ZXR105900ESeries - nova-minsk.comnova-minsk.com/ZTE/59E/SJ-20150114102049-002-ZXR10... ·...

ZXR10 5900E SeriesEasy-Maintenance MPLS Routing Switch

Configuration Guide (Basic Configuration)

Version: 3.00.11

ZTE CORPORATIONNo. 55, Hi-tech Road South, ShenZhen, P.R.ChinaPostcode: 518057Tel: +86-755-26771900Fax: +86-755-26770801URL: http://support.zte.com.cnE-mail: [email protected]

LEGAL INFORMATIONCopyright © 2014 ZTE CORPORATION.

The contents of this document are protected by copyright laws and international treaties. Any reproduction or

distribution of this document or any portion of this document, in any form by any means, without the prior written

consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by

contractual confidentiality obligations.

All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE

CORPORATION or of their respective owners.

This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions

are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose,

title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the

use of or reliance on the information contained herein.

ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications

covering the subject matter of this document. Except as expressly provided in any written license between ZTE

CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter

herein.

ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice.

Users may visit the ZTE technical support website http://support.zte.com.cn to inquire for related information.

The ultimate right to interpret this product resides in ZTE CORPORATION.

Revision History

Revision No. Revision Date Revision Reason

R1.0 2015–01–15 First edition

Serial Number: SJ-20150114102049-002

Publishing Date: 2015-01-15 (R1.0)

SJ-20150114102049-002|2015-01-15 (R1.0) ZTE Proprietary and Confidential

ContentsAbout This Manual ......................................................................................... I

Chapter 1 Usage and Operation................................................................ 1-11.1 Connection Modes ............................................................................................. 1-1

1.1.1 FTP Connection Configurations................................................................. 1-1

1.1.2 TFTP Connection Configuration ................................................................ 1-8

1.1.3 Serial Port Connection............................................................................ 1-10

1.1.4 Telnet Connection Configuration.............................................................. 1-13

1.1.5 SSH Connection Configuration................................................................ 1-20

1.2 Command Modes............................................................................................. 1-23

1.3 Online Help...................................................................................................... 1-25

1.4 Command History ............................................................................................ 1-27

Chapter 2 System Management ................................................................ 2-12.1 File System Management ................................................................................... 2-1

2.1.1 File System Management Overview........................................................... 2-1

2.1.2 Managing Files......................................................................................... 2-1

2.2 System Information State.................................................................................... 2-3

2.2.1 System Information State Overview........................................................... 2-3

2.2.2 System Parameter Configuration............................................................... 2-3

2.2.3 System Information Viewing...................................................................... 2-6

2.2.4 System Information State Configuration Examples ....................................2-11

2.3 Device Maintenance ......................................................................................... 2-15

2.3.1 Device Maintenance Overview ................................................................ 2-15

2.3.2 Device Maintenance Configuration .......................................................... 2-15

2.4 Version Upgrade .............................................................................................. 2-19

2.4.1 Version Upgrading Overview................................................................... 2-19

2.4.2 Version Upgrading.................................................................................. 2-20

2.5 VSC Configuration............................................................................................ 2-24

2.5.1 VSC Overview ....................................................................................... 2-24

2.5.2 Configuring the VSC System................................................................... 2-25

2.5.3 Maintaining VSC .................................................................................... 2-27

2.5.4 VSC Configuration Example.................................................................... 2-29

Chapter 3 Network Management............................................................... 3-13.1 SNMP Configuration........................................................................................... 3-1

I


3.1.1 SNMP Overview....................................................................................... 3-1

3.1.2 Configuring SNMP.................................................................................... 3-2

3.1.3 Maintaining SNMP.................................................................................... 3-8

3.1.4 SNMP Configuration Example................................................................. 3-12

3.2 NetFlow Configuration ...................................................................................... 3-13

3.2.1 NetFlow Overview .................................................................................. 3-13

3.2.2 Configuring NetFlow............................................................................... 3-15

3.2.3 Maintaining NetFlow............................................................................... 3-20

3.2.4 NetFlow Configuration Examples............................................................. 3-25

3.3 SFlow Configuration ......................................................................................... 3-28

3.3.1 SFlow Overview ..................................................................................... 3-28

3.3.2 Configuring SFlow.................................................................................. 3-29

3.3.3 Maintaining SFlow.................................................................................. 3-31

3.3.4 SFlow Configuration Examples................................................................ 3-31

3.4 SysLog Configuration ....................................................................................... 3-33

3.4.1 SYSLOG Overview................................................................................. 3-33

3.4.2 Configuring SYSLOG ............................................................................. 3-33

3.4.3 Maintaining Syslog ................................................................................. 3-34

3.4.4 SYSLOG Configuration Example............................................................. 3-35

3.5 Port Mirroring Configuration .............................................................................. 3-36

3.5.1 Port Mirroring Overview .......................................................................... 3-36

3.5.2 Configuring Port Mirroring ....................................................................... 3-37

3.5.3 Maintaining Port Mirroring ....................................................................... 3-39

3.5.4 Port Mirroring Configuration Example ...................................................... 3-39

3.6 Alarm Module................................................................................................... 3-41

3.6.1 Alarm Module Overview.......................................................................... 3-41

3.6.2 Configuring Alarm Module....................................................................... 3-41

3.6.3 Maintaining Alarm Module....................................................................... 3-44

3.7 Performance Management Module.................................................................... 3-46

3.7.1 Performance Management Module Overview ........................................... 3-46

3.7.2 Configuring the Performance Management Module .................................. 3-47

3.7.3 Maintaining the Performance Management Module .................................. 3-48

3.7.4 Performance Management Module Configuration Example ....................... 3-49

3.8 Time Range Module Configuration .................................................................... 3-50

3.8.1 Time Range Module Overview ................................................................ 3-50

3.8.2 Configuring the Time Range Module........................................................ 3-51

3.8.3 Maintaining the Time Range Module........................................................ 3-52

II


3.8.4 Time Range Configuration Example ........................................................ 3-53

Chapter 4 CHM System Configuration ..................................................... 4-14.1 CHM Overview................................................................................................... 4-1

4.2 Configuring CHM................................................................................................ 4-2

4.3 Maintaining CHM................................................................................................ 4-4

4.4 CHM Configuration Examples ............................................................................. 4-7

Chapter 5 MAC Configuration ................................................................... 5-15.1 MAC Overview................................................................................................... 5-1

5.2 Configuring a MAC Address ............................................................................... 5-1

5.3 Maintaining MAC Addresses ............................................................................... 5-6

5.4 MAC Configuration Example ............................................................................... 5-8

Chapter 6 MAC Address Table Configuration.......................................... 6-16.1 MAC Address Table Overview............................................................................. 6-1

6.2 Configuring a MAC Address Table ....................................................................... 6-4

6.3 Maintaining and Diagnosing an MAC Address Table ............................................. 6-5

Chapter 7 RMON Configuration ................................................................ 7-17.1 RMON Overview ................................................................................................ 7-1

7.2 Configuring RMON............................................................................................. 7-2

7.3 Maintaining RMON............................................................................................. 7-4

Chapter 8 PoE Configuration .................................................................... 8-18.1 PoE Overview .................................................................................................... 8-1

8.2 Configuring PoE ................................................................................................ 8-2

8.3 Maintaining PoE................................................................................................. 8-6

8.4 PoE Configuration Example ................................................................................ 8-6

Figures............................................................................................................. I

Glossary ........................................................................................................ III

III


This page intentionally left blank.

IV


About This ManualPurposeThis manual is the ZXR10 5900E Series (V3.00.11) Easy-Maintenance MPLS RoutingSwitch Configuration Guide (Basic Configuration), which is applicable to the ZXR10 5900E(V3.00.11) series switches.

Intended AudienceThis manual is intended for:

l Network planning engineerl Debugging engineerl Attendant

What Is in This ManualThis manual contains the following chapters:

Chapter 1, Usage and

Operation

Describes the interface type and interface naming rule. In addition,

this chapter describes how to view interface information, interface

description information, and interface state.

Chapter 2, System

Management

Provides the commands of the ZXR10 5900E for managing and

manipulating the file system, and describes the methods for equipment

maintenance and version upgrade.

Chapter 3, Network

Management

Provides the common functions and configuration methods of network

management, including SNMP, NetFlow, sFlow, Syslog, alarm module,

performance management module, and Time Range module.

Chapter 4, CHM System

Configuration

Provides the overview and principles of CHM configuration, related

configuration and maintenance commands, and configuration examples.

Chapter 5, MAC

Configuration

Provides the overview and principles of MAC configuration, related

configuration and maintenance commands, configuration examples.

Chapter 6, MAC Address

Table Configuration

Provides the overview, composition, and classification of an MAC

address table, as well as the related configuration and maintenance

commands.

Chapter 7, RMON

Configuration

Provides the overview and principles of RMON configuration, related

configuration and maintenance commands.

Chapter 8, PoE

Configuration

Provides the overview and principles of PoE configuration, related

configuration and maintenance commands.

ConventionsThis manual uses the following typographical conventions:

I


Italics Variables in commands. It may also refer to other related manuals and documents.

Bold Menus, menu options, function names, input fields, option button names, check boxes,

drop-down lists, dialog box names, window names, parameters, and commands.

Constant

width

Text that you type, program codes, filenames, directory names, and function names.

[ ] Optional parameters.

{ } Mandatory parameters.

| Separates individual parameter in series of parameters.

Note: provides additional information about a certain topic.

II


Chapter 1Usage and OperationTable of Contents

Connection Modes .....................................................................................................1-1Command Modes.....................................................................................................1-23Online Help ..............................................................................................................1-25Command History ....................................................................................................1-27

1.1 Connection ModesThe ZXR10 5900E supports several connection modes, see Figure 1-1.

Figure 1-1 ZXR10 5900E's Configuration Methods

Users can use different connection modes based on the network type. The connectionmodes are as follows:

l Console port: the primary mode for users to configure the ZXR10 5900E.l Telnet/SSHmode: allows users to configure the ZXR10 5900E at any reachable place

in the network.l NMworkstationmode: If this mode is used, the corresponding NM software supporting

SNMP is requiredl TFTP/FTP mode: allows users to download or upload the configuration file to update

the ZXR10 5900E's configuration.

1.1.1 FTP Connection ConfigurationsThe use of FTP is to improve the degree of sharing files by using a remote PC, whichmakesthe storage medium transparent for users and transports data reliably and efficiently.

Figure 1-2 shows the network scenario for an FTP server. The IP address of switch A is192.168.65.2/24, and the IP address of switch B is 192.168.65.5/24.

1-1


ZXR10 5900E Series Configuration Guide (Basic Configuration)

Figure 1-2 Network Scenario for the FTP Server

Figure 1-3 shows the network scenario for an FTP client. The IP address of the switch is192.168.65.2/24, and the IP address of the PC is 192.168.65.1/24.

Figure 1-3 Network Scenario for the FTP Client

FTP Server Configurationl Configuring the FTP Server

à Enable the FTP server.

To enable the FTP server on the ZXR10 5900E, run the following command:

Command Function

ZXR10(config)#ftp-server enable [listen {<default-port-nu

mber>|<port-number>}]

Enables the FTP server

function, and listens to the

specified port (range: 2401 to

2420)

Note:

To disable the FTP server, use the no form of this command.

Only the local and remote ports that are not used can be listened. By default,port 21 is listened.

The following example shows how to enable the FTP server on port 2405:.

ZXR10(config)#ftp-server enable listen 2405

à Disconnect an FTP user.

To disconnect a user from the FTP server, run the following command:

Command Function

ZXR10(config)#ftp-server kick-user <user-id> Disconnects the user from the

FTP user.

1-2


Chapter 1 Usage and Operation

The following example shows how to disconnect user 1 from the FTP server:

ZXR10(config)#ftp-server kick-user 1

à Configure the top directory.

To configure the top directory that can be accessed by FTP users, run thefollowing command:

Command Function

ZXR10(config)#ftp-server top-directory <directory

name>[{read-only|{[read-write],[copy]}}]

Configures the top directory

that can be accessed by FTP

users and the corresponding

permissions.

If no permission is specified,

all permissions are granted to

the top directory by default.

The /flash/ or /sd/ directory should be configured as the top directory andgranted with all permissions (some switches have no SD devices).

The following example shows how to configure the /flash/LOG/ as the topdirectory and grant all permissions to it:

ZXR10(config)#ftp-server top-directory /flash/LOG read-write copy

à Configure the FTP username and password.

For the FTP username and password configuration, refer to the “ADM_MGRConfiguration” chapter in the "ZXR10 5900E(V3.00.01) Series SwitchConfiguration Guide (Security Volume)". At present, the ZXR10 5900E supportsa maximum of 40 online FTP users.

l Maintaining the FTP Server

To maintain the FTP server on the ZXR10 5900E, run the following command:

Command Function

ZXR10#show ftp-server Displays the configuration of the

FTP server.

The following is sample output from the show ftp-server command:

ZXR10(config)#show ftp-server

--------------------------------------------------------------------------------

ftp_server run state: disable

ftp_server listen port:

ftp_server user top directory : /flash/LOG/

ftp_server user top directory access permissions: read-write copy

ftp_server max online user number: 40

user id username status ip address port

1-3



--------------------------------------------------------------------------------

For a description of the parameters in the execution result, refer to the following table:

Command Output Description

ftp_server run state Operational status of the FTP server.

ftp_server listen port Port number listened to by the FTP server.

ftp_server user top directory Top directory that can be accessed by FTP users.

ftp_server user top directory ac-

cess permissions

Permissions assigned to the top directory.

ftp_server max online user number Maximum number of online FTP users.

user id/username ID or name of the online FTP user.

status Online status of the FTP user.

ip address IP address of the FTP user.

port Port number of the FTP user.

l FTP Server Configuration Example

à Scenario Description

Figure 1-4 shows a network scenario where a PC is connected to the ZXR105900E. It is required to configure the ZXR10 5900E as the FTP server andconfigure the PC as the FTP client.

Figure 1-4 FTP Server Configuration Example

à Configuration Flow1. Enable the FTP server function and listening port 21 on the ZXR10 5900E.2. Configure the “/flash/LOG/” directory as the top directory of the FTP server.3. Set the FTP username and password to zte/zte.4. Test the FTP server function by uploading and downloading files through the

FTP server.

à Configuration Commands

Run the following commands on the ZXR10 5900E:

ZXR10#configure terminal

ZXR10(config)#ftp-server enable

ZXR10(config)#ftp-server top-directory /flash/LOG/

FTP Client Configurationl Configuring the FTP Server

1-4



In general, the ZXR10 5900E functions as an FTP client.

The following procedure describes the FTP server configuration by using the FileZillaserver software as an example:

1. Double-click the FileZilla Server Interface.exe program. TheConnect to Server dialog box is displayed, see Figure 1-5.

Figure 1-5 Connect to Server Dialog Box

2. Click the OK button. The FileZilla server dialog box is displayed, see Figure 1-6.

Figure 1-6 Filezilla Server Dialog Box

3. Select Edit > Users from the menu. The Users dialog box is displayed, seeFigure 1-7.

1-5



Note:

By default, the General node is selected in the Page area.

Figure 1-7 Users Dialog Box

4. Perform the following operations:

a. Click the Add button to create a user (for example, target), and specify apassword for the user.

b. In the Page area, select the Shared folders node. In the Users area, selecttarget. In the Directories area, click the Add button to specify the directory,see Figure 1-8.

Figure 1-8 Target User Settings

1-6



c. Set the permissions for the target user to access folders.

5. Click the OK button. The basic settings of the FTP server are completed.l Uploading and Downloading Files Through an FTP Client

To upload or download files when the ZXR10 5900E acts as an FTP client, run thefollowing commands.

Command Function

ZXR10#copy ftp [vrf <vrfname>] //HOST/filename@username:password root: localfile [<listen_port

>][{<ipv4-address>|<ipv6-address>}][interface<interface-name>]

Downloads files from the FTP

server to a local directory.

This command supports IPv6

addresses.

ZXR10#copy ftp [vrf <vrfname>] root: localfile

//HOST/filename@username:passowrd [<listen_port

>][{<ipv4-address>|<ipv6-address>}][interface<interface-name>]

Uploads local files to the FTP

server. This command supports

IPv6 addresses.

The following example shows how to upload the startrun.dat file in the flash/DATA0 directory of the file system by a user (who/who) to the FTP server (192.168.109.6).

ZXR10#copy ftp root: /flash/DATA0/startrun.dat //

192.168.109.6/startrun1.dat@who:who

Start copying file

.

Copy file ok!!sended 3492803 BYTEs!!

The following example shows how to download the startrun.dat file from the FTPserver (192.168.109.6) by a user (who/who) and rename the file to startrun.bak.

ZXR10#copy ftp //192.168.109.6/startrun.dat@who:who root: /

flash/DATA0/startrun.bak

Start copying file

.

Getting file successfully!!!received 3492803 BYTEs!!

Configuring IPv6 FTPTo configure IPv6 FTP on the ZXR10 5900E, perform the following steps:

Step Command Function

1ZXR10(config)#ftp-server enable listen 21 Configures port 21 as the

listening port on the FTP server.

2 ZXR10(config)#ftp-server kick-user <ID> Disconnects an online user

from the FTP server.

1-7




3

ZXR10(config)#copy ftp [vrf <vrfname>] //<IPv6-address>/dir@username:password]root: localfile

[<listen_port >][{<ipv4-address>|<ipv6-address>}][interface<interface-name>]

Copies the file from or to the

FTP server. This command

supports IPv6 addresses.

1.1.2 TFTP Connection ConfigurationBy means of TFTP, router version file and configuration file can be backed up andrecovered. For an IPv6 environment, ZXR10 5900E also supports to upload or downloadfile by using TFTP.

Configuring TFTP ServerEnable TFTP server software on background host and take a routing switch to be an FTPclient for communicating with the background server. The following takes the TFTP serversoftware tftpd as an example to describe how to configure a background TFTP server.

1. Run tftpd software on background host, the following interface appears, as shown inFigure 1-9.

Figure 1-9 TFTP Server

2. Click Tftpd > Configure, and then click Browse on the pop-up dialog box, select acatalog to save version file or configuration file, such as IMG catalog on D disk, asshown in Figure 1-10.

1-8



Figure 1-10 Configure Dialogue Box

3. Click OK to finish.

File Uploading or Downloading by TFTP ClientTo upload or download files when ZXR10 5900E acts as TFTP client, use the followingcommands.

Command Function

ZXR10#copy tftp [ipv6][vrf<vrfname>] //HOST/filename

root: localfile

This downloads files from TFTP server to the local device through

TFTP client.

ZXR10#copy tftp [ipv6][vrf<vrfname>] root: localfile

//HOST/filename

This uploads files from the local device to the TFTP server through

TFTP client.

This example describes how to upload the file startrun.dat from device file system /flashcatalog to the TFTP server which IP address is 192.168.2.244.

ZXR10#copy tftp root: /flash/startrun.dat //192.168.4.244/startrun.dat

Starting copying file

.

file copying successful.

This example describes how to download the file startrun.dat from the TFTP server whichIP address is 192.168.4.244 and rename the file as startrun.bak.

ZXR10#copy tftp //192.168.4.244/startrun.dat root: /flash/startrun.bak

Starting copying file

.

file copying successful.

1-9



Configuring IPv6 TFTPTo configure IPv6 TFTP, use the following commands.

Command Function

ZXR10#copy tftp ipv6 [vrf <vrfname>] //<dst-ipv6-address>/filename root: <file-path>

This downloads file from the

server which destination address

is <dst-ipv6-address> by TFTP.

ZXR10#copy tftp ipv6 [vrf <vrfname>] root: <file-path>

//<dst-ipv6-address>/filenameThis uploads local file to TFTP

server.

Descriptions of the parameters used by commands are shown below.

Parameter Description

[vrf <vrfname>] Configures a VRF route to upload/download files from vrf

<dst-ipv6-address> TFTP Server IPv6 address

<file-path> The full path of file or file name only

1.1.3 Serial Port Connection

Configuring HyperTerminalSerial configuration cable is delivered with ZXR10 5900E. Both of ends are DB9 serialinterfaces, one end connects to computer serial interface, and another end connects torouter COM interface. Serial connection configuration adopts VT100 terminal mode, usingthe HyperTerminal tool provided by Windows OS.

1. After connecting PC to M6000 correctly, click Start > Programs > Accessories >Communications > HyperTerminal, as shown in Figure 1-11.

Figure 1-11 Hyper Terminal Connection 1

1-10



2. Open the HyperTerminal, as shown in Figure 1-12. Type the connection name andselect the desired icon.

Figure 1-12 Connection Description

3. Select the serial port (COM1 or COM2) that connects the configuration line, as shownin Figure 1-13.

Figure 1-13 Selecting a Serial Port

4. Set the port properties of the selected serial port. The properties are set as follows:"Bits per second" is "115200", "Data bits" is "8", "Parity" is "None", "Stop bits" is "1",and "Flow control" is "None", as shown in Figure 1-14.

1-11



Figure 1-14 COM Properties

5. Click OK to accept the configuration and connect device by the selected COMinterface.

After configuring user name/password for serial port authentication, ZXR10 5900E requiresentering user name and password for login. In this way, the security is enhanced.

Configuring Serial Port AuthenticationTo enable serial port authentication on ZXR10 5900E, perform the following step.

Command Function

ZXR10(config)#login_authentication {enable|disable} This enables or disables serial port

authentication.

Configuration Example

Enabling or disables serial port authentication,

ZXR10(config)#login_authentication enable

ZXR10(config)#

Disabling or disables serial port authentication,

ZXR10(config)#login_authentication disable

ZXR10(config)#

1-12



1.1.4 Telnet Connection ConfigurationTelnet is generally used for configuring a switch in a remote manner. To enable telnetaccess, the operator should set the corresponding username and password on the remoteswitch. Moreover, the local host should ping the remote switch successfully.

After Telnet username and password are set, only authorized users can access the switchthrough Telnet.

For the telnet username and password configuration, refer to the “ADM_MGRConfiguration” section in the ZXR10 5900E Security Volume.

Command Function

ZXR10(config-system-user)#user-name <username>

ZXR10(config-system-user-username)#password<password>

Specifies the telnet username and

password.

In the following example, the IP address of the remote switch is 192.168.3.1 and the localhost can ping the remote switch successfully.

1. Run the telnet command on the local host, see Figure 1-15.

Figure 1-15 Running Telnet

2. Click OK. The telnet.exe window is displayed, see Figure 1-16.

1-13



Figure 1-16 Telnet.Exe Window

3. Enter the username and password for accessing the remote switch.

Configuring TelnetTo configure Telnet on the ZXR10 5900E, perform the following steps:


1

ZXR10(config)#multi-user configure Sets to allow multiple users to enter

global configuration mode.

After the device is restarted, this

configuration is invalid. To use telnet,

you need to run this command again.

ZXR10(config)#line console idle-timeout

<idle-time>2

ZXR10(config)#no line console idle-timeout

Specifies the maximum idletime (in

minutes) of the serial port.

To restore the default setting, use the

no form of this command.

ZXR10(config)#line console absolute-timeout

<absolute-time>3

ZXR10(config)#no line console absolute-timeout

Specifies the maximum online timeout

(in minutes) of the serial port.

To restore the default setting (1440),

use the no form of this command.

ZXR10(config)#line telnet idle-timeout

<idle-time>4

ZXR10(config)#no line telnet idle-timeout

Specifies the maximum idle time (in

minutes) of a telnet connection.

To restore the default setting (120), use

the no form of this command.

ZXR10(config)#line telnet absolute-timeout

<absolute-time>5

ZXR10(config)#no line telnet absolute-timeout

Specifies the maximum online timeout

(in minutes) of the serial port.

To restore the default setting (1440),

use the no form of this command.

1-14




ZXR10(config)#line telnet access-class [ipv4 |

ipv6]<acl-name>6

ZXR10(config)#no line telnet access-class [ipv4 |

ipv6]

Specifies the name of the ACL bound to

telnet connections.

To cancel the configuration, use the noform of this command.

ZXR10(config)#line telnet max-link

<max-number>7

ZXR10(config)#no line telnet max-link

Configures the maximum telnet

connections.



ZXR10(config)#line telnet server disable

8

ZXR10(config)#line telnet server enable listen

[23 | 49152-65535]

Enables or disables the telnet server

service.

This service is enabled by default.

The listening port number of the telnet

server can be set to 23 (default) or

49152 to 65535.

ZXR10#terminal length <length>

9ZXR10#no terminal length

Specifies the length of the terminal

window. This setting takes effect for the

current terminal only.



10

ZXR10#telnet {<dest-address>[{[<source-address

>],[<port-number>],[{vrf <vrf-name>|dcn}],[dscp<dscp-value>]}]|<domain-name>[{[<port-number

>],[vrf <vrf-name>],[dscp <dscp-value>]}]}

Establishes a telnet connection to the

remote device.

11

ZXR10#telnet6 {<dest-address>[{[interface<interface-name>],[vrf <vrf-name>],[<port-number>],[dscp <dscp-value>]}]|<domain-name>[{[vrf<vrf-name>],[<port-number>],[dscp<dscp-value>]}]}

Establishes a telnet connection to the

remote device.

12

ZXR10#ssh <dest-address> encrypt

{none|aes128|blowfish|3des} compress {none|zlib}

mac {none|sha1|md5}[{[<source-address>],[<port-n

umber>],[vrf <vrf-name>],[dscp <dscp-value>]}]

Establishes an SSH connection to the

remote device.

13

ZXR10#ssh6 <dest-address> encrypt

{none|aes128|blowfish|3des} compress {none|zlib}

mac {none|sha1|md5}[{[<port-number>],[vrf<vrf-name>],[interface <interface-name>],[dscp<dscp-value>]}]

Logs in to the specified server (using

the IPv6 address) through ssh mode.

14

ZXR10#line telnet dscp <dscp-value> Specifies the DSCP value for IPv4 or

IPv6 packets. The default DSCP value

is 0xc0.

1-15




15ZXR10#clear line vty <vty-number> Takes offline one or more VTY users

forcedly.

For a description of the parameters in Steps 2 and 4, refer to the following table:


<idle-time> Maximum idle online time (in minutes) of the serial port and

telnet connection, range: 1-1000.



<absolute-time> Maximum online time (in minutes) of the serial port and telnet

connection, range: 1-10000.

For a description of the parameters in Step 7, refer to the following table:


<max-number> Maximum number of telnet connections, range: 1-15.



<length> Window length (in lines), range: 0-512.



<dest-address> Destination IP address, in colon-separated hex format.

<vrf-name> VRF name, range: 1-32 characters.

<source-ipaddr> Source IP address, in dotted decimal notation.

<port-number> Port number, range: 0-65535.

<domain-name> Domain name, range: 1-128 characters.

dcn DCN VRF.

<dscp-value> DSCP value, range: 0-63.



<dest-address> Destination IPv6 address, in dotted decimal notation .


1-16




<interface-name> Interface name.

<port-number> Port number, range: 0-65535.

<domain-name> Domain name, range: 1-128 characters.




<dest-address> Destination IP address, in dotted decimal notation

encrypt Encryption algorithm, options:

l 3des

l aes128

l blowfish

l none

compress Compress algorithm, options:

l zlib

l none

mac MAC verification algorithm, options:

l md5

l sha1

l none

<source-ipaddr> Source IP address, in dotted decimal notation.

<port-number> Destination port number, range: 0-65535.





<dest-address> IPv6 address, in colon hexadecimal notation.

encrypt Encryption algorithm, options:

l 3des

l aes128

l blowfish

l none

compress Compression algorithm, options:

l zlib

l none

1-17




mac MAC check algorithm, options:

l md5

l sha1

l none

<port-number> Destination port number, range: 0-65535.








<vty-number> Terminal number, range: 0-14.

Maintaining TelnetTo maintain Telnet on the ZXR10 5900E, run the following commands:

Command Function

ZXR10#show terminal Displays current terminal information.

ZXR10#show history Displays previous ten history commands.

ZXR10#who Displays login user information.

The following is sample output from the show terminal command:

ZXR10#show terminal

Line: 0, Location: , Type: ""

Length: 24 lines, Width: 80 columns

Console idle-timeout: 02:00:00

Console absolute-timeout: 1d00h00m

Baud rate (TX/RX): 115200/115200

Capabilities: none

Time since activation: 00:11:12

Editing: enabled

History: enabled, History size: 10

Telnet ipv4 acl name:

Telnet ipv6 acl name:

Telnet server: enable, Listen port: 23

Telnet DSCP value: 48

1-18



Telnet max-link: 15

For a description of the output information, refer to the following table:


Line: 0, Location: , Type: "" Line: terminal number, Location: client end address, Type:

client end terminal type

Length: 24 lines, Width: 80 columns The length of the serial port terminal is 24 lines, and the width

is 80 columns.

Console idle-timeout: 02:00:00 The maximum idle online time of the serial port is two hours.

Console absolute-timeout: 1d00h00m The maximum online time of the serial port is 24 hours.

Baud rate (TX/RX): 115200/115200 Baud rate.

Capabilities: none Capability.

Time since activation: 00:11:12 Time period from the login time.

Editing: enabled Editable.

History: enabled, history size: 10 The history record is valid. The size is 10.

Telnet ipv4 acl name: The IPv4 ACL is not bound.

Telnet ipv6 acl name: The IPv6 ACL is not bound.

Telnet server: enable, Listen port: 23 Enables the telnet function, and the listening port number is

23.

Telnet DSCP value: 48 DSCP value of the Telnet server.

Telnet max-link: 15 Maximum number of online Telnet users is 15.

The following is sample output from the show history command:

ZXR10#show history

en

configure terminal

write

show version

show processor

show ver

show history

The following is sample output from the who command:

ZXR10#who

Line User Host(s) Idle Location

0 con 0 idle 00:00:29

* 66 vty 0 who idle 00:00:00 192.168.109.6

67 vty 1 who idle 00:00:04 192.168.110.12


1-19




Line ID of the virtual terminal that the user logs in to. "*" indicates

that the terminal is a local terminal.

User Name of the login user.

Host(s) When the switch logs in to the Telnet server, the IP address of

the Telnet server is displayed in the column. In other cases,

"idle" is displayed in this column.

Idle Idle time.

Location Telnet client address.

1.1.5 SSH Connection ConfigurationAll transmitted data can be encrypted by using SSH. SSH can replace Telnet.

SSH is a key-based security authentication. A pair of keys should be created and thepublic key is stored on the server to be accessed. Before an SSH client connects to theSSH server, it requests the server to perform security authentication by using keys. Uponreceipt of the request, the SSH server searches for the public key in the directory, andcompares the public key with the received key. If the two keys are the same, the serveruses the public key to encrypt the challenge message and then sends the message to theclient. The client then decrypts the challenge messages and returns it to the server.

Configuring SSHTo configure SSH on the ZXR10 5900E, perform the following steps:


ZXR10(config)#ssh server enable [listen

{<22>|<49152-65535>}]

Enables the SSH server function. This

function is disabled by default.

1

ZXR10(config)#ssh server disable Disables the SSH server function.

ZXR10(config)#ssh server access-class

ipv4<acl-name>

Creates a binding between the IPv4

ACL and the SSH server.

2

ZXR10(config)#no ssh server access-class ipv4 Removes the binding between the IPv4


ZXR10(config)#ssh server access-class ipv6

<acl-name>

Creates a binding between the IPv6


3

ZXR10(config)#no ssh server access-class ipv6 Removes the binding between the IPv6


4 ZXR10(config)#ssh server dscp <dscp-value> Specifies the DSCP value for IPv4 or

IPv6 packets. The default DSCP value

is 0xc0.

1-20





<acl-name> ACL name, range: 1–31 characters.



<dscp-value> DSCP value, range: 0–63.

Configuring an SSH ClientThe following procedure uses Putt as an example to describe how to configure an SSHclient.

1. Enable Putty.exe on the SSH client. The PuTTY Configuration dialog box isdisplayed.

2. Enter 192.168.0.202 (IP address of the remote switch) in the Host Name field, seeFigure 1-17.

Figure 1-17 SSH Client Login Configuration

3. Select 2 from the Preferred SSH protocol version field, see Figure 1-18.

1-21



Figure 1-18 SSH Client Select Version Configuration

4. Click the Open button. The PuTTY window for login is displayed, see Figure 1-19.

Figure 1-19 Successful Login Interface

5. Enter the username and password.

Maintaining SSHTo maintain SSH on the ZXR10 5900E, run the following command:

1-22



Command Description

ZXR10#show ssh Displays the configuration status

of SSH.

The following is sample output from the show ssh command:

ZXR10#show ssh

===================================================

SSH configuration

===================================================

SSH enable-flag configuration : enable

SSH listen port : 22

SSH DSCP value : 48

SSH ipv4 acl name :

SSH ipv6 acl name :

----------------------------------------------------



enable-flag configuration Whether the SSH function is enabled or not. "enable" means

that SSH function is enabled.

listen port Listening port number of the SSH server.

DSCP value DSCP value for the SSH server.

SSH acl name ACL bound to the SSH server.

1.2 Command ModesFor users to configure and manage routers conveniently, ZXR10 5900E assignscommands to different modes according to different functions and rights. A command canonly be carried out in a special mode.

In any command mode, just enter a question mark "?", and the commands that can beused in the mode can be viewed.

Command modes of ZXR10 5900E are as follows.

User ModeWhen logging in to the system in HyperTerminal mode, the user enters the user modeautomatically. If using Telnet mode to log on, a user enters into user mode after enteringthe user name and password.

DOS prompt of user mode is host name of router followed by a ">", as follows (the defaulthost name is ZXR10):

ZXR10>

1-23



In user mode, a user can run commands, such as ping and telnet and also can view somesystem information.

ZXR10>?

Exec commands:

disable Turn off privileged commands

enable Turn on privileged commands

exit Exit from current mode

license License install

login Login as a particular user

logout Exit from the EXEC

ping Send echo messages

ping6 Send IPv6 echo messages

quit Quit from the EXEC

show Show running system information

ssh Open a ssh connection

ssh6 Open a ssh6 connection

telnet Open a telnet connection

telnet6 Open a telnet6 connection

trace Trace route to destination

trace6 Trace route to destination using IPv6

who List users who are logining on

Privileged ModeIn user mode, enter enable command and corresponding password to enter privilegedmode.

ZXR10>enable

Password: (The input password will not be displayed on the screen)

ZXR10#

By default, system password is zxr10.

In privileged mode, a user can view more detailed configuration information and also canenter configuration mode to configure entire switch. Therefore, a password must be usedto prevent illegal use of unauthorized users.

To return from privileged mode to user mode, use disable command.

Global Configuration ModeIn privileged mode, input config terminal command to enter into global configuration mode,as follows:


Enter configuration commands, one per line. End with CTRL/Z.

ZXR10(config)#

ZXR10(config)#multi-user configure

/*This permits multiperson to operate.*/

1-24



%Warning:allow others configure, must avoid conflict.

Commands in global configuration mode act on entire system, not merely on a protocol orinterface.

To return from global configuration mode to privileged mode, input exit or end commandor press <CTRL+Z>.

Interface Configuration ModeIn global configuration mode, use interface command to enter interface configuration modeas shown in following example:

ZXR10(config)#interface gei-0/1/1/1

/*This enters the interface configuration mode of gei-0/1/1/1.*/

ZXR10(config-if-gei-0/1/1/1k)#

In interface configuration mode, the parameters of interface can be modified. To returnfrom interface configuration mode to global configuration mode, input exit command andto return from interface configuration mode to privileged mode directly input end commandor press <CTRL+Z> or <CTRL+C>.

Route Configuration ModeIn global configuration mode, use router command to enter route configuration mode.

ZXR10(config)#router ospf 1

ZXR10(config-ospf-1)#

Routing protocols used are Routing Information Protocol (RIP), Open Shortest PathFirst (OSPF), Intermediate System-to- Intermediate System (IS-IS) and Border GatewayProtocol (BGP). In above example, OSPF is adopted.

To return from route configuration mode to global configuration mode input exit commandand to return from route configuration mode to privileged mode directly input end commandor press <CTRL+Z>.

1.3 Online HelpIn any command mode, enter a question mark (?) after DOS prompt of system, a list ofavailable commands in command mode is displayed. With context-sensitive help function,keywords and parameter lists of any commands can be obtained.

l In any command mode, enter a question mark "?" after DOS prompt of system anda list of all commands in mode and brief description of commands is displayed. Forexample:ZXR10>?

Exec commands:

disable Turn off privileged commands

enable Turn on privileged commands

exit Exit from current mode

1-25



license License install

login Login as a particular user

logout Exit from the EXEC

ping Send echo messages

ping6 Send IPv6 echo messages

quit Quit from the EXEC

show Show running system information

ssh Open a ssh connection

ssh6 Open a ssh6 connection

telnet Open a telnet connection

telnet6 Open a telnet6 connection

trace Trace route to destination

trace6 Trace route to destination using IPv6

who List users who are logining on

l Input a question mark after a character or string, commands or a list of keywordsstarting with character or string can be displayed. Note that there is no space betweencharacter (string) and question mark. For example:ZXR10#co?

commit configure copy

ZXR10#co

l Press Tab after character string, if command or keyword starting with this string is aunique one, command or keyword is complemented and a space is added after it. Forexample:ZXR10#con<Tab>

ZXR10#configure (There is a space between "configure" and

the cursor)

l Input a question mark (?) after a command, a keyword or a parameter, next keywordor parameter to be input is listed and also a brief explanation is given. For example:ZXR10#configure ?

terminal Enter configuration mode

ZXR10#configure

l If a wrong command, keyword or parameter is input, after pressing <ENTER>, userinterface will use a "^" symbol to isolate error. The "^" appears under first characterof incorrect command, keyword or parameter, as shown in following example:ZXR10#von ter

^

% Invalid input detected at "^" marker.

ZXR10#

In the following example, assume that a clock is to be set and context-sensitive help isused to check syntax for setting clock.

ZXR10#cl?

clear clock

ZXR10#clock ?

set Set current time (Local time)

1-26



ZXR10#clock set ?

hh:mm:ss Current time

ZXR10#clock set 13:32:00

% Incomplete command.

ZXR10#

In the end of above example, system prompts "Incomplete command", indicating that otherkeywords or parameters must be input.

ZXR10 5900E also allows abbreviation of a command or keyword into characters or astring that uniquely identifies command or keyword. For example, show command can beabbreviated sh or sho.

1.4 Command HistoryUser interface supports function of recording input commands. A maximum of ten historycommands can be recorded. The function is very useful in re-invocation of a long orcomplicated command or ingress.

To re-invoke a command from record buffer, conduct one of following operations as shownbelow.

Command Function

Press <Ctrl+P> or the up arrow key This re-invokes the latest

command in the record buffer.

Repeat these keys to invoke old

commands forwards

Press <Ctrl+N> or the down arrow key This rolls the commands

downward. When the last

command line is reached, one

more operation will roll the

commands from the beginning of

the buffer cyclically.

Use the show history command in privileged configuration mode and latest severalcommands in that mode will be listed.

ZXR10#show history

who

show processor

show ver

show history

1-27




1-28


Chapter 2System ManagementTable of Contents

File System Management...........................................................................................2-1System Information State ...........................................................................................2-3Device Maintenance.................................................................................................2-15Version Upgrade ......................................................................................................2-19VSC Configuration....................................................................................................2-24

2.1 File System Management

2.1.1 File System Management OverviewOn ZXR10 5900E, the main control board has a flash card. The file directory is /flash.Partition usage introduction is shown below:

l In the directory of /flash, users can perform some operations to files, such as rename,delete, dir and copy. They can create and delete directories.

l Version file, configuration file, system halted file and abnormal log are restored in/flash.

The file operations, such as copy, delete, are low speed device operations. Therefore,when multiple terminals are used, to decrease the influence of one terminal operation toanother terminal operation, all operation of file system will be realized by an independentprocess. This process includes two working modules, one working module is responsiblefor process all file operation commands and the returning and showing of correspondingdata, another working module with lower priority is responsible for perform severalpersistent operations, copy, delete, format, mount and umount.

In addition, the function that show the content of file operation can be realized by usingmore command, and it also can be realized by Telnet process. The advantage of Telnetprocess is that it can reduce the communication processing in the system. However,considering that file storage devices are used by other service boards and the file systemoperation are possible to be required, therefore, all of the file operation commands is usedin file operation process.

2.1.2 Managing FilesTo manage files on the ZXR10 5900E, run the following commands:

2-1



Command Function

ZXR10#dir [<word>][<cpu_node

>]

Displays the file information.

<word>: supporting a character string, optional.

If this parameter is not specified, the information about the files

under the current directory is displayed. If this parameter is

specified, the information about the files under the specified

directory or the specified file is displayed (if the entered directory

begins with the root directory, the absolute directory is displayed.

Otherwise, the information about the files in the relative directory is

displayed). This parameter can contain the "*" wildcard.

[<cpu_node>]: location of the board, optional.

ZXR10#pwd Displays the current file path.

ZXR10#cd <word>[<cpu_node>] Switches to the specified file path.

<word>: directory name, required, supporting a character string.


ZXR10#mkdir <word>[<cpu_nod

e>]

Creates a directory. If the directory already exists, a prompt is

displayed. <word>: directory name, required.



ZXR10#rmdir <word>[<cpu_nod

e>]

Deletes the directory.



ZXR10#delete <word>[<cpu_nod

e>]

Deletes the file.

<word>: file name, required, supporting a character string..


ZXR10#cp <word1>[<cpu_node1

>]<word2>[<cpu_node2>]

Copies the file.

<word1>: source file name (a path name can be contained).

<word2>: destination file name (if the path is not specified, the

current directory is used. If the path is contained and the directory

does not exist, a message is returned, indicating that the directory

does not exist.)

[<cpu_node1>]: location of the board storing the source file, optional.

[<cpu_node2>]: location of the board storing the destination file,

optional.

ZXR10#format {/flash |

/sd}[<cpu_node>]

Formats the /flash or /sd partition.

Before this command is executed, a message is displayed,

indicating that all files on the partition will be lost.

The /flash or /sd parameter is required, and you should select one

of them as needed.


2-2


Chapter 2 System Management

Command Function

ZXR10#more <word>[<cpu_node

>]|[begin|exclude|include]

Displays the contents of specified file.

<word>: file name, required, supporting a character string.

[<cpu_node>]: location of the board, optional. "|" is an output flag.

ZXR10#mount{sd | flash | usb1 |

usb2}[<cpu_node>]

Mounts the storage device (sd/flash/usb1/usb2).

The sd/flash/usb1/usb2 parameter is required.[<cpu_node>]: location of the board, optional.

ZXR10#umount{sd | flash | usb1

| usb2}[<cpu_node>]

Unmounts the storage device (sd/flash/usb1/usb2).

The sd/flash/usb1/usb2 parameter is required.[<cpu_node>]: location of the board, optional.

ZXR10#show filesystem [{all

|<cpu_node>}]

Displays the information about the partitions that can be operated

in the file system.

If the all parameter is specified, the information about the partitionsthat can be operated on all boards is displayed.

[<cpu_node>]: location of the board, optional. If nothing is entered,

the information of the partitions that can be operated on the board

is displayed.

ExampleThe following example shows how to operate a file:

ZXR10#rename startrun1.dat startrun.dat

Rename success.

2.2 System Information State

2.2.1 System Information State OverviewCurrently, ZXR10 5900E supports to view the following system informations,

l System configuration information: Host name, welcome information, serial portinformation, contact address and tel-number, Console port IP address and FTP username, password and saving mode.

l System State: Version, Central Processing Unit (CPU) information

System configuration information is mainly saved in database. System moduleinformations, such as about power supply, fans, are collected by IPMC board, and thendisplayed to user by using interacted command system.

2.2.2 System Parameter ConfigurationThe system parameter configuration of ZXR10 5900E, includes host name, welcomeinformation and serial port information configuration.

2-3



Setting System Host NameBy default, the host name of the system is ZXR10. To set system host name on ZXR105900E, perform the following steps.


1 ZXR10(config)#hostname <hostname> This configures system host

name.

<hostname> is the designated

system host name, the length

is 1-32 characters.

2 ZXR10(config)#no hostname This restores the default

system host name ZXR10.


This example describes how to set system host name as 5900e.

ZXR10(config)#hostname 5900e

5900e(config)#

This example restores the default system host name.

5900e(config)#no hostname

ZXR10(config)#

The modification of host name takes effect immediately.

Configuring the Welcome InformationTo configure the welcome information of the system on ZXR10 5900E, use the followingcommand:

Command Function

ZXR10(config)#banner incomingstart indicator<newbanner>end indicator

This configures the welcome

information of the system. "new

banner" specifies the welcome

information, which is a string of 1

to 253 characters.

ZXR10(config)#no banner incoming This restores the default welcome

information of the system.

The default welcome information of the system is as follows:

*****************************************************************************

Welcome to ZXR10 Easy-Maintenance MPLS Routing Switch of ZTE Corporation

*****************************************************************************


The following is an example of how to configure the welcome information:

2-4



Set the welcome information to "123456":

ZXR10(config)#banner incoming #

123456#

ZXR10(config)#

Restore the default welcome information:

ZXR10(config)#no banner incoming

ZXR10(config)#

The modification takes effect immediately.

Setting System Support Serial Port AuthenticationTo set system support serial port authentication on ZXR10 5900E, use the followingcommands.

Command Function

ZXR10(config)#login_authentication enable This sets system support serial

port authentication.

ZXR10(config)#login_authentication disable This disables system support

serial port authentication.


This example describes how to set ZXR10 5900E to support serial port authentication.

ZXR10(config)#login_authentication enable

ZXR10(config)#

This example describes how to set ZXR10 5900E to disable serial port authentication.

ZXR10(config)#login_authentication disable

ZXR10(config)#

Setting the Configuration Message Saved in EEPROMTo set the configuration message saved in Erasable Programmable Read Only MemoryEEPROM on ZXR10 5900E, perform the following steps.


1

ZXR10(config)#nvram boot-password <password> This sets FTP Server password

for FTP starting.

The password length ranges

from 3 to 16 characters.

2 ZXR10(config)#nvram boot-server <ip-address> This sets IP address of FTP

server.

2-5




3

ZXR10(config)#nvram boot-username <boot-username> This sets FTP user name.



4 ZXR10(config)#nvram default-gateway <default-gateway> This sets the default gateway

IP address.

5 ZXR10(config)#nvram en-password <word> This sets FTP user password.



6 ZXR10(config)#nvram imgfile-location {local | network<file-name>}

This sets the starting file name

Descriptions of the parameters in Step 5:


local Local starting

network Network starting

<file-name> Starting path, the length ranges from 1 to 79 characters.


This example shows how to set the configuration message saved in EEPROM.

ZXR10(config)#nvram boot-password ?

WORD FTP password (3-16 characters)

ZXR10(config)#nvram boot-password ******

ZXR10(config)#nvram boot-server 168.0.0.178

ZXR10(config)#nvram boot-username 5950

ZXR10(config)#nvram default-gateway 168.0.0.1

ZXR10(config)#nvram en-password ******

ZXR10(config)#nvram imgfile-location network HMPU.set

2.2.3 System Information ViewingOn ZXR10 5900E, use a set of show commands to view system information. Thecommon-used commands are described in the following topics.

Viewing System Location, Contact, and Other InformationTo view the system location, contact, and other information on ZXR10 5900E, use thefollowing commands:

2-6



Command Function

ZXR10#show system-info This shows the system description,

version information, compilation

time, system object ID, system

operation time, contact telephone

number, address, and other

information.


ZXR10(config)#show system-info

System Description: ZXR10 ROSNG Version V2.00.31(4.2.24)

ZTE ZXR10 5928E-FI Software, 5900 Version: V3.00.11.B11, RELEASE SOFTWARE

Copyright (c) 2010-2020 by ZTE Corporation

Compiled 2015-01-09, 08:11:02

System ObjectId: iso.org.dod.internet.private.enterprises.zte.zxr10.zxr10SwitchM

ib.zxr10systemconfig.zxr10SystemID.zxr10Switch-5928E-FI

Started before: 227 Seconds

Contact with: +86-010-82960000

System name: 206

Location: No.19, Huayuan East Road, Haidian District, Beijing, China

This system primarily offers a set of 79 services

Viewing the System Host Name, Welcome Information, and Serial Port AuthenticationInformationTo view the system host name, welcome information, and serial port authenticationinformation on ZXR10 5900E, use the following command:

Command Function

ZXR10#show running-config pm_sys This shows the system host name,

welcome information, and serial

port authentication information.


ZXR10#show running-config pm_sys

! <GLOBAL_MNG>

!<HOSTNAME>

hostname ZXR10

!</HOSTNAME>

!<BANNER>

banner incoming #

2-7



123456#

!</BANNER>

!<LOGIN AUTHENTICATION>

login_authentication disable

!</LOGIN AUTHENTICATION>

! </GLOBAL_MNG>

ZXR10#

Viewing Version InformationTo view the version information on ZXR10 5900E, use the following command.

Command Function

ZXR10#show version This views the version information

of all cards in all the shelves. It

can shows the version and system

hardware summary information.

1. View the software version (version set) information.

Version set information includes the version number, supported products, compilationdate and time (format: day-month-year; in 24–hour notation), version path, and versionrunning time.

2. View the hardware information of the system.

a. Message header format, board type, physical location (rack/shelf), displayedactive/standby status (not displayed if the backup mode is not active/standby)

b. Basic information: For a main control board, the basic information includes themain processor type, Bootrom version, memory and Flash size, baud rate ofa serial port, microcontroller version number of the clock subcard, ErasableProgrammable Logic Device version number of the clock subcard, Nvram, CPUversion number, FPGA version number, SD size, CPLD version number, boardtype, and board name. For a line card, the basic information includes the mainprocessor type, Bootrom version, memory size, CPLD version number, portquantity, board type, board type, status of the network processor, and availabilityof the network processor.


This example describes how to view device version information.

ZXR10(config)#show version

5928E-FI Software, 5900 Version: V3.00.11.B11, RELEASE SOFTWARE

Copyright (c) 2010-2020 by ZTE Corporation.

Compiled 2015-01-09, 08:11:02

System image files are:<ftp://168.0.0.178/HMPU.set>

System uptime is 0 days, 0 hours, 3 minutes

2-8



[MP(M) , shelf 0 ,panel 1]

cpu 0

Main processor : ARM MV78230 Processor

Bootrom Version : V2.01

Memory : 2042 Mbytes

System Flash : 512 Mbytes

System baud : 9600 baud

System nvram : 8 kbytes

CPUcard CPLD : V1.00

CPLD1 Version : V1.20


Board Name : 5928E-FI

Product Version : V1.40

Board PCB : V1.00

Viewing the Rack DiagramTo view the rack diagram, run the following command on the ZXR10 5900E:

Command Function

ZXR10#show shelf-info This displays information of all

online cards.


This example shows how to display information of the rack diagram.

ZXR10#show shelf-info

shelf-id panel role status

-------------------------------------------

0 T1 MP MASTER

Viewing CPU Peak TimeTo view CPU peak time on ZXR10 5900E, use the following command.

Command Function

ZXR10#show processor This shows the memory and CPU

running state.

This shows the memory and CPU running state, including the CPU shelf, slot, CPU ID,temperature, CPU occupancy rate during the latest 5 seconds, 1 minute and 5 minutes,CPU occupancy peak rate in 1 minute (absolute granularity), physical content size, freememory size and memory usage rate.

2-9




This example describes how to view memory and CPU running state.

ZXR10#show processor

============================================================================

============================================================================

M : Master CPU

S : Slave CPU

Power : Power dissipation (Watt)

CPU(5s): CPU utility measured in the last 5 seconds

CPU(1m): CPU utility measured in 1 minute

CPU(5m): CPU utility measured in 5 minutes

Peak : CPU peak utility measured in 1 minute

PhyMem : Physical memory (Megabyte)

FreeMem: Free memory (Megabyte)

Mem : Memory usage ratio

=============================================================================

=============================================================================

Shelf Panel CPUID Power CPU(5s) CPU(1m) CPU(5m) Peak PhyMem FreeMem Mem

=============================================================================

MP(M) 0 1 0 N/A 15% 16% 15% 20% 2048 710 65.308%

----------------------------------------------------------------------------

Viewing the Configuration Message Saved in EEPROMTo view the configuration message saved in EEPROM on ZXR10 5900E, use the followingcommand.

Command Function

ZXR10#show nvram-info This views the configuration

message saved in EEPROM.


This example describes how to view the configuration message saved in EEPROM.

ZXR10#show nvram-info

nvram boot-username hmcr

nvram boot-password hmcr

nvram boot-server 128.7.8.128

nvram default-gateway 128.7.8.1

nvram mng-ip-address 128.7.8.129 255.255.255.0

nvram imgfile-location local flash HMPU.set

Showing the bootrom Version Information of BoardsTo show the bootrom version information of the boards on ZXR10 5900E, use the followingcommand:

2-10



Command Function

ZXR10#show bootrom This shows the bootrom version

number of all the working boards

on the rack.


The following is an example of showing the bootrom version information:

ZXR10#show bootrom

[MP(M) , shelf 0 ,physlot 4]

cpu 0


Creation Date : 2011/3/15

Showing the Loading Information of the Flash File SystemTo show the loading and checking information of the flash file system on ZXR10 5900E,use the following command:

Command Function

ZXR10#show flash-check This shows the loading and

checking information of the flash

file system.


The following is an example of showing the loading and checking information of the flashfile system:

ZXR10#show flash-check

Master MP flash is loaded.

Master MP flash checked OK.

Slave MP flash is not loaded.

Slave MP flash checked ERROR.

2.2.4 System Information State Configuration ExamplesThese are some examples of system information state configuration.

l This example shows the system software and hardware versions.ZXR10(config)#show version



Compiled 2015-01-09, 08:11:02



2-11




cpu 0












Board PCB : V1.00

l This shows system card information, such as CPU usage rate, peak value,temperature, memory usage rate and so on.ZXR10#show processor

============================================================================

============================================================================

M : Master CPU

S : Slave CPU









=============================================================================

=============================================================================


=============================================================================

MP(M) 0 1 0 N/A 15% 16% 15% 20% 2048 710 65.308%

----------------------------------------------------------------------------

l This shows the interface information.

Interface information:

ZXR10#show interface brief

Interface Portattribute Mode BW(Mbits) Admin Phy Prot Description

gei-0/1/1/1 electric Duplex/full 100 down up down none



Descriptions of the command output:

2-12




Interface Interface name

Portattribute Optical and electrical attribute of the interface

Mode Full duplex or half duplex mode

BW(Mbits) Interface bandwidth

Admin Administrative status of the interface, options:

à up

à down

Phy Physical status of the interface, options:

à up

à down

Prot Whether the L2 protocol function of the interface is

available, options:

à up

à down

Description Description for the interface

l This example describes how to show the brief information of all L3 interfaces.ZXR10#show ip interface brief

interface IP-Address Mask AdminStatus PhyStatus Protocol

vlan1 4.4.4.1 255.255.255.0 up up up

vlan2 10.4.5.6 255.255.255.0 up up up

vlan3 10.3.1.1 255.255.255.0 up up up

vlan4 24.1.1.11 255.255.255.0 up up up

vlan5 unassigned unassigned up up up


vlan7 10.7.1.1 255.255.255.0 up up up

vlan8 10.8.1.1 255.255.255.0 up up up

vlan9 10.9.1.1 255.255.255.0 up up up



vlan12 10.12.1.1 255.255.255.0 up up up

l This example describes how to show the brief information of the L3 interface matchedregular expression (the interface ending by 3)ZXR10#show ip interface brief include 3$

interface IP-Address Mask AdminStatus PhyStatus Protocol

vlan3 unassigned unassigned up up down

The characters and their meanings of regular expression are shown below.

2-13



Character Description

^ It is the starting of character string. ^a only matches a character in the

starting of character string.

^ The ^ following with [ has different meaning. It is used to exclude the

characters in the bracket from the destination string processing. For

example, [^0-9] means that the destination character can not be a number.

$ It is the ending of character string. For example, abc$ only matches the abc

substring at the ending of character string.

| It permits any regular expressions at its both sides to match the destination

string. For example, a|b matches a or b.

. Match any character.

* In the expression, the left character (or element) matches one or many times.

+ Similar to *, the left character matches one or many times.

? Match the right character one or many times.

( ) As a complete unit, it influences on the model calculation sequence. As a

label expression, use another expression to replace the matched substring.

[ ] Character set, any character can match the destination string.

l This example describes how to show the description information of all ports.ZXR10#show interface description

Interface AdminStatus PhyStatus Protocol Description

gei-0/1/1/1 up up up none


gei-0/1/1/3 up down down none


gei-0/1/1/5 up down down none

gei-0/1/1/6 down down down none









Interface The current existing interface name

AdminStatus It indicates the interface management state is available or

not. Up means available, and down means unavailable.

2-14




PhyStatus It indicates the interface physical state is available or not.

Up means available, and down means unavailable.

Protocol It indicates the link layer protocol is available or not. Up

means available, and down means unavailable.

Description Port description information

2.3 Device Maintenance

2.3.1 Device Maintenance OverviewDevice maintenance mainly means device power-on, reset and power-off.

2.3.2 Device Maintenance Configuration

Device Power Upl Device Manual Power Up

Device manual power up means that enter boot menu to configure and start systemafter powering up the device.

1. After the system powering up, enter Boot menu. In the first use, configure Boot asfollows: press any key to enter boot menu after the message "Hit any key to stopautoboot" appears. Configure boot according to the following example. Load theversion after finishing the configuration.

2. Start the system manually after finishing the configuration.3. System appears the prompt "ZXR10>" to indicate the starting is successful. Enter

enable command, and enter the enable password according to the prompt. Enterprivileged mode if passing the authentication.


This example describes how to power on the system manually.

BootROM 1.20

Booting from NAND flash

High speed PHY - Version: 2.1.2 (COM-PHY-V20)

Update PEX Device ID 0x78260

High speed PHY - Ended Successfully

DDR3 Training Sequence - Ver 5.3.0

DDR3 Training Sequence - Run with PBS.

DDR3 Training Sequence - Ended Successfully

Status = MV_OK

BootROM: Image checksum verification PASSED

2-15



KUBoot 2.0.10.P9-svn47 (Jan 6 2014 - 16:42:05)

Marvell version: 2012_Q4.0

RAM Configuration:

Bank #0: 00000000 Bank #1: 00000000 Bank #2: 00000000 Bank

#3: 00000000 relocation Offset is: 6ff15000

Now running in RAM - U-Boot at: 7ff15000

NAND: <<>>flashIdx=12,---fo1:1144, fo2:88--

512 MiB

FPU not initialized

Modules Detected:

Not Marvell PHY id1 ffff id2 ffff

egiga0, egiga1, egiga2, egiga3

yaffs: Mounting /flash/

Bad block table found at page 262080, version 0x01


yaffs: restored from checkpoint

Hit any key to stop auto-boot: 0

[boot]: c

'.' = clear field; '-' = go to previous field; '^' = quit

Boot Location [0:Net,1:Flash,2:USB]: 0

Client IP : 168.0.0.59 168.0.0.59

Netmask : 255.255.255.0 255.255.255.0

Server IP : 168.0.0.178 168.0.0.178

Gateway IP : 168.0.0.1 168.0.0.1

FTP User : 59 59

FTP Password : ***

FTP Password Confirm : ***

Bootfile : HMPU.set

Enable Password :

Save parameter to nvram success.

[boot]: b

l Device Auto Power Up

Device auto power up means system starts according to the configuration saved inEEPROM after the device powers up.

1. After the system powering up, enter Boot menu. In the first use, configure boot asfollows: press any key to enter boot menu after the message "Hit any key to stopautoboot" appears. Configure Boot according to the following example. Load theversion after finishing the configuration.

2. Start the system automatically after finishing the configuration.3. System appears the prompt "ZXR10>" to indicate the starting is successful. Enter

enable command, and enter the enable password according to the prompt. Enterprivileged mode if passing the authentication.


2-16



This example describes how to power up device automatically.

BootROM 1.20








Status = MV_OK


KUBoot 2.0.10.P9-svn47 (Jan 6 2014 - 16:42:05)


RAM Configuration:





512 MiB

FPU not initialized

Modules Detected:









Client IP : 168.0.0.51

Netmask : 255.255.255.0

Server IP : 168.0.0.178

Gateway IP : 168.0.0.1

FTP User : 59

FTP Password :

Bootfile : HMPU.set

Enable Password :

MAC Address : 00.d0.d0.51.10.00

Loading....................

Reloading DeviceTo reload cards in the designated slot on ZXR10 5900E, use the following command.

2-17



Command Function

ZXR10#reload [ (mpc {t1 | t2}) | (npc <1-12>) }][ force ] This reloads the cards in the

designated slot.

Parameter descriptions:


mpc The reloaded object is a main control board.

{t1|t2} t1 is the upper main control slot and t2 is the lower main

control slot.

npc The reloaded object is a line card.

<1-12> Slot number of the line card.

force The value "force" indicates that the reload operation is

performed by force.


This example describes how to reload the whole system.

ZXR10#reload

Are you sure to reset the board?[yes/no]:y

BootROM 1.20








Status = MV_OK


KUBoot 2.0.10.P9-svn47 (Jan 6 2014 - 16:42:05) Marvell version: 2012_Q4.0

RAM Configuration:

Bank #0: 00000000 Bank #1: 00000000 Bank #2: 00000000 Bank #3: 00000000

relocation Offset is: 6ff15000



512 MiB

FPU not initialized

Modules Detected:





2-18







Client IP : 168.0.0.51

Netmask : 255.255.255.0

Server IP : 168.0.0.178


FTP User : 59

FTP Password :

Bootfile : HMPU.set

Enable Password :

MAC Address : 00.d0.d0.51.10.00

Loading.............................

2.4 Version Upgrade

2.4.1 Version Upgrading OverviewTerms referred to version upgrading are described below.

l Version: It is a general designation of the files required by system running.l Distribution set: It is a file that all versions are packed together according to some

rules.

Version upgrading means that in the current device, the runnings of all versions in eachcard are stopped, and each card uses the version coming from the new distribution set.

Generally, version upgrading is performed for the following two conditions,

l The old version does not support some functions.l The device fails to run because some special reasons.

If the version upgrading is not operated well, the upgrading will be failed, and the systemwill be halted in severe case. Therefore, themaintenance staffs have to read this documentand learn the steps for version upgrading before performing version upgrading.

On ZXR10 5900E, there are two version upgrading modes,

l Upgrade the whole software system by network model Upgrade the whole software system by FLASH mode

By powering off and restarting ZXR10 5900E, the runnings of all versions of each cardwill be stopped. After MPU system restarts, system downloads and analyzes the newdistribution set, meanwhile, it updates system version descriptions. Later, all cards requestand download the new version from MPU, and then they start up the new version. This isthe process of version upgrading.

2-19



2.4.2 Version Upgrading

Upgrading Version in Network Model Version Upgrading Perquisites

1. Prepare a PC that FTP sever software is installed. The PC acts as FTP server.Configure its IP address and make sure that PC and ZXR10 5900E managementinterface IP addresses are in the same network segment.

2. Create a user in FTP server. Configure password and file downloading directory.Save the new distribution set in the file downloading directory in FTP server. StartFTP server.

3. Connect serial port of ZXR10 5900E (CONSOLE port on MPU) to serial port ofFTP server with the console cable. Connect management interface of ZXR105900E (10/100/1000M interface on MPU) to network port of FTP server withEthernet cable. Make sure that the connections are correct.

4. Affirm the version number of the new distribution set file. In the last stage ofversion upgrading, confirm whether the upgrading is successful according to theversion number.

l Version Upgrading Steps

Perform the following steps to upgrade version.

1. In privilege mode, run reload, and then press Enter.2. Check whether the BOOT parameters are correct. If not, modify the BOOT

parameters as follows:

In the BOOT stage of the main control board MPU, do as follows:

a. When the following information is displayed, press any key to enter the BOOTsetting mode:Press any key toautoboot:3

b. When the following information is displayed, type y to start modifying theBOOT parameters:Hit any key to stop auto-boot: 0


Boot Location [0:Net,1:Flash,2:SD]: 0

Client IP : 128.7.8.222

Netmask : 255.255.0.0

Server IP : 128.7.8.159

Gateway IP : 128.7.8.159

FTP User : zxr10_hsmp

FTP Password :

Bootfile : bjmp.set

Enable Password :

Loading...

Descriptions of BOOT parameters:

2-20



BOOT Description

Boot Location Starting mode

Client IP IP address of network management

interface

NetMask Subnetwork mask

Server IP IP address of version file server

Gateway IP IP address of FTP gateway

FTP User FTP user name

FTP Password FTP password

Bootfile Version file name

Enable Password Enable password (required when the user

needs to enter the privilege mode from

the user mode).

c. After modifying the parameters, type b to start the system:[Zxr10 Boot]: b

3. After the system is started, enter the OAM man-machine interaction interface andrun show version to see whether the displayed version number is consistent withthe version number of the newly released version set file. If yes, it indicates thatthe upgrade succeeded; otherwise, it indicates that the upgrade failed.

Run show version. The version number is "V3.00.10.B8" printed below:

ZXR10(config)#show version



Compiled 2015-01-09, 08:11:02




cpu 0












2-21



Board PCB : V1.00

Upgrading the Complete Set Software System Through the Flashl Version Upgrading Perquisites

1. Prepare a PC that FTP sever software is installed. Set the IP address of thePC and make sure that the PC and ZXR10 5900E management interface IPaddresses are in the same network segment.

2. Create a user on the FTP server. Set the password and a file download folder.Place the newly released version set file in this folder, and then start the FTPserver.

3. Connect the serial port of ZXR10 5900E (CONSOLE port on theMPU) to the serialport of PC with a serial port cable. Connect the management interface of ZXR105900E (10/100/1000M interface on MPU) to the network port of the PC with anEthernet cable.

4. Affirm the version number of the newly released version set file. In the last stageof version upgrading, check whether the upgrading is successful according to theversion number.

l Version Upgrading Steps1. Copy the version set file (for example, bjmp.set) to the Flash of the switch through

FTP:copy ftp vrf mng //128.7.8.159/bjmp.set@zxr10:zxr10 root: /flash/img/bjmp.set

Now, the bjmp.set file can be seen in the img directory of the Flash. Run reloadto reload the system.

2. Modify the value of Boot Location among BOOT parameters to 1, so that theversion can be loaded from the Flash. In addition, setBootfile to the img directoryof the Flash. After that, run b to load the system. Then the system can start thenew version in the img directory as follows:ZXR10#reload

Are you sure to reset the board?[yes/no]:y

BootROM 1.20








Status = MV_OK


KUBoot 2.0.10.P9-svn47 (Jan 6 2014 - 16:42:05)


RAM Configuration:



2-22





512 MiB

FPU not initialized

Modules Detected:








[boot]: c

'.' = clear field; '-' = go to previous field; '^' = quit

Boot Location [0:Net,1:Flash,2:USB]: 0 1

Client IP : 168.0.0.51

Netmask : 255.255.255.0

Server IP : 168.0.0.178


FTP User : 59

FTP Password :

Bootfile : HMPU.set

Enable Password :

Save parameter to nvram success.

[boot]:

[boot]: b


Client IP : 168.0.0.51

Netmask : 255.255.255.0

Server IP : 168.0.0.178


FTP User : 59

FTP Password :

Bootfile : HMPU.set

Enable Password

3. After the system is started, enter the OAM man-machine interaction interface andrun show version to see whether the displayed version number is consistent withthe version number of the newly released version set file. If yes, it indicatesthat the upgrade succeeded; otherwise, it indicates that the upgrade failed. Thecommand and method are the same as those in "Upgrading Version in NetworkMode".

2-23



2.5 VSC Configuration

2.5.1 VSC OverviewAs a network virtualization technology, the Virtual Switch Cluster (VSC) is used to combinemultiple single devices into a virtual one. These combined devices are interconnectedthrough VSC boards, and discover each other through the Link Layer Discovery Protocol(LLDP). Through a specific mechanism, one of these devices is elected as the primarynode, and the rest of devices are forced to assume the role of forwarding messages.

In general cases, the device role election mechanism elects the device with the smallestnumber as the primary device. If the primary device or the link between the devices in theVSC system is down, the secondary device immediately takes over the VSC system. Thismechanism ensures normal system operation and traffic forwarding.

The ZXR10 5900E supports creating the VSC system through the configuration. The VSCconfiguration items include the operation mode, member number, VSC domain, VSC portand conflict detection. The ZXR10 5900E also supports the display of the configurationand operation information of the VSC system.

VSC-related terms are as follows:1. Running mode: independent or VSC.

l Independent mode: In this mode, the device can only operate as a single PC,meaning that it cannot form a VSC with other devices.

l VSC mode: In this mode, the device can form a VSC with other devices throughinterconnection.

2. Role: If the device operates in VSC mode, it can have the Master or Slave role basedon the function.l Master: manages the VSC system.l Slave: operates as the standby device of the master device.

If the master device is faulty, the system elects a new master device from slavedevices to take over the services of the original master device. A VSC has onlyone master device, and the remaining member devices are slave devices.

3. VSC domain: Domain is a logical concept. A VSC is formed after devices areinterconnected through VSC links. A set of these member devices is a VSC domain.One device can belong to only a VSC domain.

4. Member ID: uniquely identifies member devices in the VSC.5. Stack port: port for communication between devices when two or more devices are

used to form the VSC system. Aggregated by 10 GE or 40 GE ports, these ports arelogical ports similar to smartgroup ports.

6. VSC aggregation: After two independent VSC systems (typically two single VSCsystems) operating stably discover each other through a physical connection and thenecessary configuration, they are aggregated into a VCS system. This process isknown as VSC aggregation.

7. VSC splitting: After a VSC system is formed, if a link between the stack ports of twodevices is faulty, the physical connection between the two devices is broken. In this

2-24



case, the VSC system is split into two independent VSC systems. This process isknown as VSC splitting.

8. MAD detection: After the VSC is split, two VSC systems have the same layer-3configuration (such as the IP address), causing address confliction and faultescalation.

In VSC splitting, a mechanism is therefore required to enhance system availability, sothat multiple VSCs in the network can be detected and the corresponding operationscan be performed to reduce the impact on services.

MAD detection is a mechanismmeeting the above requirements. It can detect addressconfliction, resolves faults, and restores the network. However, it does not detect linkfaults.

2.5.2 Configuring the VSC SystemThe basic VSC configurations (including the operation modes and the member numbers)are stored on the Non-Volatile Random Access Memory (NVRAM), and can be accessedafter the system is powered on. Other VSC configurations are stored under the /flash/vscm/vscmCfg.dat directory on the flash device.

To configure the VSC system, run the following commands on the ZXR10 5900E:

Command Function

ZXR10(config-vsc)#vsc mode {cluster|

alone}[shelfid]

This sets the operation mode of the device,

required.

alone: the single-server mode, which means

that the device operating in this mode cannot

co-operate with other devices.

cluster: the cluster mode, which means that the

device operating in this mode can co-operate with

other devices (cluster members).

shelfid: the rack number of the VSC member,

optional. If this parameter is not set, the current

rack is configured by default.

ZXR10(config-vsc)#vsc memberid

<memberid>[shelfid]

This sets the ID of the VSC member.

memberid: ID of the VSC member, range: 0 to

15, required.

shelfid: rack number of the VSC member,



2-25



Command Function

ZXR10(config-vsc)#vsc domain <domainid>[sh

elfid]

This sets the ID of the VSC domain.

domainid: ID of the VSC domain, range: 1 to

255, required.




ZXR10(config-vsc)#vsc mad_port <port

id><interface>

This sets a mad port.

<port id>: MAD port ID, range: 1–2.

<interface>: Gigabit ethernet interface, required.

ZXR10(config-vsc)#vsc priority <priority>[shelf

id]

Sets the VSC election priority.

<priority>: election priority, range: 1–255,

required.

shelfid: shelf ID of the VSC memberm optional

on which this configuration is applied. If this

parameter is not set, the default value is the

current shelf.

ZXR10(config-vsc)#vsc port_group <group id

>[add | remove]<interface>

Sets link binding in the port group of the VSC.

<group id >: required, range: 1–2.

add: indicates to add an interface to the specified

port group.

remove: indicates to delete an interface from the

specified port group.

ZXR10(config-vsc)#vsc write [shelfid] This saves the VSC configuration.




ZXR10(config-vsc)#vsc clear [shelfid] Clears VSC configuration. This command is

applied immediately.

shelfid: shelf ID of the VSC memberm optional

on which this configuration is applied. If this

parameter is not set, the default value is the

current shelf.

Example1. Run the following commands to set the operation mode of the device to VSC:

ZXR10(config)#vsc

ZXR10(config-vsc)#vsc mode ?

alone alone mode

vsc Cluster mode

ZXR10(config-vsc)#vsc mode vsc

ZXR10(config-vsc)#vsc write

2-26



ZXR10(config-vsc)#

2. Run the following commands to set the ID of the VSC member:ZXR10(config)#vsc

ZXR10(config-vsc)#vsc memberid ?

<0-15> Vsc member id

ZXR10(config-vsc)#vsc memberid 0


ZXR10(config-vsc)#

3. Run the following commands to set the ID of the VSC domain:ZXR10(config)#vsc

ZXR10(config-vsc)#vsc domain ?

<1-255> Vsc domain

ZXR10(config-vsc)#vsc domain 20


ZXR10(config-vsc)#

4. Run the following commands to set a VSC link port:ZXR10(config-vsc)#vsc port_group ?

<1-2> Vsc port group number

ZXR10(config-vsc)#vsc port_group 1 ?

add Add port to vsc port group

remove Remove port from vsc port group

ZXR10(config-vsc)#vsc port_group 1 add ?

xlgeis- XLGigabit ethernet interface

ZXR10(config-vsc)#vsc port_group 1 add xlgeis-0/1/1/3/1


ZXR10(config-vsc)#

5. Run the following commands to add a mad port:ZXR10(config)#vsc

ZXR10(config-vsc)#vsc mad_port ?

<1-2> Vsc mad port number

ZXR10(config-vsc)#vsc mad_port 1 gei-0/1/1/1


2.5.3 Maintaining VSCTo view information of the VSC system, run the following commands on the ZXR10 5900E:

Command Function

ZXR10#show vsc config [shelfid] Displays the current VSC configuration.

ZXR10#show vsc next [shelfid] Displays the VSC configuration that will be in

effect after the system reboots.

ZXR10#show vsc information Displays the current operation information of the

VSC system, such as the active and standby

statuses, link statuses and the connection period.

2-27



Command Function

ZXR10#show vsc link Displays the current statuses of the VSC links.

A description of the parameter is as follows:


shelfid Rack number of the VSC member, optional.

If this parameter is not set, the information of the

current rack is displayed by default.

Example1. Run the following command to display the current VSC configuration:

ZXR10(config-vsc)#show vsc config

Mode: cluster

Memberid: 4

Domain: 100

Priority: 16

Mad port1: gei-4/1/1/27

Mad port2: gei-4/1/1/28

Vsc group number: 2

Groupid: 1

Group name: vsc group 1

Port number: 1

Port list:

Shelf Slot Subslot Port

---------------------------------

4 1 3 1

Groupid: 2


Port number: 1

Port list:


---------------------------------

4 1 3 2

2. Run the following command to display the current operation information of the VSCsystem:ZXR10(config-vsc)#show vsc information

Vsc domain : 100

Master MP : 4

Slave MP : 2

Vsc setup time : 2010/01/01-0:40:6

Vsc running time : 0d/5h/35m/18s

3. Run the following command to display the VSC configuration that will be in effect whenthe system reboots:

2-28



ZXR10(config-vsc)#show vsc next

Mode: cluster

Memberid: 2

Domain: 0

Priority: 0

Mad port1: none

Mad port2: none

Vsc group number: 2

Groupid: 1


Port number: 1

Port list:


---------------------------------

2 1 3 1

Groupid: 2


Port number: 1

Port list:


---------------------------------

2 1 3 2

4. Run the following command to display current information of the VSC links:ZXR10(config-vsc)#show vsc link

device 8 port 1 <---> device 2 port 1


2.5.4 VSC Configuration Example

Configuration DescriptionStack ports of the ZXR10 5900E are located on stack sub-cards. Physical stack interfacesmust support higig operating mode. Figure 2-1 shows the VSC network topology.

2-29



Figure 2-1 VSC Configuration Example

Note:

After the VSC function is configured, the vsc write command must be executed to save theconfiguration, so that the configuration is valid if the device is restarted.

The show vsc config command isused to display the current valid VSC configuration.

The show vsc next command is used to display the saved VSC configuration that is appliedafter the device is restarted.

Configuration FlowStart the three devices. Ensure that the stack interfaces are up. Configure the VSCfunction on S1, S2, and S3.

1. Set the three devices to operate in VSC mode.2. Set the three devices to be in the same VSC domain.3. Set different member IDs for the three devices.4. Set different priorities for the devices. The device with the highest priority operates as

the master device, the device with the second highest priority operates as the slavedevice, and the left device operates as the standby device.

5. Configure stack ports. A maximum of two port groups are supported. Each port groupcontains only one port.

6. Save the VSC configuration.7. Restart the devices. After the devices are restarted, the VSC system is created.

Configuration CommandsThe configuration on S1 is as follows:

2-30



S1(config)#vsc

S1(config-vsc)#vsc mode vsc

S1(config-vsc)#vsc domain 10

S1(config-vsc)#vsc memberid 1

S1(config-vsc)#vsc priorty 255

S1(config-vsc)#vsc port_group 1 add xgeis-0/1/3/1


The configuration on S2 is as follows:

S2(config)#vsc







S2(config-vsc)#vsc write

The configuration on S3 is as follows:

S3(config)#vsc







S3(config-vsc)#vsc write

Note:

For the initial configuration, the shelf ID of each device is 0. After the devices are restarted,the configured shelf IDs (namely, member IDs) of the devices are valid.

Configuration VerificationAfter the three devices are restarted, only one of the devices (in general, S1) enterscommand line mode. If all the devices enter command line mode or no device enterscommand line mode, the VSC system is not created successfully. Run the show processoror show interface brief command on S1. Information about S2 and S3 is displayed.

S1#show processor

================================================================================

================================================================================

M : Master CPU

S : Slave CPU

2-31











================================================================================

================================================================================


================================================================================

MP(M) 1 1 0 N/A 26% 29% 25% 37% 2048 704 65.584%

--------------------------------------------------------------------------------

MP(S) 2 1 0 N/A 12% 12% 12% 17% 2048 918 55.171%

--------------------------------------------------------------------------------

MP(W) 3 1 0 N/A 15% 15% 15% 17% 2048 918 60.251%

--------------------------------------------------------------------------------

---------------------------------------------------------------------------

S1#show interface brief

Interface Portattribute Mode BW(Mbps) Admin Phy Prot Description

gei-1/1/1/1 electric Duplex/full 1000 down down down























2-32








xlgeis-1/1/3/1 electric Duplex/full 40000 up up up

xlgeis-1/1/3/2 electric Duplex/full 40000 up down down







































2-33

























View the basic VSC information.

S1#show vsc information

Vsc domain : 10

Master MP : 1

Slave MP : 2

Vsc setup time : 2010/01/01-0:41:3

Vsc running time : 0d/0h/35m/5

View the status of VSC links.

S1#show vsc link




2-34


Chapter 3Network ManagementTable of Contents

SNMP Configuration...................................................................................................3-1NetFlow Configuration..............................................................................................3-13SFlow Configuration .................................................................................................3-28SysLog Configuration ...............................................................................................3-33Port Mirroring Configuration......................................................................................3-36Alarm Module ...........................................................................................................3-41Performance Management Module...........................................................................3-46Time Range Module Configuration ...........................................................................3-50

3.1 SNMP Configuration

3.1.1 SNMP OverviewSimple Network Management Protocol (SNMP) is the most popular Network ManagementSystem (NMS) protocol. SNMP module locates at the highest layer in the whole routersystem, which belongs to the Transfer Control Protocol/Internet Protocol (TCP/IP) stackapplication layer. Administrators use SNMP to as a main way to operate, control andmaintain devices. In order to perform network management, users use NMS software tosend and receive SNMP packets in the SNMP modules (agent) between the managednetwork elements and the management station.

The basic principle of SNMPnetworkmanagement is: allocate a unique ID (that is, theOID)to the objects to be managed in switch respectively. The allocation of OID is determined ina unified way by Request For Comments (RFC). When users need to read or modify thevalue of an object, it sends the object OID and operation type (read or write) as a SNMPrequest packet to switch. SNMP agent locating at switch finds the detailed object dataaccording to the OID, performs the corresponding operation and then sends the result asSNMP response packet to users.

Network management station realizes the communication by exchanging SNMP packets.To ensure the simplicity of SNMP protocol, User Datagram Protocol (UDP) is used tobe the transmission protocol. Considering the extensibility of SNMP protocol, othertransmission protocols also can be used. However, UDP is still the recommendedprotocol. Transmission protocol should use UDP as much as possible, if possible. EachSNMP packet must be able to be transmitted in every UDP packet.

3-1



3.1.2 Configuring SNMPTo configure SNMP on the ZXR10 5900E, perform the following steps.


ZXR10(config)#snmp-server access-list

{ipv4|ipv6}<acl-name >

Uses the configured ACL to control hosts

to access the SNMP system.

1

ZXR10(config)#no snmp-server access-list Cancels ACL control.

ZXR10(config)#snmp-server community

<community-name>[view <view-name>][ro | rw][{[ipv4-access-list<acl-name>][ipv6-access-list<acl-name>]}]

Configures an SNMP packet community.2

ZXR10(config)#no snmp-sever community

<community-name>

Deletes an SNMP packet community.

ZXR10(config)#snmp-server context <context> Defines an SNMP context name.

<context>: 1-30 characters.

3

ZXR10(config)#no snmp-server context

<context>

Deletes the SNMP context.

ZXR10(config)#snmp-server enable inform

[<inform-type>]

Enables the agent to send notifications

and specifies the type of notifications.

The notification type can be one of the

following:

l BGP

l OSPF

l RMON

l SNMP

l stalarm

l VPN

l FTP-TFTP

l CONFIG

4

ZXR10(config)#no snmp-server enable inform

[<inform-type>]

Disables the agent to send notifications.

ZXR10(config)#snmp-server enable trap

[<trap-type>]

Enables the agent to send traps and sets

the type of traps.

The trap type can be one of the following:

l BGP

l OSPF

l RMON

l SNMP

l stalarm

l VPN

l FTP-TFTP

5

3-2


Chapter 3 Network Management


l CONFIG

ZXR10(config)#no snmp-server enable trap

[<trap-type>]

Disables the agent to send traps.

ZXR10(config)#snmp-server input-limit

<limit-para>

Sets the frequency (packet per second)

at which the SNMP server processes

packets, range: 100 to 1000, default:

200.

6

ZXR10(config)#no snmp-server input-limit Recover the default frequency (packet

per second) at which the SNMP server

processes packets.

ZXR10(config)#snmp-server engine-id

<engineid>

Specifies the SNMP local engine ID.

The SNMP engine, which is the core part

of an SNMP entity, sends, receives and

validates SNMPmessages, extracts PDU

assembly message, and communicates

SNMP application programs.

The local engine ID is 1 to 24

characters long. The default setting is

830900020300010289d64401, which

must be written in hex format.

7

ZXR10(config)#no snmp-server engine-id Deletes the local engine ID of the SNMP

server.

ZXR10(config)#snmp-server group

<groupname> v3 {auth | noauth|priv}[context<context-name>|{ match-prefix | match-exact

}][read <readview>][write <writeview>][notify<notifyview>]

Configures a new SNMP group (that is,

mapping SNMP users to an SNMP view).

8

ZXR10(config)#no snmp-server group

<groupname> v3 {auth | noauth | priv}[context<context-name>]

Deletes the SNMP group.

ZXR10(config)#snmp-server host

[ vrf <vpnname>]{<ipv6addr>|<ipv4addr>}{{trap|inform}} version {1|2c|3

{noauth|auth|priv}}<communitystring>[udp-port<udpport>][{[snmp],[bgp],[mac],[ospf],[stp],[pp

p],[arp],[rmon],[udld],[cfm],[efm],[lacp],[mc-ela

m],[tcp],[sctp],[stalarm],[cps],[interface],[acl],[fi

b],[pim],[isis],[rip],[msdp],[aps],[config],[am],[u

m],[system],[ldp],[pwe3],[vpn],[mpls-oam],[ptp],[t

unnel-te],[radius],[dhcp],[bfd],[ippool],[ntp],[ss

Configures the destination for receiving

SNMP notifications. The snmp-server

host command should be used along with

the snmp-server enable command.

9

3-3




m],[sqa],[ipsec],[cgn],[vrrp],[ftp_tftp],[ping-trac

e],[gm]}]

ZXR10(config)#no snmp-server host [ vrf<vpnname>]{<ipv6addr>|<ipv4addr>}{{[trap |

inform]}<communitystring>

Disables the host to receive SNMP

notifications.

ZXR10(config)#snmp-server packetsize

<pkt-size>

Sets the maximum length (in bytes) of

SNMP packets, range: 484 to 8192.

10

ZXR10(config)#no snmp-server packetsize Cancels the maximum length of SNMP

packets.

ZXR10(config)#snmp-server trap-source

<trapsrc-ipadr>

Configures the source IP address of all

traps.

11

ZXR10(config)#no snmp-server trap-source Cancels the source IP address of traps.

ZXR10(config)#snmp-server user

<username><groupname> v3 {encrypted

auth {md5 | sha}<auth-key>[priv des56 <privacy-key>]|[auth{md5|sha}|<auth-password>|[priv

des56|<privacy-password>]]]

Configures an SNMPv3 user.12

ZXR10(config)#no snmp-server user

<username>

Cancels the configured SNMPv3 user.

ZXR10(config)#snmp-server view

<view-name><subtree-id>{included | excluded}

Defines an SNMP view.13

ZXR10(config)#no snmp-server view

<view-name>[<subtree-id>]

Cancels the configured SNMP view.

ZXR10(config)#snmp-server security block <B

lock-Second><Detect-Try><Detect-Second>[when<Startup-Try>|< Startup-Second>]

Enables the security function. The SNMP

security function is disabled by default.

14

ZXR10(config)#no snmp-server security block Disables the configured security function.

ZXR10(config)#snmp-server security

dynamic-trust-user idle-timeout <Idle-Timeout>

Sets the aging time (in seconds) of a

dynamic trust user, range: 1-65535,

default: 1800.

15

ZXR10(config)#no snmp-server security

dynamic-trust-user idle-timeout

Restores the default aging time of the

dynamic trust user.

16 ZXR10(config)#snmp-server security dynamic-t

rust-user clear {<ipv4-addr>|<ipv6-addr>}

Deletes a dynamic trust user manually.

3-4




ZXR10(config)#snmp-server security on-failure

log [and <trap>]

17


on-failure

Generates a log and sends a trap when

a failure occurs in the community string

attempting to communicate with the

server.

To disable the function, use the no form

of this command.

ZXR10(config)#snmp-server security

static-trust-user {<ipv4-addr>|<ipv6-addr>}

Configures a static trust user manually.18


static-trust-user {{<ipv4-addr>|<ipv6-addr>}|all}

Deletes the configured static trust user.

ZXR10(config)#snmp-server version {v1 | v2c |

v3} enable

Enables SNMP v1, v2c or v3.

By default, SNMP v1, v2c and v3 are

disabled.

19

ZXR10(config)#no snmp version {v1 | v2c | v3} Disables SNMP v1, v2c or v3.



<community-name> Name of the community string, range: 1-32 characters.

view <view-name> View name of the community string, range: 1-32 characters.

ro | rw If ro is specified, the MIB object can be read only. If rw is

specified, the MIB object can be read and written.

acl-name Name of the IPv4/IPv6 ACL.



<groupname> Group name, range: 1-32 characters.

v3 Specifies that the group is used for v3.

auth Packets are authenticated only.

noauth Packets are not authenticated and encrypted.

priv Packets are authenticated and encrypted.

context Specifies a context for the group.

match-prefix The context matching mode is prefix mode.

match-exact The context matching mode is exact mode.

read <readview> Defines a read view. The length is 1 to 32 characters.

write <writeview> Defines a write view. The length is 1 to 32 characters.

notify <notifyview> Defines a notify view. The length is 1 to 32 characters.

3-5





vrf <vpnname> VRF name, range: 1-32 characters.

<ipv4addr>|<ipv6addr> IPv4/IPv6 address of the host.

trap Sends traps to the host.

inform Sends notifications to the host.

version SNMP version.

1 SNMP version number.

2c SNMP version number.

3 SNMP version number.

auth Enables authentication on the packets to be sent.

noauth Disables authentication on the packets to be sent.

priv Encrypts the packets to be sent

<communitystring> Community string name or SNMPv3 user name, range: 1

to 32 characters.

udp-port <udpport> UDP port number for sending traps, range: 1-65535.

BGP, OSPF, RMON, SNMP,

STALARM, VPN, and so on

Trap or notification type.



<username> SNMP user name, range: 1-32 characters.

<groupname> Name of the group associated with the user, range: 1-32

characters.

v3 The user is for SNMPv3.

encrypted The password to be entered is encrypted. This parameter,

however, is not recommended unless necessary.

auth The user has the authentication permission.

md5 Uses HMAC-MD5-96 as the authentication mode.

sha Uses HMAC-SHA-96 as the authentication mode.

<auth-password> Authentication password (or authentication key), range: 1-32

characters.

priv The user has the encryption permission.

des56 Uses CBC-DES as the encryption mode.

<priv-password> Encrypted password, range: 1-32 characters.

3-6





<view-name> View name, range: 1-32 characters.

<view-subid> Specifies the MIB subtree ID or MIB subtree node name as

the view name, range: 1-79 characters.

included | excluded Includes or excludes the subtree.



<Block-Second> Block time (the length of the idle period, in seconds), range:

1-65535.

<Detect-try> Maximum number of times that the network management

system fails to connect to the peer device in monitoring

mode, range: 1-65535.

<Detect-Second> Maximum detection time (in seconds) of the network

management system in monitoring mode, range: 1-65535.

<Startup-Try> Maximum number of times that the network management

system fails to connect to the peer device in normal mode,

range: 1-65535, default: 50.

<Startup-Second> Maximum detection time (in seconds) of the network

management system in normal mode, range: 1-65535,

default: 60.



<Idle-Timeout> Aging time (in seconds) of the dynamic trust user, range:

1-65535, default: 1800.



<ipv4addr>|<ipv6addr> IPv4/IPv6 address of the dynamic trust user.



<log> Enables the generation of logs. By default, the function is

disabled.

3-7




<trap> Enables the sending of traps. By default, the function is

disabled.



<ipv4addr>|<ipv6addr> IPv4/IPv6 address of the static trust user.

all IP addresses of all static trust users.

3.1.3 Maintaining SNMPTo maintain SNMP on the ZXR10 5900E, run the following commands.

Command Function

ZXR10#show snmp Displays SNMP state attributes.

ZXR10#show snmp config Displays configurable SNMP state attributes.

ZXR10#show snmp engine-id Displays local SNMP engine IDs.

ZXR10#show snmp group Displays the information of SNMP groups.

ZXR10#show snmp security Displays the configuration related to SNMP

security.

ZXR10#show snmp security failures Displays the IP addresses that errored

communities attempt to log in to and number of

attempts in SNMP detection mode.

ZXR10#show snmp security trust-users Displays the dynamic trust users learnt by SNMP

and configured static trust users.

ZXR10#show snmp user Displays the information of SNMP users.

The following is sample output from the show snmp command:

ZXR10#show snmp

0 SNMP packets input

0 Bad SNMP version errors

0 Unknown community name

0 Illegal operation for community name supplied

0 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

0 Get-next PDUs

0 Set-request PDUs

0 SNMP packets output

3-8



0 Too big errors (Maximum packet size 8192)

0 No such name errors

0 Bad values errors

0 General errors

0 Response PDUs

0 Trap PDUs SNMP



SNMP packets input SNMP input packet.

Bad SNMP version errors SNMP version error.

Unknown community name Unknown community name.

Illegal operation for community name

supplied

Illegal community name.

Number of requested variables Number of requested variables returned.

Number of altered variables Number of alarm variables.

Get-request PDUs Number of times that get packets are sent.

Get-next PDUs Number of times that get-next packets are sent.

Set-request PDUs Number of times that set packets are sent.

SNMP packets output Number of bytes in SNMP packets.

Too big errors An error is reported when the number of bytes in the packet

to be sent exceeds the packetsize value.

Maximum packet size 8192 The maximum size of a packet is 8192.

No such name errors Number of errors due to the user having no permissions to

access the system.

Bad values errors Invalid operation, and wrong parameters are set.

General errors General errors.

Response PDUs Number of times that response packets are sent.

Trap PDUs SNMP Number of times that traps packets are sent.

The following is sample output from the show snmp config command:

ZXR10#show snmp config

snmp-server community encrypted d6ddeaa4dab74523b246fe346c94c31ae58b79ad47763964

38ea1e9bb01a9ef3 view AllView ro

snmp-server community encrypted 18dc5c0ac9ddc78ad8466907ed57a25f2b968fadbcbebe9b

024814893ae08adc view DefaultView ro

snmp-server engine-id is 830900020300010289d64401

snmp-server packetsize is 8192

snmp-server view AllView internet included

3-9



snmp-server view DefaultView system included

snmp-server security dynamic-trust-user idle-timeout 1800

snmp-server listen-port is 161

snmp-server input-limit 200

ZXR10(config)#



community encrypted Community encrypted.

engine-id Engine ID.

packetsize The size of SNMP packer.

AllView View name, range: 1–32 characters.

dynamic-trust-user Dynamic trust-user.

idle-timeout 1800 Sets the idle timeout (in seconds) to 1800.

listen-port Listen port.

input-limit 200 Sets the frequency (packet per second) at which the SNMP

server processes packets, range: 100 to 1000, default: 200.

The following is sample output from the show snmp engine-id command:

ZXR10#show snmp engine-id

the engine-id:830900020300010289d64401



engine-id Engine ID.

The following is sample output from the show snmp group command:

ZXR10#show snmp group

groupName :a

sec_Model :v3

sec_Level :AUTH

readView :DefaultView

writeView :<no writeView specified>

notifyView:AllView

rowStatus :ACTIVE

contextName :a

contextMatch :match-exact



groupname Group name

3-10




sec_Level Security level

readView Read-view level

writeView Write-view level

notifyView Notify-view level

rowStatus Status of the current row

contextName Context name

contextMatch Context matching mode

The following is sample output from the show snmp security command:

ZXR10#show snmp security

Access list about ipv4 has been configured.

No access list about ipv6 has been configured.

No static trust-user has been configured.

No dynamic trust-user has been learned.

The max idle timeout of dynamic trust-user is 65535.

All failed requests are logged.

Router is enable to watch for Attacks.

If more than 1 request failures occur in 65535 seconds or less,requests will be

disabled for 65535 seconds.

Router presently in Quiet-Mode, will remain in Quiet-Mode for 65530 seconds.

Denying requests from all sources, except from trust-user

The following is sample output from the show snmp security failures command:

ZXR10#show snmp security failures

Information about failures with the device

Source IPAddr Count Last TimeStamp

192.168.110.11 1 14:28:49 UTC Wed Sep 8 2010

The following is sample output from the show snmp security trust-users command:

ZXR10#show snmp security trust-users

Information about trust-users's with the device

Source IPAddr Last TimeStamp max-inac tive(seconds) dynamic/static

169.1.110.11 - - static

The following is sample output from the show snmp user command:

ZXR10#show snmp user

username :zte

engine-id :830900020300010289d64401

auth_type :NONE

group_name :nanjing(v3)

encryptType:NONE

storageType:NONVOLATILE

3-11



row_status :ACTIVE

3.1.4 SNMP Configuration Example

Configuration DescriptionSNMP is the most popular NM protocol. By using SNMP, people can use a NM server tomanage all network devices, as shown in Figure 3-1.

Figure 3-1 SNMP Configuration Example Topology

Configuration Thought1. Configure SNMP packet community. SNMPv1/v2c uses community authentication

mode. SNMP community is named by character string. Community has accessprivileges, read-only or read-write.

2. Designate view name to the configured community string. Specify the default viewto the community if the view keyword uses the default setting. Specify ro privilege tocommunity if uses default setting in ro | rw keyword. It is only permitted that usersperform operation in the permitted view range no matter that ro or rw is specified. Theoperation range is determined by view. Use DefaultView if view parameter is omitted.Use ro privilege if ro/rw parameter is omitted.

3. Configure trap. Configure the type of trap to be sent and the sending destination host.Trap is a kind of message without request sent by the managed device to NMS. It isused to report some emergent and important events. By default, all kinds of trap arepermitted to send.

4. Configure SNMP v3 group and user if SNMP v3 is used.

Configuration CommandsThe configuration of router is shown below,

ZXR10(config)#snmp-server packetSize 1400

ZXR10(config)#snmp-server engine-id 830900020300010289d64401

ZXR10(config)#snmp-server community public view AllView ro

ZXR10(config)#snmp-server host 61.139.48.18 inform version 2c public

udp-port 162 snmp

ZXR10(config)#snmp-server enable trap SNMP

ZXR10(config)#snmp-server enable trap VPN

ZXR10(config)#snmp-server enable trap BGP

ZXR10(config)#snmp-server enable trap OSPF

3-12



ZXR10(config)#snmp-server enable trap RMON

ZXR10(config)#snmp-server enable trap STALARM

ZXR10(config)#snmp-server enable inform SNMP

ZXR10(config)#snmp-server enable inform VPN

ZXR10(config)#snmp-server enable inform BGP

ZXR10(config)#snmp-server enable inform OSPF

ZXR10(config)#snmp-server enable inform RMON

ZXR10(config)#snmp-server enable inform STALARM

ZXR10(config)#snmp-server version v2c enable

Configuration VerificationUse the show command to check up the configuration.

ZXR10(config)#show snmp config

snmp-server packetsize 1400

snmp-server engine-id 830900020300010289d64401

snmp-server community public view AllView ro

snmp-server view AllView 1.3.6.1 included

snmp-server view DefaultView 1.3.6.1.2.1.1 included

snmp-server host 61.139.48.18 trap version 2c public udp-port 162

snmp-server host 61.139.48.18 inform version 2c public udp-port 162 snmp

snmp-server enable inform SNMP

snmp-server enable inform VPN

snmp-server enable inform BGP

snmp-server enable inform OSPF

snmp-server enable inform RMON

snmp-server enable inform STALARM

snmp-server enable trap SNMP

snmp-server enable trap VPN

snmp-server enable trap BGP

snmp-server enable trap OSPF

snmp-server enable trap RMON

snmp-server enable trap STALARM

3.2 NetFlow Configuration

3.2.1 NetFlow Overview

Introduction to NetFlowNetFlow is a protocol used to monitor network traffic launched by Cisco. Netflow can traceand measure each flow accurately. It brings the following applications,

l Network layout

3-13



Netflow can count the information of network flow for a long time. Therefore, it cantrace and estimate the trend of network flow increasing or decreasing. Thus, addor remove route devices or upgrade or degrade the bandwidth of route devices ifrequired. In this way, the network operation is more reasonable.

l Analyze new application

Netflow collects the network usage information of a new application protocol. Bymeans of information analyzing, network resource can be allocated to the newapplication reasonably.

l Network monitor

Netflow has real time network monitor ability. It can locate fault by providinginformation when network has fault, or it can find potential network problem.

NetFlow PrincipleTo realize network data collection, NetFlow performs the following task,

1. Configure NetFlow service on many interfaces on a switch to collect packets whichpass through these interfaces. To reduce system load, set a sample rate on both ofingress and egress on the interfaces. For example, if the sample rate is 2000:1, thensample one packet from every 2000 packets. NetFlow can sample unicast, multicastor MPLS packets and so on respectively or hybridly.

2. NetFlow analyzes the sampled packet to obtain the following information,l Packet information: For example, source / destination IP address, TOS field,

source/ destination TCP/UDP port number and so on.l Route information: For example, next hop IP address.l Other information: Packet ingress / egress interface index, sample direction and

so on.

NetFlow takes flow as statistic object. The packets which belong to the same floware summarized and stored. NetFlow v5 uses octet to define the unique flow, andNetFlow v9 permits that user defines flow by itself. For example, user can use sourceand destination IP addresses to define a flow, then all the packets which have thesource and destination addresses are defined as a flow. People call the octet (sourceand destination IP addresses) as key field. User also can configure non-key field toobtain other information of the flow, such as packet number, bytes and next hop IPaddress.

3. Netflow has buffer. The sampled packets are stored at buffer at first. The size ofevery flow is the sum of all key fields and non-key fields. After a packet is analyzed,find whether the flow already exists according to its key filed. If it already exists, thenupdate the flow's non-key field. If it does not exist, add the new flow into buffer. Whenthe flow stored at buffer satisfies the following conditions, it will be sent to remoteserver.l Send all flow to server when buffer is full.

3-14



l A flow is inactive if there is no packet belongs to the flow in a given time. Sendthe flow to server. The given time is called active aging time. It can be configuredby user.

l For a long term active flow, the statistic information is sent to server once in awhile. The interval is called inactive aging time. It can be configured by user.

4. At present, ZXR10 5900E supports to send NetFlow v5, NetFlow v8 and NetFlow v9packets to server. Since the format of NetFlow v5 is fixed, Netflow v5 only output thefixed field flow information. NetFlow v9 supports user to customize key field or non-keyfield. The NetFlow v9 packet is based on module. The module includes user-definedkey field and non-key field, and every module has a unique module ID. NetFlow sendsmodule to server circularly. When a server receives the NetFlow v9 packet includingflow information, it will find the corresponding module according to the contained mod-ule ID.

5. On NetFlow server, the received flow information is usually stored at database, andNetFlow analysis software can analyze the entity data.

3.2.2 Configuring NetFlow

Configuring NetFlow OutputTo configure NetFlow output, perform the following steps.


1 ZXR10(config)#flow exporter <name> This creates a flow exporter

policy called name. There

are 200 different flow exporter

policies at most.

2 ZXR10(config-flow-exporter)#destination [vrf<name>]<ip-address>

This configures IP address of

NetFlow server.

3 ZXR10(config-flow-exporter)#export-protocol

{netflow-v5 | netflow-v8|netflow-v9}

This sets the format of NetFlow

output packets.

The format can be NetFlow v5,

v8 or v9. The default format is

v9.

When the format is set to

v5, the template must be

netflow-original.

When the format is v8, the

template must be netflow ipv4

protocol-port.

4 ZXR10(config-flow-exporter)#template data {refresh<packets>| timeout <seconds>}

This resendsmodule according

to packet number or time.

3-15




5 ZXR10(config-flow-exporter)#transport udp <port> This sets NetFlow output

protocol as UDP and the used

port number, the default value

is 2055



refresh <packets> Resend the module according to the number of output netflow

packets. The default value is 20, and the range is 1 to 600.

timeout <seconds> Resend the module according to time. Unit: second. The

default value is 600, and the range is 1 to 86400.

Configuring NetFlow TemplateTo configure NetFlow template, perform the following steps.


1 ZXR10(config)#flow record<name> This creates a flow record


are 100 different flow record

policies at most.

2 ZXR10(config-flow-record)#match flow {direction |

sample-rate}

This sets flow direction or

sample rate as key field.

3 ZXR10(config-flow-record)#match interface {input |

output}

This sets ingress or egress

index as key field.

4 ZXR10(config-flow-record)#match ipv4 {destination

address [mask | prefix minimum-mask <len>]| protocol |source address [mask | prefix [minimum-mask <len>]]|tos | version}

This sets IPv4-related

information as key field.

5 ZXR10(config-flow-record)#match routing

{vrfid{input|output}}

This sets the related route

information as key field.

6 ZXR10(config-flow-record)#match transport

{destination-port | source-port | tcp flags}

This sets information related

to the transport layer as key

fields.

7 ZXR10(config-flow-record)#collect counter {bytes

[long]| packets [long]}

This sets flow packets number

and bytes as non-key field.

8 ZXR10(config-flow-record)#collect flow {direction |

sample-rate}

This sets flow direction or

sample rate as non-key field.

9 ZXR10(config-flow-record)#collect interface {input |

output}

This sets ingress index or

egress index as non-key field.

3-16




10 ZXR10(config-flow-record)#collect ipv4 {destination

address [mask | prefix [minimum-mask <len>]]| protocol| source address [mask | prefix [minimum-mask <len>]]|tos | version}

This sets IPv4-related

information as non-key field.

11 ZXR10(config-flow-record)#collect routing

{vrfid{input|output}}

This sets route-related

information as non-key field.

12 ZXR10(config-flow-record)#collect timestamp

sys-uptime {first | last}

This sets the first or the last

switching time of flow as

non-key field.

13 ZXR10(config-flow-record)#collect transport

{destination-port | source-port | tcp flags}

This sets information related

to the transport layer to be

non-key fields.



destination address Set destination IP address as collective field

destination address mask Set subnetwork mask of destination IP address as collective

field

destination address prefix

minimum-mask <len>

Specify destination IP address with a certain length as

collective field, the len ranges 1 from 32

protocol Set protocol field of IPv4 packet header as collective field

source address Set source IP address as collective field

source address mask Set subnetwork mask of destination IP address as collective

field

source address prefix minimum-mask

<len>

Specify destination IP address with a certain length as

collective field, the len ranges 1 from 32

tos Set the tos field as the one to be collected.

version Set the version field of the IP packet header as the one to

be collected.



vrfid Set the VRF ID as the field to be collected.



destination-port Set TCP/UDP destination port number as collective field

3-17




source-port Set TCP/UDP source port number as collective field

tcp flags Set TCP flags as collective field (This field is not supported

at present)



bytes Set flow bytes as collective field. 4 bytes

bytes long Set flow bytes as collective field. 8 bytes

packets Set flow packet number as collective field. 4 bytes

packets long Set flow packet number as collective field. 8 bytes.



first Set the system power up time when flow arrives at cache at

the first time as the collective field. The unit is ms.

last Set the system power up time when flow arrives at cache at

the last time as the collective field. The unit is ms.

The descriptions of the parameters used by step 10, 12, and 14 are the same as that ofthe parameters used by step 4, 5, and 6.

Configuring NetFlow SamplingTo configure NetFlow sampling, perform the following steps.


1 ZXR10(config)#sampler <name> This creates a sampler policy

called name. There are 200

different sampler policies.

2 ZXR10(config-sampler)#mode {deterministic } 1-out-of<rate>

This sets sampling mode and

sampling rate.



deterministic Use deterministic sampling. That is, if the sampling rate is N,

then sample one packet from every N packets.

<rate> Sampling rate, in the range of 1000 to 8191.

3-18



Configuring NetFlow Monitor PolicyTo configure NetFlow monitor policy, perform the following steps.


1 ZXR10(config)#flow monitor <name> This creates a flow monitor


are 60 different flow monitor

policies.

2 ZXR10(config-monitor)#cache {entries <num>| timeout{active | inactive}<seconds>| type normal}

This sets cache information.

3 ZXR10(config-monitor)#exporter <name> This associates flow exporter

policy.

4 ZXR10(config-monitor)#record {<name>|netflow ipv4

protocol-port | netflow-original}

This sets the module to be

used.



entries <num> Set the size of buffer is num. The num represents that the

number of flow which can be stored at the buffer. The range

is 16 to 8192, and the default value is 4096.

timeout<seconds> Set active aging time. The unit is second, the range is 600 to

604800, and the default value is 1800.

timeoutinactive<seconds> Set inactive aging time. The unit is second, the range is 600

to 604800, and the default value is 1800.

type normal Set the mode to send cache to normal mode (that is, sending

data according to the values of cache timeout active and

inactive).

Description of the parameters in Step 3:


exporter <name> Associates a pre-set flow exporter policy. That is, the flow

monitor policy uses the flow exporter policy to output netflow

packets. If the flow exporter policy uses v5 output format,

the module used by the flow monitor has to be the pre-set

netflow-original



record <name> Use a pre-set flow record policy as module

3-19




record netflow-original Define v5 module in advance, the key field and non-key field

to be used have to be consistent with that of netflow v5.

netflow ipv4 protocol-port v8 module.

Configuring NetFlow InterfaceTo configure NetFlow interface, perform the following steps.


1 ZXR10(config)#interface <interface-name> This enters interface

configuration mode.

2 ZXR10(config-if)#ip flow monitor <name>[sampler<name>][unicast | multicast]{input | output}

This configures IP packets

sampling on interface.



ip flow monitor <name> Applies a pre-set netflow monitor policy on interface. The

configuration related to the monitor policy and cache size can

not be modified after the pre-sent netflow monitor policy is

applied. To modify the configuration, the flow monitor policy

has to be deleted first. The following items can be modified,

flow active and inactive aging time, output policy.

sampler <name> Applies a pre-set sampling policy. By default, use random

sampling and 1000:1 sampling rate if the sampling policy is

not used. The sampling policy can not be modified after it

is applied on interface.

unicast | multicast Set sampling packet type. The unicast means that sample

unicast packets, the multicast means that sample multicast

packets.

input Sample ingress packets

output Sample egress packets

3.2.3 Maintaining NetFlowTo maintain NetFlow on ZXR10 5900E, use the following command.

Command Function

ZXR10#show ip flow exporter [<name>] This shows flow exporter policy

information.

ZXR10#show ip flow interface [<name>] This shows interface configuration.

3-20



Command Function

ZXR10#show ip flow monitor [<name>] This shows flow monitor policy

information.

ZXR10#show ip flow record [<name>| netflow-original] This shows flow record policy

information.

ZXR10#show ip flow sampler [<name>] This shows sampler policy

information.

In all the outputs of the following commands, if the configurations are not the defaultconfigurations, the configurations will be displayed. The default configurations aredisplayed by beginning with the # mark.

This example shows what will be displayed after show ip flow exporter [<name>] is used.

ZXR10(config)#show ip flow exporter

flow exporter v5

transport udp 9995

export-protocol netflow-v5

#template data timeout 600

$

flow exporter v9

transport udp 9995

#export-protocol netflow-v9

#template data refresh 1

$

ZXR10(config)#show ip flow exporter v5

flow exporter v5

transport udp 9995


#template data timeout 600

$



transport udp 9995 The UDP port which receives netflow packet on server is

No.9995.

export-protocol netflow-v5 Output protocol is netflow v5

#template data timeout 600 The default retransmission time interval is 600 seconds

template data refresh 60 The module is retransmitted once when the flow exporter

outputs every 60 netflow packets.

This example shows what will be displayed after show ip flow interface [<interface-name>]is used.

3-21



ZXR10(config)#show ip flow interface

interface gei-0/1/1/1

ip flow monitor src_and_dst_addr input

ip flow monitor test sampler determin_2000 unicast output

$

ZXR10(config)#show ip flow interface gei-0/1/1/1


ip flow monitor src_and_dst_addr input

ip flow monitor test sampler determin_2000 unicast output

$



interface gei-0/1/1/1 Configure netflow service on the interface gei_0/1/1/1

ip flow monitor src_and_dst_addr

input

Sample ingress IPv4 packets, the used flow monitor policy is

src_and_dst_addr, and the default sampling rate is 1000:1,

random sampling. By default, sample unicast and multicast

packets.

ip flow monitor test sampler

determin_2000 unicast output

Sample egress IPv4 unicast packets, the used flow monitor

policy is test, the sampler policy used is determin_2000.

This example describes what will be displayed after show ip flowmonitor [<name>] is used.

ZXR10(config)#show ip flow monitor

flow monitor test

#cache entries 4096

cache timeout active 6000

#cache timeout inactive 1800

#cache timeout update 1800

#cache type normal

record netflow-original

exporter v5

$

flow monitor src_and_dst_addr

cache entries 1024

#cache timeout active 1800



#cache type normal

record src_and_dst_addr

exporter v9

$

ZXR10(config)#show ip flow monitor test

flow monitor test

3-22



#cache entries 4096




#cache type normal


exporter v5

$



#cache entries 4096 The cache size used by flow monitor is 4096

cache timeout active 6000 The active aging time is 6000s

#cache timeout inactive 1800 The inactive aging time is 1800s

record netflow-original Use pre-set module netflow-original

record src_and_dst_addr Use self-defined src_and_dst_addr

exporter v5 Use self-defined flow exporter policy v5

This example shows what will be displayed after show ip flow record [<name>| netflow-orignial] is used.

ZXR10(config)#show ip flow record

flow record src_and_dst_addr

match ipv4 source address

match ipv4 destination address

collect flow direction

collect flow sampler

collect interface input

collect interface output

collect counter bytes

collect counter packets

$

flow record src_and_dst_port

match transport destination-port

match transport source-port

collect counter bytes long


$

ZXR10(config)#show ip flow record src_and_dst_addr

flow record src_and_dst_addr



collect flow direction

3-23



collect flow sampler

collect interface input

collect interface output



$

ZXR10(config)#show ip flow record netflow-original





match ipv4 protocol

match ipv4 tos

match interface input

match interface output



collect timestamp sys-uptime last

collect timestamp sys-uptime first

collect routing next-hop-address ipv4

collect ipv4 source address mask

collect ipv4 destination address mask

collect routing source as

collect routing destination as

collect transport tcp flags

In the command of show ip flow record [<name>| netflow-orignial], matchrepresentskey string, collectrepresents non-key string, please see the related NetFlow Moduleconfiguration topics to the description of string.

This example shows what will be displayed after show ip flow sampler [<name>] is used.

ZXR10(config)#show ip flow sampler

sampler determin_2000

mode derterministic 1-out-of 2000

$

ZXR10(config)#show ip flow sampler determin_2000

sampler determin_2000

mode derterministic 1-out-of 2000

$



mode derterministic 1-out-of 2000 Use deterministic sampling, the sampling rate is 2000

3-24



3.2.4 NetFlow Configuration Examples

NetFlow V5 Configuration Examplel Configuration Description

As shown in Figure 3-2, configure NetFlow on ZXR10, connect server to the ZXR10,and configure IP address to send the collected NetFlow packets to server.

Figure 3-2 NetFlow V5 Configuration Example

l Configuration Thought1. Configure flow exporter output, including server IP address, port number and

protocol type.2. Configure sampler sampling rate and sampling mode.3. Configure the size of flow monitor cache, active overtime value and inactive

overtime value, bind the configured flow exporter to system v5 module.4. Bind flow monitor policy to interface, configure sampling type and direction.5. Send packets, view the received packets by traffic analyze software on server.

l Configuration Commands

ZXR10 configuration,



ZXR10(config)#flow exporter exp

ZXR10(config-flow-exporter)#destination 169.1.109.60

ZXR10(config-flow-exporter)#transport udp 2055

ZXR10(config-flow-exporter)#export-protocol netflow-v5

ZXR10(config-flow-exporter)#exit

ZXR10(config)#sampler sam

ZXR10(config-sampler)#mode deterministic 1-out-of 1024

ZXR10(config-sampler)#exit

ZXR10(config)#flow monitor mo

ZXR10(config-flow-monitor)#cache entries 4096

ZXR10(config-flow-monitor)#exporter exp

ZXR10(config-flow-monitor)#record netflow-original

ZXR10(config-flow-monitor)#cache timeout inactive 6000

ZXR10(config-flow-monitor)#cache timeout active 1800

ZXR10(config-flow-monitor)#exit


ZXR10(config-if)#ip flow monitor mo sampler sam unicast input

3-25



ZXR10(config-if)#exit

l Configuration Verification

Check the configuration on ZXR10, as shown below.

ZXR10(config)#show running-config ipflow all

! <IPFLOW>

sampler sam

mode deterministic 1-out-of 1024

$

flow exporter exp

destination 169.1.109.60

transport udp 2055


template data timeout 600

template data refresh 20

$

flow monitor mo

cache entries 4096


cache timeout inactive 1800

cache type normal


exporter exp

$


ip flow monitor mo sampler sam unicast input

$

! </IPFLOW>

NetFlow V9 Configuration Examplel Configuration Description

As shown in Figure 3-3, configure NetFlow on ZXR10, connect server to the ZXR10,and configure IP address to send the collected NetFlow packets to server.

Figure 3-3 NetFlow V9 Configuration Example

l Configuration Thought1. Configure flow exporter output, including server IP address, port number and

protocol type, module refresh time and refresh rate.2. Configure match and collect of flow record policy.

3-26



3. Configure the size of flow monitor cache, active overtime value and inactiveovertime value, bind the configured flow exporter policy and flow record policy.

4. Configure sampler sampling rate and sampling mode.5. Bind flow monitor policy to interface, configure sampling type and direction.6. Send packets, view the received packets by traffic analyze software on server.


ZXR10 configuration,

ZXR10(config)#flow exporter exp

ZXR10(config-flow-exporter)#destination 169.1.109.60

ZXR10(config-flow-exporter)#transport udp 2055

ZXR10(config-flow-exporter)#export-protocol netflow-v9

ZXR10(config-flow-exporter)#template data refresh 20

ZXR10(config-flow-exporter)#template data timeout 60

ZXR10(config-flow-exporter)#exit

ZXR10(config)#sampler sam

ZXR10(config-sampler)#mode deterministic 1-out-of 1024

ZXR10(config-sampler)#exit

ZXR10(config)#flow record rec

ZXR10(config-flow-record)#match ipv4 source address

ZXR10(config-flow-record)#match ipv4 destination address

ZXR10(config-flow-record)#match transport source-port

ZXR10(config-flow-record)#match transport destination-port

ZXR10(config-flow-record)#collect counter bytes

ZXR10(config-flow-record)#collect counter packets

ZXR10(config-flow-record)#exit

ZXR10(config)#flow monitor mo

ZXR10(config-flow-monitor)#cache entries 4096

ZXR10(config-flow-monitor)#cache timeout active 6000

ZXR10(config-flow-monitor)#cache timeout inactive 1800

ZXR10(config-flow-monitor)#exporter exp

ZXR10(config-flow-monitor)#record rec

ZXR10(config-flow-monitor)#exit


ZXR10(config-if)#ip flow monitor mo sampler sam unicast input

ZXR10(config-if)#end


Check the configuration on ZXR10, as shown below.

ZXR10(config)#show running-config ipflow all

! <IPFLOW>

sampler sam

mode deterministic 1-out-of 1024

$

flow exporter exp

3-27




transport udp 2055


template data timeout 60

template data refresh 20

$

flow record rec







$

flow monitor mo

cache entries 4096


cache timeout inactive 1800

cache type normal

record rec

exporter exp

$


ip flow monitor mo sampler sam unicast input

$

! </IPFLOW>

3.3 SFlow Configuration

3.3.1 SFlow Overview

Introduction to SFlowThe SFlow technology is applied to switches or routers to analyze the traffic flow in anetwork.

The SFlow protocol mainly describes how SFlow samples packets in the network. To putit simply, if an interface on a switch is configured with the SFlow service, this interfacebecomes a traffic monitoring point of SFlow.

When packets are passing this interface, SFlow starts sampling them and recording therelated information. SFlow sampling falls into two types: packet sampling and interfacecounter information sampling.

3-28



After obtaining the sampling information, SFlow encapsulates it into a SFlow format packet,and then send it to the SFlow server over UDP protocol. The SFlow server is responsiblefor analyzing the received packets and thus give the statistical result of the network traffic.

SFlow PrinciplesTo collect network data, SFlow does the following:

1. Configure the SFlow service on some switch interfaces to collect theincoming/outgoing packets of these interfaces. After an interface is dedicated forSFlow sampling, it samples packets based on the sampling direction, samplingrate (only for packet sampling), and sampling interval (only for interface counterinformation sampling).

Note:

Packet sampling refers to a process of sampling packets at the specified rate andrecording the header information of sampled packets (the MAC layer information,switching information or routing information can also be recorded). The SFlow-capabledevice only supports recording the header information of the packets.

Interface counter information sampling: is to sample counter information on theinterface at a given sampling interval. The general counter information on theinterface can be recorded.

2. SFlow can send the collected packet information directly to the SFlow server. It canalso store the information temporarily, and send it to the SFlow server at a scheduledtime or when the buffer is full.

3.3.2 Configuring SFlow

Configuring SFlow OutputTo configure SFlow output on the ZXR10 5900E, perform the following steps:


1 ZXR10(config)#sflow receiver <name> Creates an SFlow receiver policy.

A maximum of ten different Sflow receiver

policies can be configured.

2 ZXR10(config-sflow-receiver)#destination

[vrf < vrf-name >][ipv4-address< ip-addr >]Sets the IP address of the SFlow server.

3 ZXR10(config-sflow-receiver)#transport

[udp-port<port-num>]Sets the protocol port number of the

SFlow server.

3-29





vrf < vrf-name > Vrf is used if the SFlow server is in a VPN. The vrf-nameparameter is 1–32 bytes in length.

ipv4-address< ip-addr > IP address of the SFlow server.

udp-port <port-num> Specifies the protocol for SFlow output is UDP and the

corresponding port number (default: 6343).

Configuring a Packet Sampling PolicyTo configure a packet sampling policy on the ZXR10 5900E, perform the following steps:


1 ZXR10(config)#sflow fs <name> Creates an SFlow fs policy.

A maximum of 200 different flow fs


2 ZXR10(config-sflow-fs)#sample-rate < rate > Configures the sampling rate of

the packet sampling policy, range:

128–65535, default: 400.

3 ZXR10(config-sflow-fs)#receiver < name > Configures an existing receiver policy

for the packet sampling policy.

Configuring a Policy for Sampling the Counter Information of an InterfaceTo configure a policy for sampling the counter information of an interface on the ZXR105900E, perform the following steps:


1 ZXR10(config)#sflow cp <name> Creates an SFlow cp policy.

A maximum of 200 different flow cp


2 ZXR10(config-sflow-cp)#sample-interval <

interval >

Specifies the interval (in seconds) for

sampling the counter information of an

interface, range: 10–400, default: 20.

3 ZXR10(config-sflow-cp)#receiver < name > Configures an existing receiver policy for

the sampling policy.

Configuring SFlow Sampling on an InterfaceTo configure SFlow sampling on an interface on the ZXR10 5900E, perform the followingsteps:

3-30




1 ZXR10(config)#interface <interface-name> Specifies the name of the interface on

which SFlow sampling is enabled.

2 ZXR10(config-if)#sflow cp < name > Configures a policy for sampling

the counter information of the

SFlow-enabled interface.

3 ZXR10(config-if)#sflow fs < name >[{input |

output}]

Configures an SFlow packet sampling

policy on the SFlow-enabled interface

and the sampling direction. By

default, the direction is bi-directional.

3.3.3 Maintaining SFlowTo maintain SFlow on the ZXR10 5900E, run the following commands:

Command Function

ZXR10(config)#show sflow receiver [<name>] Displays the specified SFlow

receiver policy or all SFlow receiver

policies.

ZXR10(config)#show sflow fs [<name>] Displays the SFlow fs policy on the

specified interface or all SFlow fs

policies.

ZXR10(config)#show sflow cp [<name>] Displays the SFlow cp policy on the

specified interface or all SFlow cp

policies.

ZXR10(config)#show sflow interface [<name>] Displays the configuration(s) of the

specified interface or all interfaces.

3.3.4 SFlow Configuration Examples

Configuration DescriptionOnZXR10 5900E, configure SFlow and connect the SFlow server to the switch. In addition,configure the IP address of the server, so that the collected SFlow packets can be sent tothe server.

Configuration Thought1. Configure the outputs of the flow receiver, including the server address, port number,

and protocol type.2. Configure the packet sampling fs and sampling rate, and bind the receiver.

3-31



3. Configure the interface counter information sampling cp and the sampling interval, andbind the receiver.

4. Configure both cp and fs sampling on the interface, and specify the fs samplingdirection.

5. Send packets and use the SFlow software to view the received packets on the server.

Configuration ProcessThe configuration on ZXR10 5900E is as follows:

ZXR10(config)#sflow receiver rtest

ZXR10(config-sflow-receiver)#destination ipv4-address 192.168.1.1

ZXR10(config-sflow-receiver)#transport udp-port 6343

ZXR10(config-sflow-receiver)#exit

ZXR10(config)#sflow fs ftest

ZXR10(config-sflow-fs)#sample-rate 285

ZXR10(config-sflow-fs)#receiver rtest

ZXR10(config-sflow-fs)#exit

ZXR10(config)#sflow cp ctest

ZXR10(config-sflow-cp)#sample-interval 40

ZXR10(config-sflow-cp)#receiver rtest

ZXR10(config-sflow-cp)#exit


ZXR10(config-if)#sflow fs ftest input

ZXR10(config-if)#sflow cp ctest

ZXR10(config-if)#exit

VerificationView the configuration result on ZXR10 5900E as follows:

ZXR10(config)#show running-config sflow

! <SFLOW>

sflow receiver rtest


$

sflow fs ftest

receiver rtest

sample-rate 285

$

sflow cp ctest

receiver rtest

sample-interval 40

3-32



$


sflow cp ctest

sflow fs ftest input

$

! </SFLOW>

3.4 SysLog Configuration

3.4.1 SYSLOG OverviewSYSLOG is a kind of log formats, which is used to record the character text to be printed.SYSLOG is originated from UNIX operating system, and it is used to record system log.

The format of log consists of the following three parts:

l PRI: It is composed by angle brackets and numbers. The numbers represent moduleids and severity. The range of module id is 0-23. The range of severity is 1-8. 1 is theheaviest, and 8 is the lightest.

l HEADER: It is composed by time and host name.l MSG: It is the detailed content.

SYSLOG sends data packets to SYSLOG server by using UDP. The default port is 514and the size of UDP packet is less than 1024 bytes.

System decides whether reports the alarm message to SYSLOG sever according to thealarm level after SYSLOG function is enabled.

3.4.2 Configuring SYSLOGTo configure SYSLOG on ZXR10 5900E, perform the following steps.


1 ZXR10(config)#syslog level <level> At global configuration mode,

set the level of the alarm which

will be reported to SYSLOG

server. The alarm level range

is 1-8. The default value is

NOTIFICATIONS.

The alarm whose level is no

less than level will be reported

to SYSLOG Server. By default,

alarms with all levels will be

reported.

3-33




2 ZXR10(config)#syslog-server facility <facility> This configures report source

of SYSLOG message. The

default value is local0.

3 ZXR10(config)#syslog-server source [ipv4 |

ipv6]<source-ip>

This configures the source

address of report SYSLOG

message. It supports IPv4 and

IPv6.

4 ZXR10(config)#syslog-server host <server-ip>[fport<fport>][lport <lport>]{[alarmlog],[cmdlog],[debugmsg],[servicelog],[braslog],[natlog]}

This configures SYSLOG

parameters including IP

address and port number of

SYSLOG Server, port number

of client end.



<server-ip> IP address of SYSLOG server which supports IPv6, VRF

and management port

<fport> Remote port number, range is 1-65535, the default value is

514

<lport> Local port number, range is 514È[1024,65535], the default

value is 514

[alarmlog],[cmdlog],[debugmsg],[servic

elog],[braslog],[natlog]

Log type of SYSLOG server

3.4.3 Maintaining SyslogZXR10 5900E provides the following command to maintain SYSLOG.

Command Function

ZXR10#show logging configuration This shows the configuration about

SYSLOG.

The output example of the show logging configuration command is shown as below:

ZXR10(config)#show logging configuration

syslog level DEBUGGING

syslog-server host 192.168.100.3 fport 514 lport 514 alarmlog

syslog-server facility kern

syslog-server source 192.168.100.100

3-34



3.4.4 SYSLOG Configuration Example

Configuration DescriptionThe function of SYSLOG is that alarm information is sent to SYSLOG server by specifiedformat. As shown in Figure 3-4, configure SYSLOG function on the device and then sendalarm to SYSLOG server by SYSLOG protocol.

Figure 3-4 SYSLOG Configuration Example Topology

Configuration Thought1. Connect SYSLOG server with switch.2. Configure SYSLOG server alarm level.3. Configure SYSLOG type.4. Specify SYSLOG server address.

Configuration CommandsThe configuration of switch is as follows:

ZXR10(config)#syslog level WARNINGS

/*Configure alarm level of SYSLOG as WARNINGS*/

ZXR10(config)#syslog-server facility syslog

/*Configure type of SYSLOG as SYSLOG*/

ZXR10(config)#syslog-server host 1.1.1.1

/*Configure IP address of SYSLOG server*/

Configuration VerificationAfter configuration, use the show command to check configuration.

ZXR10(config)#show running-config | include syslog

syslog level WARNINGS

syslog-server host 1.1.1.1 fport 514 lport 514 alarmlog cmdlog debugmsg

syslog-server facility syslog

3-35



3.5 Port Mirroring Configuration

3.5.1 Port Mirroring Overview

Introduction to Port MirroringIn many cases, it is required to monitor packets sent to or received from the network.For example, enterprises need to implement real-time monitoring for packets sent andreceived for information security purposes.

Port mirroring function applies to enterprise very well. It can monitor and manage theenterprise network data. When network has fault, it can locate fault. However, it is difficultthat monitor all traffic on current network. Therefore, it is required that configure a switchto forward the data of one or more ports to another port to realize network monitoring.

Port mirroring can copy a part of or all traffic of source port to a designated mirroring portor destination port.

Port Mirroring PrinciplePort mirror function copies the data received or sent by one or more mirror source portsto a specified mirror destination port and send the data. The data can be obtained frommirror destination port for analyzing and diagnosing.

Port mirror is divided into three mirror modes: TX, RX and BOTH.

l TX (egress)

It only mirrors the sending traffic of an interface.

l RX (ingress)

It only mirrors the receiving traffic of an interface.

l BOTH (bidirectional)

It mirrors the bidirectional traffic of an interface.

Port mirror modules are divided into two types, normal port mirror and traffic mirror.

Configuring a session with ACL, then it will be considered as traffic mirror. Traffic mirrorcollects the data packets filtered by ACL.

Traffic mirror supports applying standard and extended ACL to interface and specifyingthe port direction (egress or ingress).

Port mirror modules are divided into local mirror and remote mirror.

l Local mirroring

The source and destination port belong to a router.

l Remote mirroring

The source and destination port belong to different routers respectively. The mirrortraffic can be transmitted between the different routers after encapsulating.

3-36



As shown in Figure 3-5, mirror the traffic of port 1 to port 3 on switch 1. In this way, all thetraffic of port 1 can be monitored by port 3. This is called local mirroring. If the traffic of port1 of switch 1 is mirrored to port 3 of switch 2, this process is called remote mirroring. Forremote mirroring, router 1 and switch 2 even can belong to the different public networks.

Figure 3-5 Port Mirroring Principle

Port mirroring also provides backup tunnel for network transmission. As shown in Figure3-5, the data transmitted by port 1 is also transmitted by port 3 at the same time. In thisway, even if port 1 has failure, the data of port 3 is available.

3.5.2 Configuring Port MirroringTo configure port mirroring, perform the following steps.


ZXR10(config)#span session <session-number> This adds a port mirroring

session item.

1

ZXR10(config)#no span session <session-number> This deletes a port mirroring

session.

2 ZXR10(config-span-session)#default destination

{interface <interface>[rspan-vlan <vlanid>][{tpid <tpid>|

priority <level>}]| erspan interface <interface>[{[tpid<tpid>], [flags <enable-disable>], [ttl < ttl >], [{dscp <dscp>|

prec <prec>}]}]}

This adds a default destination

port to the session item.

3-37




ZXR10(config)#span apply session <num> sourceinterface <interface>[direction {both|rx|tx|cpu-both

|cpu-rx|cpu-tx }]

This binds specified session to

source port.

3

ZXR10(config)#no span apply session <num> sourceinterface <interface>[direction {both|rx|tx|cpu-both

|cpu-rx|cpu-tx }]

This releases specified session

to source port.

Descriptions of the parameter in Step 1:


<session-number> Session number, 1-12



<interface> Specify the port as destination port

<vlanid> Configure RSPAN VLAN ID, range: 1 to 4094.

<tpid> 0x8100 at present

<level> Configure a level, range: 0 to 7.

<dscp> Configure IP DSCP value, range: 0 to 63.

<prec> Configure IP precedence value, range: 0 to 7.

<tpid> Configure whether to delete the vlan ID.

< ttl > Configure the IP TTL value, range: 1 to 255.



<num> Session number, 1-12

interface Specify source port type

both Bind port mirroring direction as bidirectional

rx Bind port mirroring direction as ingress

tx Bind port mirroring direction as egress

cpu-both Bind port mirroring direction as CPU bidirectional

cpu-rx Bind port mirroring direction as CPU ingress

cpu-tx Bind port mirroring direction as CPU egress

3-38



3.5.3 Maintaining Port MirroringTo maintain port mirroring, use the following command.

Command Function

ZXR10#show span session {all |<session-num>} This displays the contents of all or

the specified session.

This example shows how to use show span session all command.

ZXR10(config)#show span session all

Session 1

------------

Source Port: gei-0/1/1/1 Port Status:inactive

Direction: rx

Source Port: gei-0/1/1/2 Port Status:inactive

Direction: tx

Destination Port: gre_tunnel1 Port Status:inactive

Destination Port: gei-0/1/1/1 Port Status:active

Session 2

------------

Destination Port: gre_tunnel2 Port Status:inactive

ZXR10(config)#



Source Port Bind source port number of the session

Direction Source port mirror direction: ingress / egress / bidirectional

Destination Port Mirroring destination port name on session

Port Status Port state: active means that it is available for using, and

inactive means that it is unavailable for using.

3.5.4 Port Mirroring Configuration Example

Configuration DescriptionAs shown in Figure 3-6, mirror the traffic passing the source port gei-0/1/1/6 on thereceiving direction, and then send it to the destination port gei-0/1/1/7. The destinationport connects to the work station with traffic analyse function.

3-39



Figure 3-6 Port Mirroring Configuration Example

Configuration Thought1. Connect a server to an unused port gei-0/1/1/7 on switch.2. Configure port mirroring instance.3. Configure the destination port of port mirroring as gei-0/1/1/7.4. Configure the source port of port mirroring as gei-0/1/1/6 on the receiving direction.

Configuration CommandsZXR10 configuration,

ZXR10(config)#span session 1

ZXR10(config-span-session)#default destination interface gei-0/1/1/7

ZXR10(config-span-session)#exit

ZXR10(config)#span apply session 1 source interface gei-0/1/1/6 direction rx

Configuration VerificationCheck the configuration by using the show command.

ZXR10(config)#show running-config span

! <SPAN>

span session 1

default destination interface gei-0/1/1/7

!

span apply session 1 source interface gei-0/1/1/6 direction rx

! </SPAN>

3-40



3.6 Alarm Module

3.6.1 Alarm Module OverviewAlarm module provides alarm service. Alarm module will report and record alarmmessage when hardware or program runs improperly. Meanwhile, alarm module supportsbackground query alarm messages.

The messages processed by alarm module include ordinary alarm and notification.Ordinary alarm is recoverable, and notification is only to notify the happening of someevent.

The alarm which has been reported but not recovered already is called current alarm.The alarm which has been reported and recovered already is called history alarm. Thenotification is only to notify simply that some event happens, so there is no current andhistory notifications.

Alarmmodule residents its alarm agent process in each line card and alarm server processin main control board. Once hardware or program runs improperly, the service applicationswill report the alarm to its alarm agent. Later, alarm agents report the alarm messages toalarm server. Alarm server records alarm messages for background querying.

According to the configuration, alarm server reports the alarm messages selectively tolog mdoule, terminal, SNMP and SYSLOG. main control board also has alarm agent toprocess the alarm events occurred in itself.

3.6.2 Configuring Alarm ModuleTo configure alarm module on ZXR10 5900E, perform the following steps.


1 ZXR10(config)#logging on This enables alarm record

function so that alarms can

be reported to different

destinations according to their

own levels.

All alarms will be reported

to log, terminal, SNMP

and SYSLOG by default

if this command is used

but the alarm level of the

corresponding destination is

not configured.

3-41




2 ZXR10(config)#logging buffer <buffer-size> This sets the size of alarm log

buffer. The unit is kbytes, and

the default value is 200.

Use no command to restore

default configuration.

3 ZXR10(config)#logging timestamps [datetime localtime |

precisetime | uptime]

This sets displaying time of

alarm time. The default option

is datetime localtime.

4 ZXR10(config)#logging level <level> This configures the level for

saving alarm into log. The

alarm which alarm level is

higher than or equal to the

pre-set value will be saved into

log. The alarm level range is

1-8 and the default value is 7.


the default configuration.

5 ZXR10(config)#logging console <level> This configures the level for

displaying alarm in console

terminal. The alarm which

alarm level is higher that or

equal to the pre-set value

will be displayed in console

terminal. The level range is

1-8 and the default value is 6.


the default configuration.

6 ZXR10(config)#logging trap-enable <level> This configures the level for

reporting alarm to SNMP by

TRAP. The alarm which alarm

level is higher that or equal

to the pre-set value will be

reported to SNMP by TRAP.

The level range is 1-8.

By default, no alarm will be

reported.

3-42




7 ZXR10(config)#logging alarmlog-interval <minute> This sets the time interval

for writing alarm record from

buffer to log file. The value

ranges from 10-30000, The

unit is minute. The default

value is 10 minutes. Use

no command to restore the

default value.

8 ZXR10(config)#logging cmdlog-interval <minute> This sets the time interval for

writing command log from

buffer to log file. The value

ranges from 2-30000, The unit

is second. The default value is

2 seconds. Use no command

to restore the default value.

9 ZXR10(config)#logging ftp <level>[ vrf <vrf-name>]<ip-address><username><password>[<filename>]

This configures level of FTP

to which alarm is reported,

IP address of FTP server,

username, password and

stored file name. By default,

alarm is not reported.

10 ZXR10(config)#logging filesavetime [interval <time1>|everyday <time2>| week <weekday><time3>| month<mothday><time4>[vrf <vrf-name>]<ftp-server><username><password>[<filename>]

This configures time of FTP

to which alarm is reported,

IP address of FTP server,

username, password and file

name prefix.

11 ZXR10(config)#alarm heartbeat-period <Interval>{all |

console | ftp | snmp | syslog}

This sends alarm heartbeat

messages to the type

configured.

12 ZXR10(config)#alarm heartbeat-send {all | console | ftp

| snmp | syslog}

This configures the intervals of

sending heartbeat messages.

13 ZXR10#alarm-confirm < flowid> This recovers the alarm

according to the flow id.

14 ZXR10#writelog{[alarmlog][cmdlog][natlog][braslog][portal

log][servicelog]}

This saves the log from buffer

to an outside device.



[datetime localtime | precisetime |

uptime]

This sets display mode of time of alarm event.

3-43





<level> The least alarm level

<vrf-name> VRF name, with the length to be 1-32 characters

<ip-address> FTP server IP address, IPv4 and IPv6 are supported.

<username> FTP server username, a string of 1-31 characters

<password> FTP server password, a string of 1-31 characters

<filename> File name saved on FTP server, a string of 1-31 characters



<time1> FTP interval time, range: 1:00:00-23:59:59

<time2> Reported FTP time everyday, range: 00:00:00-23:59:59

<weekday> Reported FTP day on some day

<time3> Reported FTP time each week, range: 00:00:00-23:59:59

<mothday> Reported FTP date each month, range: 1-31

<time4> Reported FTP time each month, range: 00:00:00-23:59:59

<vrf-name> VRF name, a string of 1-32 characters

<ftp-server> IP address of FTP server, IPv4 and IPv6 are supported.

<username> Username of FTP server, a string of 1-31 characters

<password> Password of FTP server, a string of 1-31 characters

<filename> Prefix of filename saved on FTP server, a string of 1-31

characters



<type> The type includes All, Console, ftp, snmp and syslog.

3.6.3 Maintaining Alarm ModuleTo maintain alarm module on ZXR10 5900E, use the following commands.

3-44



Command Function

ZXR10#show logging alarm {[level <alarmlevel>][start-time<date><time>][end-time <date><time>][typeid <type>]}

This shows the alarm records in

the alarm log buffer. The alarm

information can be filtered by

level, combination of start-time

and end-time, or typeid.

ZXR10#show logfile {[username <string>][start-time < date><time>][end-time < date>< time>][vtyno < string>][ip-adress <ip-address>]}

This shows the history records of

configuration operation commands

in the command log buffer. The

log information can be filtered by

the combination of start-time and

end-time, ipadress, user, or vtyno.

ZXR10#show logging configuration This shows the configuration

information of current alarm

module.



Level Alarm level

typeid Alarm type

start-time Alarm starting time

end-time Alarm ending time



start-time Alarm starting time

end-time Alarm ending time

ipadress Host IP address used by login

user Login user name

vtyno vty terminal number used by login

This example shows what is be displayed after show logging configuration command isused.

ZXR10(config)#show logging configuration

logging on

logging level NOTIFICATIONS

logging console NOTIFICATIONS

logging trap-enable NOTIFICATIONS

logging buffer 200

3-45



logging cmdlog-interval 2880

logging timestamps datetime localtime

syslog level NOTIFICATIONS

syslog-server host mng 169.1.110.6 fport 514 lport 514 alarmlog

cmdlog debugmsg

syslog-server facility local0



logging on Alarm total switch

logging level NOTIFICATIONS Alarm level

logging console NOTIFICATIONS Alarm upsending terminal level

logging trap-enable NOTIFICATIONS Trap upsending function and its level

logging cmdlog-interval 2880 The time interval for writing commands

logging timestamps datetime

localtime

The mode for displaying alarm time

3.7 Performance Management Module

3.7.1 Performance Management Module OverviewPerformance management module provides the following main functions,

l It accepts the login or logout request coming from service module and collectsperformance data according to the registered performance entries.

l It calculates and saves performance data according to the collection interval.l It provides CLI configuration and request interfaces.l It provides SNMP request interface.

Performance management module adopts agent server structure, which is composed ofPMServer, PMAgent and PMClient.

PMServer resides in R-CPU. Every daughter-card has a PMAgent, and each PMAgentacts as an independent process. PMClient resides in every application module. Theservice modules of daughter-cards interacts with each other by messages sendingbetween PMClient and PMAgent. In this way, application module can log in, log off orreport performance value to performance management module.

There are some applications, which use PMServer to mount CallBack function. Afterregister information is modified, PMServer finishes virtual register / register cancellation,and refreshes performance values after member interface data binding to these servicetypes are changed.

3-46



3.7.2 Configuring the Performance Management ModuleTo configure the performance management module on the ZXR10 5900E, perform thefollowing steps:


1 ZXR10(config)#end Enters privileged configuration mode.

2 ZXR10#clear statistics interface [<interface-name>] Clears the performance value

accumulated on the specified

interface.

3 ZXR10#conf t

Enter configuration commands,

one per line. End with CTRL/Z.

ZXR10(config)#intf-statisticsZXR10(config-intf-

statistics)#

Enters interface statistics configuration

mode.

4 ZXR10(config-intf-statistics)#one_minute_pe

ak_value {disable|enable}{<interface-name>|default}

Controls the one-minute peak-value

on the specified Ethernet interface or

all interfaces.

5 ZXR10(config-intf-statistics)#one_minute_pe

ak_value_clear [<interface-name>]

Resets the one-minute peak-value on

the specified Ethernet interface or all

interfaces.

6 ZXR10(config-intf-statistics)#exit Enters global configuration mode.

7 ZXR10(config)#performance update-interval

<periodreport>[checkPtType]

Specifies the time interval (in seconds)

for the PMS to sample data on the

PMA, default: 10.

For a description of the parameter in Steps 2 and 6, refer to the following table:



For a description of the parameter in Step 4, refer to the following table:



default All interfaces.



<periodreport> Sampling interval.

[checkPtType] Type of the check point.

3-47



ExampleThe following example shows how to clear the accumulated performance values of allinterfaces:

ZXR10#clear statistics interface

The following example shows how to enable the one-minute peak-value on the gei-0/1/1/1interface:

ZXR10(config-intf-statistics)#one_minute_peak_value_clear gei-0/1/1/1

The following example shows how to clear the one-minute peak-value on the gei-0/1/1/1interface:

ZXR10#one_minute_peak_value_clear gei-0/1/1/1

The following example shows how to change the interval for the PMS to sample data onthe PMA to 30 seconds on sub-interfaces:

ZXR10(config)#performance update-interval 30s sub-interface

3.7.3 Maintaining the Performance Management ModuleTo maintain the performance management module on the ZXR10 5900E, run the followingcommands:

Command Function

ZXR10#show running-config performance Displays the configuration of

the performance management

module.

ZXR10#show running-config interface-perf Displays the configuration

of the interface performance

management module.

ZXR10#show one_minute_peak_value [<interface-name>] Displays the one-minute

peak-value of the interface.

The following is sample output from the show one_minute_peak_value command:

ZXR10#show one_minute_peak_value gei-0/1/1/1

--------------------------------------------------------

Interface Name: gei-0/1/1/1

One Minute Peak Value Appear Time

In_Unicasts : 0 2011-11-30 09:36:51

In_Multicasts : 0 2011-11-30 09:36:51

In_Broadcasts : 0 2011-11-30 09:36:51

In_Errors : 0 2011-11-30 09:36:51

E_Unicasts : 0 2011-11-30 09:36:51

E_Multicasts : 0 2011-11-30 09:36:51

E_Broadcasts : 0 2011-11-30 09:36:51

3-48



E_Errors : 0 2011-11-30 09:36:51

--------------------------------------------------------

For a description of the parameters in the execute result, refer to the following table:


In_Errors Number of error messages received.

In_Unicasts Number of unicast messages received.

In_Broadcasts Number of broadcast messages received.

In_Multicasts Number of multicast messages received.

E_Errors Number of error messages sent.

E_Unicasts Number of unicast messages sent.

E_Broadcasts Number of broadcast messages sent.

E_Multicasts Number of multicast messages sent.

appear time Time when the peak value occurs.

3.7.4 Performance Management Module Configuration Example

Configuration DescriptionPerformance management module can modify interface count update time or set countswitch according to user requirement. As shown in Figure 3-7, flow is sent from gei-0/1/1/1of S1 to gei-0/1/1/1 of S2.

Figure 3-7 Performance Management Configuration Example Topology Diagram

Configuration Thought1. Check the count of interface gei-0/1/1/1. To check the new count, clear the previous

count.2. Modify the time interval of sampling data from PMS to PMA to control count update

time interval of gei-0/1/1/1.

Configuration Commands1. Clear gei-0/1/1/1 interface count:

ZXR10#clear statistics interface gei-0/1/1/1

2. Set count update time of physical port such as gei-0/1/1/1 as 30 seconds.ZXR10(config)#performance update-interval 30s ethernet

3-49



Configuration VerificationCheck whether the configuration is valid.

ZXR10(config)#show running-config performance

! <PERFORMANCE>

performance update-interval 30s Ethernet

! </PERFORMANC>

3.8 Time Range Module Configuration

3.8.1 Time Range Module Overview

Introduction to Time Range ModuleTime range module is mainly used to provide awakening and hypnotizing service for otherapplication modules. User can configure multiple time ranges. Every time range has itsown name. A time range can define multiple relative time segments and an absolute timesegment.

Time range takes effect at the following three situations,

l Absolute time segment is configured only, and the current system time is within theconfigured absolute time segment.

l Relative time segment is configured only. No matter howmany relative time segmentsare configured, time range is effective if the current system time meets any relativetime segment.

l Both absolute and relative time segments are configured. Time range is effective onlywhen the current system time meets both absolute time segment and any relative timesegment.

Application module can subscribe to some time range. When the state of subscribed timerange changes, time range module will notify the application module that the current stateof the time range is active or inactive and performs the corresponding operations.

Time Range Module PrincipleTime range sub-system adopts Client/Server (C/S) structure. The main functions oftime range server are Time Range configuration management, time management, statebroadcast, data synchronization and so on. Client is responsible for managing the registerof application modules, receiving time range state broadcast packets coming from serverand notifying the changing of time range state to applications. In order to provide timerange searching, the client also needs to maintain a table for saving all configured timerange and the states.

In time range time management, system time is taken as the reference time for setting atimer. Time management function inspects the states of all time ranges regularly (usually,every 5 seconds).

3-50



The states of time ranges are scanned in every 5 seconds. The state of time range changesfrequently when time range is configured, which is unfavorable to stability. Therefore, thestructure of operation and working area is adopted. User can modify the data in operationarea when configuring time range. After finishing the configuration, user can exit theconfiguration mode and synchronize the data from operation area to working area. Intime segment calculation, only the configuration of working area is read.

Application module quotes time range name directly and obtains the current state fromclient. The server notifies all time range tables and states to client at first. Later, it inspectstime range state and notifies to client regularly. The client notifies the application modulesin turn after receiving the notification. Application modules perform the correspondingoperations according to their actual requirements.

3.8.2 Configuring the Time Range ModuleTo configure the time range module on the ZXR10 5900E, perform the following steps:


ZXR10(config)#time-range enable Enables the time range function and

initializes related data.

1

ZXR10(config)#time-range disenable Disables the time range function.

ZXR10(config)#time-range <time-range-name> Creates a time range, and enters

time range configuration mode.

2

ZXR10(config)#no time-range <time-range-name> Deletes the time range.

ZXR10(config-tr)#absolute [start <hh:mm:ss><mm-dd-yyyy >][end <hh:mm:ss><mm-dd-yyyy >]

Creates an absolute time segment

rule for the time range.

3

ZXR10(config-tr)#no absolute Deletes the absolute time segment

rule.

ZXR10(config-tr)#periodic [<days-of-week>]<hh:m

m:ss> to [<days-of-week>]<hh:mm:ss>

Configures a relative time segment

for the time range. A time range

can have multiple relative time

segments.

4

ZXR10(config-tr)#no periodic [<days-of-week>]<h

h:mm:ss> to [<days-of-week>]<hh:mm:ss>

Deletes the relative time segment

rule.

5 ZXR10(config)#time-range disable [clear] Disables the time range function. If

the clear parameter is specified, thetime range function is disabled, and

then the non-default configuration is

cleared.


3-51




start <time-date> Specifies the start time of the absolute time segment, in

"hh:mm:ss MM DD YY" format. The minimum time is 00:00:00

01-01-2001. The number of seconds must be a multiple of 15.

end <time-date> Specifies the end time of the absolute time segment, in

"hh:mm:ss MM DD YY" format. The minimum time is

00:00:00 01-01-2001. The number of seconds should be 59

or a multiple of 15.



<hh:mm:ss> Start time or end time of the relative period, in hh:mm:ss

format. The number of seconds of the start time must be a

multiple of 15, and the number of seconds of the end time

should be 59 or a multiple of 15.

<days-of-week> One or some days in a week, options:

l Monday

l Tuesday

l Wednesday

l Thursday

l Friday

l Saturday

l Sunday

l daily

l weekend

l weekdays

3.8.3 Maintaining the Time Range ModuleTo maintain the time range module on the ZXR10 5900E, run the following commands:

Command Output

ZXR10#show time-range < time-range-name> Displays the status information

about the time range.

ZXR10#show time-range Displays the status information

about all time ranges.

The following is sample output from the show time-range < time-range-name> command:

ZXR10#show time-range ta

Current time is 15:28:36 07-22-2009 Wednesday

time-range ta <inactive>

3-52



absolute start 10:05:15 07-17-2009 end 10:10:30 07-17-2009

periodic tuesday 10:04:15 to 10:05:30

periodic daily 10:05:15 to 10:06:30



Current time is 15:28:36 07-22-2009

Wednesday

The current system time is 15:28:36, 22th, July, 2009,

Wednesday.

time-range ta <inactive> The current status of the ta time range is inactive.

absolute start 10:05:15 07-17-2009

end 10:10:30 07-17-2009

The start time of the absolute time segment rule for the tatime range is 10:05:15 07-17-2009 . The end time is 10:10:30

07-17-2009.

periodic tuesday 10:04:15 to 10:05:30 The time period of the first relative time segment rule for the

ta time range is from 10:04:15 to 10:05:30 on Tuesday.

periodic daily 10:05:15 to 10:06:30 The time period of the second relative time segment rule for

the ta time range is from 10:04:15 to 10:06:30 during each

day.

The following is sample output from the show time-range command:

ZXR10#show time-range

Current time is 15:28:06 07-22-2009 Wednesday

time-range ta <inactive>


periodic tuesday 10:04:15 to 10:05:30


time-range tb <inactive>



periodic weekend 10:04:45 to 10:05:00

It can be seen that the current statuses of all time ranges and all associated time segmentrules are displayed.

3.8.4 Time Range Configuration Example

Configuration DescriptionTime-range active time segment can be configured. The active state of time-rangeitself can not restrict user operation any. Therefore, time-range has to be bound withthe corresponding ACL. In this way, the ACL can enter active state in a specified timesegment.

For example, a company forbids that employees browse Internet webs during working time,but the employees are permitted to browse Internet webs in free time. For such condition,

3-53



time range is required, that is, all Internet requests coming from company employees aredenied during working time and the request are accepted in free time.

As shown in Figure 3-8, PC1 sends Telnet requests to S1 through S2. S1 wants to receivelogin requests coming from PC1 in a specified time segment only while denies the loginrequests at other times. Therefore, create a corresponding time-range, bind the time-rangeto an ACL, and bind ACL to the ingress of gei-0/1/1/3. In this way, S1 can filter Telnetpackets coming from PC1 in a specified time segment (ACL also can be bound in egressof gei-0/1/1/2).

Figure 3-8 Time Range Configuration Example Topology

Create a time-range and bind it with ACL. Add rules to the ACL: The Telnet packets whichmatch IP addresses of PC1, the protocol types are TCP and port types are Telnet will bedenied in the time segment specified by time-range. Bind the ACL in ingress of gei-0/1/1/3or egress of gei-0/1/1/2.

After the configuration above is finished, the bound ACL only takes effect in the timesegment specified by time-range. In this time segment, PC1 can not logs in S1. However,PC1 still can logs in S1 at other times.

Configuration Thought1. Create a time-range. User can name the time-range by himself. Make sure that the

name length can not be more than 31 characters.2. Enter time-range configuration mode after time-range is created. Under time-range

configuration mode, add time segment.3. According to the actual requirements, bind time-range to the corresponding ACL. The

ACL can take effect in the specified time segment.

Configuration CommandsThe configuration of S1 is shown below.

1. Create a time-range.S2(config)#time-range enable

/*This enables time-range function.

time-range can not be created if time-range

function is disbaled.*/

S2(config)#time-range test

S2(config-tr)#

/*This creates a time-range and names it test.*/

2. Add time segment to the time-range/*Absolute time segment can either take effect in or

3-54



before a specified time, or can take effect during

a specified time segment.*/

S1(config-tr)#absolute start 10:10:15 12-12-2012 end 10:10:15 12-12-2012

/* Starting at 10:10:15 on 12-12-2012 and ending at

10:10:15 on 12-12-2012.*/

3. Create ACL and bind it to the time-range.S2(config)#ipv4-access-list test

S2(config-ipv4-acl)#rule 1 deny tcp 10.20.30.20 0.0.0.0

eq telnet 30.20.10.1 0.0.0.0 time-range test

S2(config-ipv4-acl)#rule 2 permit any

S2(config-ipv4-acl)#exit

S2(config)#ipv4-access-group interface gei-0/1/1/1 ingress test

/*The binding is successful. ACL only takes effect

in the specified time segment.*/

Configuration VerificationThis shows the information of time-range, including the current system time, everytime-range name, the corresponding time segments, and the state of time-range (activeor inactive).

S1(config)#show time-range

Current time is 08:36:03 08-14-2009 Friday

time-range test <inactive>


This shows the information of a specified time-range.

S1(config)#show time-range test

Current time is 08:37:28 08-14-2009 Friday

time-range test <inactive>


3-55




3-56


Chapter 4CHM System ConfigurationTable of Contents

CHM Overview ...........................................................................................................4-1Configuring CHM........................................................................................................4-2Maintaining CHM........................................................................................................4-4CHM Configuration Examples ....................................................................................4-7

4.1 CHM OverviewThe CHM system is responsible for environment monitoring. For ZXR10 8900 series racks,the CHM can only configure temperature alarm thresholds. For ZXR10 8900E seriesracks, the CHM can provide these functions: rack environment temperature monitoring,temperature alarm threshold setting, fan state monitoring, fan rotation speed setting, rackpower state monitoring, rack power-on/off management, board state monitoring, and boardpower-on/off management. The following takes ZXR10 8900E series as an example todescribe the operation principles, work flow, and configuration of the CHM system.

The CHMenvironment monitoring system is composed of the CHMdata processing center,IPMS environmentmonitoring system, and intelligent clients (including the intelligent powerclient and intelligent fan client).

l CHM Data Processing Center

The CHM data processing center is responsible for receiving and handling the datarequests from users. For a show type command, the CHM data processing centerreturns the environment data to the user interface. For a set command, the CHM dataprocessing center sends the command to the IPMC sub card for further processingaccording to established protocols.

l IPMS Environment Monitoring System

The IPMC environment monitoring sub card is responsible for collecting environmentinformation and reporting it to the CHMdata center, controlling fan operation accordingto established speed adjustment policies, and sending the commands from the CHMdata center to the specific intelligent client to execute.

l Intelligent Client

Besides the basic functions (such as controlling fan rotation and power supply), anintelligent client is also responsible for communicating with the IPMC and processingrelated data inquiry requests.

4-1



4.2 Configuring CHMTo configure the CHM on ZXR10 8900E, perform the following steps:


1ZXR10(config)#environ This enters the environment

configuration mode.

2.1

ZXR10(config-environ)#set fan <shelf

number><type><param1><param2>

This sets the rate of a single

fan, a group of fans or all fans

for the specified shelf.

2.2

ZXR10(config-environ)#set power <shelf

number><powerid>[on/off][force]

This powers on or powers off

the power supply in the slot of

the specified shelf.

2.3

ZXR10(config-environ)#set board <shelf

number>{mpc|npc}[master|slave|panel][on/off][force]

This powers on or powers

off the board in the specified

shelf.

2.4

ZXR10(config-environ)#set temper-threshold

<position><value><shelf number>

This sets an alarm threshold

for the temperature of the

specified shelf.

2

2.5

ZXR10(config-environ)#set serial-number

<position><param1><value>[shelfid]

This sets the serial number of

the power or fan module or

the specified shelf.

Descriptions of parameters in Step 2.1:


<shelf number> Shelf number.

<type> Indicates the speed adjustment type. The options include:

"single", "group", and "all".

<param1> If the speed adjustment type is "single" or "group", this parameter

indicates the fan number or group number; if the speed adjustment

type is "all", this parameter indicates the speed (in the range of

1–5).

<param2> If the speed adjustment type is "single" or "group", this parameter

indicates the speed (in the range of 1–5); if the speed adjustment

type is "all", this parameter is invalid.




<powerid> Indicates the power slot number. The value range is 1-3.

4-2


Chapter 4 CHM System Configuration


[on/off] "On" indicates to power on; "off" indicates to power off.

[force] Indicates that the operation is by force. The user should be

responsible for the result.




{mpc|npc} Type of the card, options:

l mpc: main control card

l npc: line card

[master|slave|panel] For the mpc, select master or slave. For the npc, select panel.

[on/off] "On" indicates to power on; "off" indicates to power off.

[force] Indicates that the operation is by force. The user should be

responsible for the result.



<position> Indicates the type of the temperature monitoring point. The

options include "cpu", "lenv", and "renv".

<value> Indicates the temperature threshold value. The value range is

1-127.




<position> Type of the device, options:

l fan

l power

<param1> l When <position> is set to fan, this parameter is not required

l When <position> is set to power, this parameter refers to the

power supply ID (range: 1 to 3).

<value> Serial number, range: 0 to 63 bytes.

[shelfid] Rack number, optional.

4-3



4.3 Maintaining CHMTo maintain the CHM on ZXR10 5900E, use the following commands:

Command Function

ZXR10#show fan This shows the detailed information about fans.

ZXR10#show temperature This shows the temperature of the temperature

monitoring points of each board on the rack.

ZXR10#show power This shows the detailed information about the

power.

ZXR10#show ipmb This shows the information about each node of the

IPMS system (The command is not supported by

the ZXR10 5900E series racks.)

The following is an example of the show fan command:

ZXR10(config-environ)#show fan

Shelf 0, Fan version:1.01, Fan serial-number:fan-1

rpm:rounds per minute

FanID Shelf Present Speed(rpm) Mode status

1 0 Online 6120 Mannul Normal



4 0 Online 3240 Auto Normal















The outputs of the show fan command are described as follows:


FanID Indicates the fan number.

Shelf Rack number.

Present Indicates the on-position status.

4-4




Speed(rpm) Indicates the fan rotation speed (per minute).

Mode Indicates the working mode. The options include automatic

adjustment mode and manual adjustment mode.

Status Indicates the fan status. The options include normal status and

warning status.

The following is an exmaple of the show temperature command:

ZXR10#show temperature

RENV : Remote environment temperature(Celsius degree)

LENV : Local environment temperature(Celsius degree)

TH : Threshhold temperature(Celsius degree)

Shelf Panel CPU/TH RENV/TH LENV/TH

NP 0 3 35/60 29/60 26/60

MP(M) 0 T1 35/60 31/60 31/60

The outputs of the show temperature command are described as follows:


First column Indicates the board type. The options include line card (NP),

active main control board (MP(M)), and standby main control

baord (MP(S)).

Shelf Rack number.

Pannel Indicates the physical slot number.

CPU/TH Indicates the CPU temperature/CPU temperature threshold.

RENV/TH Indicates the remote environment temperature/remote

environment temperature threshold.

LENV/TH Indicates the local environment temperature/local environment

temperature threshold.

NTSC1 Indicate the temperature of monitoring point 1 of the NTSC sub

card.

NTSC2 Indicate the temperature of monitoring point 2 of the NTSC sub

card.

The following is an example of the show power command:

ZXR10(config)#show power

Total power: 150

Temp : AC/DC temperature(Celsius degree)

Power : AC/DC output power(Watt)

PowerID Shelf SoftwareVer Present Type Mode Temp Power Protect

Status Serial-number

4-5



1 0 V1.01 Online AC On 24 150 Normal

Normal Power-1

2 0 N/A Offline N/A N/A N/A N/A N/A

N/A N/A


N/A N/A

The outputs of the show power command are described as follows:


PowerID Indicates the power slot number.

Shelf Rack number.

SoftwareVer Version number of the power software.

Present Indicates the on-position status of the power.

Type Indicates the power type. The options include DC and AC.

Mode Indicates whether the power is on. "on" indicates the power is on;

"off" indicates the power is off.

temp Indicates the power temperature (°C).

Power Indicates the output power (watt).

Protect Indicates the power protection type.

Status Indicates the power status. The options include normal status

and warning status.

Serial-number Serial number of the power supply.

The following is an example of the show ipmb command:

ZXR10#show ipmb

Shelf Panel SoftwareVer CpldVer Status

MP(M) 0 T1 1.09 1.00 Online

NP 0 3 1.09 1.00 Online

The outputs of the show ipmb command are described as follows:


The first column Type of the card, options:

l line card

l master main control card

l slave main control card

Shelf Rack number.

Pannel Indicates the physical slot number of the board.

SoftwareVer Version number of the Intelligent Platform Management Controller

(IPMC) software.

4-6




CpldVer IPMC logical version number.

Mode Indicates the service type of the board.

Status Indicates the on-position status of the IPMC sub card.

4.4 CHM Configuration ExamplesAs mentioned previously, you can use the commands of the CHM system to view and setthe rotation speed of fans and temperature alarm threshold, and control the power-on/off ofall the boards except the active main control board and the power-on/off of a single powersupply.

Using the set fan Command to Configure a Fanl Configuration Description

The initial fan status is as shown below:

ZXR10#show fan






















Run the set fan command to change the rate of fan 11 of group 1 in rack 0.

l Configuration Thought1. Enter the environment configuration mode.2. Use the set fan command to configure the related fans.

4-7



3. Use the show fan command to check the configuration result.l Configuration Commands



ZXR10(config)#environ

ZXR10(config-environ)#set fan 0 group 1 5

ZXR10(config-environ)#set fan 0 single 11 5


Use the show fan command to check the configuration result, as shown below: FanNo.1, No.2, No.3, and No.11 have changed their operation mode (from Auto toManual), and the speed is changed to 5, that is, the highest speed (about 6000 rpm).























Using the set power Command to Control Powerl Configuration Description

The initial power status is as shown below:


Total power: 431



PowerID Shelf SoftwareVer Present Type Mode Temp(℃) Power(W)

4-8



Protect Status Serial-number

1 0 V1.01 Online AC ON 25 230

Normal Normal power-1

2 0 N/A Offline N/A N/A N/A N/A

N/A N/A N/A

3 0 V1.02 Online AC ON 27 201


Now use the set power command to shut down power No.1.

l Configuration Thought1. Enter the environment configuration mode.2. Use the set power command to configure the related power.3. Use the show power command to check the configuration result.

l Configuration CommandsZXR10#configure terminal



ZXR10(config-environ)#set power 0 1 off


Use the show power command to check the configuration result, as shown below:Power 1 has been soft shut down. "Soft" here means that the power will not providepower output to the outside, but its internal intelligent client is still working, and thepower can be turned by using related command when necessary.

Note:

Now the power is in Warning state.

In addition, if the set power command is ended with "force", it means the operationis by force, and thus the result is that the whole rack is powered off. If the set powercommand is not ended with "force", and only one power supply is within the rack, thepower-off command does not take effect. If there is more than one power supply withinthe rack, the result of the set power command with "force" and that of the commandwithout "force" are the same.


Total power: 420



PowerID Shelf SoftwareVer Present Type Mode Temp(℃) Power(W)

Protect Status Serial-number

1 0 V1.01 Online AC OFF 25 0

Normal Warning power-1

4-9



2 0 N/A Offline N/A N/A N/A N/A

N/A N/A N/A

3 0 V1.02 Online AC ON 27 420


Using the set temperature Command to Set a Temperature Thresholdl Configuration Description

In the initial rack environment, the status of each board is as shown below:

ZXR10#show temperature

RENV : Remote environment temperature(Celsius degree)

LENV : Local environment temperature(Celsius degree)

TH : Threshhold temperature(Celsius degree)

Shelf Panel CPU/TH RENV/TH LENV/TH

NP 0 3 35/60 29/60 26/60

MP(M) 0 T1 35/60 31/60 31/60

Now use the set temperature command to change the CPU temperature alarmthreshold.

l Configuration Thought1. Enter the environment configuration mode.2. Use the set temperature to configure the related temperature.3. Use the show temperature command to check the configuration result.




ZXR10(config-environ)#set temper-threshold cpu 800


Use the show temperature command to check the configuration result. The CPUtemperature alarm threshold of the board has been set to the target value. If theactual temperature of the CPU is higher than this value, related alarm appears on thescreen.

Using the set board Command to Control Power-on/off of a Boardl Configuration Description

In the initial rack chart, part of the result of the show processor command is as shownbelow:

Shelf Panel CPUID

Power(W) CPU(5s) CPU(1m) CPU(5m) Peak PhyMem FreeMem Mem

=================================================================

MP(M) 0 T1 0 110 9% 23% 26% 100%

2048 1392 31.982%

4-10



------------------------------------------------------------------

NP 0 3 0 102 11% 23% 23% 100%

2048 1676 18.152%

------------------------------------------------------------------

Now use the set board command to power off the line card in physical slot 3.

l Configuration Thought1. Enter the environment configuration mode.2. Use the set board command to configure the related board.3. Use the show processor command to check the configuration result.




ZXR10(config-environ)#set board 0 npc 3 off


Use the show processor command to check the configuration result, as shown below:The line card is powered off, so it does not exist in the list.

Similar to the set power command, the set board command can also be ended with"force". For a board other than an activemain control board, the result of the commandwith "force" and that of the command without "force" are the same. For an active maincontrol board, the set board commandwithout "force" cannot power off the board, whilethe set board command with "force" can power off the board. The user should be fullyresponsible for all the aftermaths (such as active/standby switching).

Shelf Panel CPUID

Power(W) CPU(5s) CPU(1m) CPU(5m) Peak PhyMem FreeMem Mem

==========================================================

MP(M) 0 7 0 109 8% 9% 8% 24%

2048 1392 31.988%

----------------------------------------------------------

Run the set serial-number command to set the serial number of the fan or powersupply.l Configuration Description

The initial status of the fan or power supply is as follows:


fan version:1.02

fan serial-number:fan-123


FanID Present Speed(rpm) Mode status

1 Online 6120 Mannul Normal

2 Online 6420 Mannul Normal


4-11



Total power: 431



PowerID Present Type Mode Temp(℃) Power(W) Protect Status Serial-number

1 Online AC ON 25 230 Normal Normal power-123

2 Offline N/A N/A N/A N/A N/A N/A N/A

3 Online AC ON 27 201 Normal Normal power-345

------------------------------------------------------------------------------

Run the set serial-number command to change the serial number of the fan or powersupply.

l Configuration Thought1. Enters the environmental configuration mode.2. Run the set serial-number command to configure the fan or power supply.3. Run the show power or show fan command to check the configuration.


Run the following commands on the ZXR10 5900E:




ZXR10(config-environ)#set serial-number fan fan-xxx 0

ZXR10(config-environ)#set serial-number power 1 power-111 0

ZXR10(config-environ)#set serial-number power 2 power-222 0

Power is not online!


Run the show fan command to verify the configuration.


fan version:1.02 fan serial-number:fan-xxx





----------------------------------------------------

Run the show power command to verify the configuration.


Total power: 425



PowerID Shelf SoftwareVer Present Type Mode Temp(℃) Power(W) Protect

Status Serial-number

1 0 V1.01 Online AC ON 25 225 Normal

Normal power-111

4-12




N/A N/A

3 0 V1.02 Online AC ON 27 200 Normal

Normal power-345

4-13




4-14


Chapter 5MAC ConfigurationTable of Contents

MAC Overview ...........................................................................................................5-1Configuring a MAC Address ......................................................................................5-1Maintaining MAC Addresses ......................................................................................5-6MAC Configuration Example ......................................................................................5-8

5.1 MAC OverviewA Media Access Control (MAC) address is the hardware identity of a network device. Aswitch forwards packets according to MAC addresses. To ensure correct forwarding ofpackets, the MAC address must be unique.

Every switch maintains an MAC address table. When the switch receives a data frame,it determines whether to filter it or forward the data frame to the related port of the switchaccording to the MAC address table. Therefore, the MAC address table is the basis andprerequisite for the switch to realize fast forwarding.

An MAC address table is the key to the correct forwarding of data packets. It shows themapping between the MAC addresses of hosts and the ports of an Ethernet switch, andspecifies the direction to the destination host. When the Ethernet switch receives a dataframe, it checks whether the destination MAC address of the data frame plus a VLAN indexmatches the MAC address table so as to obtain an egress for the frame. If no match isfound in the MAC address table, the switch broadcasts the data frame to all the ports inthe VLAN except the receiving port.

The MAC address management module is responsible for managing MAC address tables.It supports VPLS and source MAC learning in chips and network processors. All softwareand hardware forwarding tables are generated based on MAC address tables, so the MACaddress management module is the core in the whole switch system, and the stability ofthis module ensures the stability of other modules.

5.2 Configuring a MAC AddressTo configure a MAC address on the ZXR10 5900E, perform the following steps:


1 ZXR10(config)#mac Enters MAC configuration mode.

5-1




2 ZXR10(config-mac)#add permanent<mac-address>

interface < interface-name>{ all-owner-vlan | vlan<vlan-id>}

Adds a permanent MAC address.

3 ZXR10(config-mac)#delete{[mac ], [interface<interface_name>],[vlan <1-4094>]}

Deletes the MAC address.

4 ZXR10(config-mac)#aging-time <seconds> Specifies the aging time of MAC

addresses.

To restores the default setting, run

the no aging-time command.

5 ZXR10(config-mac)#filter {source | both |

destination} mac vlan <1-4094>

Configures MAC address filtering.

6 ZXR10(config-mac)#learning { disable | enable

}[interface <interface_name>]Configures MAC address learning.

7 ZXR10(config-mac)#limit-maximum

<num>[interface <interface-name>]|[vlan<vlan-id>]

Specifies the upper limit for MAC

address learning.


the no limit-maximum command.

8 ZXR10(config-mac)#alarm-threshold <

percentage>

Specifies the alarm threshold (in

percent) of the capacity of a MAC

forwarding table.


the no alarm-threshold command.

9 ZXR10(config-mac)#to-static { interface<interface-name>| mac | enable |disable }

Configures MAC address

stabilization.

10 ZXR10(config-mac)#to-permanent interface

<interface-name>{enable|disable}

Sets MAC addresses to permanent.

11 ZXR10(config-mac)#auto-write { disable | enableinterval <time>}

Enables the auto-writing function and

configures the period (unit: minute).

Default: disable.

12 ZXR10(config-mac)#higig-learn {enable | disable } Enables or disables Higig learning.

13 ZXR10(config-mac)#limit-policy {drop | forward

}[interface <interface-name>| vlan <vlan-id>]

Configures the policy used when the

maximum number of MAC addresses

is exceeded.

14 ZXR10(config-mac)#learn-priority move default

{enable|disable}

Sets whether to allow MAC address

flapping between the interfaces

(flapping priority: default).

15 ZXR10(config-mac)#learn-priority move higher

{enable|disable}



(flapping priority: higher).

5-2


Chapter 5 MAC Configuration


16 ZXR10(config-mac)#learn-priority move lower

{enable|disable}



(flapping priority: lower).

17 ZXR10(config-mac)#learn-priority move normal

{enable|disable}



(flapping priority: normal).

18 ZXR10(config-mac)#learn-priority interface

<interface-name>{default|lower|normal|higher}

Sets the MAC address flapping

priority of the interface.

19 ZXR10(config-mac)#safe-mode { all | interface }{

enable {alarm | block}| disable }

Sets the MAC address anti-flapping

function.



permanent The MAC address is added permanently and does not age out.

Note that this parameter takes effect after the system reboots.

mac MAC address.

interface <interface-name> Interface name.

all-owner-vlan Specifies all VLANs configured for the specified interface. The

mappings between the VLANs and MAC addresses are written

into the MAC address table.

vlan <vlan-id> VLAN ID.



mac MAC address.


vlan <1-4094> VLAN ID.



<60-65535> Aging time (in seconds).



source The packets with the source MAC address being filtered.

5-3




both The packets with source and destination MAC addresses being

filtered.

destination The packets with the destination MAC address being filtered.

mac MAC address.

vlan <1-4094> VLAN ID.




enable Enables MAC address learning.

disable Disables MAC address learning.




<num> Maximum number of MAC addresses that can be learned.



<precetage> Alarm threshold (in percent).




mac MAC address.

enable Stabilizes the MAC address. If no port is specified, all MAC

addresses are stabilized globally.

disable Destabilizes the MAC address. If no port is specified, all MAC

addresses are destabilized globally.



enable Enables Higig learn.

disable Disables Higig learn.

5-4





drop Discards packets.

forward Forwards packets.



enable Enables MAC address flapping between interfaces with the same

priority.

disable Disables MAC address flapping between interfaces with the same

priority.




priority.


priority.




priority.


priority.




priority.


priority.



interface<interface-name> Interface name.

default Default priority.

5-5




lower Lower priority.

normal Common priority.

higher Higher priority.



alarm After the MAC address anti-flapping function is enabled, MAC

address flapping is disallowed, and an alarm indicating that MAC

address flapping is disallowed is generated.

block After the MAC address anti-flapping function is enabled, if a MAC

address is not learned on a port, packets cannot be forwarded.

5.3 Maintaining MAC AddressesTo maintain MAC addresses on the ZXR10 5900E, run the following commands:

Command Function

ZXR10#show mac table [{[{ dynamic | static | permanent

| src-filter | dst-filter | to-static| to-permanent}],[mac],[

interface] , [vlan <1-4094>]}]

Displays MAC addresses.

ZXR10#show mac aging-time Displays the aging time of MAC addresses.

ZXR10#show mac learning[interface <interface-name>] Displays whether to learn MAC addresses.

ZXR10#show mac limit-maximum [interface<interface-name>]

Displays the maximum number of MAC

addresses that can be learned.

ZXR10#show mac higig-learn Displays the MAC higig learning mode.

ZXR10#show running-config mac Displays all MAC configuration information.

ZXR10#show mac port-information interface

<interface-name>

Displays the MAC status information of the

interface.

ZXR10#show mac count {mac-day | mac-hour| mac-max} Displays the historical peak of the number

of learned MAC addresses, as well as

related time and period-based statistics.

ZXR10#clear max-number Clears the MAC address peak statistics.

ZXR10#show mac flow vpls <vpls-name> Displays the actions taken when the

maximum number of MAC addresses is

exceeded in the VPLS instance.

ZXR10#show mac vpls summary Displays the MAC address statistics of all

VPLS instances.

5-6



The following is sample output from the show mac table command:

ZXR10#show mac table

Total MAC address : 2

Flags: Src--Source filter, Dst--Destination filter

From:0,driver;1,config;2,VPN;3,802.1X;4,micro;5,DHCP;

6,PBT;7,EVB;8,OTV;9,TRILL,

Time--Day:Hour:Min:Sec

MAC VLAN Outgoing Information Attribute From Time

-----------------------------------------------------------------------------

00e0.d122.1000 111 gei-0/1/1/1 Dynamic 0 02:17:23:13

The following is sample output from the show mac aging-time command:

ZXR10(config-mac)#show mac aging-time

MAC global aging time is 200 seconds.

The following is sample output from the show mac learning command:

ZXR10(config-mac)#show mac learning interface gei-0/1/1/1

MAC interface gei-0/1/1/1 learning is enable.

ZXR10(config-mac)#

The following is sample output from the show mac limit-maximum command:

ZXR10(config-mac)#show mac limit-maximum

MAC limit-maximum is 64000.

ZXR10(config-mac)#

The following is sample output from the show mac higig-learn command:

ZXR10(config-mac)#show mac higig-learn

MAC higig learn enable.

The following is sample output from the show running-config mac command:

ZXR10(config)#show running-config mac

! <MAC>

mac

aging-time 200

limit-maximum 23 interface gei-0/1/1/1

add permanent 0000.0000.0006 interface gei-0/1/1/1 vlan 1

add permanent 0000.0000.0003 interface gei-0/1/1/1 vlan 1

$

! </MAC>

The following is sample output from the show mac port-information command:

ZXR10(config)#show mac port-information interface gei-0/1/1/1

The gei-0/1/1/1 limit num = 23; current mac num = 2;

MAC learning is enable.

5-7



The following is sample output from the show mac count mac-day command:

ZXR10(config)#show mac count mac-day

MACNum Time

----------------------

ZXR10(config)#show mac count mac-hour

MACNum Time

----------------------

0 : 2010-09-16 11:03:17 UTC

2 : 2010-09-16 12:00:00 UTC

2 : 2010-09-16 13:00:00 UTC

The following is sample output from the clear max-number command:

ZXR10(config)#clear max-number

5.4 MAC Configuration ExampleAdding a Permanent MAC Addressl Configuration Description

Add a permanent MAC address for an interface on the switch.

l Configuration Thought

Add the permanent MAC address directly for this interface.


The DUT1 configuration is as follows:

DUT1(config-mac)#add permanent 0000.0000.0006 interface gei-0/1/1/1 vlan 1


Use the show mac table command to check the result of DUT1 configuration:

DUT1(config-mac)#show mac table







--------------------------------------------------------------------------------

00e0.d122.1000 111 gei-0/1/1/1 Dynamic 0 02:17:23:13

DUT1(config-mac)#

Configuring the Maximum Number of MAC Addresses Allowed for Learningl Configuration Description

5-8



Set the maximum number of MACs.

l Configuration Thought

Set the maximum number of MACs by directly using the related command.


The DUT1 configuration is as follows:

DUT1(config-mac)#limit-maximum 4600


Use the show running-config mac command to check the result of DUT1 configuration:

DUT1(config-mac)#show running-config mac

! <MAC>

mac

limit-maximum 4600

$

! </MAC>

DUT1(config-mac)#

5-9




5-10


Chapter 6MAC Address TableConfigurationTable of Contents

MAC Address Table Overview ....................................................................................6-1Configuring a MAC Address Table..............................................................................6-4Maintaining and Diagnosing an MAC Address Table...................................................6-5

6.1 MAC Address Table OverviewIntroductionA MAC address is the hardware identity of a network device. A switch forwards packetsby MAC address. The uniqueness of the MAC address ensures the correct forwarding ofpackets.

Each switch maintains a MAC address table. When the switch receives a data frame, itdetermines whether to filter it or forward it to the related port of the switch based on theMAC address table.

An entry in a MAC address table is uniquely identified by a MAC address plus a VLANID. Entries that have the same MAC address and the same VLAN ID are considered thesame. An entry in the MAC address table is composed of:

1. MAC address: For example, 00D0.8756.95CA.2. VLAN ID: ID of the VLAN that the MAC address belongs to.3. Port number: For example, gei–0/1/1/3.4. Other flags: These flags indicate the status and operations of the MAC address. There

are seven types of flags:l static: indicates that the MAC address is static.l Dynamic: indicates that the MAC address is dynamic to learn.l To-Permanent: indicates that the MAC address solidify permanent.l permanent: indicates that the MAC address is permanent.l Filter(Both): indicates that data frames are filtered based on the source or

destination MAC address.l to-static: indicates that the MAC address is stabilized.l Filter(Src): indicates that data frames are filtered based on the source MAC

address.l Filter(Dst): indicates that data frames are filtered based on the destination MAC

address.

6-1



l from: MAC address of the device from where the packet is sent.l time: the time period that the dynamic MAC address keeps alive.

When a switch performs layer-2 forwarding, it queries the MAC address table based onthe destination MAC address and VLAN contained in a data frame, so as to determine towhich port the data frame is to be forwarded.

When a switch performs layer–3 forwarding, it queries the MAC address table afterobtaining the MAC address corresponding to the IP address of the next hop, and similarlydetermines to which port a data frame is to be forwarded.

MAC Address ClassificationsThe MAC addresses in a MAC address table can be classified into three types:

l Dynamic MAC address

A dynamic MAC address is learned by a switch through data frames in the network,and it is deleted when its aging time arrives. When the ports of the switch connectingthe network device change, the mappings between the MAC addresses and ports inthe MAC address table also change. After the switch is powered off and restarted, thelearned dynamic MAC addresses disappear, and then the switch starts to learn newdynamic MAC addresses.

l Static MAC address

A static MAC address does not age out, but it disappears when the ZXR10 5900Ereboots. At present, static MAC addresses are not supported.

l Permanent MAC address

A permanent MAC address is generated through the configuration and does not ageout. No matter how the ports of the switch connecting the network device change,the mappings between the MAC addresses and ports in the MAC address table donot change. For a port configured with a static or permanent MAC address, if youwant to change the VLAN of the corresponding port so that the port will not belongto this VLAN any more, the system gives the message that the MAC address shouldbe deleted before changing the VLAN. After the switch is powered off and restarted,permanent MAC addresses do not disappear, as long as the configuration is savedon the switch previously.

l MAC address filtration

MAC address filtration is generated through the configuration and does not age out.After the configurations on the ZXR10 5900E are stored, MAC addresses filtrationare not lost after the ZXR10 5900E reboots. MAC address filtration is divided into thefollowing types:

à Source filtration: The source MAC addresses of packets are not learned

à Destination filtration: Packets are not forwarded by destination MAC address.

à Source and destination filtration: The source MAC addresses of packets are notlearned and forwarded.

6-2


Chapter 6 MAC Address Table Configuration

Creating and Deleting a MAC Address TableIn the initial status, a switch does not have aMAC address table. To realize fast forwarding,you must create a MAC address table for the switch. The capacity of the MAC addresstable is limited, and the network devices change frequently, so you must delete old entriesfrom the MAC address table and update the changed ones.

l Dynamic Learning

The dynamic MAC addresses in the MAC address table are learned dynamically by aswitch. The learning process is as follows:

When a port of the switch receives a data frame, the switch analyzes the source MACaddress and VLAN ID (assume that they are MAC1 + VID1) in the frame. If the MACaddress is legal and can be learned, the switch uses MAC1 + VID1 as the key to querythe MAC address table. If MAC1 + VID1 cannot be found in the MAC address table,the switch adds it to the table. If MAC1 + VID1 can be found in the table, the switchupdates the corresponding entry in the table.

Note:

à MAC address learning is to learn the source MAC address in the data frame,instead of the destination MAC address.

à For MAC address learning, only unicast addresses can be learned. Broadcast ormulticast addresses cannot be learned.

l MAC Address Aging

The capacity of the MAC address table is limited. To effectively use the resources inthe MAC address table, the switch provides MAC address aging.

If the switch does not receive any data frame from a device during the specified period(the aging time), the switch assumes that the device has already left the network. Inthis case, the switch deletes the corresponding MAC address from the MAC addresstable. In this way, the MAC address table can be updated in time. MAC address agingis applied only to dynamic MAC addresses.

l Adding or Deleting a MAC Address Manually

If the network is comparatively stable and the switch port connecting a device is fixed,you can use the configuration commands to add the MAC address directly in theMAC address table of the switch. The MAC address can be configured as a staticor permanent one. Adding static or permanent MAC addresses can prevent networkattacks that use fraudulent MAC addresses.

The added MAC addresses can be deleted by using the command of deleting a MACaddress. This command can also be used to delete a dynamic MAC address forcedlyand make the switch learn the address again.

6-3



6.2 Configuring a MAC Address TableSetting the Aging Time of MAC AddressesThe setting of the aging time of MAC addresses may affect the performance of a switch.If the aging time is too short, the switch may delete many valid entries from the MACaddress table, and thus the switch may broadcast numerous packets whose destinationMAC addresses cannot be found. As a result, a great amount of bandwidth for the switchmay be occupied. On the contrary, if the aging time is too long, the switch may save toomany outdated entries in the MAC address table. Consequently, new MAC addressescannot be added to the MAC address table.

Command Function

ZXR10(config-mac)#aging-time <time> Specifies the aging time (in seconds)

of MAC addresses, default: 300.

Stabilizing MAC AddressesStabilizing MAC addresses is to convert all the dynamic MAC addresses in the MACaddress table into static MAC addresses or permanent MAC addresses. However,static MAC addresses are not saved permanently, and they disappear after the switch ispowered off and restarted. But, permanent MAC addresses are saved permanently, andthey exist after the switch is powered off and restarted.

Command Function

ZXR10(config-mac)#to-static [{ interface < port-name >| mac}]{enable| disable}

Stabilizes dynamic MAC

addresses.

ZXR10(config-mac)#to-permanent interface <interface-name>{e

nable|disable}

Sets MAC addresses to

permanent.

Binding a Port to a MAC AddressBinding a port to a MAC address can be realized by adding a static or permanent MACaddress on the switch. After the MAC address is bound to the port, the mappings betweenthe MAC address of the port are fixed, and the MAC address are not learned any more.


1 ZXR10(config-mac)#add permanet <mac-address>

interface < port-name>{ all-owner-vlan | vlan< vlan-id>]Adds a MAC address.

2 ZXR10(config-mac)#delete {[interface < port-name>]

,[vlan < vlan-id>],[< mac-address>]}

Deletes a MAC address.

Configuring MAC Address Learning for a PortBy default, the MAC address learning function is enabled for a switch port, so that the portcan dynamically learn MAC addresses. If a device always connects to this port, you canconfigure MAC address binding, manually configure all the possible MAC addresses for

6-4


Chapter 6 MAC Address Table Configuration

the port, and then disable the MAC address learning function. In this way, the port doesnot learn MAC addresses dynamically any more.

Command Function

ZXR10(config-mac)#learning { enable| disable}[ interface <port-name>]

Configures MAC address learning.

Configuring the Maximum Number of MAC Addresses for a Port or SwitchThe capacity of the MAC address table of a switch is limited. If the number of MACaddresses is reaching the upper limit, you can limit the number of MAC addresses thatcan be learned by the port used by a lower-priority user. This can prevent network attacks(such as MAC address overflow) caused by MAC address flooding.

Command Function

ZXR10(config-mac)#limit-maximum <max-number>[interface<port-name>| vlan <vlan-id>]

Configures the maximum number

of MAC addresses for a port or

switch.

Note:

To cancel the maximum number of MAC addresses for a port or switch, run the no formof this command.

Configuring MAC Address FilteringFiltering a data frame by MAC address can be of one of the following:

l Matching the source MAC address of the data frame onlyl Matching the destination MAC address of the data frame onlyl Matching both the source and destination MAC addresses of the data frame

Command Function

ZXR10(config-mac)#filter { source| both| destination}<mac-addre

ss> vlan< vlan-id>Configures MAC address filtration.

During the MAC address filtration configuration, port name does not need to be specified.The switch filters data frames from all ports.

6.3 Maintaining and Diagnosing an MAC Address TableTo main MAC on ZXR10 5900E, use the following command:

6-5



Command Function

ZXR10#show mac table [{[{dynamic| static| permanent | to-static|s

rc-filter| dst-filter| to-permanent}],[<mac-address>],[interface <port-name>], [vlan < vlan-id>]}]

This shows the MAC address

table.

The following is an example of the show mac table command:

ZXR10(config-mac)#show mac table







----------------------------------------------------------------------

00e0.d122.1000 111 gei-0/1/1/1 Dynamic 0 02:17:23:13

ZXR10(config-mac)#

6-6


Chapter 7RMON ConfigurationTable of Contents

RMON Overview ........................................................................................................7-1Configuring RMON.....................................................................................................7-2Maintaining RMON.....................................................................................................7-4

7.1 RMON OverviewIntroductionRMON is developed to meet the requirements of monitoring the traffic on subnetworks.RMON can be used to monitor the traffic on subnetworks of Ethernet and token ringnetworks, which is an important enhancement to SNMP. In RFC1757, RMON is definedby an MIB. In this way, the information about the whole traffic on the specified subnetworkcan be obtained through the RMON-MIB.

Network flow monitoring is very important in network management. Network operationalstatus can be obtained by viewing the traffic in the whole network. If a network has multiplesubnetworks, it is necessary to know the operational status, flow changes, performanceand related information of each subnetwork. Monitoring the whole network can be moreeffective through traffic analysis and statistics.

RMON implements the four basic functions (a statistics group, a history group, an alarmgroup, and an event group) defined in RFC1757. A reasonable configuration can assistnetwork administrators in knowing and analyzing network operation information, andobtaining network alarms quickly.

PrinciplesA detection system (called monitor) should be placed inside each subnetwork formonitoring purposes. The monitor checks each packet over the network, and collectsstatistics (for example, the total number of packets sent and total number of error packets)and implements analysis on these packets.

RMON defines several physical groups based on the data and functions required bysubnetwork monitoring. In this example, RMON implements four physical groups:1. Statistics group: collects statistics on error information for each subnetwork.2. History group: stores the information periodically sampled from the statistics group.3. Alarm group: allows administrators to set the sampling interval and enables the RMON

system to record the alarms triggered by counters.4. Event group: records all events generated by the RMON system.

7-1



At the same time, RMON defines 10 groups that are logically consistent. These groups relyon each other in implementation, and may contain tables from different physical groups.In this example, the following logical groups are concerned:1. Ethernet statistics group: stores Ethernet statistics from each monitored Ethernet

interface. This group contains the etherStatsTable.2. History control group: periodically samples historical data from different networks. This

group contains the historyControlTable.3. Ethernet history group: stores the periodically-sampled data from Ethernet for future

use. This group contains the etherHistorytable.4. Alarm group: collects the statistics on the specified variable periodically, and compares

it with the pre-defined threshold. If the monitored variable exceeds the threshold, analarm is raised. The delay mechanism is used to restrict the number of alarms. Thisgroup contains the alarmTable and should cooperate with the event group.

5. Event group: controls the generation of monitored events and determines whether toinform the system. This group contains an eventTable and a logTable.

7.2 Configuring RMONTo configure RMON, perform the following steps:


1 ZXR10(config)#rmon Enters RMON configuration mode.

2 ZXR10(config-rmon)#rmon alarm

<index><variable><interval>{delta | absolute}

rising-threshold <value>[<event-index>]

falling-threshold <value>[<event-index>][owner<string>]

Configures the RMON alarm table.

3 ZXR10(config-rmon)#rmon event

<index>[log][trap <community>][description<string>][owner <string>]

Configures the RMON event table.

4 ZXR10(config-rmon)#interface <name > Enters RMON interface configuration

mode.

5 ZXR10(config-rmon-if)#rmon collection

history <index>[owner <string>][buckets<bucket-number>][interval <seconds>]

Configures the RMON history table.

6 ZXR10(config-rmon-if)#rmon collection

statistics <index>[owner <string>]Configures the RMON statistics table.



<index> Index ID, range: 1–65535.

7-2


Chapter 7 RMON Configuration


<variable> MIB variable to be monitored, range: 1–64

characters. The MIB variable must be an MIB

variable that can be converted into an integer.

<interval> Time interval (in seconds) for monitoring the MIB

variable, range: 10–2147483647.

delta Compares the increment with the threshold.

absoulte Compares the specified variable with the

threshold.

rising-thershold <value> Rising threshold in sampling statistics, range:

-2147483647 to 2147483647.

<event-index> ID of the event triggered when the threshold is

exceeded, range: 1–65535.

falling-threshold <value> Falling threshold in sampling statistics, range:

-2147483647 to 2147483647.

owner<string> Owner of the alarm, range: 1–31 characters,

default: config.




log Whether to generate a log.

trap <community> Community string used for sending traps, range:

1–32 characters.

description <string> Brief description for the event, range: 1–10127

characters, default: zte.

owner<string> Owner of the event, range: 1–31 characters,

default: config.



<name> Interface name.




7-3




owner <string> Owner of the historical record, range: 1–31

characters, default: monitor.

buckets <bucket-number> Bucket size, range: 1–100, default: 50.

interval <seconds> Sampling interval (in seconds), range: 10–3600,

default: 1800. It is recommended to set the value

to 30 or 1800 for collecting network traffic during

a short-term or long-term period.




owner <string> Owner of the historical record, range: 1–31

characters, default: monitor.

7.3 Maintaining RMONTo maintain RMON, run the following command:

Command Function

ZXR10(config)#show rmon [alarms][events][hist

ory][statistics]

Displays the RMON configuration and related

information.

For a description of the parameters, refer to the following table:


alarms Displays the information about all alarms.

events Displays the information about all events.

history Displays the information about all historical

records.

statistics Displays the information about all statistics items.

The following is sample output from the show rmon alarms command:ZXR10(config-rmon)#show rmon alarms

Alarm 1 is valid, and owned by zte

Monitors interfaces.1.0,every 200 second(s)

Taking absolute samples, last value was 7

Rising-threshold is 100,assigned to event 0

Falling-threshold is 10,assigned to event 0

On startup enable rising or falling alarm

7-4


Chapter 7 RMON Configuration


Output Information Description

valid Alarm status.

last value was 7 Previous sampling value.

The following is sample output from the show rmon events command:

ZXR10(config-rmon-if)#show rmon events

Event 2 is valid, and owned by config

Description is zte

Event firing causes log and trap to community/user public, last fired 0w0d,00:00:00

Current log entries:

index time description



valid Event status.

log and trap The event is logged and a trap is sent.

Current log entries Log records.

The following is sample output from the show rmon history command:

ZXR10(config-rmon-if)#show rmon history

historyControlEntry 1 is valid,and owned by monitor

Monitors ifEntry.1.2 (gei-0/1/1/1) every 30 seconds

Requested buckets is 10

Granted buckets is 50



valid Status of the history record.

every 30 seconds Time interval for sampling historical data.

Requested buckets Number of sampling operations that the management

stations wishes to perform.

Granted buckets Number of records that the RMON system

keeps in the etherHistoryTable. When a

histroryCnotrolBucketsResquest message is

created or modified, the RMON system should keep the

setting of the Granted buckets parameter consistentwith that of the Requested buckets parameter.

The following is sample output from the show rmon statics command:

7-5



ZXR10(config-rmon-if)#show rmon statistics

etherStatsEntry 1 is valid,and owned by monitor

Monitors ifEntry.1.2 (gei-0/1/1/1) which has

Received 0 octets, 0 packets,

0 broadcast and 0 multicast packets,

0 undersized and 0 oversized packets,

0 fragments and 0 jabbers,

0 CRC alignment errors and 0 collisions,

0 dropped packets (due to lack of resources).

Packets received (in octets):

64:0, 65-127:0, 128-255:0,

256-511:0, 512-1023:0, 1024-1518:0



valid Status of the history record.

Received 0 octets Number of bytes received.

0 packets Number of packets received.

The following is sample output from the Show rmon command:

ZXR10(config-rmon-if)#show rmon

supports Statistics History Alarm Event etc. group(s) of RFC1757.

Config entries:

etherStats 1

historyControl 1

alarm 1

event 3

ZXR10(config-rmon-if)#



etherStats Number of statistics items.

historyControl Number of historical records.

alarm Number of alarms.

Event Number of events.

7-6


Chapter 8PoE ConfigurationTable of Contents

PoE Overview ............................................................................................................8-1Configuring PoE ........................................................................................................8-2Maintaining PoE .........................................................................................................8-6PoE Configuration Example........................................................................................8-6

8.1 PoE OverviewPower over Ethernet (PoE) is an extension of network devices that support Ethernetelectrical interfaces. Network devices (including switches and routers) supporting PoEcan provide power supply for remote devices (including IP phones, WLAN APs, andnetwork cameras) through twisted-pair cables.

PoE is also called power over network. It is a technology used to provide power supplyfor devices through electric power transmitted over standard CAT-5 10 BASE-T and 100BASE-TX Ethernet cables. Based on the existing Ethernet CAT-5 cabling architecture,without any modification, when data signals are transmitted to IP-based terminals (suchas IP phones, WLAN APs, and network cameras), DC power supply can be provided forthese devices through PoE. PoE ensures security of the existing cabling architecture, andensures that the existing network can operate properly. This reduces costs to themaximumextent. Figure 8-1 shows a PoW application scenario.

Figure 8-1 PoE Application Scenario

8-1



The ZXR10 5950–36PM-H and ZXR10 5950–56PM-H switches support the PoE function.

l The ZXR10 5950-36PM-H provides 24 1000 Base-T electrical interfaces, four combointerfaces, and two expansion slots. It supports PoE and PoE+. For PoE+, full-loadpower supply complying with the 802.3at standard must be provided for two thirdsof the ports. The first four interfaces support PoE+ with a maximum of 60 W. TheZXR10 5950-36PM-H supports modular dual-power and power-down protection, andprovides AC power supply and DC power supply.

l The ZXR10 5950-56PM-H provides 48 1000 Base-T electrical interfaces, and twoexpansion slots. It supports PoE and PoE+. For PoE+, full-load power supplycomplying with the 802.3at standard must be provided for 26 ports. The first fourinterfaces support PoE+ with a maximum of 60 W. The ZXR10 5950-56PM-Hsupports modular dual-power and power-down protection.

The ZXR10 5900E provides the following PoE functions:

1. Enables or disables the PoE function on ports.2. Provides power supply with different powers on ports.3. Supports port priorities. Power supply is preferentially provided for a port with a higher

priority.4. Supports configuring the maximum output power for the device.5. Supports PoE and PoE+. Some ports support 60 W PoE+.6. Supports remote power supply for ports.7. Supports configuring the PoE time range.8. Supports port power detection. If the actual power is greater than the PSE-distributed

power, the device stops providing power supply for ports.9. Supports stopping providing power supply for new PoE ports if the entire-device PoE

power is exceeded.10. Supports displaying the PSE power supply state and PD power supply state, such as

whether power supply is provided, power, level, and temperature.11. Supports testing consistency between 802.3AF and 802.3AT.12. Supports testing the compatibility of devices connected to ports.13. Supports over-temperature protection recovery.14. Supports the PoE module alarm function.15. Supports online upgrade of PoE power supply management software.

8.2 Configuring PoETo configure PoE on the ZXR10 5900E, perform the following steps.

Entering PoE Configuration Mode

Command Function

ZXR10(config)#poe Enters PoE configuration mode.

8-2


Chapter 8 PoE Configuration

Enabling or Disabling the PoE Function

Command Function

ZXR10(config-poe)#interface <interface-name>

ZXR10(config-poe-if-interface-name)#ena

ble | disable

Enables or disables the PoE function for the

specified interface. By default, the PoE function

is disabled.

Enabling or Disabling the PoE+ Function

Command Function

ZXR10(config-poe)#interface <interface-name>

ZXR10(config-poe-if-interface-name)#enhan

ced-mode {enable | disable}

Enables or disables the PoE+ function for the

specified interface. By default, the function is

disabled.

Configuring a Power Supply Priority for a PoE Port

Command Function

ZXR10(config-poe-if-interface-name)#prior

ity {low | high | critical}

Sets a power supply priority for the specified PoE

port. The priorities in ascending order are low,

high, and critical. The default priority is critical.

By default, the priority of each PoE port is critical (the highest priority), and the powersupply order depends on port number. The power supply is preferentially provided for aport with a smaller port number. If the priorities of ports are different, the power supply isprovided based on priorities.

Configuring the Maximum Port Power

Command Function

ZXR10(config-poe-if-interface-name)#pd-m

ax-power{4.0 | 7.0| 15.4 | 18 | 27 | 30| ext.34 | ext.37 |

ext.45.4 | ext.48 | ext.57 | ext.60 | auto}

Configures the maximum power on a PoE port.

Parameter description:


4.0 Indicates that the maximum power on a PoE port

is set to 4.0 W.


is set to 7.0 W.


is set to 15.4 W.

8-3




18 Indicates that the maximum power on a PoE port

is set to 18 W.


is set to 27 W.


is set to 30 W. The default maximum power on a

PoE port is 30 W.

ext. 34 Indicates that the maximum power on a PoE port

is set to 34 W.


is set to 37 W.

ext. 45.4 Indicates that the maximum power on a PoE port

is set to 45.4 W.


is set to 48 W.


is set to 57 W.


is set to 60 W.

auto Indicates that the maximum power on a PoE port

is set to auto.

There is a difference between the PSE power and the PD power. For example, if the PSEpower is set to 30 W, the actual PD power is about 25 W. The cause is that the PoE supplyvoltage is low and the current is high, and then the power loss is great.

If the power supply is provided for the device operating in full-power state, much heat isgenerated within a short period in the PD due to a large number of ports. Therefore, ensurethat fans of the PD are operating properly.

For the ZXR10 5950-36PM-H and ZXR10 5950-56PM-H, only the first four ports supportthe power supply with a maximum of 60 W. Other ports support the power supply with amaximum of 30 W.

Note:

The maximum power cannot be set to auto for the first four ports.

The device supports PoE with the minimum distance of 100 meters.

8-4



Configuring the Timing Function

Command Function

ZXR10(config-poe-if-interface-name)#time-

range <time-range>

Configures the timer for the specified interface,

so that PoE is valid in the specified time range.

Before configuring the PoE timer, you need to enable the timer function in time-range mode and create the corresponding timer. You can run the show poe config interfacecommand to verify that the configuration is applied.

To configure the function that the PoE power supply is provided in the specified time period,enter time-range configuration mode from global configuration mode, set the start time andend time, enter PoE configuration mode, and bind the time range to the specified port.

Perform Online Software Upgrade

Command Function

ZXR10(config-poe)#upgrade-firmware

<firmware file name> device-id <device-id>

Performs online upgrade for the PoE power

supply management software.



<firmware file name> File path of the PoE firmware.

<device-id> ID of the device.

Configuring the Temperature Protection Function

Command Function

ZXR10(config-poe)#overtemperature

auto-recovery device-id <device-id>{enable |

disable}

Enables or disables the over-temperature

recovery function. By default, this function is

disabled.



<device-id> ID of the device.

enable Indicates the temperature protection function is

to be enabled.

disable Indicates the temperature protection function is

to be disabled.

If the power supply is provided for the device operating in full-power state, theover-temperature protection recovery function must be enabled for the device. When the

8-5



device detects that the temperature on a port is higher then 80ºC, the device stops PoEand generates an alarm. After the temperature is lower, the device provides PoE again.

Configuring the Alarm Threshold for the Electric Energy Occupancy Rate

Command Function

ZXR10(config-poe)#power-threshold

<threshold-range> device-id <device-id>

Configures the alarm threshold for the electric

energy occupancy rate. By default, the alarm

threshold is not configured.



<threshold-range> Alarm threshold for the electric energy occupancy

rate of a PoE device. The value is a percentage.

<device-id> ID of the device. The device ID of switches is 1.

8.3 Maintaining PoETo maintain PoE on the ZXR10 5900E, run the following commands.

Command Function

ZXR10(config)#show poe config interface

<interface-name>

Displays PoE configuration information on the

specified port.

To display the configuration information, the

corresponding port must be enabled.

ZXR10(config)#show poe interface

<interface-name>

Displays PoE information on the specified port.

ZXR10(config)#show poe device Displays PoE device information.

The show poe device command displays the PSE configuration power, and the show poeinterface displays the actual PD power. If the required PD power is greater than the PSEconfiguration power, PoE must be disabled on ports.

8.4 PoE Configuration ExampleDescriptionAs shown in Figure 8-2, PoE is configured on the ZXR10 5950-36PM-H to provide powersupply for the IP phones.

8-6



Figure 8-2 PoE Configuration Example

Configuration Flow1. Enter PoE configuration mode.2. Enable the PoE function for the ports connected to IP phones.

Configuration CommandsThe configuration on the ZXR10 5950-36PM-H is as follows:

ZXR10(config)#poe

ZXR10(config-poe)#interface gei-0/1/1/5

ZXR10(config-poe-if-gei-0/1/1/1)#enable

ZXR10(config-poe-if-gei-0/1/1/1)#exit

ZXR10(config-poe)#interface gei-0/1/1/28

ZXR10(config-poe-if-gei-0/1/1/28)#enable

ZXR10(config-poe-if-gei-0/1/1/28)#exit

Configuration VerificationRun the show poe interface command to view PoE power supply information on the ports.

ZXR10(config-poe)#show poe interface gei-0/1/1/5

power up : on

power device : delivering power

power device type : IEEE802.3 AF power device

802.3af classification : class 0

interface current-power : 4.3w

interface avg-power : 4.3w

interface peak-power : 4.4w

peak-power time : 2013:10:21 13:16:58

interface temperaturte : 45℃

8-7




8-8


FiguresFigure 1-1 ZXR10 5900E's Configuration Methods ................................................... 1-1

Figure 1-2 Network Scenario for the FTP Server....................................................... 1-2

Figure 1-3 Network Scenario for the FTP Client ........................................................ 1-2

Figure 1-4 FTP Server Configuration Example ......................................................... 1-4

Figure 1-5 Connect to Server Dialog Box .................................................................. 1-5

Figure 1-6 Filezilla Server Dialog Box ....................................................................... 1-5

Figure 1-7 Users Dialog Box ..................................................................................... 1-6

Figure 1-8 Target User Settings ................................................................................ 1-6

Figure 1-9 TFTP Server ............................................................................................ 1-8

Figure 1-10 Configure Dialogue Box ......................................................................... 1-9

Figure 1-11 Hyper Terminal Connection 1 ............................................................... 1-10

Figure 1-12 Connection Description ........................................................................ 1-11

Figure 1-13 Selecting a Serial Port ......................................................................... 1-11

Figure 1-14 COM Properties ................................................................................... 1-12

Figure 1-15 Running Telnet..................................................................................... 1-13

Figure 1-16 Telnet.Exe Window .............................................................................. 1-14

Figure 1-17 SSH Client Login Configuration............................................................ 1-21

Figure 1-18 SSH Client Select Version Configuration.............................................. 1-22

Figure 1-19 Successful Login Interface ................................................................... 1-22

Figure 2-1 VSC Configuration Example .................................................................. 2-30

Figure 3-1 SNMP Configuration Example Topology................................................. 3-12

Figure 3-2 NetFlow V5 Configuration Example........................................................ 3-25

Figure 3-3 NetFlow V9 Configuration Example........................................................ 3-26

Figure 3-4 SYSLOG Configuration Example Topology ............................................ 3-35

Figure 3-5 Port Mirroring Principle .......................................................................... 3-37

Figure 3-6 Port Mirroring Configuration Example .................................................... 3-40

Figure 3-7 Performance Management Configuration Example TopologyDiagram................................................................................................ 3-49

Figure 3-8 Time Range Configuration Example Topology........................................ 3-54

Figure 8-1 PoE Application Scenario......................................................................... 8-1

Figure 8-2 PoE Configuration Example ..................................................................... 8-7

I


Figures


II


GlossaryBGP- Border Gateway Protocol

BMC- Best Master Clock

CPU- Central Processing Unit

ESM- EPS Session Management

FTP- File Transfer Protocol

GPS- Global Positioning System

IETF- Internet Engineering Task Force

IPMC- Intelligent Platform Management Controller

IS-IS- Intermediate System-to-Intermediate System

ITU-T- International Telecommunication Union - Telecommunication StandardizationSector

LLDP- Link Layer Discovery Protocol

MAC- Media Access Control

NE- Network Element

NM- Network Management

NMS- Network Management System

NTP- Network Time Protocol

NVRAM- Non-Volatile Random Access Memory

III



OSPF- Open Shortest Path First

PDU- Packet Data Unit

PMS- Performance Management Subsystem

PTP- Precision Time Protocol

RFC- Request For Comments

RIP- Routing Information Protocol

RMON- Remote Monitoring

SD- Secure Digital memory card

SNMP- Simple Network Management Protocol

SSH- Secure Shell

SSM- Synchronization Status Message

TCP/IP- Transmission Control Protocol/Internet Protocol

TFTP- Trivial File Transfer Protocol

UDP- User Datagram Protocol

VTY- Virtual Teletype

IV


ZXR105900ESeries - nova-minsk.comnova-minsk.com/ZTE/59E/SJ-20150114102049-002-ZXR10... ·...

Documents

Transcript of ZXR105900ESeries - nova-minsk.comnova-minsk.com/ZTE/59E/SJ-20150114102049-002-ZXR10... ·...