cfg)# set mirror dest-port 4 ingress zte(cfg)# set mirror add source-port 2.3 egress VLAN Configuration Introduction The Virtual Local Area Network (VLAN) protocol is a basic protocol of layer-2 switching equipment.16 ingress Use the command show mirror to view the port mirroring configuration.Chapter 7 .16 destination -port: 10 Egress mirror information: source-port: none destination -port: 1 zte(cfg)# To mirror the data packets received by port 2 and port 3 onto the monitoring port 4. configure as follows: zte(cfg)# set mirror dest-port 10 ingress zte(cfg)# set mirror add source-port 1. Cross-VLAN visit can only be implemented through forwarding on layer 3. The ZXR10 2609/2818S/2826S/2852S also supports the taggedbased VLAN. Basic Configuration The VLAN configuration on the switch includes the following contents: 1. set vlan 2. the network performance is improved. Delete a specified port to the VLAN. Provide centralized management and control. set vlan delete port 4. Direct multi-VLAN visit is impossible. In this way. Add a specified trunk to the VLAN. Each VLAN has a VLAN ID to identify it uniquely in the entire LAN. The VLAN has the following functions: Reduce the broadcast storms of network. set vlan add trunk 116 Confidential and Proprietary Information of ZTE CORPORATION . All frame flows in the same VALN are restricted in this VLAN. Logically. Multiple VLANs share the switching equipment and links of the physical LAN. and the overall flow in the physical LAN is effectively lowered. Enhance the network security. the division of VLAN is based on the VLAN information about the port (PVID: port VLAN ID) or the information in the VLAN tag. Add a specified port to the VLAN. Enable/Disable the VLAN. a VLAN is like an independent LAN. This is a mode defined in IEEE 802. set vlan add port 3.1Q and also is a universal working mode. In this mode.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual divide a physical LAN to multiple VLANs. Set the trunk PVID. Delete a specified trunk to the VLAN. 10.Service Configuration 5. set trunk pvid 8. Configure a VLAN. Create a VLAN name. set vlan fid VLANs with the same FID can share the forwarded items. show vlan Configuration Example Note: It is recommended to delete the default VLAN before the configuration. Set the port PVID. set vlan delete trunk 6. set vlan priority 9. Set the VLAN FID. Most equipment suppliers do not provide the configuration of FID and use the VID as the default FID.Chapter 7 . Display the VLAN information. create vlan name 11. Confidential and Proprietary Information of ZTE CORPORATION 117 . Set the VLAN priority. clear vlan name 12. set port pvid 7. Remove a VLAN name. 1. port 16 of the switch is connected to the server and ports 1 to 3 are connected to the clients. Add untagged ports 1 and 2 and tagged ports 11 and 12.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Configure VLAN 100.2 untag zte(cfg)#set vlan 100 add port 7.8 tag zte(cfg)#set port 1. It is required that ports 1 to 3 are isolated from each other. The detailed configuration is as follows: zte(cfg)#set vlan 100 add port 1.2 pvid 100 zte(cfg)#set vlan 100 enable zte(cfg)#show vlan 100 VlanId : 100 Fid : 100 Priority: off VlanStatus: enabled VlanName: Tagged ports : 7-8 Untagged ports: 1-2 zte(cfg)# 2. As shown in Figure 41. Configure overlapping VLAN. but all three ports can access the server. FIGURE 41 EXAMPLE OF OVERLAPPING VL AN Switch p1 p2 p3 p16 Server 118 Confidential and Proprietary Information of ZTE CORPORATION . 16 untag zte(cfg)#set vlan 100 add port 1-3. Members of the same VLAN can communicate with each other. switch A is connected to switch B through port 16. Configure the VLAN transparent transmission.Chapter 7 .100 fid 5 zte(cfg)#set vlan 2-4. Port 1 of switch A and port 2 of switch B belong to VLAN2.16 untag zte(cfg)#set vlan 4 add port 3.16 untag zte(cfg)#set vlan 3 add port 2. and port 3 of switch A and port 4 of switch B belong to VLAN3.100 enable 3.16 untag zte(cfg)#set port 1 pvid 2 zte(cfg)#set port 2 pvid 3 zte(cfg)#set port 3 pvid 4 zte(cfg)#set port 16 pvid 100 zte(cfg)#set vlan 2-4. FIGURE 42 EXAMPLE OF VLAN TR ANSP ARENT TRANSMISSION Switch A p1 p16 p16 Switch B p2 p3 p4 The detailed configuration on the switch A is as follows: zte(cfg)#set vlan 2 add port 16 tag zte(cfg)#set vlan 2 add port 1 untag Confidential and Proprietary Information of ZTE CORPORATION 119 . As shown in Figure 42.Service Configuration The detailed configuration is as follows: zte(cfg)#set vlan 2 add port 1. and MAC table aging time. this MAC is kept away from the dynamic study. After the binding. Static address binding function is to bind the specified MAC address with the switch port. MAC table aging time refers to the period from the latest update of dynamic MAC address in the FDB table to the deletion of this address. 120 Confidential and Proprietary Information of ZTE CORPORATION . MAC filter function is to enable the switch to discard the received data packets whose source or destination MAC address is the specified MAC address. static address binding function.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg)#set vlan 3 add port 16 tag zte(cfg)#set vlan 3 add port 3 untag zte(cfg)#set port 1 pvid 2 zte(cfg)#set port 3 pvid 3 zte(cfg)#set vlan 2-3 enable The detailed configuration on the switch B is as follows: zte(cfg)#set vlan 2 add port 16 tag zte(cfg)#set vlan 2 add port 2 untag zte(cfg)#set vlan 3 add port 16 tag zte(cfg)#set vlan 3 add port 4 untag zte(cfg)#set port 2 pvid 2 zte(cfg)#set port 4 pvid 3 zte(cfg)#set vlan 2-3 enable MAC Table Operations Introduction MAC table operations include the configuration of MAC filter function. Display the VLAN-based fdb information.Service Configuration Configuration of the MAC filter function and static address binding function can effectively prevent the illegal access to the network and fraudulent use of key MAC addresses. Display the aging time of fdb address. set fdb agingtime 5. Set the filter address of fdb. show fdb vlan Confidential and Proprietary Information of ZTE CORPORATION 121 . Display the fdb information. show fdb agingtime 6. set fdb filter 2. Display the port-based fdb information. show fdb mac 8. Delete a record in the table. Add the static binding address to the address table. and play an important role in ensuring the network security.Chapter 7 . Set the aging time of MAC address. show fdb dynamic port 7. show fdb port 9. Display the MAC-based fdb information. set fdb delete 4. set fdb add 3. Basic Configuration 1. the data packets will be re-distributed to all the normal ports of this trunk for transmission. Enable/Disable the LACP function.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual LACP Configuration Introduction Link Aggregation Control Protocol (LACP) is a standard protocol defined in IEEE 802. Note: The ZXR10 2852SLE supports a maximum of eight aggregation groups. set lacp 122 Confidential and Proprietary Information of ZTE CORPORATION . It allows parallel physical links between the switches or between the switch and the server to increase the bandwidth in multiples and simultaneously. Basic Configurations LACP configuration on the switch includes the following contents: 1. If this port recovers. the number of links participating in the aggregation does not exceed eight. As a result. Links participating in the aggregation must have the same transmission media type and the same transmission rate. Aggregated link is also called trunk. Link aggregation means that physical links with the same transmission media and transmission rate are “bound” together. If a port of the trunk is blocked or faulty. The ZXR10 2609/2818S/2826S/2852S supports a maximum of 16 aggregation groups.3ad. making them look like one link logically. In each aggregation group. This concept is also known as Trunking. it becomes an import technology in broadening link bandwidth and creating link transmission flexibility and redundancy. the data packets will be distributed to other ports of this trunk for transmission. the aggregation is prohibited. 6. set lacp aggregator delete port If the port is in the self-negotiation mode or in the duplex mode. Delete a specified port to the aggregation group. set lacp port timeout The timeout information refers to the expiration time. If the aggregation group is set to the static mode. The short timeout time is 3 seconds and the long timeout time is 90 seconds. the switch can only be connected with the in-service LACP device. If the aggregation group is set to the static mode. the aggregation is allowed. the LACP function is disabled. and the peer end is the static trunk that does not run the LACP protocol. If the port is in the half duplex mode. set lacp aggregator mode If the aggregation group is set to the dynamic mode. the switch and the peer end use the static mode for Confidential and Proprietary Information of ZTE CORPORATION 123 . Configure the timeout information of the port participating in the aggregation. Add a specified port to the aggregation group. the LACP aggregation is preferred. set lacp port mode When the aggregation group is set to the dynamic mode. 4. the static aggregation is performed. If both the static trunk and LACP exist on the peer end. the switch can only be connected with the in-service LACP device. 2. after which the port in the aggregation state exits the aggregation if it does not receive the LACP protocol packets from the peer end. Set aggregation mode of the aggregation group. 5.Chapter 7 . Set the mode used by the port to participate in the aggregation.Service Configuration By default. set lacp aggregator add port 3. set lacp priority 8. Set the priority of LACP. and the peer end is the static trunk that does not run the LACP protocol. more than two switches in the static mode are aggregated. Display the aggregation information about the LACP aggregation group. you can perform various settings on it. Configuration Example As shown in Figure 43. adding it to the VLAN. Port 3 of swtich A and port 4 of swtich B belong to VLAN2. In this case. If both the static trunk and LACP exist on the peer end. and so on. show lacp port After the configuration of the aggregation group. Display the information of the port where the LACP is involved in the aggregation. the LACP aggregation is preferred. Display the LACP configuration information. 124 Confidential and Proprietary Information of ZTE CORPORATION . setting the static binding MAC address. Members of the same VLAN can communicate with each other. such as setting the PVID.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual aggregation. If the aggregation group is set to the hybrid mode. the static aggregation is performed. switch A and switch B are connected through the aggregation port (binding the port 15 and port 16). Port 1 of swtich A and port 2 of swtich B belong to VLAN2. show lacp 9. 7. show lacp aggregator 10. Service Configuration FIGURE 43 EXAMPLE OF LACP CONFIGURATION Switch A p1 p15 p16 p15 p16 p2 Switch B p3 p4 The detailed configuration of switch A is as follows: zte(cfg)#set lacp enable zte(cfg)#set lacp aggregator 3 add port 15-16 zte(cfg)#set lacp aggregator 3 mode dynamic zte(cfg)#set vlan 2 add trunk 3 tag zte(cfg)#set vlan 2 add port 1 untag zte(cfg)#set vlan 2 add trunk 3 tag zte(cfg)#set vlan 3 add port 3 untag zte(cfg)#set port 1 pvid 2 zte(cfg)#set port 3 pvid 3 zte(cfg)#set vlan 2-3 enable The detailed configuration of switch B is as follows: zte(cfg)#set lacp enable zte(cfg)#set lacp aggregator 3 add port 15-16 zte(cfg)#set lacp aggregator 3 mode dynamic zte(cfg)#set vlan 2 add trunk 3 tag zte(cfg)#set vlan 2 add port 2 untag zte(cfg)#set vlan 3 add trunk 3 tag zte(cfg)#set vlan 3 add port 4 untag zte(cfg)#set port 2 pvid 2 Confidential and Proprietary Information of ZTE CORPORATION 125 .Chapter 7 . With the IGMP Snooping function. If no measure is taken. instead of all ports. the multicast 126 Confidential and Proprietary Information of ZTE CORPORATION . thus causing a great waste of network bandwidth resource. Enable/Disable the IGMP Snooping function. When the switch receives a multicast message. If the parameter forward is selected.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg)#set port 4 pvid 3 zte(cfg)#set vlan 2-3 enable IGMP Snooping Configuration Introduction Because the multicast address cannot appear in the source address of the packet. you can use the command set port multicast to handle the multicast flow. Basic Configuration Configuration of IGMP Snooping on the switch includes the following contents: 1. set igmp snooping By default. and improves the utilization rate of the switch. When the IGMP Snooping is disabled. reduces the waste of network bandwidth. unwanted multicast message may be spread to each node of the network. so that the multicast packets are sent to the ports in the multicast forwarding table. This restricts the wide spread of multicast messages in the LAN switch. the IGMP communication between the host and router is snooped. the IGMP Snooping function is disabled. it broadcasts the message to all the ports in the same VLAN. the switch cannot learn the multicast address. If the snooped VLAN has the IGMP snooping router. enable the IGMP snooping function of the switch. it is recommended to disable the multicast forwarding function for the non-router ports and enable the multicast forwarding function for the router ports. Delete the IGMP Snooping function for the specified VLAN. In this case. The switch runs the IGMP snooping V2. if the IGMP snooping router does not exist. Enable/Disable the specified VLAN. If the multicast forwarding table is not found. Confidential and Proprietary Information of ZTE CORPORATION 127 . 2. set igmp snooping delete vlan The multicast forwarding table can be snooped only when the IGMP Snooping function is added for the specified VLAN. IGMP snooping function for the set igmp snooping query vlan After the IGMP Snooping function is enabled.Service Configuration messages will be forwarded to the corresponding port. set igmp snooping add vlan 3. it is recommended to disable the IGMP snooping function of the switch. 4. the multicast messages will be discarded on the corresponding port After the IGMP Snooping function is enabled. use the above configuration to determine whether to forward or discard the multicast messages for the port. The switch can support the snooping of up to 256 VLANs simultaneously.Chapter 7 . If the parameter discard is selected.0. Note: When the IGMP Snooping function is disabled. the normal IGMP Snooping function cannot be completed. the multicast flow is first forwarded according to the snooped multicast forwarding table. Add the IGMP Snooping function for the specified VLAN. which ranges from 224. set igmp snooping timeout 8.0 and the MAC address of the switch as the source of the IGMP snooping. set igmp snooping query_interval 9. Note: The register multicast groups can only use the user multicast group address. Set the last member snooping interval. set igmp snooping vlan delete group After the IGMP Snooping function is running.x. It is prohibited to register the following multicast addresses: 224. Set the snooping interval.x.0. 128 Confidential and Proprietary Information of ZTE CORPORATION .x. 7. the source IP address and source MAC address of the IGMP snooping are determined by the layer 3 configuration. The switch supports the registration of up to 64 static multicast groups.0 IGMP snooping router election function. set igmp snooping lastmember_query 11. Enable/Disable the IGMP fastleave function.x. instead of the reserved multicast addresses. set igmp snooping vlan add group 6.0. set igmp snooping response_interval 10. If the layer 3 IP address and MAC address are set. the static multicast group can be registered in the name of the local switch. 5. Otherwise. Delete a static multicast group. Set multicast member/route timeout.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual which supports the V2.x.x to 239.x. Set the snooping response interval. use 0.0. Add a static multicast group.0. 13. show igmp snooping 14. Display the multicast snooping results.Service Configuration set igmp snooping fastleave After the IGMP Snooping is running and the correct port that the host is added in can be snooped. 3. if the IGMP fastleave function is disabled when this port receives the IGMP fastleave message. and 5 are connected to the host. port 10 can communicate with ports 1. some snooping results of the multi-VLAN multicast snooping can be deleted after the related timeout period. 3. set igmp snooping crossvlan After the IGMP Snooping function is running and the PVID (default vlan_id) is used to correctly configure the one-tomultiple port forwarding mode. The one-to-multiple communication mode is implemented. 12. That is. the switch will send a specified group snooping message to this port twice to confirm that this port is removed from the multicast forwarding table. the multi-VLAN IGMP snooping function of the local switch can be used to snoop the IGMP information between VLANs and to carry out the multi-VLAN multicast forwarding. If the IGMP fastleave function is enabled. 3. and 5 cannot communicate with each other. and 5. Confidential and Proprietary Information of ZTE CORPORATION 129 . The IGMP Snooping function of the switch is enabled and the snooping results are displayed.Chapter 7 . show igmp snooping vlan Configuration Example As shown in Figure 44. If the state of multi-VLAN multicast snooping is changed from enabled to disabled. Enable/Disable the multi-VLAN IGMP snooping function. Port 10 is connected to the router. Display the configuration of IGMP snooping. the specified group snooping is not performed and the port is directly removed from the multicast forwarding table. but ports 1. ports 1. 1.5.10 untag zte(cfg)#set vlan 210 add port 1.3.1 192.10 untag zte(cfg)#set vlan 250 add port 5.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 44 NETWORK TOPOLOGY FOR ONE-TO-M ANY COMMUNICATION IGMP Router p10 Switch p1 p3 p5 The detailed configuration is as follows: zte(cfg)#set vlan 200 add port 1.1.210.10 untag zte(cfg)#set port 10 pvid 200 zte(cfg)#set port 1 pvid 210 zte(cfg)#set port 3 pvid 230 zte(cfg)#set port 5 pvid 250 zte(cfg)#set vlan 200.250 enable zte(cfg)#set igmp snooping enable zte(cfg)#set igmp snooping add vlan 200.10 untag zte(cfg)#set vlan 230 add port 3.230.168.230.210.210.230.1 1 Confidential and Proprietary Information of ZTE CORPORATION .250 zte(cfg)#set igmp snooping crossvlan disable Display the multicast snooping results: zte(cfg)#show igmp snooping vlan Num VlanId Group Last_Report PortMember 1 130 210 224.250 fid 200 zte(cfg)#set vlan 200.1. 168. In this way. Multiple Spanning Tree Protocol (MSTP) is on the basis of RSTP and STP.1 192.1.168. the network with loops is trimmed into a tree network without loops.1.3 1 3 5 1.1.3.168.3 192.1. The whole network topology structure can be planned into a Confidential and Proprietary Information of ZTE CORPORATION 131 .1.1 224.Service Configuration 2 3 230 250 224. added with the mechanism that the port state can be rapidly changed from Blocking to Forwarding.Chapter 7 .1 192. A path is obtained by using some algorithms and the redundant path is blocked. Rapid Spanning Tree Protocol (RSTP) is on the basis of common STP. which increases the topology convergence speed.10 MSTP Configuration Introduction The Spanning Tree Protocol (STP) applies to the network with loops. other paths are blocked.1.2 192.1 224.168.3 3 5 Enable the multi-VLAN IGMP snooping function of the switch and display the snooping results: zte(cfg)#set igmp snooping crossvlan enable zte(cfg)#show igmp snooping vlan Num VlanId Group Last_Report PortMember 1 2 3 4 210 230 250 200 224.1.1.1 192.5. added with the forwarding processing of frames with VLAN ID.1. and the growth and infinite circulation of packets in the network with loops are avoided. a new path is obtained through re-calculation.168.1.1.1.1.2 192.1. When this path works normally.1 224.1 224.168.1.1.1. When this path is faulty.1. you must include one or more VLAN IDs into this instance. which is divided into Common Spanning Tree (CST) and Internal Spanning Tree (IST). as shown in Figure 45. (Each instance corresponds to a STP structure. An instance is equivalent to an RSTP. except that the instance needs to perform BPDU interaction with bridges outside this area. Multiple instances can be created in an IST area and these instances are valid only in this area.) 132 Confidential and Proprietary Information of ZTE CORPORATION . the CTS can serve as an RSTP for the interaction of configuration information (BPDU). When creating an instance. an IST can serve as a single bridge (switch). FIGURE 45 MSTP TOPOLOGICAL STRUCTURE CST IST In the whole MSTP topology structure.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Common and Internal Spanning Tree (CIST). The ports that are on the bridge in this IST area and belong to these VLANs finally form an STP structure through the BPDU interaction. In this way. For data frames that shall be forwarded out of this area. the data frames carrying a VLAN ID can be forwarded according to the spanning tree structure set by the user and no loop will be resulted. set stp instance vlan You can use this command to create an instance and set the mapping between the VLAN and this instance. This instance is mapped with VLANs 1 to 4094. set stp forceversion 3.Chapter 7 . the MSTP only has the instance with ins_id as 0. instead of the MSTP. 1. set stp instance bridgeprio Confidential and Proprietary Information of ZTE CORPORATION 133 . the bridge in this area forwards the data frames with thee VLAN IDs according to the STP structure of the corresponding instance. These VLANs will be removed automatically from the VLAN mapping table of instance 0 and added to the VLAN mapping of the new instance. Set the bridge priority. Compared with the RSTP. Enable/Disable the STP. This instance always exists and you cannot manually delete it. Set the STP forced version. set stp 2. no matter what VLAN ID they carry. Basic Configuration In the default configuration. these data frames will be forwarded according to the RSTP structure of CST. the MSTP has the following advantages: In a certain IST area. 4. Set the mapping relation between the VLAN and instance. Note: The ZXR10 2609/2818SLE/2826SLE/2852SLE supports the STP and RSTP.Service Configuration In this way. Set the trunk packet type of the instance set stp instance trunk packettype 13. Set the STP hello time.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 5. Set the maximum number of hop between any two terminals of MST. set stp instance trunk cost 9. set stp instance port cost 8. Set the port Link type of the instance set stp port linktype 10. Set the port priority of the instance. Set the trunk priority of the instance. set stp hellotime Set the STP forwarding delay. Set the MST area name. set stp forwarddelay Set the STP aging time. Set the trunk Link type of the instance set stp trunk linktype 11. set stp hopmax 15. 134 Confidential and Proprietary Information of ZTE CORPORATION . Set the port packet type of the instance set stp instance port packettype 12. Set port cost of the instance. Set the MSTP time parameters. Set trunk cost of the instance. set stp instance trunk priority 7. set stp agemax 14. set stp instance port priority 6. show stp relay Configuration Example The following is an example of MSTP configuration. zte(cfg)#set stp instance 1 add vlan 10-20 zte(cfg)#set stp name zte zte(cfg)#set stp revision 10 Confidential and Proprietary Information of ZTE CORPORATION 135 .Service Configuration set stp name 16. 17. Create instance 1. Display the STP information. and set the name as zte.Chapter 7 . Set the MST version. Set the edge port. Display related STP information. show stp trunk Display the STP relay information. set stp revision The versions of MSTs in the same area must be the same. Enable/Disable the STP relay. show stp port Display the STP trunk information. The MST version is 10. show stp Display the STP instance information. set stp relay 18. set stp egde-port port 19. set up mapping relations with VLANs 10 to 20. 1. show stp instance Display the STP port information. d0.d0.39 Confidential and Proprietary Information of ZTE CORPORATION .d0.21-4094 10-20 Name: zte 0x13ac06a62e47fd51f95d2ba243cd0346 0x00000000000000000000000000000000 0x13ac06a62e47fd51f95d2ba243cd0346 0x00000000000000000000000000000000 2.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg)#show stp The STP ForceVersion is MSTP ! Revision: 10 Cisco key: Cisco digest: Huawei key: Huawei digest: Instance VlanMap -------.d0.f0.d0.12.12.------------------0 1 zte(cfg)# 1-9.f0.35 :2 MaxAge(s) MaxHops : 20 :20 :32768 HelloTime(s) ForwardDelay(s):15 Reg RootID: Priority BridgeID: Priority 136 :32768 Address :00.f0. Set the bridge priority and port priority of the instance.d0.12.39 :32768 Address :00. zte(cfg)#set vlan 10 add port 2 untag zte(cfg)#set stp instance 1 bridgeprio 7 zte(cfg)#set stp instance 1 port 2 priority 112 zte(cfg)#show stp instance 0 MST00 Spanning tree enable protocol mstp Root: Priority Address :00. --------2 IEEE 112.f0.12.f0.---.------.-----.---.----Confidential and Proprietary Information of ZTE CORPORATION 137 Status Role Linktype Pkt .------.39 : 20 :20 ForwardDelay(s):15 BridgeID: Priority HelloTime(s) :28672 :2 Address MaxAge(s) MaxHops Status Role :00.-----.-------.12.-----.39 : 20 :20 Bound Linktype Pkt ForwardDelay(s):15 Interface PortId Cost PortEdged ------.----.-----.2 Disabled 200000 Forward Designated MSTP P2P zte(cfg)#show stp port 2 Only the following port is physical up! MstInstance PortId Cost PortEdged -------.------.d0.2 Disabled 200000 Forward Root MSTP P2P zte(cfg)#show stp instance 1 MST01 Spanning tree enable protocol mstp RootID: Priority HelloTime(s) : 28672 :2 Address MaxAge(s) MaxHops :00.------.Chapter 7 .--------.-------.-------.d0.d0.d0.------.------.-----.----.Service Configuration HelloTime(s) :2 MaxAge(s) MaxHops Status : 20 :20 ForwardDelay(s):15 Interface PortId Cost Pkt PortEdged Role Bound Linktype ------.--------2 IEEE 128. To use the default port priority to decide the priority of the data packets received by the port. all the following conditions shall be satisfied. 6.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual -. VLAN priority. 2.2 200000 Forward Designated P2P IEEE 128. or the default port priority. 138 Confidential and Proprietary Information of ZTE CORPORATION . After the data packet priority is determined by the previous priority determination policy.1P user priority. Priority of the data packets sent by CPU (determined by CPU). 802. the later policies are ignored.--------MST00 Disabled MST01 Disabled 112. The priority of the management packets is determined by the initialization. Priority of the static source MAC address. VLAN priority. 3. 7. Layer 3 DSCP priority. Default port priority. 802.2 200000 Forward Root P2P IEEE QoS Configuration Introduction The switch provides the QoS function and the priority control function. 4. The priority of the data packets can be determined by the source MAC address priority of the data packets. The priority of a data packet is determined in the following sequence: 1.1P user priority. 5. Priority of the MGMT data packets (management data packets such as the BPDU packets). layer 3 DSCP priority. 1P user priority and layer 3 DSCP priority policies are enabled. Note: By default. If both the port 802. the data frames with higher priority can be transmitted first to ensure the key applications.Chapter 7 . Port DSCP priority is disabled. The ZXR10 2609/2818SLE/2826SLE/2852SLE does not support the static source MAC address priority and VLAN priority. if the switch receives the data frames. After the priority control policy of the switch is configured. The 802.1P user priority. set qos queue-schedule Confidential and Proprietary Information of ZTE CORPORATION 139 .1P user priority of the port is disabled. data packets sent by CPU or The source MAC address of the data packets cannot be the static address or the port source priority function is disabled. Basic Configuration QoS configuration of the switch includes the following contents: 1. You can enable or disable other priority determination policy according to the actual requirements. Set the queue scheduling mode.1P user priority to decide the priority of the data packets. and the data packets received by the ports contain the IP data packet with 802. the port DSCP priority is enabled and other priority determination policies are disabled. or the data packets are not TAG data packets.Service Configuration The data packets are not management data packets. the switch uses the port 802. Priority of the VLAN that the data packets belong to is disabled. or Priority of the VLAN of the port belongs to is disabled. 1P user priority or the default priority is used to decide the priority of the data packets. 2) 0: (4. the mapping from the 802. Display the queue scheduling configuration.1P user priority to the queue priority is as follows: (0.1P user priority into the queue priority.5) 2: (6. the mapping from the IP DSCP priority to the queue priority is as follows: (0–15) 0. set qos priority-map user-priority Be default. 4. (16-31) 1. (1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual If the queue scheduling mode is set to wfq. (32–47) 2. (48~63) 3 This mapping table is used to determine the queue for the data packets when the layer 3 DSCP priority is used to decide the priority of the data packets. the weights of four egress queues are as Follows: Priority Queue 0 1 2 3 Weight 1 2 4 8 2. show qos queue-schedule 140 Confidential and Proprietary Information of ZTE CORPORATION .7) 3 This mapping is used to determine the queue for the data packets when the 802. Set the mapping of the 802. Set the mapping of the IP DSCP priority into the queue priority. 3.3) 1. set qos priority-map ip-priority Be default. The detailed configuration is as follows: Zte(cfg)#set qos queue-mode sp zte(cfg)#sho qos queue-schedule Queue-schedule mode is SP(Strict Priority).1P user priority into the queue priority as follows: (0–6) 0. and the TAG priority is 0-6. zte(cfg)# Configure the mapping of 802.Service Configuration 5. If the TAG priority is 7. the data packets will go to the queue 2 on the egress.Chapter 7 . the data packets received on the port are TAG data packets. show qos priority-map Configuration Example Set the QoS mode to sp. the data packets will go to the queue 0 on the egress. 7 2. If the port UserPriority is enabled. The detailed configuration is as follows: zte(cfg)# set qos priority-map user-priority 0 trafficclass 0 zte(cfg)# set qos priority-map user-priority 1 trafficclass 0 zte(cfg)# set qos priority-map user-priority 2 trafficclass 0 zte(cfg)# set qos priority-map user-priority 3 trafficclass 0 zte(cfg)# set qos priority-map user-priority 4 trafficclass 0 zte(cfg)# set qos priority-map user-priority 5 trafficclass 0 zte(cfg)# set qos priority-map user-priority 6 trafficConfidential and Proprietary Information of ZTE CORPORATION 141 .1P user priority into the queue priority and that of the IP DSCP priority into the queue priority. Display the QoS mapping of the 802. and the DSCP priority is 0-31.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual class 0 zte(cfg)# set qos priority-map user-priority 7 trafficclass 2 zte(cfg)#sho qos priority-map user-priority Map of user priority to traffic class: COS(802.33) 3. (32. the data packets will go to the queue 1 on the egress. Use default values for other mappings.33 traffic-class 2 zte(cfg)#sho qos priority-map ip-priority Map of ip dscp priority to traffic class: DSCP(ip dscp priority).1p user priority). the data packets received on the port are IP data packets. If the DSCP priority is 32 or 33. If the port IpPriority is enabled. the data packets will go to the queue 2 on the egress. TC(Traffic-Class) COS 0 TC 0 1 0 2 0 3 0 4 0 5 0 6 0 7 2 Configure the mapping of IP DSCP priority into the queue priority as follows: (0–31) 1. TC(Traffic-Class) DSCP 0 13 14 1 1 15 1 1 1 1 1 1 1 1 1 1 1 1 1 2 3 4 5 6 7 8 9 10 11 12 TC 1 1 DSCP 16 17 29 30 1 1 31 1 18 19 20 21 22 23 24 25 26 27 28 TC 1 1 1 1 1 1 1 1 1 1 1 1 1 142 Confidential and Proprietary Information of ZTE CORPORATION . The detailed configuration is as follows: Zte(cfg)# set qos priority-map ip-priority 0-31 trafficclass 1 Zte(cfg)# set qos priority-map ip-priority 32. and ports 9 to 16 and port 17 belong to the second group. the PVLAN configuration can only be valid in a complete PVLAN that contains both shared and isolated ports. Confidential and Proprietary Information of ZTE CORPORATION 143 . At present.Service Configuration DSCP 32 33 45 46 47 3 2 3 34 35 36 37 38 39 40 41 42 43 44 TC 2 2 2 2 2 2 2 2 2 2 2 2 2 DSCP 48 49 61 62 63 3 3 3 50 51 52 53 54 55 56 57 58 59 60 TC 3 3 3 3 3 3 3 3 3 3 3 3 3 PVLAN Configuration Introduction Private VLAN (PVLAN) is a port-based VLAN. The ZXR10 2609 only has one group. On the ZXR10 2609/2818S/2826S/2852S. But an isolated and a shared port can visit each other. Isolated ports cannot visit each other. the PVLAN configuration is invalid. PVLAN consists of several shared ports and several isolated ports. Ports 1 to 8. and port 18 belong to the first group. setting of shared ports is restricted by the following condition: All shared ports must be in the same group.Chapter 7 . Thus. Thus. If only the shared or isolated ports are configured. The ZXR10 2818S has two groups. all ports are in the same group. the switch supports one PVLAN. The PVLAN can be applied if the users are only allowed to visit the server and prohibited to visit other subscribers. and 3 to the PVLAN. Ports 25 to 32 belong to the fourth group. Ports 33 to 40 belong to the fifth group. Ports 17 to 24.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual The ZXR10 2826S has three groups. Port 9 to 16 belong to the second group. Ports 1 to 8 belong to the first group. Show the PVLAN configuration. The ZXR10 2852S has three groups. add shared port 16 and isolated ports 1. Ports 1 to 8 belong to the first group. 2. and 26 belong to the third group. Ports 17 to 24 belong to the third group. and port 25 belong to the second group. show pvlan Configuration Example As shown in Figure 46. Basic Configuration PVLAN configuration on the switch includes the following contents: 1. set pvlan session 2. Ports 49 to 52 belong to the seventh group. Add/delete an isolated/shared port to the PVLAN. Port 9 to 16. Port 44 to 48 belong to the sixth group. FIGURE 46 PVL AN CONFIGURATION EXAMPLE Switch p1 p2 p3 p16 Server 144 Confidential and Proprietary Information of ZTE CORPORATION . 1x transparent transmission includes the following contents: 1.1x transparent show dot1xrelay Confidential and Proprietary Information of ZTE CORPORATION 145 .1x transparent transmission configuration of 802.1x protocol packets from the client to the authentication server for authentication.1x Transparent Transmission Configuration IEEE 802. the 802. The Configuration of 802. Enable/Disable function. This type of authentication provides a point-to-pint subscriber identification method in the LAN.Service Configuration The detailed configuration is as follows: zte(cfg)#set pvlan session 1 add promiscuous-port 16 zte(cfg)#set pvlan session 1 add isolated-port 1-3 zte(cfg)#show pvlan pvlan session : 1 promiscuous-port : 16 isolated-port : 1-3 802. Display the transmission. set dot1xrelay 2.1x transparent transmission function that allows the transparent transmission of 802. Portbased network access control is a way to authenticate and authorize the users connected to the LAN equipment. The ZXR10 2609/2818S/2826S/2852S provides the 802.1x is a port-based network access control protocol.Chapter 7 . an ARP Request broadcast packet is sent to the network to query the peer end MAC address. The static ARP table entry is configured only when the connected host cannot respond to the ARP Request.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Layer 3 Configuration Introduction The ZXR10 2609/2818S/2826S/2852S provides a few layer 3 functions for the remote configuration and management. the switch directly sends the IP packets to this MAC address. When sending the IP packets. Static route is a simple unicast route protocol. If yes. and egress interface. an IP port must be configured on the switch. Static route involves destination address. If the MAC address corresponding to the peer end IP address cannot be found in the ARP table. where next hop is also called bridge. If yes. it is also necessary to configure the static route. The next-hop address to a destination network segment is specified by the user. The ZXR10 2609/2818S/2826S/2852S allows the addition and deletion of entries in the static ARP table. The next-hop address and egress interface describe the way that the switch forwards the destination packet. 2. next-hop address. To realize the remote access. the switch first checks whether the destination IP address is in the same network segment. destination address mask. 1. The destination address and destination address mask describe the destination network information.The ARP table records the mapping between the IP address of each node in the same network and the MAC address. Generally. entries of the ARP table on the switch are dynamic. If the IP port of the remote configuration host and that of the switch are not in the same network segment. the switch checks whether there is a peer end IP address and MAC address mapping entry in the ARP table. 146 Confidential and Proprietary Information of ZTE CORPORATION . set ipport ipaddress 2. you need to use the command config router to enter the Layer 3 configuration mode first. The detailed configuration is as follows: zte(cfg)#config router zte(cfg-router)#set ipport 1 ipaddress 192. The new settings will overwrite the original ones.1/24 zte(cfg-router)#set ipport 1 vlan 100 Confidential and Proprietary Information of ZTE CORPORATION 147 . set ipport vlan 3.Service Configuration To configure the Layer 3 function. Enable/Disable the layer 3 port.1 and the mask to 24 digits. The port uses the default address of the switch.1. 4. Bind the port to VLAN 100.1. Set the IP address of the port to 192. the MAC address of the switch is used instead. Set the IP address and mask of the layer 3 port. and then modify the configuration. For example: Configure an IP port on the switch.Chapter 7 . you need to set the port to disabled state first. You can use the command clear ipport to clear one or all the parameters of the port. Bind the VLAN for the layer 3 port.1. Before clearing parameters. Set the MAC address of the layer 3 port set ipport mac If the MAC address is not set. you need to set the port to disabled state first. set ipport When modifying the configuration of an IP port.1. IP Port Configuration IP port configuration of the switch includes the following contents: 1. 0/24 192.2. if the remote user to be connected is not in the network segment of the interface.1.0/24. configure the following static route.2 You can use the command show iproute to view the direct routes and static routes on the switch. which is not the same as the switch.1. zte(cfg)#config router zte(cfg-router)#iproute 192.1. you need to use the command iproute to set a static route to the remote network.2. 148 Confidential and Proprietary Information of ZTE CORPORATION .0/24 As shown in Figure 47. you can use the command show ippor to view the IP port configuration.2.1.1.1. To enable the communication between the switch and the host on the network segment 192.1. the remote host is located in the network segment 192. Static Route Configuration After an IP port is configured. FIGURE 47 CONFIGURATION EXAMPLE OF STATIC ROUTE Switch 192.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg-router)#set ipport 1 enable zte(cfg-VLAN2)#exit zte(cfg)# After the configuration is completed.1.0/24.1/24 192.1.1.2.2/24 Router 192. 1. zte(cfg-router)#show iproute Type IpAddress Mask Gateway Metric IPport -----. arp add 2. 255.--------------.Service Configuration The command result displays the destination network segment.Chapter 7 .1.1. packet of this IP address is not received) of an ARP table entry on the switch is larger than the aging time on the IP port.0 192.2.0 static 192.0 Total 2 You can use the command clear iproute to delete one or more static routes. Delete all static ARP table entries.-----direct 192.0 255.----. next-hop address.255. the switch will delete this ARP table entry.--------------. route metric and egress interface of the static route.252. clear arp 4.1. arp delete 3.1 192.------------.1.2 0 0 0 0 ARP Table Entry Configuration The Configuration of ARP table entry on the switch includes the following contents: 1. Confidential and Proprietary Information of ZTE CORPORATION 149 .255. Add a static ARP table entry. Delete a static ARP table entry. arp ipport timeout If the existence period (during this period.1. The following shows the result.255.1. Set the ARP table entry aging time of the IP port. security. The authentication system is generally network equipment that supports the IEEE802. A subscriber originates the IEEE802. NAS uses the 802. 1. the client system must support the Extensible Authentication Protocol Over LAN (EAPOL). or IP address of the user equipment).1x protocol authentication process through this client software. and authentication server.1x protocol and RADIUS protocol to realize the authentication and management of access subscribers.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 5. Network Access Service (NAS) is embedded on the switch to improve the authentication and management of access subscribers and better support the billing. operation. The client system is generally a user terminal system installed with the client software. the authentication 150 Confidential and Proprietary Information of ZTE CORPORATION . the switch. View ARP table entries. It is highly efficient.1x is called port-based network access control protocol. To support the port-based network access control. IEEE 802. VLAN. for example. to meet the fast increase of subscribers and requirement of diversified broadband services. 2. Corresponding to the ports of different subscribers (the ports could be physical ports or MAC address. and easy to operate. Its protocol system includes three key parts: client system. authentication system. show arp Access Service Configuration Introduction With the rapid expansion of Ethernet construction scale.1x protocol. and management of the broadband network. safe. authorization. The controlled port can be configured as bidirectional controlled or input controlled to meet the requirement of different applications. The controlled port and uncontrolled port in the IEEE 802. logical ports: controlled port and The uncontrolled port is always in the state that the bidirectional connections are available.Service Configuration system has two uncontrolled port. This server can store a lot of subscriber information. The IEEE 802. After the authentication of a subscriber is passed. It is responsible for sending the subscriber information to the Confidential and Proprietary Information of ZTE CORPORATION 151 . The Client runs on the NAS. The subsequent flow of the subscriber will be monitored by the above parameters.1x protocol are logical ports. and so on. subscriber access control list. and exchange of configuration data between the Radius server and Radius client. It is used to transfer the EAPOL frames and can ensure that the client can always send or receive the authentication. It is used to transfer the network resource and services. CAR parameters.Chapter 7 . RADIUS adopts the Client/Server mode. there will not be such a problem that the port is used by other subscribers after the port is enabled. which will create a dynamic access control list. The control port is enabled only when the authentication is passed. 3. The authentication server is generally a RADIUS server. The authentication system communicates with the RADIUS server through the RADIUS protocol. this subscriber cannot visit the services provided by the authentication system. the authentication server will pass the information of this subscriber to the authentication system. If the subscriber authentication is not passed. RADIUS is a protocol standard used for the authentication.1x protocol sets up a local authentication for each subscriber that other subscribers cannot use. priority. Thus. such as VLAN that the subscriber belongs to. There are no such physical ports on the equipment. The EAP protocol is used between the switch and the subscriber. Any of the methods can be used according to different service operation requirements. The server checks whether this subscriber is available and whether the password is correct according to the subscriber configuration and returns different responses. CHAP. and rfc2869. Attributes in the RADIUS packets are used to transfer the detailed authentication. Figure 48 shows the process of using the PAP mode for identity authentication. Three types of identity authentication methods are provided between the RADIUS servers: PAP. NAS requires the subscriber to provide the username and password and the subscriber returns the subscriber information in the form of plain text. The NAS communicates with the Radius Server through RADIUS packets. and completing the billing function. The attributes used by this switch are primarily standard attributes defined in the rfc2865. rfc2866. The Radius Authentication Server is responsible for receiving the subscriber connection request. and EAP-MD5. and returning the configuration information required by the customer. A Radius Authentication Server can serve as a RADIUS customer proxy to connect to another Radius Authentication Server. The Radius Accounting Server is responsible for receiving the subscriber billing start request and subscriber billing stop request. 152 Confidential and Proprietary Information of ZTE CORPORATION . verifying the subscriber identity. Password Authentication Protocol (PAP) PAP is a simple plain text authentication mode. This authentication mode features poor security and the username and password transferred may be easily stolen.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual specified Radius server and carrying out operations according to the result returned by the server. authorization. and billing information. NAS sends a randomly generated Challenge string to the user.Service Configuration F I G U R E 4 8 U S I N G P AP M O D E F O R I D E N T I T Y A U T H E N T I C A T I O N Switch User terminal system EAPOL EAPOL-Start EAP-Request/Identity Connection setup EAP-Response/Identity EAP-Request/PAP EAP-Response/PAP Successful access EAP-Success Access-Request/PAP Access-Accept RADIUS RADIUS server Challenge Handshake Authentication Protocol (CHAP) CHAP is an encrypted authentication mode and avoids the transmission of the user’s real password upon the setup of connection. The user encrypts the Challenge string by using the own password and MD5 algorithm and returns the username and encrypted Challenge string (encrypted password). The server uses the user password it stores and the MD5 algorithm to encrypt the Challenge string. Figure 49 shows the process of using the CHAP mode for identity authentication.Chapter 7 . Confidential and Proprietary Information of ZTE CORPORATION 153 . Then it compares this Challenge string with the encrypted password of the server and returns a response accordingly. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 49 USING CHAP MODE FOR IDENTITY AUTHENTICATION Switch User terminal system EAPOL EAPOL-Start EAP-Request/Identity Connection setup EAP-Response/Identity EAP-Request/Challenge EAP-Response/MD5Challenge Successful access EAP-Success Access-Request/CHAP Access-Accept RADIUS RADIUS server Extensible Authentication Protocol . 154 Confidential and Proprietary Information of ZTE CORPORATION .Message Digest 5 (EAP-MD5) EAP-MD5 is a CHAP identity authentication mechanism used in the EAP framework structure. Figure 50 shows the process of using the EAP-MD5 mode for identity authentication. aaa-control port dot1x 2.M D 5 M O D E F O R I D E N T I T Y A U T H E N T I C A T I O N Switch User terminal system EAPOL EAPOL-Start EAP-Request/Identity Connection setup EAP-Response/Identity Access-Request Access-Challenge EAP-Request/Challenge EAP-Response/MD5Challenge Successful access EAP-Success Access-Request Access-Accept RADIUS server RADIUS Basic Configuration The 802. aaa-control port port-mode The available modes include: Confidential and Proprietary Information of ZTE CORPORATION 155 .Chapter 7 .1x function.Service Configuration F I G U R E 5 0 U S I N G E AP . Configure the authentication control mode of the port. Enable/Disable the port 802.1x configuration on the switch includes the following contents: 1. aaa-control port max-hosts A port can allow the access of multiple subscribers and each subscriber has own independent authentication and billing processes. Set the maximum number of subscribers connected through the port. 5. force-authorized: The subscriber can be connected to the network through this port without authentication. Set the re-authentication interval. 7.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual auto: Subscriber access from the port configured as “auto” must go through the authentication. aaa-control port keepalive 156 Confidential and Proprietary Information of ZTE CORPORATION . Allow/Prohibit multi-subscriber access of the port. Enable/Disable re-authentication mechanism. aaa-control port multiple-host 4. which brings a heavy burden to the switch. there will be a lot of authentication packets. the NAS can periodically request the re-authentication of this subscriber. dot1x re-authenticate period To judge whether the accessed subscriber maintains the connection all the time. If the number of subscribers is large. The aaa-control port max-hosts command is valid only when the port allows the access of multiple subscribers. 3. The subscriber access is successful only when the authentication is successful. dot1x re-authenticate 6. Enable/Disable the abnormal off-line detection mechanism of the port. force-unauthorized: The subscriber cannot be connected to the network through this port. Re-authentication needs to initiate a complete authentication process for each on-line subscriber. The default authentication control mode is “auto”. Chapter 7 . 10. The abnormal off-line detection mechanism only requires a few packet interactions to determine whether the subscriber is still on line. there are three subscriber identity authentication methods between the authentication server and the authentication system: PAP. The abnormal off-line detection mechanism is implemented in this way: The device takes the initiative to send a detection request periodically to the client. dot1x supplicant-timeout Confidential and Proprietary Information of ZTE CORPORATION 157 . the subscriber is off line. and EAP-MD5. dot1x tx-period Set the timeout time for the authentication system to receive the data packets from the authentication client system. it means that the subscriber is still on line. If the EAPOL/EAP RepId response is received from the client. 9. CHAP.1x protocol is used as the request packet. aaa-control port keepalive period Besides the re-authentication mechanism. Set the protocol parameters.Service Configuration 8. The EAPOL/EAP RepId packet defined in the 802. dot1x quiet-period Set the time that the authentication system needs to wait before it can resend the EAPOL data packet because it does not receive the response from the client. The default one is EAP-MD5. aaa-control port protocol During the subscriber access authentication. Set the abnormal off-line detection period of the port. the NAS module also introduces the abnormal off-line detection mechanism to judge whether the subscriber still keeps the connection. Set the interval between the first authentication failure of the authentication system and the next authentication request. Otherwise. Set the authentication mode of the port. dot1x server-timeout Set the maximum times of request resending when the timer expires before the authentication system receives the Challenge response from the client. This function can prevent the subscriber’s continuous authentication attempts. Display the 802. During the exchange of data packets. Display the 802. show dot1x 158 Confidential and Proprietary Information of ZTE CORPORATION . 11. supplicant Timeout and serverTimeout respectively refer to the time during which the authentication system shall receive the data packet from the client system and the authentication server. the following parameters are used for control purpose: quietPeriod refers to the period before which the authentication system will not receive the authentication request from the client system after the first authentication failure. show aaa-control port 12.1x configuration of the port. dot1x max-request The 802. txPeriod refers to the time after which the authentication system will resend the EAPOL data packets to the client system when it does not receive the response from the client system.1x realizes the access control by exchanging EAPOL data packets between the client system and authentication system and the RADIUS data packets between the authentication system and authentication server.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Set the timeout time for the authentication system to receive the data packets from the authentication server.1x protocol parameters. max-request refers to the maximum times of request resending when the timer expires before the authentication system receives the Challenge response from the client system. and the last server has the lowest priority. radius isp In the RADIUS configuration. The access equipment identifies the domain that the subscriber belongs to according to the domain name in the subscriber name (username@DomainName) input by the subscriber and sends the authentication and billing requests of the subscriber to the authentication server and billing server of the corresponding domain. and the last server has the lowest priority.Chapter 7 . radius isp delete authentication A domain can be configured with up to three authentication servers. Add the authentication server to the domain. 13. After a domain is deleted. radius isp add accounting 16. Delete the authentication server from the domain. the priorities of the related servers rise in sequence. radius isp delete accounting A domain can be configured with up to three accounting servers. Delete an accounting server from the domain. The first server configured enjoys the highest priority. The priority of the server is determined by the configuration order.Service Configuration RADIUS configuration on the switch includes the following contents. 15. all the configurations related to this domain are deleted. Each domain has its own RADIUS server. Confidential and Proprietary Information of ZTE CORPORATION 159 . Add/Delete an ISP domain. Add an accounting server to the domain. the concept of isp-domain is introduced. The first server configured enjoys the highest priority. The priority of the server is determined by the configuration order. radius isp add authentication 14. Different domains may be operated by different ISPs. When a server is deleted. the subscriber name will not contain the domain name. The setting of shared password must be consistent on the client and the server. radius isp defaultisp Only one domain can be specified as the default domain in the system. radius isp sharedsecret The shared password is used for the data encryption between the RADIUS client and RADIUS server. If it is not specified to use the full account. the RADIUS client uses “username@DomainName” as the subscriber name to request the authentication of the RADIUS server. Set the server response timeout time. radius timeout 160 Confidential and Proprietary Information of ZTE CORPORATION . Specify a default domain. 20. The system will send the subscriber authentication requests without the domain name specified on the RADIUS authentication server in the default domain. Set the full account of the domain. 19. Configure the domain description. Configure the RADIUS parameters. 21. radius isp description 22. radius isp client The IP address of the client in the domain must be the IP address of an interface on the switch.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual When a server is deleted. 18. Set the IP address of the client in the domain. radius isp fullaccount When it is specified to use the full account. the priorities of the related servers rise in sequence. Set the shared password. 17. aaa-control port accounting 24. Display the RADIUS configuration.Chapter 7 . show radius Configuration Example 1. zte(cfg-nas)#aaa-control port 1 dot1x enable zte(cfg-nas)#dot1x quiet-period 5 zte(cfg-nas)#dot1x tx-period 5 zte(cfg-nas)#dot1x supplicant-timeout 3 zte(cfg-nas)#dot1x server-timeout 3 zte(cfg-nas)#aaa-control port 1 keepalive enable zte(cfg-nas)#aaa-control port 1 keepalive period 180 zte(cfg-nas)#show aaa-control 1 PortId Dot1x KeepAlive : 1 : enabled : enabled PortControl : auto AuthenticationProtocol : eapMd5 KeepAlivePeriod MultipleHosts HistoryHostsTotal : 180 : disabled : 0 Accounting : disabled MaxHosts OnlineHosts : 0 : 0 Confidential and Proprietary Information of ZTE CORPORATION 161 .Service Configuration Set the number of retransmissions upon server response timeout. Enable the keepalive function and set the keepalive interval to 180 seconds. Enable/Disable the billing function of the port. and server-timeout to 3 seconds.1x function of port 1. Enable the 802. Set the quiet-period to 5 seconds. radius retransmit Set the NAS server name. radius nasname 23. supp-timeout to 3 seconds. tx-period to 5 seconds. Set the authentication control state of port 1 to auto and authentication mode to CHAP. Enable the multi-subscriber access. Enable the re-authentication function and set the reauthentication period to 60 seconds.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg-nas)#show dot1x TxPeriod :5 QuietPeriod ServerTimeout : 5 : 3 SuppTimeout :3 ReAuthPeriod:3600 MaxReq : 2 ReAuthenticate : disabled zte(cfg-OSPF)#? 2. zte(cfg-nas)#aaa-control port 1 port-mode auto zte(cfg-nas)#aaa-control port 1 protocol chap zte(cfg-nas)#aaa-control port 1 multiple-hosts enable zte(cfg-nas)#aaa-control port 1 max-hosts 5 162 Confidential and Proprietary Information of ZTE CORPORATION . The maximum number of subscriber accessed is 5. zte(cfg-nas)#dot1x re-authenticate enable zte(cfg-nas)#dot1x re-authenticate period 60 zte(cfg-nas)#show dot1x TxPeriod 5 SuppTimeout 3 ReAuthPeriod : 60 enabled MaxReq : 2 ReAuthenticate : : 3 ServerTimeout : : 5 QuietPeriod : zte(cfg-OSPF)#? 3. zte(cfg-nas)#radius isp 188 enable zte(cfg-nas)#radius 10. Configure the RADIUS domain 188 according to the following requirements: Authentication server address and accounting server address: 10.40.212 zte(cfg-nas)#radius 10. Use the default domain.40.100 : Yes : No IspName Description : 188 : SharedSecret : 123456 Auth-port --------163 Authentication servers ---------------------- Confidential and Proprietary Information of ZTE CORPORATION .92.212 zte(cfg-nas)#radius isp 188 sharedsecret 123456 zte(cfg-nas)#radius isp 188 client 10.212 and 10.215 Share Password: 123456 Client IP address: 10.92.92.40.40.92.92.40.100.100 zte(cfg-nas)#radius isp 188 defaultisp enable isp 188 add authentication isp 188 add authentication zte(cfg-nas)#show radius 188 Client DefaultIsp FullAccounts : 10.92.92.215 zte(cfg-nas)#radius isp 188 add accounting 10.92.92.215 zte(cfg-nas)#radius isp 188 add accounting 10.40.Service Configuration zte(cfg-nas)#show aaa-control 1 PortId Dot1x : 1 : enabled PortControl AuthenticationProtocol KeepAlivePeriod : auto : chap: : 180 : enabled : 0 KeepAlive: enabled Accounting: disabled MultipleHosts MaxHosts: 5 OnlineHosts : 0 HistoryHostsTotal 4.40.40.Chapter 7 .40. The simple Layer 2 Virtual Private Network (L2VPN) can be realized through QinQ.40. The port connected to the user network is called Customer port. The QinQ is especially suitable for the small-size LAN that takes the layer 3 switch as its backbone. QinQ technology is the addition of one more VLAN tag (outer tag) to the original VLAN tag (inner tag).92. The port connected to the ISP network is called Uplink port. The edge access equipment of the ISP network is called Provider Edge (PE).40. Figure 51 shows the typical networking of the QinQ technology.92. QinQ does not need the protocol support.40.212 10. 164 Confidential and Proprietary Information of ZTE CORPORATION .215 Accounting servers ---------------------10.40.92.215 10.92.212 1812 1812 Acct-port --------1813 1813 zte(cfg-OSPF)#? QinQ Configuration Introduction QinQ is the IEEE 802. The outer tag can shield the inner tag.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 10.1Q tunneling protocol and is also called VLAN stacking. 2. The packet is forwarded by the VLAN 10. because the PORTBASE VLANbased customer port does not identify the tag when receiving the packet. Switch B finds out that the port connected to user network 2 is a customer port. Inside the ISP network. 1. the packet is broadcast along the port of VLAN 10 until it reaches the switch B.1Q protocol to Confidential and Proprietary Information of ZTE CORPORATION 165 . which is determined by the PVID. The tpid of this tag can be configured on the switch.Service Configuration FIGURE 51 TYPICAL QINQ NETWORKING SPVLAN 10 customer port User network 1 CVLAN 1~100 Switch A PE SPVLAN 10 uplink port ISP network SPVLAN 10 uplink port SPVLAN 10 customer port PE Switch B User network 2 CVLAN 1~100 SPVLAN: Service Provider VLAN CVLAN: Customer VLAN The user network is generally connected to the PE through the Trunk VLAN mode. 3.Chapter 7 . the customer port processes the packet as an untagged packet no matter whether this data packet is attached with the VLAN tag or not. When a packet is sent form user network 1 to the customer port of switch A. The uplink port of switch A inserts the outer tag (VLAN ID: 10) when forwarding the data packet received from the customer port. it removes the outer tag in compliance with the conventional 802. The internal Uplink ports of the ISP network are symmetrically connected through the Trunk VLAN mode. Thus. Add/Delete an Uplink port. set qinq customer port 2.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual recover the original packet and sends the packet to user network 2. show qinq Note: When the QinQ is configured. data between user network 1 and user network 2 can be transmitted transparently. Set the tpid of the outer tag. Note: ZXR10 2609/2818SLE/2826SLE/2852SLE does not support this function. The VLAN IDs of the user network can be planned regardless of the conflict with the VLAN IDs in the ISP network. the customer port and the uplink port of the SPVLAN can be set as an untagged port. Add/Delete a Customer port. 166 Confidential and Proprietary Information of ZTE CORPORATION . 4. set qinq uplink port 3. In this way. Display the QinQ configuration. set qinq tpid 4. Basic Configuration The PVLAN configuration on the switch includes the following contents: 1. or as a tagged port. Service Configuration Configuration Example As show in Figure 51.24 pvid 10 zte(cfg)#set qinq customer port 1 enable zte(cfg)#set qinq uplink port 24 enable The configuration of switch B is the same as that of switch A. suppose that the customer port of swtich A is port 1 and the uplink port is port 24. The customer port of swtich B is port 1 and the uplink port is port 24. Confidential and Proprietary Information of ZTE CORPORATION 167 .Chapter 7 . The configuration of switch A is as follows: zte(cfg)#set vlan 10 enable zte(cfg)#set vlan 10 add port 1.24 zte(cfg)#set port 1. This page is intentionally blank. Confidential and Proprietary Information of ZTE CORPORATION 168 . Remote-Access Introduction Remote-Access is a restrictive mechanism used for network management users to log in through Telnet. the network management user can access the switch through Telnet from any IP address. the user cannot access the switch from other IP addresses.Chapter 8 Network Management In this chapter. such as Remote-Access. it is used to restrict the access. When this function is disabled. RMON and cluster management. that is. you will learn about: Network management functions of the ZXR10 2609/2818S/2826S/2852S. This function is to enhance the security of the network management system. you can specify a network management user to access the switch only from a specified IP address by configuring the related parameters. Basic Configuration The Remote-Access following contents: configuration on the switch includes the 169 Confidential and Proprietary Information of ZTE CORPORATION . After this function is enabled. SNMP. SSH. In this case. zte(cfg)#set remote-access specific zte(cfg)#set remote-access ipaddress 10.92. Delete all IP addresses that allow for access. clear remote-access all 4.92. 2. set remote-access ipaddress 3.40.0/24 through Telnet. Display the Remote-Access configuration information.0/255. clear remote-access ipaddress 5. Configure the IP address that allows for access. Delete an IP address that allows for access. Disable/enable the restrictive access.92.92.212 through Telnet.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 1. set remote-access By default.0 255. show remote-access Configuration Example Example 1: Only allow the network management user to access the switch from 10.92.40.255. zte(cfg)#set remote-access specific zte(cfg)#set remote-access ipaddress 10.40.212 zte(cfg)#show remote-access 170 Confidential and Proprietary Information of ZTE CORPORATION .40.255.255. the restrictive access is disabled.255.0 zte(cfg)#show remote-access Whether check remote manage address: YES Allowable remote manage address list: 10.0 zte(cfg)# Example 2: Only allow the network management user to access the switch from 10.40. Even if these data is intercepted.92. The purpose of the SSH protocol is to solve the security problems in interconnected networks. the SSH connection protocol shall support interactive session. no useful information can be obtained.Network Management Whether check remote manage address: YES Allowable remote manage address list: 10. The SSH can be used to encrypt all transmitted data.Chapter 8 . and to offer a securer substitute for Telnet and Rlogin (Although the present development of the SSH protocol has far exceeded the remote access function scope). which is used to offer secure remote access and other secure network services over an insecure network. therefore. Confidential and Proprietary Information of ZTE CORPORATION 171 .212/255.40. zte(cfg)#set remote-access any zte(cfg)#show remote-access Whether check remote manage address: NO Allowable remote manage address list: none zte(cfg)# SSH Introduction The secure shell (SSH) is a protocol created by Network Working Group of the IETF.255.255 zte(cfg)# Example 3: Allow the network management user to access the switch from any IP address through Telnet.255. x and SSH v2. After user login.1. show ssh Configuration Example As shown in Figure 52. Enable or disable SSH.x. the command is disabled. The switch is configured with a layer 3 port. This switch only supports SSH login of a single user. the SSH function is disabled. set ssh By default. 2.0 and uses the password authentication mode. The SSH is generally used for configuring remote access to the switch.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual At present. The IP address of the port is 192. Display the SSH configuration and user login status. This switch only supports SSH v2.1/24. Basic Configuration The SSH configuration on the switch includes the following contents: 1.1. and the IP address of the host is 192. one host attempts to access the switch through SSH. if the user is in Diffie-Hellman key exchange state. the connection with the user is automatically terminated.1. the set ssh disable command can be used to terminate the connection with the user and prohibit the user from logging in through SSH. and the local host shall be able to ping the IP port address on the switch normally. the SSH protocol has two incompatible versions: SSH v1. 172 Confidential and Proprietary Information of ZTE CORPORATION . The user name and password for login (or remote RADIUS login mode) shall be configured on the switch. allowing for three login attempts. The SSH uses port 22. After three login attempts.1. However.100/24. as shown in Figure 53.Chapter 8 .0 can use the free software Putty developed by Simon Tatham to access the switch. 1.1.1/24 192. The required settings are as follows. Confidential and Proprietary Information of ZTE CORPORATION 173 .1.1. Set the IP address and port number of the SSH Server.Network Management FIGURE 52 SSH CONFIGURATION EXAMPLE Switch 192.100/24 The specific configuration of the switch is as follows: zte(cfg)#creat user zte zte(cfg)#loginpass zte zte(cfg)#set ssh enable The client using SSH v2.1. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 53 SETTING IP ADDRESS AND PORT NUMBER OF THE SSH SERVER 174 Confidential and Proprietary Information of ZTE CORPORATION . as shown in Figure 54. as shown in Figure 55. the user confirmation is needed. For the first time to log in. Confidential and Proprietary Information of ZTE CORPORATION 175 . Set the SSH version number.Network Management 2. FIGURE 54 SETTING SSH VERSION NUMBER 3.Chapter 8 . The SSH login result is shown in Figure 56.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual FIGURE 55 USER CONFIRMATION REQUIRED IN THE FIRST LOGIN 4. FIGURE 56 SSH LOGIN RESULT 176 Confidential and Proprietary Information of ZTE CORPORATION . the NMS can be used to query the device (suppose it is reachable) and obtain more information. The protocol used for the exchange of management information between the switching agent process and the NMS. It involves a series of protocol suite and specifications: MIB SMI SNMP They offer the means to collect network management information from network devices. 2. Managed devices. An NMS collects data by polling the agents that reside in the managed devices. SNMP. which can communicate over the Internet. SNMP also enables devices to report problems and errors to network management stations. 3. The SNMP network management needs three key elements: 1. When a trap occurs to a device. The agents in the managed devices can report errors to NMSs at any time before the NMSs poll them. These errors are called traps. Each device contains an agent. SNMP monitors network device status by querying the related object values in the Confidential and Proprietary Information of ZTE CORPORATION 177 . Network Management Station (NMS). SNMP adopts the “Management process—Agent process” model to monitor and control all types of managed network devices. The network management process shall be able to communicate over the Internet.Network Management SNMP Introduction SNMP is the most popular network management protocol currently. Any network administrator can use SNMP to manage switches.Chapter 8 . All variables in the network are stored in the MIB. that is. but one view can correspond to multiple communities. If the view created with this command already exists.3. One community can only correspond to one view. it includes 1. 3. community name and version of the trap host.ZXR10 2609/2818S/2826S/2852S implements standard MIB defined in rfc1213. 2. create view A view is an object subset of the MIB. the Basic Configuration The SNMP configuration includes the following contents: 1. the newly created string overwrites the original one. Set specific community name that the view contains. Create a view and specify whether the view contains a mib subtree.6. Set the IP address. The “public” indicates that the switch only allows for read only access. rfc1493. The parameter <mib-oid> specifies the mib subtree. 4. rfc2674 and rfc2819. If the community string created with this command already exists. If the excluded or included mib subtree is not specified.1 by default. while “private” indicates that the read/write authority to the switch is permitted. 178 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual agent MIB. create community The community string offers a user confirmation mechanism for remote network administrators to configure switches. Create communication name and set the access authority. set community view The community and view must be created. the newly created view overwrites the original one. and the community as “zte”.105.255. and the switch is managed through the network management server. 8.92. 5. Delete a community name.200. Specify the IP address of the host receiving traps as 10. clear community 6. Enable/disable the SNMP trap.92.Chapter 8 . Delete a view name.40. zte(cfg)#config router zte(cfg-router)#set ipport 0 ipaddress 10.0 zte(cfg-router)#set ipport 0 vlan 2 Confidential and Proprietary Information of ZTE CORPORATION 179 .92.255.Network Management set traphost The trap host is the destination host to which the traps are sent. and the operation as described in 5) above occurs.200 255. the switch has a layer 3 port with the IP address of 10. set trap If it is enabled. In general. clear view 7. a trap is sent to the management console. and then associate the community “zte” with the view “zteview”. there is a delay of several minutes. The cold start and warm start traps are sent to the management console only after the system is started.40. Create a community named “zte” with the read/write authority and the view named “zteview”.105.40. Display SNMP information Show snmp Configuration Example Suppose that the IP address of the network management server is 10.40.92. 1 180 Confidential and Proprietary Information of ZTE CORPORATION .-----------------------zteview Include 1.----------.6.3.40.105 zte(cfg-snmp)# zte Ver.--------.-----------zte private zteview zte(cfg-snmp)#show snmp view ViewName Exc/Inc MibFamily ----------.1 zte(cfg-snmp)#show snmp host HostIpAddress Community SNMPVersion ---------------.40.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg-router)#set ipport 0 enable zte(cfg-router)#exit zte(cfg)#config snmp zte(cfg-snmp)#create community zte private zte(cfg-snmp)#create view zteview zte(cfg-snmp)#set community zte view zteview zte(cfg-snmp)#set traphost 10.92.105 zte zte(cfg-snmp)#show snmp community CommunityName Level ViewName -------------.----------10.-------.92. The alarm group is based on the implementation of the event group. The RMON control information can be configured through the MIB browser. Basic Configuration The following describes how to configure RMON control information through a HyperTerminal or remote Telnet. RMON specifications refer to the definition of RMON MIB. Alarm: allows operators of the management console to set sampling interval and alarm threshold for any count or integer recorded by RMON agents.Network Management RMON Introduction The Remote Monitoring (RMON) defines standard network monitoring function and the communication interface between the management console and the remote monitor. Event: it is a table related to all events generated by RMON agents. History: records the periodic statistics sample of the information that can be obtained from the statistics group. RMON offers an efficient and high availability method to monitor the behaviors of subnets in case of reducing the load of other agents and management stations. Confidential and Proprietary Information of ZTE CORPORATION 181 . 1.ZXR10 2609/2818S/2826S/2852S supports four groups of RMON MIB. These data can be obtained through the MIB browser. Statistics: maintains the basic application and error statistics of each subnet that the agent monitors. All these groups are used to store the data collected by the monitor and the derived data and statistics. and a HyperTerminal or remote Telnet command line.Chapter 8 . The RMON sampling information and statistics are obtained through the MIB browser. Enable/disable the RMON function. When it is set to “invalid”. The configuration involves: historyControlDataSource: It is the ifIndex oid in the rfc1213 interface group. historyControlBucketsRequested: By default. historyControlOwner.1. During the sampling.2.1. the instance is deleted. In command line configuration.3. historyControlInterval.1.2. When configuring the data source through the command line. 3. The configuration involves: etherStatsDataSource: It is the same as that of the history group. the RMON function is disabled. the oid of port 16 is 1. historyControlStatus: It can be “valid”.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set rmon By default.16.6. enter the port number directly. for example.800 seconds. enter the port number 16 directly.2. set history The command line configuration of the history group is to configure the historyControlTable in the history group.1. The control status can be set to “valid” only when the data source is specified. it is 50. Create or configure instances of the history group. The sampling of etherStatsTable information in the etherHistoryTable and statistics groups in the history group can be implemented only when the RMON function is enabled. the data sampling stops if the RMON function is disabled. Create or configure instances of the statistics group. “createRequest” and “invalid”. etherStatsOwner 182 Confidential and Proprietary Information of ZTE CORPORATION . set statistics The command line configuration of the statistics group is to configure the etherStatsTable in the statistics group. “underCreation”. By default. it is 1. 2. “createRequest” and “invalid”. the monitor sends an SNMP trap to one or more management stations. “createRequest” and “invalid”. eventCommunity.1. The configuration involves: eventDescription. where. the instance is deleted.3.2. a log instance is created for each event in the logTable. eventType: It can be “none(1)”. set alarm The command line configuration of the alarm group is to configure the alarmTable in the alarm group.x. When the “snmp-trap” is selected.x. When it is set to “invalid”. alarmSampleType: The “absolute” indicates the absolute value. for example. When the “log-and-trap” is selected.6. and “delta” indicates the relative value. “underCreation”.2. The control status can be set to “valid” only when the data source is specified. Confidential and Proprietary Information of ZTE CORPORATION 183 . 5.Chapter 8 . The configuration involves: alarmInterval. 4. the variable value shall be 1. for sampling the etherHistoryBroadcastPkts. eventOwner. Create or configure instances of the event group.1.When the “log” is selected.x” indicates the sampling bucket of an instance of the history group. the event instance is deleted. “log(2)”. “snmp-trap(3)” and “log-and-trap(4)”.2.Network Management etherStatsStatus: It can be “valid”. Create or configure instances of the alarm group. “underCreation”. When it is set to “invalid”.7.1. eventStatus: It can be “valid”. alarmVariable: It indicates the object identifier of a specific variable to be sampled in the local mib. for each event.16. the log is created and a trap is sent. set event The command line configuration of the event group is to configure the eventTable in the event group. “x. alarmFallingThreshold. show event Display the configuration information about the alarm group. show statistic Display the configuration information about the event group. alarmRisingThreshold. “underCreation”. alarmStatus: It can be “valid”. “fallingAlarm(2)” and “risingOrFallingAlarm(3)”. “createRequest” and “invalid”. When it is set to “invalid”. show alarm 184 Confidential and Proprietary Information of ZTE CORPORATION . the alarm instance is deleted. The status can be set to “valid” only when the alarm variable is configured successfully. alarmRisingEventIndex. 6.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual alarmStartupAlarm: It can be “risingAlarm(1)”. alarmFallingEventIndex. the falling sampling value is lower than the threshold or both cases occur simultaneously. alarmOwner. Query the RMON status and configuration information. The alarm variable can be configured only when the object to be sampled specified by the alarm variable can sample data. show history Display the configuration information about the statistic group. after the instance becomes effective. which indicate that. the first sampling starts when the rising sampling value exceeds the threshold. show rmon Display the configuration information about the history group. Display the RMON status. 1.1.6. alarm 2 and statistics 1 respectively.2.2.16 zte(cfg-snmp)#set alarm 2 sample absolute zte(cfg-snmp)#set alarm 2 startup rising zte(cfg-snmp)#set rising zte(cfg-snmp)#set falling zte(cfg-snmp)#set alarm 2 owner zteNj zte(cfg-snmp)#set alarm 2 status valid alarm 2 threshold 15 eventindex 2 alarm 2 threshold 8 eventindex 2 alarm 2 variable zte(cfg-snmp)#set statistics 1 datasource 16 Confidential and Proprietary Information of ZTE CORPORATION 185 .3.Chapter 8 .1.1.Network Management Configuration Example The following examples describe how to set event 2. zte(cfg-snmp)#set event 2 description It'sJustForTest!! zte(cfg-snmp)#set event 2 type logandtrap zte(cfg-snmp)#set event 2 community public zte(cfg-snmp)#set event 2 owner zteNj zte(cfg-snmp)#set event 2 status valid zte(cfg-snmp)#set history 2 datasource 16 zte(cfg-snmp)#set history 2 bucket 3 zte(cfg-snmp)#set history 2 interval 10 zte(cfg-snmp)#set history 2 owner zteNj zte(cfg-snmp)#set history 2 status valid zte(cfg-snmp)#set rmon enable zte(cfg-snmp)#set alarm 2 interval 10 zte(cfg-snmp)#set 1. history 2.2. 3.2.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual zte(cfg-snmp)#set statistics 1 owner zteNj zte(cfg-snmp)#set statistics 1 status valid Query configuration information about event 2: zte(cfg-snmp)#show event 2 EventIndex Community : 2 : public Type : log-and-trap Status: valid Owner : zteNj LastTimeSent: 0 Description : It'sJustForTest!! zte(cfg-snmp)# Query configuration information about history 2: zte(cfg-snmp)#show history 2 ControlIndex : 2 Interval : 10 BucketsRequest: 3 BucketsGranted: 3 ControlOwner : zteNj ControlStatus: valid DataSource zte(cfg-snmp)# : 1.16 Query configuration information about alarm 2: zte(cfg-snmp)#show alarm 2 AlarmIndex Interval : 2 : 10 SampleType: absolute Value Startup Status : 0 : risingAlarm : valid Threshold(R) : 8 Threshold(F) : 15 EventIndex(R): 2 Variable : 1.16.3.1.2.2.1.1.2.1.6.1.6.6.2.1 EventIndex(F): 2 zte(cfg-snmp)# 186 Confidential and Proprietary Information of ZTE CORPORATION Owner : zteNj .2.1.2.1. The event with the index of 2 sends a trap to the management station. and creates a log simultaneously.16 zte(cfg-snmp)# After the above configuration.2. Cluster Management Introduction A cluster is a combination consisting of a set of switches in a specific broadcast domain. This log can be queried in the logTable of the event group. This set of switches forms a unified management domain. providing an external public network IP address and Confidential and Proprietary Information of ZTE CORPORATION 187 .Chapter 8 .3.1. the event with the index of 2 is triggered.2.6.2.1. when the number of etherHistoryPkts of the first bucket of port 16 rises over 8 or the number falls below 15.1.Network Management Query configuration information about statistics 1: zte(cfg-snmp)#show statistics 1 StatsIndex: 1 Pkts :16 CRCAlignErrors : 0 DropEvents: 0 BroadcastPkts :1 Pkts65to127Octets : 0 Octets : 2236 MulticastPkts:15 Pkts128to255Octets : 15 Fragments : 0 UndersizePkts:0 Pkts256to511Octets : 1 Jabbers : 0 OversizePkts :0 Pkts512to1023Octets : 0 Collisions: 0 Pkts64Octets :0 kts1024to1518Octets: 0 Status : valid Owner : zteNj DataSource: 1.1. The command switch can automatically collect the device topology and set up a cluster. Other switches serve as member switches. One cluster has only one command switch. The management switch which is configured with a public network IP address is called a command switch. In general. the broadcast domain where a cluster is located consists of switches in these roles: Command switch. The command switch and member switches form a cluster (private network). After a cluster is set up. Figure 57 shows the cluster management networking. In normal cases. It is recommended that you isolate the broadcast domain between the public network and the private network on the command switch and shield direct access to the private address. Member switches serve as candidate switches before they join the cluster. candidate switches and independent switches. A private address is allocated to each member switch through the class DHCP function of the command switch. 188 Confidential and Proprietary Information of ZTE CORPORATION . member switches. a member switch is not configured with a public network IP address. The switches that do not support cluster management are called independent switches. The command switch provides an external management and maintenance channel to manage the cluster in a centralized manner. as well as the ability to manage and access each member in the cluster.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual management interface. the command switch provides a cluster management channel to manage member switches. Network Management FIGURE 57 CLUSTER M AN AGEMENT NETWORKING TFTP Server 110.1.1.2 NM console 110.1.10 Cluster internal address pool 192.168.1.Chapter 8 .1.0/24 Command switch Cluster internal network Member switch Member switch Member switch Member switch Member switch Independent switch Outside the cluster Candidate switch Confidential and Proprietary Information of ZTE CORPORATION 189 .1.1 Public network 100.1. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Figure 58 shows the changeover rule of the four roles of switches within a cluster. Enable/disable the system ZDP function. The ZDP configuration on the switch includes the following contents: 1. ZDP Configuration ZDP (Discovery Protocol) is a protocol used to discover the related information about the direct neighbor node. FIGURE 58 SWITCH ROLE CHANGEOVER RULE Member switch Specified as a command switch Delete from the cluster Add to the cluster Specified as a candidate switch Candidate switch Specified as an independent switch Specified as a command switch Specified as a candidate switch (without member) Specified as an independent switch (without member) Command switch Specified as a command switch Independent switch To configure the cluster management function. 190 Confidential and Proprietary Information of ZTE CORPORATION . first use the config group command to enter the cluster management configuration mode. including the adjacent device ID. version and port information. device type. This protocol supports the refreshing and aging of the neighbor device information table. Enable/disable the trunk ZDP function. 4.Network Management set zdp By default. and the ZDP packets processing is suspended. Set the valid time for holding ZDP information. set zdp holdtime 5. the ZDP functions of all ports/trunks are enabled. When the ZDP function of a port/trunk is disabled. Enable/disable the port ZDP function. set zdp trunk By default. When the system ZDP function is disabled. Set the time interval for sending ZDP packets. Display the neighbor device information table.Chapter 8 . set zdp timer 6. the system ZDP function is enabled. show zdp 7. and the ZDP packets processing is suspended. set zdp port 3. 2. show zdp neighbour Confidential and Proprietary Information of ZTE CORPORATION 191 . Display the ZDP configuration. the contents of the neighbor device information table are cleared. Note: A port/trunk can collect and send ZDP information normally only when both the ZDP function of the port/trunk and the system ZDP function are enabled. the contents of the neighbor device information table of the port/trunk are cleared. the contents of the switch topology information table are cleared. the ZTP packets processing of the port/trunk is suspended. The ZTP configuration on the switch includes the following contents: 1. When the system ZTP function is disabled. With the neighbor device information table collected through ZDP. set ztp By default. set ztp port 3. and the ZTP packets processing is suspended.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual ZTP Configuration The topology protocol (ZTP) is a protocol used to collect network topology information. 192 Confidential and Proprietary Information of ZTE CORPORATION . Configure ZTP parameters. Enable/disable the system ZTP function. Enable/disable the trunk ZTP function set ztp trunk By default. If the ZTP function of a port/trunk is disabled. Enable/disable the port ZTP function. 2. the system ZTP function is enabled. Note: A port/trunk can collect and send ZTP information normally only when both the ZTP function of the port/trunk and the system ZTP function are enabled. 4. Configure a VLAN for collecting topology information. the ZTP function of all ports/trunks is enabled. ZTP sends and forwards ZTP topology collection packets through the relevant port in the specified VLAN to collect the topology information in the network (hop count) within a specific range and to create a topology information table which is used for knowing network topology status and managing the cluster. set ztp portdelay By default. it is not allowed to change the specified VLAN for collecting topology information. Confidential and Proprietary Information of ZTE CORPORATION 193 .Network Management set ztp vlan Set the range (hop count) of collecting topology information. the VLAN for collecting topology information serves as the management VLAN of the command switch. the specified VLAN for collecting topology information is VLAN 1. set ztp timer Set the hop delay for forwarding topology requests.Chapter 8 . the user can manually start the topology information collection procedure. the administrator can increase the hop counts. the topology information is not collected periodically. that is. ztp start To make it easy to know the network topology information at any time. 5. set ztp hopdelay Set the port delay for forwarding topology requests. the hop delay and port delay of topology forwarding shall be modified to adapt the current network status. By default. 6. When the switch is configured to be a command switch. without depending on the automatic topology information collection. Manually start collecting topology information. the time interval for collecting topology information is 0 minute. and the topology collecting range is four hops. set ztp hop Set the time interval for collecting topology information periodically. In this case. To collect network topology information within a larger range. Display ZTP configuration. When the network delay is high. 194 Confidential and Proprietary Information of ZTE CORPORATION . Display the topology information table. The unique ID of a cluster consists of the VLAN where the cluster is located and the MAC address of the command switch. With the purpose of facilitating the display and cluster management. Set candidate switches. show ztp mac 8. specify a layer 3 port number for cluster management and set the IP address pool for user cluster management. Cluster Configuration After the command switch is specified. set group candidate Set independent switches. Set switch roles. and then manage and monitor the cluster.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual show ztp 7. set group independent Set a command switch. Display details of the specified device according to the MAC address. you can know the network topology information through ZDP/ZTP. show ztp device Note: The device ID offered by the topology information table is the temporary ID generated based on the current topology information collection result. 1. it is effective to the current topology information collection result only. 3.Chapter 8 . Add a member based on the device MAC address. Add/delete a cluster member. Once a switch is configured to be a command switch. Configure cluster parameters. set group name Confidential and Proprietary Information of ZTE CORPORATION 195 . In setting the command switch. the VLAN to which the layer 3 port is bound shall be the specified VLAN for collecting topology information. The command switch is allowed to be a candidate switch or independent switch only when the cluster has no member switch. the specified VLAN for collecting topology information cannot be changed. set group add device Delete a device with the specified member ID from the cluster.Network Management set group commander ipport After a candidate switch is added to the cluster by the command switch and becomes a member switch. set group add mac Add a member based on the temporary device ID obtained from the collected topology information. set group add mac Add a member based on the device MAC address and specify the member ID. 2. Set cluster name. the member switch cannot change itself to a candidate switch or command switch. set group delete member When a device is added to the cluster but the member ID is not specified. the system automatically allocates a unique ID to the member. 196 Confidential and Proprietary Information of ZTE CORPORATION . the member status is normal. set group handtime Set the effective holding time of information about switches in the cluster. 4. rlogin member Switch from a member switch to the command switch. the member is added to the cluster automatically and is displayed in UP status. After the communication is recovered. If the IP address of the TFTP Server of the cluster is configured. rlogin commander Download/upload versions through TFTP on the command switch.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Set a time interval for the handshake between the command switch and the member switch. if the communication is not recovered after the effective holding time. set group holdtime Set the IP address of the internal public TFTP Server of the cluster. Access and control cluster members. Switch from the command switch to a specified member switch. and the communication is recovered within the effective holding time. the command switch displays that the member is in DOWN state. the member switch can access the TFTP Server by directly accessing the command switch. set group tftpsvr The above parameters can be configured for the command switch only. The effective holding time of the cluster means that when the command switch detects the communication failure of a member switch (or a member switch detects that of the command switch). 168. show group Display candidate switches that can be added to the cluster.Chapter 8 . save member Delete the configuration of the specified member switch.10/24. and the IP address of the TFTP Server of the whole cluster to 110. WYXX(cfg)#set vlan 2525 enable WYXX(cfg)#set vlan 2525 add port 1-16 tag Confidential and Proprietary Information of ZTE CORPORATION 197 .0/24.1.1. show group member Configuration Example As shown in Figure 57.1. erase member Restart the specified member switch. reboot member 5. The detailed configuration is as follows: 1. Display the cluster configuration information. Here.1.1. the gateway address to 100. Display the cluster configuration and cluster member information. set the VLAN where the public network IP address of the command switch in the cluster is located to 2525.1.1.Network Management tftp Save the configuration of the specified member switch.1. the cluster management VLAN to 4000. the private address pool to 192. show group candidate Display cluster member information. the IP address to 100. Configure the public network IP address of the command switch and the gateway. the initial configuration of the switches is the default configuration.2. 08.1.d0.0/0 100.fc.d0.fc.d6 00.3a 0 1 1 1 1 1 Cmdr..0. Id --0 1 2 3 4 5 MacAddress Hop Role ----cmdr candi candi candi candi candi Platform --------ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S -----------------.d0.1.d0..d0.d0...1 2.08..d0.cf 00.--00.d0.1.09. Successed to add member! Successed to add member! Successed to add member! Successed to add member! Confidential and Proprietary Information of ZTE CORPORATION .d0..fc.d0.10/24 WYXX(cfg-router)#set ipport 25 vlan 2525 WYXX(cfg-router)#set ipport 25 enable WYXX(cfg-router)#iproute 0.08.WYXX(cfg-group)#ztp start Cmdr. WYXX(cfg)#config group WYXX(cfg-group)#set 192.1.fa 00.1/24 group commander ipport 1 ip-pool Cmdr.08.WYXX(cfg-group)#set group add device 1-5 Adding device id : 1 Adding device id : 2 Adding device id : 3 Adding device id : 4 198 .d0.fc. .fc.d5 00.0.d0.WYXX(cfg-group)#show ztp device Last collection vlan : 1 Last collection time : 188 ms.168..1.08.fc.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual WYXX(cfg)#config router WYXX(cfg-router)#set ipport 25 ipaddress 100. Create a cluster on layer 3 port 1 of the command switch and VLAN 1 (default VLAN).. . .6c 00. d0..zte(cfg)#set vlan 4000 enable Membr_4..5/24 00.d0.d6 192.6/24 Up Up Up Up Up 3. Switch to each member switch and add all ports to VLAN 4000 (taking member 4 as an example) Cmdr.1. Delete the cluster created on VLAN 1.fc.d0..d0.1.1.---------1 2 3 4 5 00..d5 192.d0.1. Cmdr.cf 192.08.09.1..Network Management Adding device id : 5 .fa 192.3/24 00.d0..WYXX(cfg-group)#show group member MbrId MacAddress IpAddress Status ----.168. .168.d0.fc.08.zte>enable Membr_4.168.fc. Successed to del member! Successed to del member! Successed to del member! Successed to del member! 199 Confidential and Proprietary Information of ZTE CORPORATION .WYXX(cfg-group)#set group delete member 1-5 Deleting member id : 1 Deleting member id : 2 Deleting member id : 3 Deleting member id : 4 .4/24 00..08..08.Open Connecting .168.fc. .3a 192.168.WYXX(cfg)#set vlan 4000 add port 1-16 tag Cmdr.------------------.----------------.d0.d0.2/24 00. .d0.Chapter 8 ..zte(cfg)#set vlan 4000 add port 1-16 tag 4.fc.. Successed to add member! Cmdr.WYXX(cfg)#rlogin member 4 Trying ...WYXX(cfg)#set vlan 4000 enable Cmdr... Membr_4. d0..08.08..WYXX(cfg-group)#set group add device 1-5 Adding device id : 1 Adding device id : 2 Adding device id : 3 Adding device id : 4 Adding device id : 5 .WYXX(cfg-group)#ztp start Cmdr.fc.d0.6c 00.08.fc.d0.--00.08.d0.168. Id --0 1 2 3 4 5 MacAddress Hop Role ----cmdr candi candi candi candi candi Platform --------ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S ZXR10 2818S -----------------. .WYXX(cfg-group)#set group candidate WYXX(cfg-group)# 5.3a 0 1 1 1 1 1 Cmdr..d0.. .d0.fc. Successed to add member! Successed to add member! Successed to add member! Successed to add member! Successed to add member! 200 Confidential and Proprietary Information of ZTE CORPORATION .d5 00.08. Successed to del member! Cmdr. ..d0.fc..d0.fa 00.. WYXX(cfg-group)#set ztp vlan 4000 WYXX(cfg-group)#set 192.d0...cf 00. Create a cluster on VLAN 4000.WYXX(cfg-group)#show ztp device Last collection vlan : 4000 Last collection time : 176 ms.1/24 group commander ipport 1 ip-pool Cmdr..d0.09..fc.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Deleting member id : 5 .1.d0.d6 00.d0..fc. . 1.1.1.WYXX(cfg-group)#show group member MbrId MacAddress IpAddress Status ----.d0.08.08. Cmdr.5/24 00.d0.6/24 Up Up Up Up Up 6.1.168.168.fc.Chapter 8 .cf 192.1.09.fa 192.d0.2 7.3/24 00.168.2/24 00. Membr_4.d0.2.fc.Z on member 4.fc.08.3a 192.d0.d0.Network Management Cmdr.d0.---------1 2 3 4 5 00.1.WYXX(cfg-group)#set group tftpsvr 110.d0.168.4/24 00.d5 192.d0.168.fc.08.----------------.d0.1.1.d6 192.1. Set the IP address of the TFTP Server in the cluster to 110.fc.zte(cfg-tffs)#tftp commander download kernel.---------------.Z Confidential and Proprietary Information of ZTE CORPORATION 201 . Download version kernel. Confidential and Proprietary Information of ZTE CORPORATION 202 .This page is intentionally blank. The following describes them in detail.Chapter 9 Maintenance In this chapter. Query whether the background terminal interface can operate normally. Check the running status of the switch. Check whether the temperature of the switch is normal and whether there is any strange smell in the equipment room. i. iii. ii. you will learn about: Routine maintenance of the ZXR10 2609/2818S/2826S/2852S Common test methods of the ZXR10 2609/2818S/2826S/2852S Troubleshooting methods of the ZXR10 2609/2818S/2826S/2852S Routine Maintenance Routine maintenance generally refers to daily maintenance and monthly maintenance. Check whether the fan of the switch runs normally. Query whether the status of indicators of the switch is normal. Confidential and Proprietary Information of ZTE CORPORATION 203 . Items of Daily Maintenance 1. iv. Summarize questions encountered in routine operations and please discuss with ZTE maintenance personnel if necessary. Clean the cabling trough. 2. check whether the relevant lines are in poor contact and make adjustment in time. Record the intraday operations and phenomenon. Summarize daily operations once a month. Summarize and accumulate maintenance experiences in routine maintenance to conduct more efficient maintenance. ii. i. 3. Back up the alarm data. Clean the equipment room. ii. statistic data and configuration data. i. and phenomenon shall include the status of the switch and environment of the equipment room. Clean the switch. 3. 4. Intraday operations refer to the operations performed on that day. Do not overwet the cleaning cloth. 4. 2. Log in to the switch through a HyperTerminal or Telnet. Pay attention to the cleanness of air conditioners and check the performance of the air conditioners at the same time. and then use the ping command to test different network segments and check the connectivity. 204 Confidential and Proprietary Information of ZTE CORPORATION . Make sure that the interfaces are not affected. Check the communication status between the switch and each connected device. Check system alarm information.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual v. Items of Monthly Maintenance 1. Check whether the switch related services are normal. Check whether developed. routine routine maintenance maintenance Completely maintain and check the equipment in the monitoring room. Yearly summarization.Maintenance Maintenance Period Table 12 shows the maintenance and test period of the Ethernet switch system for the reference of the maintenance personnel. Check the temperature and humidity in the equipment room and check the power supply. 1 2 3 4 5 6 7 8 9 10 Maintenance & Test Item Check the running status of the switch. the relevant of of services are well Test Period Daily Daily Daily Daily Monthly Monthly Monthly Monthly Yearly Yearly Monthly summarization problems.Chapter 9 . Check the communication status between the switch and each connected device. Monthly summarization experience. Clean the switch. Confidential and Proprietary Information of ZTE CORPORATION 205 . Clean the equipment room. TABLE 12 M AINTENANCE AND TEST PERIOD OF THE ETHERNET SWITCH SYSTEM No. it indicates that a loop exists in this port. If such a loop exists. 206 Confidential and Proprietary Information of ZTE CORPORATION . a port loop absolutely exists. Enable or disable the loop test function of the specified port. Starting the single-port loop test and disabling the port with loop can efficiently avoid the influence caused by port loop. the switch and network may be down. In worse cases. If this test packet is received through the port without any change (or only a tag is attached). Port number: Port numbers correspond to the numbers of the ports on the switch one by one. The MAC address of each switch is unique. The principle of the single-port loop test is as follows: The switch sends a test packet through a port. set loopdetect port By default. The single-port loop test configuration on the switch involves: 1. The test packet sent by the switch includes the following three parameters: Source MAC address: It indicates the MAC address of the switch. it may result in errors in learning MAC addresses and may easily cause a broadcast storm. Enable or disable the loop test function of a trunk. Discrimination field: For each switch. If the three parameters in the test packet sent through the port are the same as those in the test packet received through the port. the port loop test function is disabled.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Common Test Methods Single-Port Loop Test The single-port loop test is to check whether a loop exists in the ports of the switch. 2. the digital signature of each port is different. 4. Short. such as Open. Enable or disable the loop test protection function of a trunk. set loopdetect port protect The loop test protection function means that the port is automatically blocked when it detects a loop. the port protection time. 6.Maintenance set loopdetect trunk By default. the loop test function of a trunk is disabled. Virtual Circuit Test The virtual circuit test (VCT) uses the time domain reflectometer (TDR) to diagnose the circuit. set loopdetect blockDelay The time for blocking the port with loop refers to the time for blocking the port when a loop is detected. Impedance Mismatch and Confidential and Proprietary Information of ZTE CORPORATION 207 . you can eliminate the fault according to the status of the spanning status. Enable or disable the loop test protection function of the specified port.Chapter 9 . This test enables you to diagnose the circuit error status. that is. If no loop is detected and the spanning tree of the port is enabled. In this way. show loopdetect If the port cannot work normally. Display the port loop test configuration and port detection status. Set the time for blocking the port with loop. set loopdetect trunk protect 5. The protection takes effect only when the loop test protection function of the port is enabled. you can use show loopdetect to observe whether a port loop exists. the influence caused by port loop is avoided. 3. the serial port of the HyperTerminal and the console port of the switch. In troubleshooting. check whether the device configuration is correct. 3. the VCT is not supported. usually can be cleared by replacing the hardware. this switch only supports the VCT of the gigabit electrical interface. Failed to Configure through the Console Port 1. Fault analysis and location 208 Confidential and Proprietary Information of ZTE CORPORATION . and to obtain the distance of the errored circuit with the fitted empirical formula. whether the cables are connected correctly and whether the required environment is satisfied according to the related description in the above sections. Related components check Check the configuration cable. Common Troubleshooting By type. 2. the faults include software faults and hardware faults. For other interface modules. For interface modules in extended slots. The following describes the common faults of the ZXR10 2609/2818S/2826S/2852S and relevant troubleshooting methods in detail. if accurately located. Fault symptom The switch cannot be configured through the console port. Hardware faults. You can use the show vct port command on the switch to query the VCT result of the specified port.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Good termination. Software and configuration faults can be cleared through proper operations. Chapter 9 - Maintenance i. The configuration cable connection is incorrect. ii. The serial port attributes of the HyperTerminal are configured incorrectly, and the serial port fails. iii. The console port of the switch fails. 4. Troubleshooting i. Use proper configuration cables. For the connections of configuration cables, see Confidential and Proprietary Information of ZTE CORPORATION 209 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Installing Configuration Cables. ii. Check the settings of serial port attributes of the HyperTerminal. The correct settings shall be as follows: Bit/s (baud rate): “9600”. Data bit: “8”. Parity check: “none”. Stop bit: “1”. Data stream control: “none”. Check whether the serial port of the HyperTerminal is normal, and replace the configuration terminal. iii. Check whether the console port of the switch is normal. Failed to Connect Through Telnet 1. Fault symptom The switch cannot to be accessed through Telnet. 2. Fault analysis and location i. The PVID of the port is configured incorrectly. ii. The port is disabled. iii. The VLAN bound with the IP port is disabled. iv. No valid IP address, subnet mask and default gateway are configured for the switch. v. The IP address of the switch conflicts with the IP address of another device in the network. 3. Troubleshooting i. Modify the PVID of the port to be consistent with the related VLAN ID. ii. Enable the port. iii. Enable the VLAN bound with the IP port. 210 Confidential and Proprietary Information of ZTE CORPORATION Chapter 9 - Maintenance iv. Configure a valid IP address, subnet mask and default gateway for the switch. v. Modify the IP address of the switch or that of the other device to eliminate the IP address conflict. Failed to Log In to the Switch Through Telnet 1. Fault symptom The remote terminal can access but cannot log in to the switch through Telnet, and the system prompts the user that no password is configured. 2. Fault analysis and location The login password of the switch is set to null. 3. Troubleshooting Set a non-null login password. Missing User Name or Password 1. Fault symptom The user cannot log in to the switch after entering the user name and password. 2. Fault analysis and location In logging in to the switch, the entered user name or password is incorrect. 3. Troubleshooting First, confirm whether the system administrator can find the original user name and password. If the user name and password cannot be found, restart the switch and delete the configuration file. The detailed procedure is as follows: Confidential and Proprietary Information of ZTE CORPORATION 211 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual i. Restart the switch, and press any key according to the prompt to enter the boot status in the HyperTerminal. Welcome to use ZTE eCarrier!! Copyright(c) 2004-2006, System Booting...... CPU: WindBond ARM7TDMI Version: VxWorks5.5.1 BSP version: 1.2/0 ZTE Co., Ltd. Creation date: May 23 2005, 00:07:21 Press any key to stop auto-boot... 6 [ZxR10 Boot]: ii. In the boot status, enter <zte> to enter the [BootManager] status of the switch. Enter <?> to get command help. [ZxR10 Boot]: zte Load wbdEnd Begin W90N740 MAC0: 10MB - Full Duplex Board 2818s ! Marvell has been initialized ! boot device : wbdEnd 212 Confidential and Proprietary Information of ZTE CORPORATION Chapter 9 - Maintenance unit number processor number host name file name : 0 : 0 : tiger : vxWorks inet on ethernet (e) : 10.40.89.106 host inet (h) gateway inet (g) flags (f) : 10.40.89.78 : 10.40.89.78 : 0x80 Attached TCP/IP interface to wbdEnd0. Warning: no netmask specified. Attaching network interface lo0... done. Attaching to TFFS... test flash passed perfectly! Welcome to boot manager! Type ‘?’ for help [BootManager]:? ls directories/* pwd absolute path/* devs informaiton/* show and MAC address/* reboot format memory/* del file_name */Lists the current */Displays the current */Displays the FLASH memory */Displays the switch type */Restarts the switch/* */Formats the FLASH */Deletes the specified 213 Confidential and Proprietary Information of ZTE CORPORATION ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual file/* md mf cd dir_name file_name absolue-pathname */Creates a directory/* */Creates a file/* */Changes the current directory/* tftp ip_address file_name */Uploads/downloads the version through TFTP/* update file_name rename file_name newname */Upgrades boot/* */Rename a file/* [BootManager]: iii. Run the del command to delete the configuration file, and then restart the switch. [BootManager]:ls KERNEL RUNNING.CFG [BootManager]:del running.cfg [BootManager]:reboot iv. After the switch is restarted, use the default user name and password to log in to the switch. Please Press any Key to Start! Welcome ! ZTE Corporation. All rights reserved. login:admin password: ********* zte>en 214 Confidential and Proprietary Information of ZTE CORPORATION Chapter 9 - Maintenance password : zte(cfg)# Missing enable Password 1. Fault symptom The user cannot enter the global configuration mode after logging in to the switch and entering the password. 2. Fault analysis and location The password used for entering the global configuration mode is invalid. 3. Troubleshooting The troubleshooting method is the same as that described in Missing User Name or Password. 4. Precautions Before restarting the switch, record the current configuration of the switch. It is useful for reconfiguration. Failed to Interconnect Two Devices in the Same VLAN 1. Fault symptom The two devices connected to the two ports of the switch in the same VLAN cannot be interconnected. 2. Fault analysis and location i. The PVID of the port is configured incorrectly. Confidential and Proprietary Information of ZTE CORPORATION 215 iv.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual ii. iv. Modify the PVID of the port to be consistent with the related VLAN ID. 3. iii. 216 Confidential and Proprietary Information of ZTE CORPORATION . Enable the port. Add the port to the VLAN and select untag. Troubleshooting i. The VLAN is disabled. ii. iii. The tag is selected when the port is added to the VLAN. Enable the VLAN. The port is disabled. Functions. 88. port name or port number range. 77. you will learn about: Commands of the ZXR10 2609/2818S/2826S/2852S. parameters and application of the commands. v1. 4-8. 18 p1. pp2. 2. pp2 and port18 are names of the ports created by the user. Introduction Table 13 shows the parameters commonly used in the commands. For example: 1-19. format. modes.Chapter 10 Command Reference In this chapter. 4-8. Comma separated VLAN ID. 100-900 vlan1. For example: <portlist> 1. VLAN name or VLAN range. port18 p1. 100-200 <vlanlist> Confidential and Proprietary Information of ZTE CORPORATION 217 . 10. TABLE 13 P ARAMETER DESCRIPTION Parameter Description Comma separated port number. for example.B.55. A character string without space. 11.xx.xx.B.3.40. 77. It indicates that only one VLAN ID or VLAN name can be entered at a time. It indicates that only one trunk ID can be entered at a time.66.xx> <A.254/24. 10.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <trunklist> Description Comma separated trunk ID or trunk range. for example.6.D/M> <string> <mib-oid> <name> Management Commands adminpass Function: To set the password for entering the global configuration mode.xx. MAC address. 88.254 Digits of the IP address and mask. A character string without space. for example.40. 10. “M” is an integer ranging 1~32. for example.47.xx. For example: 1-19. Mode: Global configuration mode Format: adminpass [<string>] Parameter: 218 Confidential and Proprietary Information of ZTE CORPORATION . <portname> <vlanname> <trunkid> <xx. Variable number in dotted decimal notation.44.2.D> <A. 100-900 It indicates that only one port number or port name can be entered at a time.33.C.19.C.22.2. 1. IP address.47. Example: Set the password for entering the global configuration mode to administrator. Mode: Global configuration mode Format: config router config snmp Function: To enter the SNMP configuration mode. Mode: Global configuration mode Format: config tffs Confidential and Proprietary Information of ZTE CORPORATION 219 . <string> Note: If adminpass is entered directly without a string. adminpass administrator config router Function: To enter the layer 3 configuration mode.Command Reference Parameter Description The password for entering the configuration mode.Chapter 10 . it indicates that the management password is set to null. Mode: Global configuration mode Format: config snmp config tffs Function: To enter the file system configuration mode. <name> Example: Delete a user named “userx”. delete user userx 220 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: delete user <name> Parameter: Parameter Description The name of the management user. Mode: Global configuration mode Format: create user <name> Parameter: Parameter Description The name of the management user. create user userx delete User Function: To delete a management user. <name> Example: Create a user named “userx”.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual create User Function: To create a management user. Chapter 10 . hostname hello Confidential and Proprietary Information of ZTE CORPORATION 221 . the system prompts the user to enter the management password (use the adminpass command to set it). <name> Example: Set the host name to “hello”. Mode: All modes Format: exit hostname Function: To set or change the host name. Mode: Global configuration mode Format: hostname <name> Parameter: Parameter Description Host name. exit Function: To exit from the current mode to the previous mode. Mode: User mode Format: enable Note: After the enable command is executed.Command Reference enable Function: To enter the global configuration mode from the user mode. Mode: Global configuration mode Format: line-vty timeout <1-1080> Parameter: Parameter <1-1080> Description Timeout time.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual line-vty Function: To set the timeout time for Telnet user login. list Function: To list all commands available in the current mode. The unit is minute. Mode: Global configuration mode Format: loginpass [<string>] Parameter: Parameter Description Login password. it is 10 minutes. Mode: All modes Format: list loginpass Function: To set the login password. By default. <string> 222 Confidential and Proprietary Information of ZTE CORPORATION . B. The times of sending the echo request. Mode: Global configuration mode Confidential and Proprietary Information of ZTE CORPORATION 223 . Mode: Global configuration mode Format: ping <A.txt file. readconfig Function: To read the switch configuration from the config. loginpass ok ping Function: To test the connectivity of the network.D> <0-65535> <0-65535> Description Destination IP address. the Telnet user cannot log in to the system.C. Example: Set the login password to “ok”. it indicates that the login password is set to null. Mode: Global configuration mode Format: readconfig reboot Function: To restart the switch.D> [<0-65535>] [<0-65535>] Parameter: Parameter <A. In this case.B. The delay of waiting for response.Chapter 10 .C.Command Reference Note: If loginpass is entered directly without a string. Note that after the switch is restarted. Mode: Global configuration mode Format: saveconfig set date Function: To set the date and time.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Format: reboot saveconfig Function: To save the configuration information. the date and time shall be reconfigured. Mode: Global configuration mode Format: set date <yyyy-mm-dd> time <hh:mm:ss> Parameter: Parameter <yyyy-mm-dd> <hh:mm:ss> Description Date (year/month/day). set loginauth Function: To set the login authentication mode. Time (hour/minute/second). Mode: Global configuration mode Format: set loginauth {local|radius} Parameter: 224 Confidential and Proprietary Information of ZTE CORPORATION . Sets the RADIUS authentication for the login user. Mode: Global configuration mode Format: set specialVlan1 [enable|disable] Parameter: Parameter enable disable Description Enables the special management of vlan1. Disables the special management of vlan1. show loginauth Function: To display the login authentication mode. show date-time Function: To display the current date and time. Mode: All modes Format: show date-time Note: If no date and time are configured.Command Reference Parameter local radius Description Sets local authentication for the login user. Confidential and Proprietary Information of ZTE CORPORATION 225 .Chapter 10 . the time starts from 200407-01 by default. set specialVlan1 Function: To enable/disable the special management of vlan1. Mode: All modes Format: show specialVlan1 display the configuration information about show start-config Function: To display all non-default configurations of the system saved last time. show specialVlan1 Function: To specialVlan1. Mode: All modes Format: show running-config [toFile] Parameter: Parameter [toFile] Description Outputs the show running-config result to the config.txt file.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: All modes Format: show loginauth show running-config Function: To display all current non-default configurations of the system. Mode: All modes Format: show start-config 226 Confidential and Proprietary Information of ZTE CORPORATION . Command Reference show terminal Function: To display the monitoring and log information about terminals. Mode: All modes Format: show terminal [log] Parameter: Parameter [log] Description Displays log information. Mode: All modes Format: show user Confidential and Proprietary Information of ZTE CORPORATION 227 . Mode: All modes Format: show vct port <portname> Parameter: Parameter Description A port number. <portname> show user Function: To display information and the current name of the user logging in through Telnet.Chapter 10 . Note: It is used to display the on/off status of the monitor and log. show vct Function: To display the VCT result of the port. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual sysLocation Function: To set the location information about the switch. Mode: Global configuration mode Format: sysLocation <string> Parameter: Parameter Description Location of the switch. terminal monitor Function: To enable/disable printing real-time alarm information to the terminal. <string> terminal log Function: To enable/disable the log. Disables log. Mode: Global configuration mode Format: terminal log {on|off} Parameter: Parameter on off Description Enables log. Mode: Global mode Format: terminal monitor {on|off} 228 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: version File System cd Function: To change the current directory.Chapter 10 . version Function: To display system information including version. Disables printing real-time alarm information. running time and MAC address of the switch.Command Reference Parameter: Parameter on off Description Enables printing real-time alarm information. <name> Confidential and Proprietary Information of ZTE CORPORATION 229 . Mode: File system configuration mode Format: cd <name> Parameter: Parameter Description Name of the directory. copy \\test\a. Mode: File system configuration mode Format: copy <name> <name> Parameter: Parameter Description Name of the source file path/destination file path.txt format Function: To format the Flash memory.txt file in the root directory to the \bak directory.txt Example 2: Copy the a. copy v1.txt bak\v1. Mode: File system configuration mode 230 Confidential and Proprietary Information of ZTE CORPORATION .txt \\temp\a.txt file in the \\test directory to the \\temp directory.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example: Enter the config directory in the file system. cd config copy Function: To copy a file. <name> Example 1: Copy the v1. Mode: File system management mode Format: md <name> Parameter: Parameter Description Name of the directory.Chapter 10 .Command Reference Format: format ls Function: To display the current directory list. Mode: File system configuration mode Format: remove <name> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 231 . md group remove Function: To delete a specified file or directory. <name> Example: Create the directory “group”. Mode: File system configuration mode Format: md Function: To create a directory. txt.C.. Mode: File system configuration mode Format: rename <name> <name> Parameter: Parameter Description Name of the source file/destination file. <name> Example: Delete the directory “group”.txt file to config. remove group rename Function: To rename a file.D>|commander} {download|upload} 232 Confidential and Proprietary Information of ZTE CORPORATION .B.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter Description Name of the file or directory. <name> Example: Rename the configbak.txt config. Mode: File system configuration mode Format: tftp <name> Parameter: {<A.txt tftp Function: To download/upload a version through TFTP. rename configbak. 40.o from 10.D> commander download upload Description IP address of the specified host.B. Downloads a file from the host to the FLASH memory.167 to the switch. Clears the statistics data of the port. Mode: Global configuration mode Format: clear port <portlist> {name|statistics|description} Parameter: Parameter <portlist> name statistics description Description Port list. Command switch.Chapter 10 .44.40. Clears the description of the port.167 download version. Name of the file.44.o Port Configuration clear port Function: To clear the name/statistics data of a port. tftp 10.Command Reference Parameter <A. Uploads a file from the FLASH memory to the host.C. Clears the name of the port. Confidential and Proprietary Information of ZTE CORPORATION 233 . <name> Example: Download version. clear port 1. create port 1 name userx set port Function: To enable/disable a port. 5. 7 and 11. Mode: Global configuration mode Format: create port <portname> name <name> Parameter: Parameter Description A port number. and 1~52 on the ZXR10 2852S. 1~26 on the ZXR10 2826S. <portname> <name> Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. 6.11 name create port name Function: To create a port name.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example: Clear names of ports 1.5-7. Mode: Global configuration mode Format: set port <portlist> {enable|disable} Parameter: 234 Confidential and Proprietary Information of ZTE CORPORATION . Port name. 1~18 on the ZXR10 2818S. Example: Create the name userx for port 1. 5. 6. Disables the adaptive function of the port.Command Reference Parameter <portlist> enable disable Description Port list. set port 1.11 enable set port auto Function: To enable/disable the adaptive function of a port. 5. set port 1. 7 and 11.5-7. 6. Mode: Global configuration mode Confidential and Proprietary Information of ZTE CORPORATION 235 . 7 and 11.5-7. Enables the adaptive function of the port.11 auto enable set port bandwidth Function: To set port bandwidth. Example: Enables ports 1. Enables the port.Chapter 10 . Disables the port. Example: Enable the adaptive function of ports 1. Mode: Global configuration mode Format: set port <portlist> auto {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Format: set port <portlist> bandwidth ingress {off|on rate <64256000>}{tcpdrop|flowcontrol} set port <portlist> bandwidth egress {off|on rate <64-256000>} Parameter: Parameter <portlist> ingress egress off on tcpdrop flowcontrol <64-256000> Description Port list. TCP connection mode.11 bandwidth ingress on rate 1000 set port dscp-priority Function: To enable/disable the layer 3 DSCP priority of a port. Disables the bandwidth restriction. Set the input bandwidth. 6. Mode: Global configuration mode Format: set port <portlist> dscp-priority {enable|disable} 236 Confidential and Proprietary Information of ZTE CORPORATION . Example: Set the input bandwidth of ports 1. 5. Enables the bandwidth restriction.5-7. 7 and 11 to 1000 kbps. set port 1. The rate ranges from 64 kbps to 256000 kbps. Traffic control connection mode. Set the output bandwidth. Enables the layer 3 DSCP priority of a port. Disables the layer 3 DSCP priority of a port.Command Reference Parameter: Parameter <portlist> enable disable Description Port list. <0-7> set port description Function: To set the description of a port. Note that the layer 3 DSCP priority can be used to determine the priority of data packets only when the received data packets are IP data packets and the layer 3 DSCP priority of the port is enabled. set port default-priority Function: To set the default priority of a port. The queue priority of data packets is determined in the queue priority table according to the IP DSCP priority. Default port priority.Chapter 10 . Mode: Global configuration mode Format: set port <portname> description <string> Confidential and Proprietary Information of ZTE CORPORATION 237 . Mode: Global configuration mode Format: set port <portlist> default-priority <0-7> Parameter: Parameter <portlist> Description Port list. 7 and 11 to full duplex. 1~26 on the ZXR10 2826S. 5. 6. 238 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: set port <portlist> duplex {full|half} Parameter: Parameter <portlist> full half Description Port list.11 duplex full set port flowcontrol Function: To enable/disable the flow control of a port.5-7. and 1~52 on the ZXR10 2852S. Description of the port. Example: Set the working modes of ports 1. 1~18 on the ZXR10 2818S. set port duplex Function: To set the working mode of a port to full duplex/half duplex. set port 1. The working mode of a port is full duplex. The working mode of a port is half duplex.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter Description Port list. <portname> <string> Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. Disables the flow control of a port. Mode: Global configuration mode Format: set port <portlist> ingress_limit_mode {all|nonunicast|multibroadcast|broadcast} Parameter: Parameter <portlist> all nonUnicast Description Port list. 7 and 11. Set the ingress restriction filter type to nonunicast data packets.5-7.Chapter 10 . Example: Enable the flow control of ports 1.Command Reference Mode: Global configuration mode Format: set port <portlist> flowcontrol {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Enables the flow control of a port. Confidential and Proprietary Information of ZTE CORPORATION 239 . 6. Set the ingress restriction filter type to all data packets. 5. set port 1.11 flowcontrol enable set port ingress_limit_mode Function: To set the bandwidth restriction mode of a port. set port multicast-filter Function: To enable/disable the multicast packet filter of a port. “0” indicates that the number is not set. filter type to set port macaddress Function: To set the MAC address learning number of a port. Mode: Global configuration mode Format: set port <portlist> multicast-filter {enable|disable} Parameter: Parameter <portlist> Description Port list. Mode: Global configuration mode Format: set port <portlist> macaddress <0-16> Parameter: Parameter <portlist> <0-16> Description Port list. The number of learned MAC addresses of the port. Set the ingress restriction broadcast data packets. 240 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter multi-broadcast broadcast Description Set the ingress restriction type to broadcast and multicast data packets. 7 and 11 for forwarding multicast packets. namely. Mode: Global configuration mode Format: set port <portlist> poe {auto|force|never} Parameter: Parameter <portlist> auto force never Description Port list. Disables the multicast packet filter. Example: Set ports 1. set port 1. 6.Chapter 10 .Command Reference Parameter enable disable Description Enables the multicast packet filter. multicast packets are forwarded. Example: Set the power supply mode of port 1 to “auto”. set port 1 poe auto set port priority Function: To set port priority control.5-7. Set the power supply mode to “never”.11 multicast-filter disable set port poe Function: To set the external power supply mode of a port. namely. Set the power supply mode to “force”. Confidential and Proprietary Information of ZTE CORPORATION 241 . 5. multicast packets are discarded. Set the power supply mode to “auto”. 242 Confidential and Proprietary Information of ZTE CORPORATION . It can be any value from 0 to 7. It can any value from 0 to 7. Priority value. 6.1P user to determine future priority. Mode: Global configuration mode Format: set port <portlist> remapping-tag <0-7> priority <0-7> Parameter: Parameter <portlist> <0-7> <0-7> Description Port list. Priority value. Note that when a data packet received by the port is a TAG packet. Remapping-tag value. 7 and 11 to 3.11 default-priority 3 set port remapping-tag Function: To set 802.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: Global configuration mode Format: set port <portlist> default-priority <0-7> Parameter: Parameter <portlist> <0-7> Description Port list. Example: Set the priority of ports 1. and then uses the priority of the new priority of the 802.5-7. the switch first uses this remapping table to remap the priority in the data packet.1P user priority remapping table of a port. set port 1. 5. 11 remapping-tag 3 priority 2 set port sa-priority Function: To enable/disable the source MAC address priority. 7 and 11 to 2.1P user priority remapping table of ports 1. 5 5. set port security Function: To enable/disable port address learning. 5. Disables the source MAC address priority of the port. set port 1. Example: Set the priority value of “remapping-tag 3” in the 802. 3 3. Enables the source MAC address priority of the port. Mode: Global configuration mode Format: set port <portlist> sa-priority {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. 2 2. Mode: Global configuration mode Format: set port <portlist> security {enable|disable} Parameter: Parameter Description Confidential and Proprietary Information of ZTE CORPORATION 243 . 6 6 and 7 7.5-7.Chapter 10 . 4 4. 1 1.Command Reference The default values of the remapping table are 0 0. 6. 7 and 11 to 10 Mbps. and does not forward packets. Disables port address learning.5-7. 5. Enables port address learning and forwards packets. The port rate is 100 Mbps. Mode: Global configuration mode Format: set port <portlist> speed {10|100|1000} Parameter: Parameter <portlist> 10 100 1000 Description Port list. 6. Example: Set the rate of ports 1. set port 1.11 speed 10 set port speedadvertise Function: To set the port speed advertisement.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <portlist> enable disable Description Port list.11 security enable set port speed Function: To set the port rate to 10 Mbps/100 Mbps/1000 Mbps. Example: Disable the address learning of ports 1. The port rate is 1000 Mbps. 7 and 11.5-7. 244 Confidential and Proprietary Information of ZTE CORPORATION . 5. The port rate is 10 Mbps. 6. set port 1. 1P user priority.1P user priority of the port.Chapter 10 .Command Reference Mode: Global configuration mode Format: set port <portlist> speedadvertise {maxspeed|speed 10|speed 100|speed 1000} {fullduplex|halfduplex} Parameter: Parameter <portlist> maxspeed speed 10 speed 100 speed 1000 fullduplex halfduplex Description Port list. set port user-priority Function: To enable/disable the 802.1P user priority of the port. Sets the port speed advertisement to maximum speed. Sets the port speed advertisement to 100 Mbps. Sets the port speed advertisement to 1000 Mbps. Enables the 802. Full duplex mode. Disables the 802. Sets the port speed advertisement to 10 Mbps. Confidential and Proprietary Information of ZTE CORPORATION 245 . Mode: Global configuration mode Format: set port <portlist> user-priority {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Half duplex mode. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set port vlan-priority Function: To enable/disable the VLAN priority. Enables the port VLAN priority. Disables the port VLAN priority. namely. Mode: Global configuration mode Format: set port <portlist> vlan-priority {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Mode: Global configuration mode Format: set trunk <trunklist> multicast-filter {enable|disable} Parameter: Parameter <trunklist> enable disable Description Trunk list. Example: Set trunk 1 multicast packet forwarding. namely. set trunk 1 multicast forward 246 Confidential and Proprietary Information of ZTE CORPORATION . set trunk multicast-filter Function: To enable/disable the trunk multicast packet filter. multicast packets are discarded. Disables the multicast packet filter. Enables the multicast packet filter. multicast packets are discarded. Example: Display the QoS configuration data of ports 1. 5.11 show port qos Function: To display the QoS configuration information about a port. Example: Display the configuration and working status of ports 1. Confidential and Proprietary Information of ZTE CORPORATION 247 . show port Function: To display port configuration and the working status. 6. show port 1.5-7.Chapter 10 . 5. and 1~16 on the ZXR10 2852S. 7 and 11.Command Reference Note that the range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. Mode: All modes Format: show port [<portlist>] Parameter: Parameter <portlist> Description Port list. 6. 7 and 11. Mode: All modes Format: show port <portlist> qos Parameter: Parameter <portlist> Description Port list. 5-7. show trunk 1. 5. 6. 7 and 11. Example: Display the configuration of trunks 1.5-7 248 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual show port 1. 6 and 7.5-7. 5. Example: Display the statistics data of ports 1.11 qos show port statistics Function: To display port statistics. Mode: All modes Format: show trunk [<trunklist>] Parameter: Parameter <trunklist> Description Trunk ID list. Mode: All modes Format: show port <portlist> statistics Parameter: Parameter <portlist> Description Port list.11 statistics show trunk Function: To display the trunk configuration. show port 1. Command Reference Port Mirroring set mirror add source-port Function: To add an ingress/egress mirroring port. Egress. Mode: Global configuration mode Format: set mirror add source-port <portlist> {ingress|egress} Parameter: Parameter <portlist> ingress egress Description Port list. Mode: Global configuration mode Format: set mirror {ingress|egress} Parameter: Parameter <portlist> Description Port list.12 egress set mirror delete source-port Function: To delete an ingress/egress mirroring port. 7 and 12. Example: Add the egress mirror of ports 1. set mirror add port 1.5-7. 6. 5. delete source-port <portlist> Confidential and Proprietary Information of ZTE CORPORATION 249 . Ingress.Chapter 10 . <portname> Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. Mode: All modes 250 Confidential and Proprietary Information of ZTE CORPORATION . Example: Delete the ingress mirror of ports 1. 5. 6.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter ingress egress Description Ingress.The switch supports one ingress monitoring port and one egress monitoring port. Mode: Global configuration mode Format: set mirror dest-port <portname> {ingress|egress} Parameter: Parameter Description A port number or port name. 1~26 on the ZXR10 2826S. 1~18 on the ZXR10 2818S. set mirror delete port 1. Example: Set an ingress monitoring port. Egress.12 ingress set mirror dest-port Function: To set an ingress/egress monitoring port.5-7. set mirror dest-port 1 show mirror Function: To display mirroring configuration information. 7 and 12. and 1~52 on the ZXR10 2852S. Example: Clear the names of VLAN 1. Confidential and Proprietary Information of ZTE CORPORATION 251 .Command Reference Format: show mirror VLAN Configuration clear vlan name Function: To clear a VLAN name.12 name create vlan name Function: To create a VLAN name. Mode: Global configuration mode Format: create vlan <1-4094> name <name> Parameter: Parameter <1-4094> Description VLAN ID. Mode: Global configuration mode Format: clear vlan <vlanlist> name Parameter: Parameter <vlanlist> Description VLAN list.5-7. 6. The range is 1~4094.Chapter 10 . 7 and 12. 5. clear vlan 1. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter Description VLAN name. Example: Set the PVID of ports 1. 6.5-7. 5. Mode: Global configuration mode Format: set port <portlist> pvid <1-4094> Parameter: Parameter <portlist> <1-4094> Description Port list. The range is 1~4094. set port 1.11 pvid 30 set trunk pvid Function: To set the PVID of a trunk. create vlan 1 name group1 set port pvid Function: To set the PVID of a port. Default VLAN ID. 7 and 11 to 30. Mode: Global configuration mode Format: set trunk < trunklist > pvid <1-4094> Parameter: 252 Confidential and Proprietary Information of ZTE CORPORATION . <name> Example: Set the name of vlan 1 to group1. 6. Enables the VLAN. 7 and 12. Mode: Global configuration mode Format: set vlan <vlanlist> {enable|disable} Parameter: Parameter <vlanlist> enable disable Description VLAN list. Disables the VLAN.12 enable set vlan add port Function: To add a port to a VLAN. set trunk 1-3 pvid 1000 Note that the range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. 5. The range is 1~4094.Chapter 10 . Example: Set the PVID of trunk 1. set vlan Function: To enable/disable a VLAN. set vlan 1.Command Reference Parameter < trunklist > <1-4094> Description Trunk list. Confidential and Proprietary Information of ZTE CORPORATION 253 . Default VLAN ID.5-7. 2 and 3 to 1000. and 1~16 on the ZXR10 2852S. Example: Enable VLAN 1. 254 Confidential and Proprietary Information of ZTE CORPORATION . 10 and 18 with tag to VLAN 1. “untag” is selected.12 add port 2. Example: Add ports 2. Does no tag. Trunk list. 8.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: Global configuration mode Format: set vlan <vlanlist> add port <portlist> [tag|untag] Parameter: Parameter <vlanlist> <portlist> tag untag Description VLAN list.8-10. By default. “untag” is selected. Attach a tag.5-7. Mode: Global configuration mode Format: set vlan <vlanlist> add trunk <trunklist> [tag|untag] Parameter: Parameter <vlanlist> <trunklist> tag untag Description VLAN list. set vlan 1.18 tag set vlan add trunk Function: To add the specified trunk to a VLAN. By default. 5. Attaches a tag. Does not tag. 9. Port list. 7 and 12. 6. 7 and 12. 10. Mode: Global configuration mode Format: set vlan <vlanlist> delete port <portlist> Parameter: Parameter <vlanlist> <portlist> Description VLAN list. set vlan 1.9-11.12 add trunk 1 tag set vlan delete port Function: To delete the specified port from a VLAN. 5.12 delete port 2.5-7. 7 and 12. 11 and 16 in VLAN 1.16 set vlan delete trunk Function: To delete the specified trunk from a VLAN.Chapter 10 . and 1~16 on the ZXR10 2852S. 6. Mode: Global configuration mode Format: set vlan <vlanlist> delete trunk <trunklist> Parameter: Parameter Description Confidential and Proprietary Information of ZTE CORPORATION 255 . Port list.Command Reference Note: The range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. 9. Example: Disable ports 2.5-7. 5. set vlan 1. Example: Add trunk 1 with tag to VLAN 1. 6. FID. Example: Set the FID of VLAN 1. 6. 6.12 delete trunk 1 Note that the range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. Example: Delete trunk 1 from VLAN 1. Trunk list.5-7. The range is 1~256.5-7. 7 and 12 to 1. 7 and 12. set vlan 1. Mode: Global configuration mode Format: set vlan <vlanlist> priority {off|on <0-7>} 256 Confidential and Proprietary Information of ZTE CORPORATION . and 1~16 on the ZXR10 2852S. 5.12 fid 1 set vlan priority Function: To set VLAN priority. Mode: Global configuration mode Format: set vlan <vlanlist> fid <1-256> Parameter: Parameter <vlanlist> <1-256> Description VLAN list. 5. set vlan 1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <vlanlist> <trunklist> Description VLAN list. set vlan fid Function: To set the FID of a VLAN. Command Reference Parameter: Parameter <vlanlist> off on <0-7> Description VLAN list. 6. 5. set vlan 1. Disables the VLAN priority.5-7. Value of the VLAN priority. Example 1: Display information about all VLANs. 6. 7 and 12.5-7. show vlan Example 2: Display information about VLAN 1. show vlan 1. Enables the VLAN priority. Example: Set the priority of VLAN 1. 5. Mode: All modes Format: show vlan [<vlanlist>] Parameter: Parameter <vlanlist> Description VLAN list.12 Confidential and Proprietary Information of ZTE CORPORATION 257 .12 priority on 3 show vlan Function: To display VLAN information. 7 and 12 to 3.Chapter 10 . xx. Priority value. FID.xx> fid <1-256> {port <portname>|trunk <trunkid>} [priority <0-7>] Parameter: Parameter <<xx.xx.00. A port number or port name.xx.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual MAC Address Table Configuration set fdb add Function: To add a static binding address to the address table. and 1~16 on the ZXR10 2852S. the ZXR10 Example 1: Add 00. 1~26 on the ZXR10 2826S. and set the FID to 1. and the priority value to 3.00. The range of parameter <trunkid> is 1~8 on 2609/2818S/2826S.xx.xx> <1-256> Description MAC address.00.00.xx. the port number to 1.22 fid 1 port 1 priority 3 258 Confidential and Proprietary Information of ZTE CORPORATION . 1~18 on the ZXR10 2818S. Mode: Global configuration mode Format: set fdb add <xx.00.xx. The range is 1~256.xx.00.22 to the address table. <portname> < trunkid > < 0-7 > Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. and 1~52 on the ZXR10 2852S.11.xx. Trunk ID.11. set fdb add 00. set fdb add 00.xx. The range is 15~3600. Example: Set the address aging time to 100s. and the port name to “userx”. the value is 240.00.11. set fdb agingtime 100 set fdb delete Function: To delete a record from the address table.00.00.00.11. Mode: Global configuration mode Format: set fdb delete <xx.00. set fdb add 00.00.xx.00.Command Reference Example 2: Add 00.xx. and set the FID to 1.00.22 to the address table.11.00. and set the FID to 1.xx> fid <1-256> Confidential and Proprietary Information of ZTE CORPORATION 259 .Chapter 10 .22 fid 1 trunk 1 set fdb agingtime Function: To set the address aging time. Mode: Global configuration mode Format: set fdb agingtime <15-3600> Parameter: Parameter <15-3600> Description Aging time.22 fid 1 port userx Example 3: Add 00.22 to the address table. and trunk to 1. By default.11.00.00.00. The unit is second.xx. 00.00. The range is 1~256.22 and the FID of 1 from the address table.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <xx. Mode: All modes 260 Confidential and Proprietary Information of ZTE CORPORATION .xx. set fdb delete 00.xx.xx.xx.xx.xx. of Example: Delete the fdb entry with the MAC address 00.00.xx.11.00.00.xx> <1-256> Description MAC address.22.00. Example: Set the fdb filter address to 00.22 fid 1 set fdb filter Function: To set the fdb filter address.00. set fdb filter 00.xx.xx> fid <1-256> Parameter: Parameter <xx.xx. FID. The range is 1~256.22 fid 1 show fdb Function: To display fdb information.xx.00.00.11.11. Mode: Global configuration mode Format: set fdb filter <xx. and the FID to 1.xx> <1-256> Description MAC address.00.xx.xx. FID.11.00.00. Command Reference Format: show fdb [static|dynamic|filter] [detail] Parameter: Parameter static dynamic filter detail: Description Displays the number of static fdb entries. Displays the number of static filter fdb entries. show fdb dynamic and show fdb dynamic detail commands. Displays details of a type of fdb entries. Mode: All modes Format: show fdb agingtime show fdb dynamic port Function: To display fdb information.Chapter 10 . show fdb detail. show fdb agingtime Function: To display the aging time of the fdb address table. Mode: All modes Format: show fdb dynamic port <portname> {detail} Parameter: Parameter Description A port number or port name. Displays details of a type of fdb entries. Note that the ZXR10 2852S does not support the show fdb. Displays the number of dynamic fdb entries. <portname> detail Confidential and Proprietary Information of ZTE CORPORATION 261 . xx> Parameter: Parameter <<xx. <portname> show fdb vlan Function: To display the fdb information about a VLAN. Mode: All modes Format: show fdb port <portname> Parameter: Parameter Description A port number. show fdb mac Function: To display the fdb information about a MAC address.xx.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Note that this command is available for the ZXR10 2852S only.xx. Mode: All modes Format: show fdb vlan <vlanname> 262 Confidential and Proprietary Information of ZTE CORPORATION . show fdb port Function: To display the fdb information about a port.xx.xx.xx.xx> Description MAC address.xx. Mode: All modes Format: show fdb mac <xx.xx.xx. A port number. LACP Configuration set lacp Function: To enable/disable the LACP.Command Reference Parameter: Parameter <vlanname> Description A VLAN ID or VLAN name.Chapter 10 . Note that the ZXR10 2852S does not support this command. Mode: Global configuration mode Format: set lacp {enable|disable} Parameter: Confidential and Proprietary Information of ZTE CORPORATION 263 . Mode: All modes Format: show fdb vlan <vlanname> port <portname> Parameter: Parameter <vlanname> Description A VLAN ID or VLAN name. <portname> Note that this command is available for the ZXR10 2852S only. show fdb vlan port Function: To display the fdb information about a VLAN. Mode: Global configuration mode Format: set lacp aggregator <trunkid> add port <portlist> Parameter: Parameter <trunkid> <portlist> Description Aggregation group number. Up to four ports can be aggregated. 5. set lacp aggregator add port Function: To add the specified port to an LACP aggregation group.5-7 Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. 6 and 7 to aggregation group 1. set lacp aggregator 1 add port 1. and 1~16 on the ZXR10 2852S. Example: Add ports 1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter enable disable Description Enables the LACP Disables the LACP. set lacp aggregator delete port Function: To delete the specified port from an LACP aggregation group. Port list. Mode: Global configuration mode Format: set lacp aggregator <trunkid> delete port <portlist> 264 Confidential and Proprietary Information of ZTE CORPORATION . The aggregation mode is static. set lacp aggregator 1 mode dynamic Confidential and Proprietary Information of ZTE CORPORATION 265 . set lacp aggregator mode Function: To set LACP aggregation mode. set lacp aggregator 1 delete port 1. 5. Mode: Global configuration mode Format: set lacp aggregator <trunkid> mode {dynamic|static | mixed } Parameter: Parameter <trunkid> static dynamic mixed Description Aggregation group number. and 1~16 on the ZXR10 2852S. 6 and 7 from aggregation group 1.Command Reference Parameter: Parameter <trunkid> <portlist> Description Aggregation group number.5-7 Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. Port list. The aggregation mode is dynamic. The aggregation mode is mixed. Example: Delete ports 1.Chapter 10 . Example: Set the LACP aggregation mode of aggregation group 1 to “dynamic”. 6 and 7 to active negotiation mode. set lacp port 1. The LACP port is in passive negotiation mode. The LACP port is in active negotiation mode. Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Note: The range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. Example: Set the LACP aggregation mode of ports 1.5-7 mode active set lacp port timeout Function: To set LACP port timeout status. set lacp port mode Function: To set LACP port aggregation mode. Mode: Global configuration mode Format: set lacp port <portlist> mode {active|passive} Parameter: Parameter <portlist> active passive Description Port list. and 1~16 on the ZXR10 2852S. 5. The port is in short timeout. Mode: Global configuration mode Format: set lacp port <portlist> timeout {long|short} Parameter: Parameter <portlist> short 266 Description Port list. 6 and 7 to long timeout. By default. 5. it is 32768. Mode: Global configuration mode Format: set lacp priority <1-65535> Parameter: Parameter <1-65535> Description Priority.Chapter 10 .Command Reference Parameter long Description The port is in long timeout. set lacp priority 100 show lacp Function: To display LACP configuration information. Example: Set the LACP priority to 100. Mode: All modes Format: show lacp show lacp aggregator Function: To display LACP aggregation group information. Example: Set aggregation ports 1. Confidential and Proprietary Information of ZTE CORPORATION 267 .5-7 timeout long set lacp priority Function: To set the LACP priority. set lacp port 1. The range is 1~65535. Mode: All modes Format: show lacp port [<portlist >] Parameter: Parameter <portlist> Description Port list. show lacp port 268 Confidential and Proprietary Information of ZTE CORPORATION . show lacp aggregator 1 show lacp port Function: To display information about an LACP aggregation port. Example 1: Display information about all LACP aggregation ports. Example 1: Display information about all LACP aggregation groups.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: All modes Format: show lacp aggregator [<trunkid>] Parameter: Parameter <trunkid> Description Aggregation group number. show lacp aggregator Example 2: Display information about LACP aggregation group 1. Mode: Global configuration mode Format: set igmp snooping {enable|disable} Parameter: Parameter enable disable Description Enables multicast snooping. Disables multicast snooping.Command Reference Example 2: Display information about LACP aggregation ports 1. set igmp snooping add vlan Function: To add a multicast snooping VLAN. Mode: Global configuration mode Format: set igmp snooping add vlan <vlanlist> Confidential and Proprietary Information of ZTE CORPORATION 269 . show lacp port 1.5-7 IGMP Snooping Configuration set igmp snooping Function: To enable/disable multicast snooping. 6 and 7. 5.Chapter 10 . 6. Mode: Global configuration mode Format: set igmp snooping delete vlan <vlanlist> 270 Confidential and Proprietary Information of ZTE CORPORATION . 7 and 12.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <vlanlist> Description VLAN list. set igmp snooping add vlan 1. Disables multi-VLAN multicast snooping. Example: Add multicast snooping VLAN 1. 5.12 set igmp snooping crossvlan Function: To enable/disable multi-VLAN multicast snooping.5-7. Mode: Global configuration mode Format: set igmp snooping crossvlan {enable|disable} Parameter: Parameter enable disable Description Enables multi-VLAN multicast snooping. Example: Enable multi-VLAN multicast snooping. set igmp snooping crossvlan enable set igmp snooping delete vlan Function: To delete a multicast snooping VLAN. set igmp snooping lastmember_query Function: To set last member query interval. Mode: Global configuration mode Format: set igmp snooping lastmember_query <10-250> Confidential and Proprietary Information of ZTE CORPORATION 271 .Command Reference Parameter: Parameter <vlanlist> Description VLAN list. 5.5-7. 7 and 12.Chapter 10 . Mode: Global configuration mode Format: set igmp snooping fastleave {enable|disable} Parameter: Parameter enable disable Description Enables fastleave. Example: Delete multicast snooping VLAN 1. Disables fastleave. 6.12 set igmp snooping fastleave Function: To enable/disable snooping fastleave. set igmp snooping delete vlan 1. Example: Set last member query interval to 10s. Enables multicast polling. Mode: Global configuration mode 272 Confidential and Proprietary Information of ZTE CORPORATION . snooping query vlan <vlanlist> Example: Enable multicast polling for VLAN 1. By default. 7 and 12. Disables multicast polling. set igmp snooping lastmember_query 100 set igmp snooping query vlan Function: To enable/disable multicast polling for a VLAN. it is 10 (1s). The unit is 1/10 second.12 enable set igmp snooping query_interval Function: To set a query interval.7. set igmp snooping query vlan 1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <10-250> Description Last member query interval. It only includes multicast VLANs. Mode: Global configuration mode Format: set igmp {enable|disable} Parameter: Parameter <vlanlist> enable disable Description VLAN list. Chapter 10 - Command Reference Format: set igmp snooping query_interval <10-2147483647> Parameter: Parameter <10-2147483647> Description The query interval. The unit is 1/10 second. By default, it is 1250 (125s). Example: Set the query interval to 100s. set igmp snooping query_interval 1000 set igmp snooping response_interval Function: To set the query response interval. Mode: Global configuration mode Format: set igmp snooping response_interval <10-250> Parameter: Parameter <10-250> Description The query response interval. The unit is 1/10 second. By default, it is 100 (10s). Example: Set the query response interval to 12s. set igmp snooping response_interval 120 Confidential and Proprietary Information of ZTE CORPORATION 273 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set igmp snooping timeout Function: To set the multicast member/router timeout. Mode: Global configuration mode Format: set igmp {host|router} Parameter: Parameter <100-2147483647> host router Description Timeout time. The unit is 1/10 second. By default, it is 2600 (260s). Sets the member timeout. Sets the router timeout. snooping timeout <100-2147483647> Example: Set the multicast member timeout to 100s. set igmp snooping timeout 1000 host set igmp snooping vlan add group Function: To add a static multicast group to the specified VLAN. Mode: Global configuration mode Format: set <A.B.C.D> Parameter: Parameter <vlanname> <A.B.C.D> 274 igmp snooping vlan <vlanname> add group Description A VLAN ID or VLAN name. IP address. The range is 224.x.x.x~239.x.x.x, excluding 224.0.0.x. Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 - Command Reference Example 1: Add the static multicast group 230.40.44.167 to vlan 1. set igmp snooping vlan 1 add group 230.40.44.167 Example 2: Add the static multicast group 230.40.44.167 to the VLAN named “group1”. set igmp snooping vlan group1 add group 230.40.44.167 set igmp snooping vlan delete group Function: To delete a static multicast group from the specified VLAN. Mode: Global configuration mode Format: set igmp snooping vlan <vlanname> delete group <A.B.C.D> Parameter: Parameter <vlanname> <A.B.C.D> Description A VLAN ID or VLAN name. IP address. The range is 224.x.x.x~239.x.x.x, excluding 224.0.0.x. Example 1: Delete the static multicast group 230.40.44.167 from vlan 1. set igmp snooping vlan 1 delete group 230.40.44.167 Example 2: Delete the static multicast group 230.40.44.167 from the VLAN named “group1”. Confidential and Proprietary Information of ZTE CORPORATION 275 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set igmp snooping vlan group1 delete group 230.40.44.167 show igmp snooping Function: To display the multicast snooping configuration. Mode: All modes Format: show igmp snooping show igmp snooping vlan Function: To display multicast snooping results. Mode: All modes Format: show igmp snooping vlan [<vlanname> [host|router]] Parameter: Parameter <vlanname> host router Description A VLAN ID or VLAN name. Displays the member snooping results. Displays the router snooping results. Example 1: Display the multicast snooping results of all VLANs. show igmp snooping vlan Example 2: Display the multicast snooping results of vlan 1. show igmp snooping vlan 1 276 Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 - Command Reference Example 3: Display the multicast snooping results of the VLAN named “group1”. show igmp snooping vlan group1 Example 4: Display the multicast router snooping results of vlan 1. show igmp snooping vlan 1 router MSTP Configuration clear stp instance Function: To delete an instance. Mode: Global configuration mode Format: clear stp instance <1-15> Parameter: Parameter <1-15> Description Instance number. The range is 0~15. Example: Delete instance 1. clear stp instance 1 clear stp name Function: To delete an STP area name. Confidential and Proprietary Information of ZTE CORPORATION 277 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: Global configuration mode Format: clear stp name set stp Function: To enable/display STP. By default, STP is disabled. Mode: Global configuration mode Format: set stp {enable|disable} Parameter: Parameter enable disable Description Enables STP. Disables STP. set stp agemax Function: To set the STP aging time. Mode: Global configuration mode Format: set stp agemax <6-40> Parameter: Parameter <6-40> Description STP aging time. The unit is second. Example: Set the STP aging time to 30s. set stp agemax 30 278 Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 - Command Reference set stp edge-port Function: To add/delete an STP edge port. Mode: Global configuration mode Format: set stp edge-port {add|delete} port <portlist> Parameter: Parameter <portlist> Description Port list. Example: Set port 1 as the STP edge port. set stp edge-port add port 1 set stp forceversion Function: To set the forced STP type to mstp/rstp/stp. Mode: Global configuration mode Format: set stp forceversion {mstp|rstp|stp} Parameter: Parameter mstp rstp stp Description Sets the forced STP type to mstp. Sets the forced STP type to rstp. Sets the forced STP type to stp. Example: Set the forced STP type to stp. set stp forceversion stp Confidential and Proprietary Information of ZTE CORPORATION 279 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set stp forwarddelay Function: To set the STP forwarding delay. Mode: Global configuration mode Format: set stp forwarddelay <4-30> Parameter: Parameter <4-30> Description STP forwarding delay. The unit is second. Example: Set the STP forwarding delay to 10s. set stp forwarddelay 10 set stp hellotime Function: To set the STP notification interval. Mode: Global configuration mode Format: set stp hellotime <1-10> Parameter: Parameter <1-10> Description STP notification interval. The unit is second. Example: Set the STP notification interval to 6s. set stp hellotime 6 280 Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 - Command Reference set stp hmd5-digest Function: To set the hmd5-digest value. Mode: Global configuration mode Format: set stp hmd5-digest <0x00..0-0xff..f> Parameter: Parameter <0x00..0-0xff..f> Description A 32-bit hexadecimal value. set stp hmd5-key Function: To set the hmd5-key value. Mode: Global configuration mode Format: set stp hmd5-key <0x00..0-0xff..f> Parameter: Parameter <0x00..0-0xff..f> Description A 32-bit hexadecimal value. set stp hopmax Function: To set the maximum hop count between any two terminals of the MST. Mode: Global configuration mode Format: set stp hopmax <1-40> Confidential and Proprietary Information of ZTE CORPORATION 281 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <1-40> Description Maximum hop count terminals of the MST. between any two Example: Set the maximum hop count between any two terminals of the MST to 30. set stp hopmax 30 set stp instance bridgeprio Function: To set the instance bridge priority. Mode: Global configuration mode Format: set stp instance <0-15> bridgeprio <0-61440> Parameter: Parameter <0-15> <0-61440> Description Instance number. The range is 0~15. Bridge priority. The range is 0~61440. Note that the priority shall be in multiples of 4096. If the inputted value is not in multiples of 4096, the system automatically converts the priority value to the nearest multiple of 4096. Example: Set the bridge priority in instance 1 to 4096. set stp instance 1 bridgeprio 4096 set stp instance port cost Function: To set the instance port cost. 282 Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 - Command Reference Mode: Global configuration mode Format: set stp instance <0-15> port <portname> cost <1200000000> Parameter: Parameter <0-15> Description Instance number. The range is 0~15. A port number. Post cost. <portname> <1-200000000> Note that the range of parameter <portname> is 1~9 on the ZXR10 2609, 1~18 on the ZXR10 2818S, 1~26 on the ZXR10 2826S, and 1~52 on the ZXR10 2852S. Example: Set the cost of port 1 in instance 1 to 20000. set stp instance 1 port 1 cost 20000 set stp instance port priority Function: To set the instance port priority. Mode: Global configuration mode Format: set stp instance <0-15> port <portname> priority <0255> Parameter: Parameter <0-15> Description Instance number. The range is 0~15. A port number. Priority. <portname> <0-255> Confidential and Proprietary Information of ZTE CORPORATION 283 ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Note that the range of parameter <portname> is 1~9 on the ZXR10 2609, 1~18 on the ZXR10 2818S, 1~26 on the ZXR10 2826S, and 1~52 on the ZXR10 2852S. Example: Set the priority of port 1 in instance 1 to 100. set stp instance 1 port 1 priority 100 set stp instance trunk cost Function: To set the instance trunk cost. Mode: Global configuration mode Format: set stp instance <0-15> trunk < trunkid > cost <1200000000> Parameter: Parameter <0-15> < trunkid > <1-200000000> Description Instance number. The range is 0~15. Trunk ID. Trunk cost. Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S, and 1~16 on the ZXR10 2852S. Example: Set the cost of trunk1 in instance 1 to 20000. set stp instance 1 trunk 1 cost 20000 set stp instance trunk priority Function: To set the instance trunk priority. Mode: Global configuration mode 284 Confidential and Proprietary Information of ZTE CORPORATION Command Reference Format: set stp instance <0-15> trunk < trunkid > priority <0255> Parameter: Parameter <0-15> < trunkid > <0-255> Description Instance number. and 1~16 on the ZXR10 2852S. Priority. Example: Set the priority of trunk1 in instance 1 to 100.Chapter 10 . set stp instance 1 trunk 1 priority 100 set stp instance vlan Function: To set the mapping relationship between the VLAN and instance. The range is 0~15. Example: Set the mapping relationship among instance 1 and vlan 1. Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. Confidential and Proprietary Information of ZTE CORPORATION 285 . Trunk ID. Mode: Global configuration mode Format: set stp instance <0-15>[add|delete] vlan <vlanlist> Parameter: Parameter <1-15> <vlanlist> Description Instance number. VLAN list. 5. 6. 7 and 12. The range is 0~15. set stp name education set stp port Function: To enable/disable STP on a port. Mode: Global configuration mode Format: set stp port <portlist> {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Mode: Global configuration mode Format: set stp name <name> Parameter: Parameter Description MST area name.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set stp instance 1 add vlan 1. Disables STP.5-7. Enables STP. <name> Example: Set the MST area name to education. 286 Confidential and Proprietary Information of ZTE CORPORATION .12 set stp name Function: To set an MST area name. Confidential and Proprietary Information of ZTE CORPORATION 287 . Mode: Global configuration mode Format: set stp port <portlist> linktype {point-point|shared} Parameter: Parameter <portlist> point-point shared Description Port list. Mode: Global configuration mode Format: set stp port <portlist> packettype {IEEE|CISCO|HUAWEI|HAMMER} Parameter: Parameter <portlist> IEEE CISCO HUAWEI HAMMER Description Port list. The port connection type is shared set stp port packettype Function: To set the port packet type. IEEE mode. Harbour mode. CISCO mode.Command Reference set stp port linktype Function: To set the port connection type. The port connection type is point-to-point.Chapter 10 . Huawei mode. Example: Set the MST version number to 10. 288 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: set stp revision <0-65535> Parameter: Parameter <0-65535> Description MST version number. The value range is 0~65535. set stp revision 10 set stp trunk Function: To enable/disable STP on a trunk. Mode: Global configuration mode Format: set stp relay {enable|disable} Parameter: Parameter enable disable Description Enables STP Relay Disables STP Relay set stp revision Function: To set the MST version number.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set stp relay Function: To enable/disable STP Relay. set stp trunk packettype Function: To the set trunk packet type. set stp trunk linktype Function: To set the trunk connection type. Confidential and Proprietary Information of ZTE CORPORATION 289 . Disables STP. Mode: Global configuration mode Format: set stp trunk < trunkid > linktype {point-point|shared} Parameter: Parameter < trunkid > point-point shared Description Trunk ID. Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. and 1~16 on the ZXR10 2852S. The trunk connection type is point-to-point.Chapter 10 . and 1~16 on the ZXR10 2852S.Command Reference Mode: Global configuration mode Format: set stp trunk <trunkid> {enable|disable} Parameter: Parameter < trunkid > enable disable Description Trunk ID. The trunk connection type is shared. Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S. Enables STP. Huawei mode. show stp Function: To display STP information. Harbour mode. CISCO mode. Note that the range of parameter <trunkid> is 1~8 on the ZXR10 2609/2818S/2826S.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: Global configuration mode Format: set stp trunk < trunkid > packettype {IEEE|CISCO|HUAWEI|HAMMER} Parameter: Parameter < trunkid > IEEE CISCO HUAWEI HAMMER Description Trunk ID IEEE mode. Mode: All modes Format: show stp show stp instance Function: To display STP instance information. Mode: All modes Format: show stp instance [<0-15>] Parameter: 290 Confidential and Proprietary Information of ZTE CORPORATION . and 1~16 on the ZXR10 2852S. 7 and 12. Example 1: Display information about all STP instances. show stp instance Example 2: Display information about STP instance 1.5-7.12 Confidential and Proprietary Information of ZTE CORPORATION 291 .Chapter 10 . Example 1: Display information about all STP ports. 6. show stp port 1. Mode: All modes Format: show stp port [<portlist>] Parameter: Parameter <portlist> Description Port list. 5. show stp instance 1 show stp port Function: To display STP port information. The range is 0~15. show stp port Example 2: Display information about STP ports 1.Command Reference Parameter <0-15> Description Instance number. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual show stp trunk Function: To display STP trunk information. 292 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: set qos queue-schedule {sp|wfq} Parameter: Parameter sp wfq Description Sp mode. Mode: All modes Format: show stp trunk < trunkid > Parameter: Parameter < trunkid > Description Trunk ID Example: Display information about STP trunk 1. show stp trunk 1 QoS Configuration set qos queue-schedule Function: To set the queue scheduling mode. Wfq mode. set qos queue-schedule sp set qos priority-map user-priority Function: To set the mapping of the 802. Mode: Global configuration mode Format: set qos priority-map user-priority <0-7> traffic-class <0-3> Parameter: Parameter <0-7> <0-3> Description Priority of the 802. Queue priority. set qos priority-map user-priority 3 traffic-class 2 set qos priority-map ip-priority Function: To set the mapping of a layer 3 DSCP priority to the queue priority. Example 1: Set the mapping of the 802.1P user priority into the queue priority.1P user priority into the queue priority 2.1P user. Mode: Global configuration mode Format: set qos priority-map ip-priority <0-63> traffic-class <0-3> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 293 .Command Reference Example: Set the queue scheduling mode to sp.Chapter 10 . set qos priority-map ip-priority 13 traffic-class 2 show qos queue-schedule Function: To display the qos queue configuration. Queue priority. Mode: All modes Format: show qos queue-schedule show qos priority-map Function: To display the mapping of the QoS 802.1P user priority into the queue priority and the mapping of the layer 3 DSCP priority into the queue priority.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <0-63> <0-3> Description Layer 3 DSCP priority. Example 1: Set the mapping of the layer 3 DSCP priority 13 into the queue priority 2. Mode: All modes Format: show qos priorty-map {user-priority|ip-priority} PVLAN Configuration set pvlan session Function: To add/delete an isolated/shared port to/from the PVLAN. Mode: All modes 294 Confidential and Proprietary Information of ZTE CORPORATION . The shared port. Adds an isolated port or a shared port. Mode: All modes Format: show pvlan Confidential and Proprietary Information of ZTE CORPORATION 295 . 1~18 on the ZXR10 2818S. 1~26 on the ZXR10 2826S. Deletes an isolated port or a shared port. only one PVLAN is supported. the session value must be 1. Port list. show pvlan Function: To display the PVLAN configuration. The isolated port.Chapter 10 . <portlist> Note that the range of parameter <portlist> is 1~9 on the ZXR10 2609. and 1~52 on the ZXR10 2852S. therefore.Command Reference Format: set pvlan session <id> {add|delete} {isolatedport|promiscuous-port} <portlist> Parameter: Parameter <id> add delete isolated-port |promiscuous-port Description At present. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual 802.1xrelay {enable|disable} Parameter: Parameter enable disable Description Enables the 802.1xrelay Function: To configuration. Mode: Global configuration mode Format: set 802.1x transparent transmission function. Disables the 802.1x transparent transmission function.1x Transparent Transmission Configuration set 802. Mode: All modes Format: show 802. show 802.1x transparent transmission function.1xrelay Function: To enable/disable the 802.1x relay display the 802.1x transparent transmission 296 Confidential and Proprietary Information of ZTE CORPORATION . xx> <0-63> Note that the IP address must be within the IP subnet of the specified IP port.22 1 1 Example 2: Add the static address resolution 10.00.22.22 1 group1 Confidential and Proprietary Information of ZTE CORPORATION 297 .xx. Layer 3 port number. layer 3 port 1 and the VLAN named “group1”. arp add 10. A VLAN ID or VLAN name.40.00.xx.xx.11.00.xx> <0-63> <vlanname> Description IP address. layer 3 port 1 and vlan 1.Chapter 10 .167.xx.167 00.xx.B.40. Example 1: Add the static address resolution 10.Command Reference Layer 3 Configuration arp add Function: To add the static address resolution.40.11. The VLAN ID must be a VLAN ID which is bound with this IP port.00.xx.11.00.44.00.00.167 00.xx. arp add 10.00.167.D> <xx.00.C.44.xx.40.00.22.D> <xx.11. MAC address 00.44.C. Mode: Layer 3 configuration mode Format: arp <vlanname> Parameter: Parameter <A.B. add <A.44. MAC address 00. MAC address.00.00. arp delete 10. 298 Confidential and Proprietary Information of ZTE CORPORATION .B. By default.40. Timeout time.D> Parameter: Parameter <A. Mode: Layer 3 configuration mode Format: arp ipport <0-63> timeout <1-1000> Parameter: Parameter <0-63> <1-1000> Description A layer 3 port number. Example: Set the timeout time of layer 3 port 1 to 100 minutes.C. Example: Delete the static address resolution of 10. it is 10 minutes.44.44.167.D> Description IP address.40.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual arp delete Function: To delete the static address resolution. The unit is minute.B.C.167 arp ipport timeout Function: To set the layer 3 port timeout time. Mode: Layer 3 configuration mode Format: arp delete <A. 00.D> <vlanname> Description A layer 3 port number. A VLAN ID or VLAN name.00. The command restores the default values of the port (IP address: 0.C.C.D> <A.D>}|vlan <vlanname>] Parameter: Parameter <0-63> <A.D/M>|<A. MAC address: 00.C. bound VLAN: vlan 0).Chapter 10 .0. Mode: Layer 3 configuration mode Format: clear arp Note that this command is used to delete all ARP information from the switch. clear ipport Function: To delete the ipport configuration.D/M> <A. IP address and mask. Note that the command for clearing the IP port configuration is used when the port is down.00. Mode: Layer 3 configuration mode Format: clear ipport <0-63> [mac|ipaddress {<A. IP address/mask.0. Example 1: Delete the configuration of layer 3 port 1.B. Confidential and Proprietary Information of ZTE CORPORATION 299 .C.C.B.00.B.B. Use this command with caution.Command Reference arp ipport 1 timeout 100 clear arp Function: To delete all ARP information.B.0.00. 255.0 of layer 3 port 1. Mode: Layer 3 configuration mode Format: clear iproute [{<A.40. clear ipport 1 mac Example 3: Delete the IP address 10.D/M> Description IP address and mask.255.C.40.C.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual clear ipport 1 Example 2: Delete the MAC address of layer 3 port 1. clear ipport 1 vlan group1 clear iproute Function: To delete a static route.B.255.44.D>] Parameter: Parameter <A.D> <A.44.44.167 255.C.167/24 clear ipport 1 ipaddress 10. clear ipport 1 ipaddress 10. 300 Confidential and Proprietary Information of ZTE CORPORATION .D>} <A.B.D/M>|<A.0 Example 4: Delete vlan1 of layer 3 port 1.40.167 and the mask 255. clear ipport 1 vlan 1 Example 5: Delete the VLAN named “group1” of layer 3 port 1.B.255.B.C.C.B. 255 and the metric 3.D/M>|<A.0/24 and the gateway at 10.40.C.C. it is 0.40.B.C.D> < A. Confidential and Proprietary Information of ZTE CORPORATION 301 .D>} < A.B.255. Mode: Layer 3 configuration mode Format: iproute {<A.C.0/24 10.12 iproute Function: To add a static route.40.44.40. Example: Add a static route to the network (10. Note that this command can delete all configured static routes.255.B.40. IP address/mask/gateway.40.0/24).B.B.D/M> <A. clear iproute Example 2: Delete the static route to the network at 10.Chapter 10 . clear iproute 10.12 clear iproute 10.D> [<0-15>] Parameter: Parameter <A. with the gateway at 10.44.Command Reference Parameter <A.0 10.40.D> Description IP address/mask/gateway.44.D> <0-15> Description IP address and mask.B.12. Metric. By default.44.44. Example 1: Delete all static routes.44. and the deleted routes cannot be restored.C.0 255.44.40.C.C.44.B. 40. the IP address and VLAN data of the port shall already be configured.40.44. You do not have to configure the MAC address. set ipport 1 enable Example 2: Disable layer 3 port 1.255.0 255.0 10. Disables a layer 3 port.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual iproute 10. Enables a layer 3 port.255 3 set ipport Function: To enable/disable a layer 3 port. 302 Confidential and Proprietary Information of ZTE CORPORATION .44. Note that to enable a layer-port.255.44.0/24 10.40. Example 1: Enable layer 3 port 1.40. Mode: Layer 3 configuration mode Format: set ipport <0-63> {enable|disable} Parameter: Parameter <0-63> enable disable Description Number of a layer 3 port.255 3 iproute 10. set ipport 1 disable set ipport ipaddress Function: To set the IP address and mask of a layer 3 port.44. Confidential and Proprietary Information of ZTE CORPORATION 303 .C.xx. you can use this command to replace the IP address with a new one.C.0 set ipport mac Function: To set the MAC address of a layer 3 port.xx.D/M>|<A.B.B. Example: Set the IP address of layer 3 port 1 to 10.40. Mode: Layer 3 configuration mode Format: set ipport <0-63> mac <xx.D/M> <A.44.167/24 set ipport 1 ipaddress 10.255. MAC address.xx.255.40.D>} Parameter: Parameter <0-63> <A. and the mask to 255.44.D> Description Number of a layer 3 port.C.255. IP address/mask.xx. set ipport 1 ipaddress 10.D> < A.Command Reference Mode: Layer 3 configuration mode Format: set ipport <0-63> ipaddress {<A.xx> Parameter: Parameter <0-63> <xx.167 255. Note: If an IP port is already configured with an IP address.xx> Description Number of a layer 3 port.167.Chapter 10 .B.B.C.xx.0. IP address and mask.C.xx.xx.xx.B.44.40.255. A VLAN ID or VLAN name.ff.f0.00.d0. If an IP port is already configured with a MAC address.d0. set ipport 1 vlan 1 Example 2: Set the VLAN named “group1” bound with layer 3 port 1.f0.f0.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Note: The range of the MAC address is from 00.ff.d0.d0. set ipport 1 vlan group1 304 Confidential and Proprietary Information of ZTE CORPORATION .d0. you can use this command to replace the VLAN value with a new one. If this item is not configured.11. the MAC address is the MAC address of the switch. Example: Set the MAC address of layer 3 port 1 to 00.22.00 to 00. you can use this command to replace the MAC address with a new one. Mode: Layer 3 configuration mode Format: set ipport <0-63> vlan <vlanname> Parameter: Parameter <0-63> <vlanname> Description Number of a layer 3 port. Example 1: Set vlan 1 bound with layer 3 port 1.ff.11.d0.d0. set ipport 1 mac 00.22 set ipport vlan Function: To set the VLAN bound with a layer 3 port. Note that if an IP port is bound with a VLAN.d0. IP address Example 1: Display information about all ARPs. show arp Example 2: Display invalid ARP information. show arp ipaddress 10.C. show arp invalid Example 3: Display the static ARP information about layer 3 port 1.44. Mode: All modes Format: show arp [static|dynamic|invalid|ipport <0-63> {static|dynamic|invalid} |ipaddress <A.C.40.B.D> Description Number of a layer 3 port.Command Reference show arp Function: To display the ARP information.44.D>] Parameter: Parameter <0-63> <A.167 Confidential and Proprietary Information of ZTE CORPORATION 305 .B.167.Chapter 10 .40. show arp ipport 1 static Example 4: Display the ARP information about the IP address 10. Example 1: Display information about all layer 3 ports. show ipport Example 2: Display information about layer 3 port 1. show ipport 1 show iproute Function: To display all static routes. Mode: All modes Format: show ipport [<0-63>] Parameter: Parameter <0-63> Description Number of a layer 3 port.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual show ipport Function: To display the layer 3 port information. Mode: All modes Format: show iproute 306 Confidential and Proprietary Information of ZTE CORPORATION . Chapter 10 . Disables the port accounting.Command Reference Access Service Configuration aaa-control port accounting Function: To enable/disable the port accounting. Enables the dot1x access to the port.1x access to a port. Confidential and Proprietary Information of ZTE CORPORATION 307 . Disables the dot1x access to the port. aaa-control port dot1x Function: To enable/disable the 802. Enables the port accounting. Mode: NAS mode Format: aaa-control port <portlist> accounting {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Mode: NAS mode Format: aaa-control port <portlist> dot1x {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. <1-3600> 308 Confidential and Proprietary Information of ZTE CORPORATION . By default. aaa-control port keepalive period Function: To set the abnormal offline test period of a port. Mode: NAS mode Format: aaa-control port <portlist> keepalive {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Enables the abnormal offline test of the port. Disables the abnormal offline test of the port. it is 10 seconds. Mode: NAS mode Format: aaa-control port <portlist> keepalive period <1-3600> Parameter: Parameter <portlist> Description Port list.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual aaa-control port keepalive Function: To enable/disable the abnormal offline test of a port. The abnormal offline test period of the port. The unit is second. Mode: NAS mode Format: aaa-control port <portlist> max-hosts <0-64> Parameter: Parameter <portlist> Description Port list. port <portlist> multiple-hosts Confidential and Proprietary Information of ZTE CORPORATION 309 . it indicates that the number of subscribers with access to the port is not restricted. In this case. the number of accessed subscribers is restricted by the maximum number of subscribers that are allowed for access to the switch. By default. aaa-control port multiple-hosts Function: To enable/disable the multi-subscriber access to a port. Enables the multi-subscriber access to a port. Disables the multi-subscriber access to a port. it is 0. <0-64> Note that if the maximum number of accessed subscribers is 0.Chapter 10 . Mode: NAS mode Format: aaa-control {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Maximum number of accessed subscribers.Command Reference aaa-control port max-hosts Function: To set the maximum number of accessed subscribers. The automatic authentication mode is used. Mode: NAS mode Format: aaa-control port <portlist> protocol {pap|chap|eapmd5} Parameter: Parameter <portlist> pap: chap: eap-md5 310 Description Port list. It is the default mode. Mode: NAS mode Format: aaa-control port <portlist> port-mode {auto|forceunauthorized| force-authorized} Parameter: Parameter <portlist> auto force-unauthorized force-authorized Description Port list.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual aaa-control port port-mode Function: To set the authentication control mode of a port. The forced authentication mode is used. It is Confidential and Proprietary Information of ZTE CORPORATION . The port authentication mode is chap. aaa-control port protocol Function: To set the authentication mode of a port. The port authentication mode is pap. The port authentication mode is eap-md5. The forced un-authentication mode is used. Confidential and Proprietary Information of ZTE CORPORATION 311 . it is 60 seconds. dot1x quiet-period Function: To set the interval between one authentication failure and the next authentication request being received by the authentication system. By default. The unit is second.Chapter 10 . Mode: NAS mode Format: dot1x max-request <1-10> Parameter: Parameter <1-10> Description Timeout retransmission times. By default.Command Reference Parameter Description the default authentication mode. it is 2. Mode: NAS mode Format: dot1x quiet-period <0-65535> Parameter: Parameter <0-65535> Description Time interval. dot1x max-request Function: To set the timeout retransmission times for the authentication system to receive challenge response from the client system. Mode: NAS mode 312 Confidential and Proprietary Information of ZTE CORPORATION . dot1x re-authenticate period Function: To set the re-authentication period. By default. Disables the re-authentication mechanism. The unit is second. Mode: NAS mode Format: dot1x re-authenticate {enable|disable} Parameter: Parameter enable disable Description Enables the re-authentication mechanism. dot1x server-timeout Function: To set the timeout time for the authentication system to received data packets from the authentication server. it is 3600 seconds.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual dot1x re-authenticate Function: To enable/disable the re-authentication mechanism. Mode: NAS mode Format: dot1x re-authenticate period <1-4294967295> Parameter: Parameter <1-4294967295> Description Time interval. By default. it is 30 seconds. dot1x tx-period Function: To set the time for the authentication system waits for retransmitting EAPOL data packets when it cannot receive response from the client system. Mode: NAS mode Format: dot1x tx-period <1-65535> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 313 .Command Reference Format: dot1x server-timeout <1-65535> Parameter: Parameter <1-65535> Description Time interval. dot1x supplicant-timeout Function: To set the timeout time for the authentication system to received data packets from the authentication client system. it is 30 seconds. Mode: NAS mode Format: dot1x supplicant-timeout <1-65535> Parameter: Parameter <1-65535> Description Time interval. By default. The unit is second. The unit is second.Chapter 10 . Mode: NAS mode Format: clear client index <0-63> Parameter: Parameter <0-63> Description User number. clear client Function: To delete all users of a client.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <1-65535> Description Time interval. clear client port Function: To delete a client user on a port. Mode: NAS mode Format: clear client clear client index Function: To delete a user of a client. it is 30 seconds. By default. Mode: NAS mode Format: clear client port <portlist> Parameter: 314 Confidential and Proprietary Information of ZTE CORPORATION . The unit is second. Confidential and Proprietary Information of ZTE CORPORATION 315 .Command Reference Parameter <portlist> Description Port list. Adds an ISP. radius isp Function: To add/delete an ISP. clear client vlan Function: To delete all client users on a VLAN.Chapter 10 . Mode: NAS mode Format: radius isp <ispname> {enable|disable} Parameter: Parameter <ispname> enable disable Description ISP domain name. Mode: NAS mode Format: clear client vlan <vlantlist> Parameter: Parameter <vlanlist> Description VLAN list. Deletes an ISP. D> [<0-65535>] Parameter: Parameter <ispname> <A.C. The UDP port the authentication server.C. By default.B.B. By default. it is 1813.D> <0-65535> Description ISP domain name.B.C. The UDP port of the accounting server. it is 1812. Mode: NAS mode Format: radius isp <ispname> add accounting <A. radius isp add authentication Function: To add an authentication server to the domain.C.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual radius isp add accounting Function: To add an accounting server to the domain. IP address. Mode: NAS mode Format: radius isp <ispname> add authentication <A. 316 Confidential and Proprietary Information of ZTE CORPORATION .B.D> <0-65535> Description ISP domain name.D> [<065535>] Parameter: Parameter <ispname> <A. IP address. radius isp delete authentication Function: To delete an authentication server from a domain.B.C.C.Chapter 10 . Mode: NAS mode Format: radius isp <ispname> defaultisp {enable|disable} Parameter: Parameter <ispname> enable disable Description ISP domain name.D> Description ISP domain name.Command Reference radius isp defaultisp Function: To set/cancel a domain as a default domain. Mode: NAS mode Confidential and Proprietary Information of ZTE CORPORATION 317 . radius isp delete accounting Function: To delete an accounting server from a domain. IP address. Cancels the ISP domain as the default ISP domain. Sets the ISP domain as the default ISP domain.B.D> Parameter: Parameter <ispname> <A. Mode: NAS mode Format: radius isp <ispname> delete accounting <A. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Format: radius isp <ispname> delete authentication <A. radius isp description Function: To configure the domain description. Mode: NAS mode Format: radius isp <ispname> description <string> Parameter: Parameter <ispname> Description ISP domain name.B.B. IP address. <string> radius isp client Function: To set the radius client address.C.D> Parameter: Parameter <ispname> 318 Description ISP domain name.D> Description ISP domain name. Mode: NAS mode Format: radius isp <ispname> client <A.D> Parameter: Parameter <ispname> <A.C. ISP domain description. Confidential and Proprietary Information of ZTE CORPORATION .C.B. Chapter 10 .B.D> Description IP address. Enables the full account of the ISP domain. radius isp fullaccount Function: To specify/cancel the full account for a domain.C. Mode: NAS mode Format: radius isp <ispname> sharedsecret <string> Parameter: Parameter <ispname> Description ISP domain name.Command Reference Parameter <A. Disables the full account of the ISP domain. Mode: NAS mode Format: radius isp <ispname> fullaccount {enable|disable} Parameter: Parameter <ispname> enable disable Description ISP domain name. Shared password. radius isp sharedsecret Function: To configure the shared password of a domain. <string> Confidential and Proprietary Information of ZTE CORPORATION 319 . By default. Mode: NAS mode Format: radius retransmit <1-255> Parameter: Parameter <1-255> Description Retransmission times. Mode: NAS mode Format: radius timeout <1-255> 320 Confidential and Proprietary Information of ZTE CORPORATION . Mode: NAS mode Format: radius nasname <nasname> Parameter: Parameter <nasname> Description NAS name. radius retransmit Function: To set the retransmission times of remote authentication requests.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual radius nasname Function: To set the NAS name. it is 3. radius timeout Function: To set the retransmission interval of remote autehnticaiton requests. Command Reference Parameter: Parameter <1-255> Description Retransmission interval. show aaa-control port Function: To display the configuration information about the AAA control policy. Mode: All modes Format: show aaa-control port [<portlist>] Parameter: Parameter <portlist> Description Port list. Mode: All modes Format: show dot1x show client Function: To display information about all accessed users. it is 3 seconds. show dot1x Function: To display the dot1x configuration information. Mode: All modes Format: show client Confidential and Proprietary Information of ZTE CORPORATION 321 . By default.Chapter 10 . The unit is second. xx. Mode: All modes Format: show client index <0-63> Parameter: Parameter Description User number.xx.xx.xx. <0-63> show client mac Function: To display the user access information about a MAC address.xx.xx > Description MAC address. Mode: All modes Format: show client mac <xx. show client port Function: To display the user access information about a port.xx> Parameter: Parameter <xx. Mode: All modes Format: show client port <portlist> 322 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual show client index Function: To display information about an accessed user.xx.xx.xx. Command Reference Parameter: Parameter <portlist> Description Port list. <ispname> QinQ Configuration set qinq customer port Function: To add/delete a customer port. Confidential and Proprietary Information of ZTE CORPORATION 323 . Mode: All modes Format: show radius [<ispname>] Parameter: Parameter Description ISP domain name.Chapter 10 . Mode: Global configuration mode Format: set qinq customer port <portlist> {enable|disable} Parameter: Parameter <portlist> Description Port list. show radius Function: To display the RADIUS configuration information. 2.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example: Set ports 1. Mode: Global configuration mode Format: set qinq tpid <tpid> Parameter: Parameter <tpid> Description The external label value (0xaaaa) used in QinQ. Example: Set the tpid of the external layer label to 0x8910. 3 and 4 as customer ports. 324 Confidential and Proprietary Information of ZTE CORPORATION . set qinq customer port 1-4 enable set qinq tpid Function: To set the tpid of the external layer label. set qinq tpid 0x8910 set qinq uplink port Function: To add/delete an uplink port. Mode: Global configuration mode Format: set qinq uplink port <portlist> {enable|disable} Parameter: Parameter <portlist> Description Port list. Example: Display the QinQ configuration information. Mode: Global configuration mode Format: clear remote-access all clear remote-access ipaddress Function: To delete a remote-access IP address. Confidential and Proprietary Information of ZTE CORPORATION 325 .Command Reference Example: Set port 24 as an uplink port.Chapter 10 . Mode: All modes Format: show qinq Parameter: None. show qinq Remote-access Configuration clear remote-access all Function: To delete all remote-access IP addresses. set qinq uplink port 24 enable show qinq Function: To display the QinQ configuration information. B.C.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: Global configuration mode Format: clear remote-access ipaddress <A.C. set remote-access Function: To set remote access through Telnet. set remote-access ipaddress Function: To set the IP address for remote access through Telnet.D> [<A. It indicates that only the specific IP address is available for access to the switch through Telnet.D>] Parameter: Parameter <A.D> [<A.C.B.B. Mode: Global configuration mode Format: set remote-access {any|specific} Parameter: Parameter any specific Description It indicates that any IP address is available for access to the switch through Telnet.D> Description IP address.C.D>] Parameter: 326 Confidential and Proprietary Information of ZTE CORPORATION .C. Mode: Global configuration mode Format: set remote-access ipaddress <A.B.B. Mode: Global configuration mode Format: set ssh {enable|disable} Parameter: Parameter enable disable Description Enables the SSH function.B. Mode: All modes Confidential and Proprietary Information of ZTE CORPORATION 327 . show ssh Function: To display the SSH configuration and status. Mode: All modes Format: show remote-access SSH Configuration set ssh Function: To enable/disable the SSH function.Command Reference Parameter <A.Chapter 10 .D> Description IP address and mask.C. show remote-access Function: To display remote-access information. Disables the SSH function. D> Parameter: 328 Confidential and Proprietary Information of ZTE CORPORATION . Mode: SNMP configuration mode Format: clear traphost <A. Mode: SNMP configuration mode Format: clear community <name> Parameter: Parameter Description Community name.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Format: show ssh SNMP Configuration clear community Function: To delete a community name. clear community seu clear traphost Function: To delete the traphost. <name> Example: Delete the community name seu.C.B. 44. Mode: SNMP configuration mode Format: clear view <name> Parameter: Parameter Description View name.B. Example: Delete the traphost at 10.Command Reference Parameter <A.Chapter 10 .40.40.D> Description IP address.C.167. Mode: SNMP configuration mode Format: create community <name> {public|private} Parameter: Confidential and Proprietary Information of ZTE CORPORATION 329 . <name> Example: Delete the view name “school”. clear traphost 10. clear view school create community Function: To create a community name and set the authority.44.167 clear view Function: To delete a view name. create view school exclude 1.6.19.2.6. create community seu private create view Function: To create a view name and determine whether the view contains a mib subtree.2.19.3.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter Description Community name. Example: Create the view name “school”. The attribute of the community name is readwrite.6.3. <name> public private Example: Create a community name “seu” with the read-write attribute. excluding 1. Information path. the view contains 1.2. Mode: SNMP configuration mode Format: create view <name> [{include|exclude} <mib-oid>] Parameter: Parameter Description View name.2 330 Confidential and Proprietary Information of ZTE CORPORATION . <name> <mib-oid> Note: If “{include|exclude} <mib-oid>” is not specified. The attribute of the community name is readonly.3.1 by default. cluster topology change and cluster member Up/Down of the SNMP. link setup. cold start. The link is set up. Mode: SNMP configuration mode Format: set trap {linkdown|linkup|authenticationfail|coldstart|warmstart |topologychange|memberupdown} {enable|disable} Parameter: Parameter linkdown linkup Description The link is down.Chapter 10 . Mode: SNMP configuration mode Format: set community <name> view <name> Parameter: Parameter Description Community name/view name. <name> Example: Set the view “school” which contains seu. Confidential and Proprietary Information of ZTE CORPORATION 331 . link authentication failure. hot start.Command Reference set community view Function: To specify that the view contains the specified community name. set community seu view school set trap Function: To enable/disable such traps as link interruption. 167. and the version number to 2. Topology Change.C.44.D> Description IP address. Disables trap.B.167 seu 2 332 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter authenticationfail coldstart warmstart topologychange memberupdown enable disable Description The link authentication fails. <name> <ver> Example: Set the IP address of the trap host to 10.D> <name> [<ver>] Parameter: Parameter <A. community name and version of the trap host. it is 1.40. set traphost 10. the community name to seu.C. Community name. Enables trap.B. Cold start. By default. set traphost Function: To set the IP address. Hot start.44. Version number. Member Up/Down. Mode: SNMP configuration mode Format: set traphost <A.40. Displays the snmp view information. Displays the snmp host information. show snmp Example 2: Display the configured SNMP host address. Confidential and Proprietary Information of ZTE CORPORATION 333 .Chapter 10 . Displays the snmp trap information. Mode: All modes Format: show snmp [community|view|trap|host] Parameter: Parameter community view trap host Description Displays the snmp community information. show snmp host RMON Configuration set alarm Function: To set an alarm group.Command Reference show snmp Function: To display SNMP information. Example 1: Display all SNMP information. Information path. The status of the alarm group is “invalid”. set alarm 10 interval 100 334 Confidential and Proprietary Information of ZTE CORPORATION . The status of the alarm group is “valid”. The status of the alarm group is “createRequest”. The sampling type of the alarm group is absolute value sampling. The status of the alarm group is “underCreation”. The sampling type of the alarm group is relative value sampling. <name> absolute delta rising falling both valid underCreati on createRequ est invalid Example 1: Set the time interval of the alarm instance with the index of 10 to 100s. The alarm group is triggered upon the falling of the data.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Mode: SNMP configuration mode Format: set alarm <1-65535> {interval <1-65535>|variable <mib-oid>|sampletype {absolute|delta}|startup {rising|falling|both}|threshold <1-65535> eventindex <165535> {rising|falling}|owner <name>|status {valid|underCreation|createRequest|invalid}} Parameter: Parameter <1-65535> <mib-oid> Description The index/time interval (unit: second)/peak value/event index of the alarm group. The alarm group is triggered upon the rising of the data. The alarm group is triggered upon the rising and falling of the data. Name of the owner. set alarm 10 startup rising Example 5: Specify that the alarm instance with the index of 10 triggers the event with index of 100 when the data rises up to 30.19.3.3.2.Chapter 10 .2 Example 3: Set the sampling type of the alarm instance with the index of 10 to delta.6. set alarm 10 sampletype delta Example 4: Set the alarm instance with the index of 10 which is triggered upon the rising of the data. set alarm 10 owner user1 Example 7: Set the status of the alarm instance with the index of 10 to “invalid”. set alarm 10 threshold 30000 eventindex 100 rising Example 6: Set the owner of the alarm instance with the index of 10 to “user1”. set alarm 10 status invalid Confidential and Proprietary Information of ZTE CORPORATION 335 .2.2.19.6. set alarm 10 variable 1.Command Reference Example 2: Set the sampling object of the alarm instance with the index of 10 to 1.000. The type of the event group is trap. The type of the event group is log and trap. <string> <name> none log snmptrap logandtrap valid underCreation createRequest invalid Example 1: Set the description of the event instance with the index of 10 to initial. The status of the event group is “valid”. set event 10 description initial Example 2: Set the type of the event instance with the index of 10 to log. The status of the event group is “invalid”. The status of the event group is “underCreation” The status of the event group is “createRequest”.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set event Function: To set an event group. Mode: SNMP configuration mode Format: set event <1-65535> {description <string>|type {none|log|snmptrap| logandtrap}|owner <name>|community <name>|status {valid|underCreation| createRequest|invalid}} Parameter: Parameter <1-65535> Description Index of the event group. The type of the event group is log. Name/community name of the owner. The type of the event group is none. Description. 336 Confidential and Proprietary Information of ZTE CORPORATION . Confidential and Proprietary Information of ZTE CORPORATION 337 .Chapter 10 . set event 10 status invalid set history Function: To set a history group.Command Reference set event 10 type log Example 3: Set the community name of the event instance with the index of 10 to seu. set event 10 community seu Example 4: Set the owner of the event instance with the index of 10 to tom. history group/value of the <portname> A port number or port name. set event 10 owner tom Example 5: Set the status of the event instance with the index of 10 to invalid. Mode: SNMP configuration mode Format: set history <1-65535> {datasource <portname>|bucketRequested <1-65535>|owner <name>|interval <1-3600>|status {valid|underCreation| createRequest|invalid}} Parameter: Parameter <1-65535> Description Index of the buckerRequest. Example 1: Set the data source of the history instance with the index of 10 to port 1. The status of the history group is “underCreation”. <name> <1-3600> valid underCreation createRequest invalid Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. 1~18 on the ZXR10 2818S. set history 10 bucketRequest 100 Example 4: Set the owner name of the history instance with the index of 10 to tom. set history 10 owner tom 338 Confidential and Proprietary Information of ZTE CORPORATION . The status of the history group is “invalid”. The status of the history group is “createRequest”. The time interval of the history group. and 1~52 on the ZXR10 2852S.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter Description Name of the owner. set history 10 datasource userx Example 3: Set the buckerRequest of the history instance with index of 10 to 100. The unit is second. 1~26 on the ZXR10 2826S. The status of the history group is “valid”. set history 10 datasource 1 Example 2: Set the data source of the history instance with the index of 10 to port userx. Chapter 10 . set history 10 status invalid set rmon Function: To enable/disable RMON.Command Reference Example 5: Set the time interval of the history instance with the index of 10 to 100s. Mode: SNMP configuration mode Format: set statistics <1-65535> {datasource <portname>|owner <name>|status {valid|underCreation|createRequest|invalid}} Parameter: Confidential and Proprietary Information of ZTE CORPORATION 339 . Mode: SNMP configuration mode Format: set rmon {enable|disable} Parameter: Parameter enable disable Description Enables RMON. set history 10 interval 100 Example 6: Set the status of the history instance with the index of 10 to invalid. Disables RMON. set statistics Function: To set a statistics group. Name of the owner. 1~26 on the ZXR10 2826S. and 1~52 on the ZXR10 2852S. Example 1: Set the data source of the statistics instance with the index of 10 to port 1.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <1-65535> Description Index of the statistics group. set statistics 10 owner tom Example 4: Set the status of the statistics instance with the index of 10 to invalid. set statistics 10 datasource 1 Example 2: Set the data source of the statistics instance with the index of 10 to port userx. <portname> <name> valid underCreation createRequest invalid Note that the range of parameter <portname> is 1~9 on the ZXR10 2609. 1~18 on the ZXR10 2818S. The status of the statistics group is “invalid”. The status of the statistics group is “createRequest”. The status of the statistics group is “valid”. set statistics 10 status invalid 340 Confidential and Proprietary Information of ZTE CORPORATION . The status of the statistics group is “underCreation”. set statistics 10 datasource userx Example 3: Set the owner name of the statistics instance with the index of 10 to tom. A port number or port name. Example 1: Display the RMON information about all alarm instances. Mode: All modes Format: show event [<1-65535>] Parameter: Parameter <1-65535> Description Index of the event group.Chapter 10 . Confidential and Proprietary Information of ZTE CORPORATION 341 . Mode: All modes Format: show alarm [<1-65535>] Parameter: Parameter <1-65535> Description Index of the alarm group. show alarm 10 show event Function: To display the event group configuration information. show alarm Example 2: Display the RMON information about the alarm instance with the index of 10.Command Reference show alarm Function: To display the alarm group configuration information. show event 10 show history Function: To display the history group configuration information. show event Example 2: Display the RMON information about the event instance with the index of 10. Example 1: Display the RMON information about all existing history instances. Mode: All modes Format: show history [<1-65535>] Parameter: Parameter <1-65535> Description Index of the history group. show history Example 2: Display the RMON information about the history instance with the index of 10. show history 10 342 Confidential and Proprietary Information of ZTE CORPORATION .ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example 1: Display the RMON information about all event instances. Mode: All modes Format: show rmon show statistics Function: To display the statistics group configuration information.Chapter 10 . Cluster Management Configuration erase member Function: To delete the configuration of member switches in the cluster.Command Reference show rmon Function: To display the RMON information. Mode: All modes Format: show statistics [<1-65535>] Parameter: Parameter <1-65535> Description Index of the statistics group. Mode: Cluster management configuration mode Format: erase member <idlist> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 343 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <idlist> Description ID of the member switch. Mode: Cluster management configuration mode Format: save member <idlist> Parameter: 344 Confidential and Proprietary Information of ZTE CORPORATION . Example: Delete the information bout the member switch with the ID of 2. reboot member 1 save member Function: To save the information about member switches in the cluster. Example: Restart the member switch with the ID of 1. erase member 2 reboot member Function: To start a member switch. Mode: Cluster management configuration mode Format: reboot member <idlist> Parameter: Parameter <idlist> Description ID of the member switch. Command Reference Parameter <idlist> Description ID of the member switch. Mode: Cluster management configuration mode Format: set group add mac <xx.xx. Mode: Cluster management configuration mode Format: set group add device <idlist> Parameter: Parameter <idlist> Description Device ID. save member 4 set group add device Function: To add a member device according to the device number. Example: Add the device with the device number of 3 to the cluster.xx> <1-255> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 345 . Example: Save the information about the member switch with the ID of 4. set group add device 3 set group add mac Function: To add a member according to the device MAC address and specify the member ID.Chapter 10 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <xx.C. Mode: Cluster management configuration mode Format: set group <A.B.f5 to the cluster and specify the member ID as 4.d0. specify the layer 3 port number and set the IP address pool for cluster management.C.D/M>} Parameter: Parameter <0-63> <A. Mode: Cluster management configuration mode Format: set group candidate set group commander ipport Function: To set a switch as the command switch.f2. commander ipport <0-63> {ip-pool Example: Set the command switch.f5 4 set group candidate Function: To set switches as candidate switches. Member ID. IP address and mask.2/24.D/M> Description Number of the layer 3 port.168. set group add mac f2. 346 Confidential and Proprietary Information of ZTE CORPORATION . Example: Add the device with the MAC address of 00.1.d0.xx.d0.B. specify the layer 3 port 3 for cluster management and set the IP address pool to 192.d0.xx> <1-255> Description The latter part of the MAC address. 168. Mode: Cluster management configuration mode Format: set group delete member <idlist> Parameter: Parameter <idlist> Description Member ID.2/24 set group delete member Function: To delete a member according to the member ID. Example: Delete a member according to the member ID. set group delete member 3 set group independent Function: To set switches as independent switches. Mode: Cluster management configuration mode Format: set group handtime <1-300> Confidential and Proprietary Information of ZTE CORPORATION 347 .1. Mode: Cluster management configuration mode Format: set group independent set group handtime Function: To set the time interval for automatic handshake between member switches and the command switch.Chapter 10 .Command Reference set group commander ipport 3 ip-pool 192. it is 80 seconds. By default. Example: Set the valid time for holding the information about the member switch configured by the command switch to 100 seconds. Mode: Cluster management configuration mode Format: set group holdtime <1-300> Parameter: Parameter <1-300> Description The valid time for holding the information about the member switch configured by the command switch. The unit is second. The unit is second. By default. set group handtime 10 set group holdtime Function: To set the valid time for holding the information about the member switch configured by the command switch. Example: Set the time interval for automatic handshake between the member switches and the command switch.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <1-300> Description Time interval for automatic handshake between member switches and the command switch. it is 8 seconds. set group holdtime 100 348 Confidential and Proprietary Information of ZTE CORPORATION . <name> Example: Set the cluster name to zte.168. Mode: Cluster management configuration mode Format: set group tftpsvr < A.200.D> Description IP address.200.168.B.Command Reference set group name Function: To set the cluster name.C. Example: Set the IP address of the TFTP server of the cluster to 192. set group tftpsvr 192. set group name zte set group tftpsvr Function: To specify the IP address of the TFTP server of the cluster.D> Parameter: Parameter <A.B.1 Confidential and Proprietary Information of ZTE CORPORATION 349 .1. Mode: Cluster management configuration mode Format: set group name <name> Parameter: Parameter Description Sets the cluster name.Chapter 10 .C. Mode: Cluster management configuration mode Format: set zdp holdtime <10-255> Parameter: Parameter <10-255> Description The time for saving ZDP packets sent by the device. Mode: Cluster management configuration mode Format: set zdp {enable|disable } Parameter: Parameter enable disable Description Enables the switch neighbor recovery function. set zdp port Function: To enable/disable the switch neighbor recovery function on a port.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set zdp Function: To enable/disable the switch neighbor discovery function. Disables the switch neighbor recovery function. By default. it is 180 seconds. Mode: Cluster management configuration mode 350 Confidential and Proprietary Information of ZTE CORPORATION . set zdp holdtime Function: To set the time for saving ZDP packets sent by the device. Disables the switch neighbor recovery function. By default. set zdp timer 70 Confidential and Proprietary Information of ZTE CORPORATION 351 . Example: Enable the switch neighbor recovery function on port 2. Enables the switch neighbor recovery function. The unit is second.Chapter 10 . set zdp port 2 enable set zdp timer Function: To set the time interval for sending ZDP packets. Example: Set the time interval for sending ZDP packets to 70 seconds. it is 60 seconds. Mode: Cluster management configuration mode Format: set zdp timer <5-255> Parameter: Parameter <5-255> Description Time interval for sending ZDP packets.Command Reference Format: set zdp port <portlist> {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Enables the switch neighbor recovery function. Disables the switch neighbor recovery function. and 1~16 on the ZXR10 2852S.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set zdp trunk Function: To enable/disable the switch neighbor recovery function on a trunk. set zdp trunk 2 enable set ztp Function: To enable/disable the topology information collection function of the switch. Example: Enable the switch neighbor recovery function on trunk 2. Note: The range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. Mode: Cluster management configuration mode Format: set zdp trunk <trunklist> {enable|disable} Parameter: Parameter <trunklist> enable disable Description Trunk list. Mode: Cluster management configuration mode Format: set ztp {enable|disable} Parameter: Parameter enable 352 Description Enables the topology information collection function of Confidential and Proprietary Information of ZTE CORPORATION . it is 200 milliseconds. Mode: Cluster management configuration mode Format: set zdp hop <1-128> Parameter: Parameter <1-128> Description Topology information collection range (hop count). By default.Chapter 10 . By default. Confidential and Proprietary Information of ZTE CORPORATION 353 . Mode: Cluster management configuration mode Format: set ztp hopdelay <1-1000> Parameter: Parameter <1-1000> Description Delay for the device to forward topology information collection packets. it is 4. set ztp hopdelay Function: To set the delay for the device to forward topology information collection packets.Command Reference Parameter Description the switch. The unit is millisecond. Disables the topology information collection function of the switch. disable set ztp hop Function: To set the topology information collection range (hop count). Enables the topology information collection function on a port. Mode: Cluster management configuration mode Format: set ztp portdelay <1-100> 354 Confidential and Proprietary Information of ZTE CORPORATION . set ztp hopdelay 400 set ztp port Function: To enable/disable the topology information collection function on a port. Mode: Cluster management configuration mode Format: set ztp port <portlist> {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Example: Enable the topology information collection function on port 2.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example: Set the delay for the device to forward topology information collection packets to 400 milliseconds. Disables the topology information collection function on a port. set ztp port 2 enable set ztp portdelay Function: To set the delay for the next port of the device to forward topology information collection packets. set ztp portdelay 40 set ztp timer Function: To set the time interval for starting the automatic topology information collection. Mode: Cluster management configuration mode Format: set ztp timer <0-65535> Parameter: Parameter <0-65535> Description Time interval.Command Reference Parameter: Parameter <1-100> Description Delay for the next port of the device to forward topology information collection packets. Example: Set the delay for the next port of the device to forward topology information collection packets to 40 milliseconds. set ztp timer 2 Confidential and Proprietary Information of ZTE CORPORATION 355 . The unit is minute.Chapter 10 . it is 20 milliseconds. The unit is millisecond. By default. Example: Set the time interval for starting the automatic topology information collection to 2 minutes. “0” indicates that the connection is not conducted. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual set ztp trunk Function: To enable/disable the topology information function of the switch on a trunk. Mode: Cluster management configuration mode Format: set ztp vlan <1-4094> Parameter: Parameter 356 Description Confidential and Proprietary Information of ZTE CORPORATION . Disables the topology information collection of the switch. Mode: Cluster management configuration mode Format: set ztp trunk <trunklist> {enable|disable } Parameter: Parameter <trunklist> enable disable Description Trunk list. Enables the topology information collection of the switch. Example: Enable the topology information collection function of the switch on trunk 2. and 1~16 on the ZXR10 2852S. Note: The range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. set zdp trunk 2 enable set ztp vlan Function: To specify that the topology information collection is conducted in a VLAN. Mode: All modes Format: show group show group candidate Function: To display information about candidate switches in the cluster.Command Reference Parameter <1-4094> Description VLAN ID. Mode: All modes Format: show group member <1-255> Parameter: Confidential and Proprietary Information of ZTE CORPORATION 357 . Mode: All modes Format: show group candidate show group member Function: To display information about member switches in the cluster. The range is 1~4094.Chapter 10 . the topology information collection is Example: Specify that conducted in vlan 40. set ztp vlan 40 show group Function: To display the cluster management information. ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter <1-255> Description ID of the member switch. Mode: All modes Format: show zdp show zdp neighbour Function: To display the neighbor device information detected by the ZDP protocol. Mode: All modes Format: show zdp neighbour {detail} show ztp Function: To display the configuration topology information collection protocol. Mode: All modes Format: show ztp information about the 358 Confidential and Proprietary Information of ZTE CORPORATION . Example: Display information about the switch with the cluster member ID of 6. show group member 6 show zdp Function: To display the ZDP configuration information about the switch. xx> Description The latter part of the MAC address. show ztp device 2 show ztp mac Function: To display the configuration information about the topology information collection protocol according to the MAC address of the device. Mode: All modes Format: set ztp mac <xx.Chapter 10 . Confidential and Proprietary Information of ZTE CORPORATION 359 .Command Reference show ztp device Function: To display the configuration about the topology information collection protocol according to the device number. Example: Display information about the device with the device number of 2 in the topology information collection results.xx. Mode: All modes Format: show ztp device <idlist> Parameter: Parameter <idlist> Description Device number.xx> Parameter: Parameter <xx.xx. d0. By default. Mode: Cluster management configuration mode Format: ztp start Single-port Loop Test set loopDetect blockDelay Function: To set the port blocking interval during the loop.f5 ztp start Function: To start the topology information collection procedure. Mode: Global configuration mode Format: set loopDetect blockDelay <1-1080> Parameter: Parameter <1-1080> Description Time interval. it is 5 minutes. set ztp mac f2. 360 Confidential and Proprietary Information of ZTE CORPORATION . The unit is minute. set loopDetect port Function: To enable/disable the port loop detection.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Example: Display the configuration information about the topology information collection protocol according to the MAC address of the device. Enables the port loop detection.Chapter 10 . set loopDetect trunk Function: To enable/disable the trunk loop detection. Mode: Global configuration mode Format: set loopDetect trunk <trunklist> {enable|disable} Confidential and Proprietary Information of ZTE CORPORATION 361 . Enables the port protection. Mode: Global configuration mode Format: set loopDetect port <portlist> protect {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Disables the port protection.Command Reference Mode: Global configuration mode Format: set loopDetect port <portlist> {enable|disable} Parameter: Parameter <portlist> enable disable Description Port list. Disables the port loop detection. set loopDetect port protect Function: To enable/disable the port protection in case of port loop. trunk <trunklist> protect Note that the range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. Enables the trunk protection. and 1~16 on the ZXR10 2852S. Disables the trunk protection. set loopDetect trunk protect Function: To enable/disable the trunk protection in case of trunk loop. 362 Confidential and Proprietary Information of ZTE CORPORATION . Mode: Global configuration mode Format: set loopDetect {enable|disable} Parameter: Parameter <trunklist> enable disable Description Trunk ID list. Enables the trunk loop detection. and 1~16 on the ZXR10 2852S.ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Parameter: Parameter <trunklist> enable disable Description Trunk ID list. Note that the range of parameter <trunklist> is 1~8 on the ZXR10 2609/2818S/2826S. Disables the trunk loop detection. Mode: All modes Format: show loopDetect Confidential and Proprietary Information of ZTE CORPORATION 363 .Command Reference show loopDetect Function: To display the port loop information.Chapter 10 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual This page is intentionally blank. 364 Confidential and Proprietary Information of ZTE CORPORATION . Appendix A Abbreviations Abbreviation ABR ACL AD ARP AS ASBR ATM BGP BOOTP BRD CHAP CIDR CLNP CLNS CoS CRC CRLDP CSN Full Name Area Border Router Access Control List Administrative Distance Address ResolutionProtocol Autonomous System Autonomous System Border Router Asynchronous Transfer Mode Border Gateway Protocol BOOTstrap Protocol Backup Designate Router Challenge Handshake Authentication Protocol Classless Inter-Domain Routing ConnectionLess Network Protocol ConnectionLess Network Sevice Class of Service Cyclic Redundancy Check Constraint based Routing Label Distribution Protocol Cryptographic Sequence Number Confidential and Proprietary Information of ZTE CORPORATION 365 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Abbreviation DHCP DIS DNS DR EBGP EGP ES FEC FIFO FPGA FSM FTP GBIC GRE ICMP IETF IGMP IGP IP ISO ISP LACP LAN LAPB LCP LDP Full Name Dynamic Host Configuration Protocol Designate IS Domain Name System Designate Router External Border Gateway Protocal External Gateway Protocol End System Forwarding Equivalence Class First In and First Out Field Programmable Gate Array Finite State Machine File Transfer Protocol Gigabit Interface Converter General Routing Encapsulation Internet Control Message Protocol Internet Engineering Task Force Internet Group Mangement Protocol Interior Gateway Protocol Internet Protocol International Organization for Standardization Internet Service Provider Link Aggregation Control Protocol Local Area Network Link Access Procedure Balanced Link Control Protocol Label Distribution Protocol 366 Confidential and Proprietary Information of ZTE CORPORATION . Abbreviations Abbreviation LSA LSP LSR MAC MD5 MED MIB MPLS MSTP MTU NAT NBMA NCP NIC NLRI NMS NSAP NSP NTP NVT OAM OSI OSPF PAP PAT PCM Full Name Link State Advertisement Link State PDU Label Switch Router Media Access Control Message Digest 5 MULTI_EXIT_DISC Management Information Base Multi-Protocol Label Switching Multiple Spanning Tree Protocol Maximum Transmission Unit Network Address Translation Non-Broadcast Multiple Access Network Control Protocol Network Information Center Network Layer Reachable Information Network Management System Network Service Access Point Network Service Provider Network Time Protocol Network Virtual Terminal Operation And Management Open Systems Interconnection Open Shortest Path First Passwork Authentication Protocol Port Address Translation Pulse Code Modulation Confidential and Proprietary Information of ZTE CORPORATION 367 .Appendix A . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Abbreviation PDU POS PPP PSNP QoS RARP RADIUS RFC RIP RLE RMON ROS RSTP RSVP SDH SDLC SMTP SNMP SNP SPF STP TCP TFTP ToS TELNET TTL Full Name Protocol Data Unit Packet over SDH Point-to-Point Protocol Partial Sequence Num PDU Quality of Service Reverse Address Resolution Protocol Remote Authentication Dial In User Service Request For Comments Routing Information Protocol Route lookup engine Remote Monitoring Router Operation System Rapid Spanning Tree Protocol Resource Reservation Protocol Synchronous Digital Hierarchy Synchronous Data Link Control Simple Mail Transfer Protocol Simple Network Management Protocol Sequence Num PDU Shortest Path First Spanning Tree Protocol Transmission Control Protocol Trivial File Transfer Protocol Type Of Service Telecommunication Network Protocol Time To Live 368 Confidential and Proprietary Information of ZTE CORPORATION . Appendix A .Abbreviations Abbreviation UDP VID VLSM VPN VRF VRRP WAN WWW ZGMP Full Name User Datagram Protocol VLAN Identifier Variable Length Subnet Mask Virtual Private Network Virtual Routing Forwarding Virtual Router Redundancy Protocol Wide Area Network World Wide Web Zte Group Manage Protocol Confidential and Proprietary Information of ZTE CORPORATION 369 . ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual This page is intentionally blank. 370 Confidential and Proprietary Information of ZTE CORPORATION . ................. 49 Figure 15 Rear Panel of the ZXR10 2818S/2826S (AC power supply) ................... 42 Figure 7 Front Panel of the ZXR10 2852S ....... 66 Figure 32 Cabling of a Convergence Switch ....................................................................................................................................................... 54 Figure 21 Fixing Equipment............................................................................ 45 Figure 9 SF-1FE-S15KSC sub-board ................................................ 46 Figure 10 SF-1FE-M02KSC sub-board ... 48 Figure 14 Rear Panel of the ZXR10 2818S/2826S (DC power supply) ....................................... 57 Figure 24 DC Power Cable.............Figures Figure 1 Typical Workgroup Networking Structure ........................................................................................................................................................... 41 Figure 6 Front Panel of the ZXR10 2826S ............... 50 Figure 17 Rear Panel of the ZXR10 2852S (AC power supply).............................................. 46 Figure 11 SF-2GE-2RJ45 Sub-board (FGEI) .......... 67 Confidential and Proprietary Information of ZTE CORPORATION 371 ......................................................... 35 Figure 3 ZXR10 2609/2818S/2826S/2852S Working Principle .......... 58 Figure 26 Structure of Network Cable ..................................... 57 Figure 25 Serial Port Configuration Cable .......................... 34 Figure 2 Typical Networking of MAN Broadband Access ............................ 59 Figure 27 Transverse English Label on Panels and Connectors .......................... 49 Figure 16 Rear Panel of the ZXR10 2852S (DC power supply) ................ 43 Figure 8 SF-1FE-S40KSC Sub-board . 47 Figure 13 SF-2GE-SFPRJ45 Sub-board (FGFE) ............................. 53 Figure 20 Installing Holders .......... 55 Figure 22 AC Power Cable.................................................. 52 Figure 19 Installing Flanges .......................... 62 Figure 28 Roll-type Self-cover Laser print Label Model II ............................................... 63 Figure 29 Transverse English Type I Label.................... 64 Figure 30 Pattern and Meanings of the Engineering Label on the Optical Fiber . 56 Figure 23 –48 Power Socket............................................... 64 Figure 31 Cabling of the Ethernet Switch in a Building............................ 50 Figure 18 Installing Plastic Feet ................................................................... 39 Figure 5 Front Panel of the ZXR10 2818S ......................... 38 Figure 4 Front Panel of the ZXR10 2609.............. 47 Figure 12 SF-2GE-2SFP Sub-board (FGFI) .............. .......................................... 148 Using PAP Mode for Identity Authentication ................................ 80 TFTPD Server Interface .......................................................... 165 SSH Configuration Example ..................................... 71 ZXR10 2609/2818S/2826S/2852S Configuration Modes ....... 155 Typical QinQ Networking ....................... 176 SSH Login Result ... 125 Network Topology for One-To-Many Communication. 173 Setting IP Address and Port Number of the SSH Server 174 Setting SSH Version Number ................ 70 Port Attribute Settings ........ 118 Example of VLAN Transparent Transmission .......................................... 153 Using CHAP Mode for Identity Authentication...............................ZXR10 2609/2818S/2826S/2852S Access Switch User’s Manual Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 Creating a Connection.... 154 Using EAP-MD5 Mode for Identity Authentication ................. 119 Example of LACP Configuration ................................................................................................................ 176 Cluster Management Networking ... 130 MSTP Topological Structure ... 78 Run the Telnet .............................. 132 PVLAN Configuration Example .................................................................................... 175 User Confirmation Required in the First Login ............... 92 Example of Overlapping VLAN ..................................................................... 190 372 Confidential and Proprietary Information of ZTE CORPORATION . 69 Connection Configuration Information ........... 144 Configuration Example of Static Route.......................... 91 Tftpd Settings Dialog Box .................. 189 Switch Role Changeover Rule........................................................... 79 Switch Remote Login Window ....... .................................................. xxvi 3 Safety Signs ............................................. 87 11 Default Settings of Port Parameters .......................................................................... 61 9 Temperature and Humidity Table ..................... 58 6 RJ45 Pinout of Straight-through Cable ..........................................................................................217 Confidential and Proprietary Information of ZTE CORPORATION 373 ...................................................... 36 5 Pinout of Serial Port Configuration Cable .................Tables Table Table Table Table Table Table Table Table Table Table Table Table 1 Typographical Conventions ............................................ 60 8 Fiber Types ..................................xxvii 4 Techincal Features and Parameters .................... 72 10 Functional keys ............................111 12 Maintenance and Test Period of the Ethernet Switch System ............... xxv 2 Mouse Operation Conventions .............................. 59 7 RJ45J Pinout of Crossover Cable ....................................205 Table 13 Parameter Description ......