Page 1 S9300&S9300E Terabit Routing Switch V200R001C00 Configuration Guide - Network Management Issue Date 2012-03-15 HUAWEI TECHNOLOGIES CO., LTD.
Page 2 All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope.
Page 3: About This Document
Indicates a tip that may help you solve a problem or save time. Provides additional information to emphasize or supplement NOTE important points of the main text. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 4: Command Conventions
Change History Updates between document issues are cumulative. Therefore, the latest document issue contains all updates made in previous issues. Changes in Issue 01 (2012-03-15) Initial commercial release. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 5: Table Of Contents
1 SNMP Configuration........................1 1.1 Introduction to SNMP............................2 1.1.1 SNMP Overview............................2 1.1.2 SNMP Features Supported by the S9300&S9300E..................4 1.2 Configuring a Device to Communicate with an NM Station by Running SNMPv1..........7 1.2.1 Establishing the Configuration Task......................7 1.2.2 Configuring Basic SNMPv1 Functions.....................8 1.2.3 (Optional) Controlling the NM Station's Access to the Device...............10...
Page 6 S9300&S9300E Terabit Routing Switch Configuration Guide - Network Management Contents 2.2 LLDP Feature Supported by the S9300&S9300E....................48 2.3 Configuring LLDP............................51 2.3.1 Establishing the Configuration Task.......................51 2.3.2 Enabling Global LLDP..........................52 2.3.3 (Optional) Disabling LLDP on an Interface....................52 2.3.4 (Optional) Configuring an LLDP Management Address................53 2.3.5 (Optional) Configuring the TLV in the LLDPDU...................54...
Page 7 3.6.9 Example for Configuring the Configuration Synchronization Function for an HGMP Cluster....190 3.6.10 Example for Configuring Security Features for an HGMP Cluster............200 4 NTP Configuration........................211 4.1 Introduction to NTP............................212 4.2 NTP Supported by the S9300&S9300E......................214 4.3 Configuring Basic NTP Functions.........................216 4.3.1 Establishing the Configuration Task.....................216 4.3.2 Configuring the NTP Primary Clock.....................217 4.3.3 Configuring the Time Interval to Update Client Clock.................217...
Page 8 6 NQA Configuration........................257 6.1 Introduction to NQA............................260 6.2 Comparisons Between NQA and Ping......................260 6.3 NQA Server and NQA Clients........................261 6.4 NQA Supported by the S9300&S9300E......................261 6.5 Configuring the ICMP Test..........................262 6.5.1 Establishing the Configuration Task.....................262 6.5.2 Configuring ICMP Test Parameters......................263 6.5.3 Checking the Configuration........................265...
Page 9 6.20 Configuring the NQA MTrace Test to Check the RPF Path from the Multicast Source to the Querier ....................................320 6.20.1 Establishing the Configuration Task....................320 6.20.2 Creating an NQA MTrace Test......................321 6.20.3 Configuring the NQA MTrace Test.....................322 Issue 01 (2012-03-15) Huawei Proprietary and Confidential viii Copyright © Huawei Technologies Co., Ltd.
Page 10 6.26.2 Configuring Parameters for the PWE3 Trace Test on a One-Hop PW..........349 6.26.3 Checking the Configuration.........................350 6.27 Configuring the PWE3 Trace Test to Check the Multi-Hop PW..............352 6.27.1 Establishing the Configuration Task....................352 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 11 6.33.5 Checking the Configuration.........................380 6.34 Maintaining NQA............................381 6.34.1 Restarting NQA Test Instances......................381 6.34.2 Clearing NQA Statistics........................381 6.34.3 Debugging NQA..........................382 6.35 Configuration Examples..........................382 6.35.1 Example for Configuring the ICMP Test....................382 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 12 6.35.32 Example for Configuring the LSP Trace Test for Checking the CR-LSP Hotstandby Tunnel..494 7 NetStream Configuration......................500 7.1 Overview of NetStream..........................502 7.2 NetStream Features Supported by the S9300&S9300E.................503 7.3 Collecting IPv4 Traffic Statistics........................504 7.3.1 Establishing the Configuration Task.....................504 7.3.2 Configuring the NetStream Function on an Interface................504 7.3.3 (Optional) Configuring the Version of Exported Packets..............505...
Page 13 7.9.2 Example for Configuring IPv4 Aggregation Traffic Statistics..............523 7.9.3 Example for Configuring Flexible NetStream..................528 8 RMON and RMON2 Configuration..................532 8.1 Introduction to RMON and RMON2......................533 8.2 RMON and RMON2 Suported by the S9300&S9300E.................534 8.3 Configuring RMON............................536 8.3.1 Establishing the Configuration Task.....................536 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 14 8.6.2 Examples for Configuring RMON2......................550 9 Traffic Distribution Configuration..................554 9.1 Traffic Distribution Overview........................555 9.2 Traffic Distribution Features Supported by the S9300&S9300E..............555 9.3 Configuring Traffic Distribution Based on the Eth-Trunk................556 9.3.1 Establishing the Configuration Task.....................556 9.3.2 Setting the Load Balancing Mode of an Eth-Trunk................557 9.3.3 (Optional) Configuring Unidirectional Single-fiber Communication...........558...
Page 15 Contents 10.5.1 Example for Capturing Packets......................575 11 sFlow Configuration.......................578 11.1 sFlow Overview............................579 11.2 sFlow Features Supported by the S9300&S9300E..................579 11.3 Configuring sFlow............................580 11.3.1 Establishing the Configuration Task....................580 11.3.2 Configuring sFlow Agent and sFlow Collector Information...............582 11.3.3 Configuring an sFlow Sampling Mode....................583 11.3.4 Checking the Configuration.........................584...
Page 16: Snmp Configuration
This section provides several configuration examples of SNMP. The configuration roadmap in the examples will help you understand the configuration procedures. Each configuration example provides information about the networking requirements, configuration notes, and configuration roadmap. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 17: Introduction To Snmp
Managed device: is managed by an NM station and generates and reports alarms to the NM station. Figure 1-1 shows the relationship between the NM station and agent. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 18: Snmp Operations
MIB can reduce the costs on proxy deployment and therefore reduce the costs on the entire network management system. SNMP Operations SNMP uses Get and Set operations to replace a complex command set. The operations described Figure 1-3 can implement all functions. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 19: Snmp Features Supported By The S9300&S9300E
Trap Reports an event to the NM station. 1.1.2 SNMP Features Supported by the S9300&S9300E This section compares SNMP versions in terms of their support for features and usage scenarios. Use it as a reference when you select the SNMP version during network deployment.
Page 20 NM station after sending an inform, it will store the inform in its memory. In this regard, using informs may consume lots of system resources. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 21 Applies to small-scale networks whose networking is simple and security requirements are low or whose security and stability are good, such as campus networks and small enterprise networks. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 22: Configuring A Device To Communicate With An Nm Station By Running Snmpv1
This will help you complete the configuration task quickly and accurately. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 23: Configuring Basic Snmpv1 Functions
SNMP communication can be conducted between the NM station and managed device. Procedure Step 1 Run: system-view The system view is displayed. Step 2 (Optional) Run: snmp-agent The SNMP agent function is enabled. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 24 The parameter securityname identifies the alarm sender, which will help you learn the alarm source. l If the NM station and managed device are both Huawei products, the parameter private- netmanager can be configured to add more information to alarms, such as the alarm type, alarm sequence number, and alarm sending time.
Page 25: Optional) Controlling The Nm Station's Access To The Device
To allow a specified module on the managed device to report alarms to the NM station, follow the procedure described in Configuring the Trap Function. If the NM station and managed device are both Huawei products, follow the procedure described in Enabling the SNMP Extended Error Code Function to allow the device to send more types of error codes.
Page 26 NM station administrator needs the read and write permissions in the specified view in some cases. For example, a high-level administrator needs to read and write certain data. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 27: Optional) Enabling The Snmp Extended Error Code Function
This section describes how to enable the extended SNMP error code function when both the NM station and managed device are Huawei products. After this function is enabled, more types of error codes are provided to help you locate and rectify faults more quickly and accurately.
Page 28 The lifetime of every trap message depends on the number of generated trap messages. If the switch frequently generates trap messages, a longer lifetime can be set for every trap message to prevent trap messages from being lost. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 29: Checking The Configuration
For details on how to configure finer management such as accurate access control or alarm module specification, see the following configuration procedures. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 30: Establishing The Configuration Task
Steps 3, 4, and are mandatory for the configuration of basic SNMP functions. After the configurations, basic SNMP communication can be conducted between the NM station and managed device. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 31 If the network is an IPv4 network, configure the device to send either traps or informs to the NM station. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 32 The parameter securityname identifies the alarm sender, which will help you learn the alarm source. l If the NM station and managed device are both Huawei products, the parameter private- netmanager can be configured to add more information to alarms, such as the alarm type, alarm sequence number, and alarm sending time.
Page 33: Optional) Controlling The Nm Station's Access To The Device
Configuring the Trap FunctionConfiguring the Trap Function. If the NM station and managed device are both Huawei products, follow the procedure described in Enabling the SNMP Extended Error Code Function to allow the device to send more types of error codes.
Page 34 If the parameter is configured, the administrator needs to remember the community name. If the community name is forgotten, it cannot be obtained by querying the device. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 35: Optional) Enabling The Snmp Extended Error Code Function
This section describes how to enable the extended SNMP error code function when both the NM station and managed device are Huawei products. After this function is enabled, more types of error codes are provided to help you locate and rectify faults more quickly and accurately.
Page 36 The lifetime of every trap message depends on the number of generated trap messages. If the switch frequently generates trap messages, a longer lifetime can be set for every trap message to prevent trap messages from being lost. Configuring inform parameters: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 37 By default, the log buffer can store a maximum of 500 alarm logs. If the number of alarm logs in the log buffer exceeds 500, the device will delete the alarm logs from the earliest one. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 38: Checking The Configuration
GetResponse, GetBulk, or SetRequest operation, obtaining data and setting values. Receives alarms from the managed device and locates and rectify device faults based on the alarm information. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 39: Establishing The Configuration Task
After basic SNMP functions are configured, an NM station can perform basic operations such as Get and Set operations on a managed device, and the managed device can send alarms to the NM station. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 40 [ authentication-mode { md5 | sha } password [ privacy-mode des56 password ] ] A user is added to the SNMPv3 user group. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 41 To enable SNMPv3 to send trap messages, set securityname to an existing user name and ensure that the user has the right to send trap messages. l If the NM station and managed device are both Huawei products, the parameter private- netmanager can be configured to add more information to alarms, such as the alarm type, alarm sequence number, and alarm sending time.
Page 42: Optional) Controlling The Nm Station's Access To The Device
To allow a specified module on the managed device to report alarms to the NM station, follow the procedure described in Configuring the Trap Function. If the NM station and managed device are both Huawei products, follow the procedure described in Enabling the SNMP Extended Error Code Function to allow the device to send more types of error codes.
Page 43 For example, a high-level administrator needs to read and write certain data. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 44: Optional) Enabling The Snmp Extended Error Code Function
This section describes how to enable the extended SNMP error code function when both the NM station and managed device are Huawei products. After this function is enabled, more types of error codes are provided to help you locate and rectify faults more quickly and accurately.
Page 45 Step 6 Run: snmp-agent trap life seconds The lifetime of every trap message is set. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 46: Checking The Configuration
This section provides an example to describe how to configure a device to communicate with an NM station by using SNMPv1 and how to specify the MIB objects that can be managed by the NM station. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 47 To complete the configuration, you need the following data: SNMP version Community name ACL number IP address of the NM station Length of the trap packet queue Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 48 After the configurations are complete, run the following commands to verify that the configurations have taken effect. # Check information about the SNMP community name. <Quidway> display snmp-agent community Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 49 <Quidway> display snmp-agent sys-info contact The contact person for this managed node: call Operator at 010-12345678 ----End Configuration Files Configuration file of the switch vlan batch 100 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 50: Example For Configuring A Device To Communicate With An Nm Station By Using Snmpv2C
NMS2 because alarms sent by the switch have to travel across the public network to reach NMS2. Equipment administrator's contact information needs to be configured on the switch. This allows the NMS administrator to contact the equipment administrator quickly if a fault occurs. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 51 Step 1 Configure available routes between the switch and the NM stations. Details for the configuration procedure are not provided here. Step 2 Enable the SNMP agent. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 52 <Quidway> display acl 2001 Basic ACL 2001, 2 rules Acl's step is 5 rule 5 permit source 1.1.1.2 0 rule 6 deny source 1.1.1.1 0 # Check the MIB view. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 53 6 deny source 1.1.1.1 0 interface Vlanif100 ip address 1.1.2.1 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 ospf 1 area 0.0.0.0 network 1.1.2.0 0.0.0.255 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 54: Example For Configuring A Device To Communicate With An Nm Station By Using Snmpv3
Figure 1-6 Networking diagram for configuring a device to communicate with an NM station by using SNMPv3 GE1/0/0 VLANIF100 NMS1 1.1.2.1/24 1.1.1.1/24 IP Network Switch NMS2 1.1.1.2/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 55 [Quidway-acl-basic-2001] rule 5 permit source 1.1.1.2 0.0.0.0 [Quidway-acl-basic-2001] rule 6 deny source 1.1.1.1 0.0.0.0 [Quidway-acl-basic-2001] quit # Configure a MIB view. [Quidway] snmp-agent mib-view included testview iso [Quidway] snmp-agent mib-view excluded testview 1.3.6.1.4.1.2011.6.7 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 56 # Check the MIB view. <Quidway> display snmp-agent mib-view viewname testview View name:testview MIB Subtree:iso Subtree mask:80(Hex) Storage-type: nonVolatile View Type:included View status:active View name:testview MIB Subtree:hwCluster Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 57 1.1.2.1 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface LoopBack0 ip address 1.1.3.1 255.255.255.255 ospf 1 area 0.0.0.0 network 1.1.2.0 0.0.0.255 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 58 N'!2Z [^HZ0T&P'@XIM=F#Q!! privacy-mode des56 N'!2Z[^HZ0T&P'@XIM=F#Q!! snmp-agent trap source LoopBack0 snmp-agent trap queue-size 200 snmp-agent trap life 60 snmp-agent trap enable return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 59: Lldp Configuration
The Link Layer Discovery Protocol (LLDP) is a Layer 2 discovery protocol defined in the IEEE 802.1ab standard. 2.2 LLDP Feature Supported by the S9300&S9300E This section describes the usage scenarios of the LLDP feature and TLV types supported by the S9300&S9300E.
Page 60: Introduction To Lldp
Entity MIB (Optional) LLDP local system MIB LLDP remote system MIB Interface MIB (Optional) Other MIBs (Optional) LLDP frames LLDP agent LLDP/LSAP Remote device information Local device information Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 61: Lldp Agent
LLDP Management Address The LLDP management address (short for management address) is used by the NMS to identify the S9300&S9300E and implement network management. A management address identifies a device. It makes the network topology clear and facilitates network management. The management address is carried in the Management Address Type-Length-Value (TLV) field of an LLDP packet to be transmitted to neighbor devices.
Page 62 Figure 2-3 LLDPDU structure End of Chassis ID Port ID Time to Optional Optional LLDPDU Live TLV The basic unit in the LLDPDU is TLV. T: information type Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 63: Lldp Feature Supported By The S9300&S9300E
S9300&S9300E. Usage Scenario The LLDP feature of the S9300&S9300E is applicable to three types of networks. The network where an interface has only one neighbor The interfaces between two switches or the interfaces between a switch and a media endpoint (ME) are directly connected, so each interface has only one neighbor.
Page 64 Figure 2-6 Link aggregation is configured on the network Network Eth-Trunk Enterprise Enterprise SwitchA SwitchB User User Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 65 Configuration Guide - Network Management 2 LLDP Configuration TLV Types Supported by the S9300&S9300E Besides the mandatory TLVs Chassis ID TLV, Port ID TLV, Time to Live TLV, and End of LLDPDU, the S9300&S9300E supports the following optional TLVs. Basic TLV Type Description...
Page 66: Configuring Lldp
Before configuring LLDP, complete the following tasks: Configuring a reachable route between the switch and the NMS and setting the SNMP parameters Configuring an LLDP management address Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 67: Enabling Global Lldp
After global LLDP is enabled, all the interfaces on the device are enabled with LLDP. To disable LLDP on some interfaces, run the undo lldp enable command on these interfaces. Prerequisites LLDP has been enabled globally. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 68: Optional) Configuring An Lldp Management Address
IP address in the following priority order: loopback interface address, console port address, and then VLANIF interface address. Among the IP addresses of the same type, the system selects Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 69: Optional) Configuring The Tlv In The Lldpdu
Based on 802.1ab, 802.3at extends three fields: type/source/priority, PD requested power value, and PSE allocated power value. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 70: Optional) Configuring Lldp Timers
If you disable the LLDP-MED TLVs and use the all keyword, the MAC/PHY Configuration/Status TLVs are not disabled automatically. l Only the S9300&S9300ELI S9300&S9300EHI support the EEE TLV. l Only the G24TFA board supports the EEE function. Step 4 Run: lldp dot3-tlv power {802.1ab | 802.3at }...
Page 71 After receiving the LLDP packets, the neighbors update the aging time of the device information from the sender according to the TTL. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 72 The delay is applied to only the following traps: traps for adding neighbors, traps for deleting neighbors, neighbor aging traps, and traps for discarding neighbor packets (LLDP_1.0.8802.1.1.2.0.0.1 lldpRemTablesChange). Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 73: Optional) Enabling The Lldp Trap Function
The LLDP function is enabled or disabled globally. The traps are LLDP_1.3.6.1.4.1.2011.5.25.134.2.1 hwLldpEnabled and LLDP_1.3.6.1.4.1.2011.5.25.134.2.2 hwLldpDisabled. The local management address changes. The trap is LLDP_1.3.6.1.4.1.2011.5.25.134.2.5 hwLldpLocManIPAddrChange. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 74: Checking The Configuration
The system view is displayed. Step 2 Run: snmp-agent trap enable feature-name lldptrap The LLDP trap function is enabled. By default, the LLDP trap function is disabled on the S9300&S9300E. ----End 2.3.8 Checking the Configuration Prerequisites All configurations are complete.
Page 75: Configuration Examples
Figure 2-7 Configuring LLDP on the device that has a single neighbor 10.10.10.1 10.10.10.2 LLDPDU SwitchA SwitchB LLDPDU packet LLDP interface SNMP packet NMS: Network Management System Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 76 # Check whether the LLDP function is enabled, management addresses are configured, and the LLDP trap function is enabled. l View the configurations on SwitchA. [SwitchA] display lldp local System information -------------------------------------------------------------------------- Chassis Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 77 Chassis ID :00e0- fc33-0011 System name :SwitchA System description :Quidway Huawei Versatile Routing Platform Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., System capabilities supported :bridge System capabilities enabled :bridge LLDP Up time :2011/2/13...
Page 78 :HUAWEI, Quidway Series, GigabitEthernet1/0/1 Interface System name :SwitchB System description :Quidway Huawei Versatile Routing Platform Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., Ltd System capabilities supported :bridge System capabilities enabled :bridge Management address type...
Page 79 MED Device information Device class :Network Connectivity HardwareRev :LE01MCUA VER.A FirmwareRev SoftwareRev :Version 5.110 V200R001C00 SerialNum Manufacturer name :HUAWEI TECH CO., LTD Model name Asset tracking identifier :NA Media policy type :Unknown Unknown Policy :Yes VLAN tagged Media policy VlanID...
Page 80: Example For Configuring Lldp On The Device That Has Multiple Neighbors
Figure 2-8 Configuring LLDP on the device that has multiple neighbors SwitchD SwitchF LLDPDU SwitchE 10.10.10.1 10.10.10.2 10.10.10.3 SwitchA SwitchB SwitchC LLDP interface SNMP packet NMS: Network Management System LLDPDU packet Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 81 View the configurations on SwitchA. [SwitchA] display lldp local System information -------------------------------------------------------------------------- Chassis type :macAddress Chassis ID :00e0- fc33-0011 System name :SwitchA System description :Quidway Huawei Versatile Routing Platform Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 82 S9300&S9300E Terabit Routing Switch Configuration Guide - Network Management 2 LLDP Configuration Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., System capabilities supported :bridge System capabilities enabled :bridge LLDP Up time :2011/2/13 18:31:37 MED system information...
Page 83 :HUAWEI, Quidway Series, GigabitEthernet1/0/1 Interface System name :SwitchB System description :Quidway Huawei Versatile Routing Platform Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., Ltd System capabilities supported :bridge System capabilities enabled :bridge Management address type...
Page 84 :HUAWEI, Quidway Series, GigabitEthernet1/0/1 Interface System name :SwitchC System description :Quidway Huawei Versatile Routing Platform Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., Ltd System capabilities supported :bridge System capabilities enabled :bridge Management address type...
Page 85 MED Device information Device class :Network Connectivity HardwareRev :LE02SRUB VER.B FirmwareRev SoftwareRev :Version 5.110 V200R001C00 SerialNum Manufacturer name :HUAWEI TECH CO., LTD Model name Asset tracking identifier :NA Media policy type :Unknown Unknown Policy :Undefined VLAN tagged Media policy VlanID...
Page 86: Example For Configuring Lldp On The Network Where Link Aggregation Is Configured
The NMS has reachable routes to SwitchA and SwitchB and SNMP parameters are set on all devices. Figure 2-9 Configuring LLDP on the network where link aggregation is configured GE1/0/3 GE2/0/3 GE2/0/2 GE1/0/2 10.10.10.1 10.10.10.2 GE1/0/1 GE2/0/1 Eth-Trunk1 SwitchA SwitchB Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 87 # Configure SwitchB. [SwitchB] lldp management-address 10.10.10.2 Step 4 Verify the configuration. l View the configurations on SwitchA. # Check whether the physical interfaces are added to Eth-Trunk1. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 88 Chassis ID :00e0- fc33-0011 System name :SwitchA System description :Quidway Huawei Versatile Routing Platform Software VRP (R) Software, Version 5.110 (S9300 V200R001C00) Copyright (c) 2000-2011 Huawei Technologies Co., System capabilities supported :bridge System capabilities enabled :bridge LLDP Up time :2011/4/13...
Page 89 :HUAWEI, Quidway Series, GigabitEthernet1/0/2 Interface Port And Protocol vlan ID(PPVID) don't supported Port VLAN ID(PVID) VLAN Name of VLAN 1: VLAN1 Protocol identity :STP RSTP/MSTP LACP EthOAM CFM Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 90 Power pairs :Unknown Port power classification:Unknown Link aggregation supported:Yes Link aggregation enabled :Yes Aggregation port ID Maximum frame Size :9216 EEE support :Yes Transmit Tw Receive Tw Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 91 GigabitEthernet1/0/1 eth-trunk 1 interface GigabitEthernet1/0/2 eth-trunk 1 interface GigabitEthernet1/0/3 eth-trunk 1 lldp management-address 10.10.10.1 return Configuration file of SwitchB sysname SwitchB interface Ethernet0/0/0 ip address 10.10.10.2 255.255.255.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 92 Eth-Trunk1 port link-type trunk port trunk allow-pass vlan 100 interface GigabitEthernet1/0/1 eth-trunk 1 interface GigabitEthernet1/0/2 eth-trunk 1 interface GigabitEthernet1/0/3 eth-trunk 1 lldp management-address 10.10.10.2 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 93: Hgmp Configuration
HGMP Configuration About This Chapter By running the Huawei Group Management Protocol (HGMP), you can appoint a switch as the administrator switch to create a cluster and add a large number of Ethernet switches to the cluster. The administrator is used to perform unified management and configuration over these switches, which simplifies maintenance and engineering.
Page 94: Introduction To Hgmp
IP addresses for them one by one. This leads to the waste of IP addresses. The Huawei Group Management Protocol (HGMP) is developed to manage a group of Ethernet switches. By running HGMP, you can appoint a switch as the administrator in a cluster to perform integrated management and configurations over other switches added to the cluster.
Page 95 Figure 3-1 Networking diagram of a cluster (tree) Server IP/MPLS Server core Router Cluster1 Administrator Member1 Member2 Member4 Member3 DSLAM Host Administrator: administrator switch Member: member switch Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 96: Hgmp Features Supported By The S9300&S9300E
Member: member switch 3.2 HGMP Features Supported by the S9300&S9300E This part describes the HGMP features supported by the S9300&S9300E. Neighbor Discovery Protocol (NDP) is used to collect information about the directly connected neighbors, including the device model, software version, hardware version, connection interface, member number, private IP address used for communication within a cluster, and hardware platform.
Page 97: Roles In A Cluster
NOTE Currently, the S9300&S9300E cannot function as a standby switch. An administrator switch is the management device in a cluster. To ensure the communication between devices in and out of the cluster, you need to assign a public IP address to the administrator switch.
Page 98: Plug And Play
Batch Restart HGMP can perform batch restart over a specified group of member switches. During the process of batch restart, member switches do not save the current configuration. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 99: Security Features
When the topology of the cluster becomes stable, the unrelated interfaces in the cluster are defined as interfaces that have not NDP neighbors. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 100: Configuring Basic Hgmp Functions
SNMP host, and IP addresses of the FTP server and the SFTP server 3.3.2 Configuring NDP This part describes how to configure the Neighbor Discovery Protocol (NDP) to collect information about directly connected neighbors. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 101 NDP packets must be longer than the interval for sending NDP packets. (Optional) Setting the interval for sending NDP packets Do as follows on the administrator switch and member switches: Run: system-view Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 102: Configuring Ntdp
The range of topology collection is configured. By default, the value is 3 hops. The greater the value is, the more memory is occupied. (Optional) Setting the delay in forwarding NTDP packets Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 103: Creating A Cluster
Do as follows on the administrator switch and member switches: Run: system-view The system view is displayed. Run: vlan vlan-id A VLAN is created and the VLAN view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 104 The cluster function is enabled. By default, the HGMP cluster function is disabled. Creating a cluster A cluster can be created manually or automatically on the S9300&S9300E. NOTE If the administrator switch is rebooted after the HGMP cluster is created, member switches need to be re-added into the cluster.
Page 105 This command can be run only before the cluster is set up. If the cluster is set up, you are not allowed to change the range of private IP addresses used in the cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 106: Adding A Member Switch
In this mode, the administrator switch prompts you whether to add all the existing candidate switches to the cluster. Do as follows only on the administrator switch: Run: system-view The system view is displayed. Run: cluster Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 107: Optional) Deleting Or Quitting A Cluster
Disabling a cluster Do as follows on the administrator switch or a member switch: Run: system-view The system view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 108: Optional) Deleting A Member Switch
Do as follows only on the administrator switch: Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: cluster The cluster view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 109: Checking The Configuration
MAC address of the neighboring station and the number of the interface on the neighboring station that is connected to the local interface. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 110 MAC address and device type. <HUAWEI_0.Quidway> display cluster candidates PLATFORM 0004-0004-0004 10.0.0.4/8 S9300 0003-0003-0003 10.0.0.3/8 S9300 0002-0002-0002 10.0.0.2/8 S9300 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 111: Configuring Advanced Hgmp Functions
Aging time of member switches Multicast MAC address of the cluster IP addresses of the public FTP server, SFTP server, log host, SNMP host used in the cluster Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 112: Adjusting Parameters Of The Cluster
The holdtime of the status of the member switch is set. By default, the holdtime is 60 seconds. The holdtime must be at least three times the interval for sending handshake packets. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 113 Before setting up a cluster, you need to assign a multicast MAC address to the cluster or use the default multicast MAC address. To enhance the network security or if the Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 114 After the FTP server for the cluster is configured successfully, you can run the cluster-ftp command so that the member switches can access the FTP server. Run: sftp-server ip-address A public SFTP server is configured for the cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 115: Managing Switches In A Cluster Through Hgmp
The default information for logging in to the FTP server is configured. After the configuration, the configured information is used by default during the process of batch distribution. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 116 The current configuration of the device is not saved during the process of batch restart. Configuring the plug-and-play function Do as follows on the administrator switch: Run: system-view The system view is displayed. Run: cluster Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 117 The cluster view is displayed. Run: cluster-packet-extend enable Communication Between Huawei Devices and Non-Huawei Devices is enabled. – To configure the management VLAN for the interface of the administrator switch, you should run the port trunk allow-pass vlan command rather than the port default vlan command if the cluster-packet-extend enable command needs to be used.
Page 118 – This command is valid only after the cluster is enabled. Configuring security features Do as follows on the administrator switch: Run: system-view The system view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 119: Checking The Configuration
FTP server. ----End Example If the incremental configuration command is successfully delivered to member switches, run the display cluster-increment-result command, and you can view that success is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 120 If member switches successfully obtain configuration files, PAF files, or patch files, run the display member-getfile-state command, and you can view that success is displayed. <Quidway> display member-getfile-state The status of member switches getting file: ------------------------------------------------------------------------ Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 121: Maintaining Hgmp
S9300 0004-0004-0004 10.0.0.4 success 3.5 Maintaining HGMP This section describes how to clear the statistics on NDP, and monitor the operation status of the HGMP cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 122: Clearing The Ndp Statistics
When a fault occurs on NDP, NTDP, or a cluster, you can run the debugging command in the user view to debug NDP, NTDP, or the cluster, view debugging information, locate the fault, and analyze the cause. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 123: Hgmp Configuration Examples
In this example, Administrator-1 is nearest to the network administrator and is therefore appointed as the administrator switch. NOTE For convenience, only four devices in the Layer 2 network are described. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 124 Create a management VLAN on all devices. Enable NDP and NTDP to ensure that each device can detect the topology structure of the network through NTDP. Choose the administrator switch, and then create a cluster named HUAWEI on the administrator switch.
Page 125 [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit # Configure member switch 2. <Quidway> system-view [Quidway] sysname Member-2 [Member-2] vlan 10 [Member-2-vlan10] quit [Member-2] interface gigabitethernet 1/0/1 [Member-2-GigabitEthernet1/0/1] port link-type trunk Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 126 Status: Enabled, Packets Sent: 0, Packets Received: 11, Packets Error: 0 Neighbor 1: Aging Time: 2(s) MAC Address : 0002-0002-0002 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-1 Port Duplex : FULL Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 127 You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. [Administrator-1] display ntdp Network topology discovery protocol is enabled Hops Timer : 10 min Hop Delay : 200 ms Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 128 # On the administrator switch, set the range of IP addresses that can be assigned to the cluster to 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 129 3 HGMP Configuration After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 130 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 131 10 ip-pool 10.0.0.1 255.0.0.0 build HUAWEI cluster-ftp-nat enable ftp-server 2.0.0.1 sftp-server 2.0.0.2 logging-host 4.0.0.1 snmp-host 3.0.0.1 ip route-static 0.0.0.0 0.0.0.0 1.0.0.2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 132 10 administrator-address 0001-0001-0001 name HUAWEI return Configuration file of Member-3. sysname Member-3 vlan batch 10 cluster enable ntdp enable ntdp hop 3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 133: Example For Configuring The Interconnection Of Ftp Servers And Devices In And Out Of The Hgmp Cluster (In Nat Mode)
In this configuration example where the NAT mode is adopted, Member-3 accesses the FTP server (2.0.0.1/8) out of the cluster and devices out of the cluster access the FTP server (Member-2) in the cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 134 For the situation that a device out of the cluster accesses the FTP server (Member-2): l Calculate the port number reserved on the administrator switch for the FTP protocol of a certain member switch in the cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 135 [Member-1-GigabitEthernet1/0/2] port link-type trunk [Member-1-GigabitEthernet1/0/2] port trunk allow-pass vlan 10 [Member-1-GigabitEthernet1/0/2] quit [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit # Configure member switch 2. <Quidway> system-view [Quidway] sysname Member-2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 136 [Administrator-1] display ndp interface gigabitethernet 1/0/1 gigabitethernet 1/0/2 Interface: GigabitEthernet1/0/1 Status: Enabled, Packets Sent: 0, Packets Received: 11, Packets Error: 0 Neighbor 1: Aging Time: 2(s) MAC Address : 0002-0002-0002 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 137 You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. [Administrator-1] display ntdp Network topology discovery protocol is enabled Hops Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 138 # On the administrator switch, set the range of IP addresses that can be assigned to the cluster to 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 139 3 HGMP Configuration After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 140 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 141 Connected to 1.0.0.1. 220 FTP service ready. User (1.0.0.1:(none)): hgmp 331 Password required for hgmp. Password: 230 User logged in. ftp> ----End Configuration Files Configuration file of Administrator-1. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 142 Vlanif10 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 ntdp enable ndp enable interface GigabitEthernet1/0/2 port link-type trunk port trunk allow-pass vlan 10 ntdp enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 143: Example For Configuring The Interconnection Of Ftp Servers And Devices In And Out Of The Hgmp Cluster (In Non-Nat Mode)
10 administrator-address 0001-0001-0001 name HUAWEI return 3.6.3 Example for Configuring the Interconnection of FTP Servers and Devices in and out of the HGMP Cluster (in Non-NAT Mode) Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 144 GE1/0/2 Administrator-1 10.0.0.1/8 GE1/0/1 GE1/0/1 ..Member-1 GE1/0/2 Member-2 GE1/0/1 Member-3 10.0.0.4/8 Cluster Device MAC Address Device MAC Address Administrator-1 0001-0001-0001 Member-1 0002-0002-0002 Member-2 0003-0003-0003 Member-3 0004-0004-0004 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 145 [Administrator-1-GigabitEthernet1/0/2] port link-type trunk [Administrator-1-GigabitEthernet1/0/2] port trunk allow-pass vlan 10 [Administrator-1-GigabitEthernet1/0/2] quit [Administrator-1] interface gigabitethernet 1/0/3 [Administrator-1-GigabitEthernet1/0/3] port link-type trunk [Administrator-1-GigabitEthernet1/0/3] port trunk allow-pass vlan 10 [Administrator-1-GigabitEthernet1/0/3] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 146 [Administrator-1-GigabitEthernet1/0/2] quit # Configure member switch 1. [Member-1] ndp enable [Member-1] interface gigabitethernet 1/0/1 [Member-1-GigabitEthernet1/0/1] ndp enable [Member-1-GigabitEthernet1/0/1] quit [Member-1] interface gigabitethernet 1/0/2 [Member-1-GigabitEthernet1/0/2] ndp enable [Member-1-GigabitEthernet1/0/2] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 147 [Member-1] ntdp hop 3 [Member-1] interface gigabitethernet 1/0/1 [Member-1-GigabitEthernet1/0/1] ntdp enable [Member-1-GigabitEthernet1/0/1] quit [Member-1] interface gigabitethernet 1/0/2 [Member-1-GigabitEthernet1/0/2] ntdp enable [Member-1-GigabitEthernet1/0/2] quit # Configure member switch 2. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 148 NTDP and you can find the MAC address and types of related devices. <Administrator-1> ntdp explore <Administrator-1> system-view [Administrator-1] display ntdp device-list The device-list of NTDP: ------------------------------------------------------------------------------ PLATFORM Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 149 [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 150 You can also run a routing protocol. Step 9 Configure routes for the member switches and ensure that reachable routes exist between member switches and the FTP server. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 151 230 User logged in. ftp> ----End Configuration Files Configuration file of Administrator-1. sysname Administrator-1 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 152 10 ntdp enable ndp enable cluster mngvlanid 10 administrator-address 0001-0001-0001 name HUAWEI ip route-static 2.0.0.0 255.0.0.0 10.0.0.1 return Configuration file of Member-2. sysname Member-2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 153: Example For Configuring Devices In The Hgmp Cluster To Access The Outside Snmp Host
The member ID of Member-2 is 2 and the member ID of Member-3 is 3. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 154 The configuration roadmap is as follows: Create a cluster and configure basic HGMP functions for the cluster according to the steps described in Example for Configuring Basic HGMP Functions for a Cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 155 [Member-1-GigabitEthernet1/0/1] port trunk allow-pass vlan 10 [Member-1-GigabitEthernet1/0/1] quit [Member-1] interface gigabitethernet 1/0/2 [Member-1-GigabitEthernet1/0/2] port link-type trunk [Member-1-GigabitEthernet1/0/2] port trunk allow-pass vlan 10 [Member-1-GigabitEthernet1/0/2] quit [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 156 Device Name, and the name of the interface connecting the neighboring node and the local interface is Port Name. [Administrator-1] display ndp interface gigabitethernet 1/0/1 gigabitethernet 1/0/2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 157 After the previous configuration, globally check the NTDP configuration on the administrator switch. You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 158 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI Issue 01 (2012-03-15) Huawei Proprietary and Confidential...
Page 159 3 HGMP Configuration [HUAWEI_0.Administrator-1-cluster] After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 160 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 161 10 ntdp enable ndp enable interface GigabitEthernet1/0/2 port link-type trunk port trunk allow-pass vlan 10 ntdp enable ndp enable interface GigabitEthernet1/0/3 port link-type trunk Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 162 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 ntdp enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 163: Example For Configuring Devices In The Hgmp Cluster To Access The Outside Snmp Host (In Non-Nat Mode)
SNMP host and member switches in NAT or non-NAT mode. NOTE In this configuration example where the non-NAT mode is adopted, Member-3 accesses the SNMP host (3.0.0.1/8). Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 164 Configure routes on the administrator switch and member switches respectively to ensure that reachable routes exist between SNMP host and member switches. Assign an IP address to the SNMP host. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 165 [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit # Configure member switch 2. <Quidway> system-view [Quidway] sysname Member-2 [Member-2] vlan 10 [Member-2-vlan10] quit [Member-2] interface gigabitethernet 1/0/1 [Member-2-GigabitEthernet1/0/1] port link-type trunk Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 166 Status: Enabled, Packets Sent: 0, Packets Received: 11, Packets Error: 0 Neighbor 1: Aging Time: 2(s) MAC Address : 0002-0002-0002 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-1 Port Duplex : FULL Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 167 You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. [Administrator-1] display ntdp Network topology discovery protocol is enabled Hops Timer : 10 min Hop Delay : 200 ms Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 168 # On the administrator switch, set the range of IP addresses that can be assigned to the cluster to 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 169 3 HGMP Configuration After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 170 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 171 Multiple member switches can be configured simultaneously through incremental configuration. For configuration details, see Example for Configuring the Incremental Configuration Function for an HGMP Cluster. Step 13 Verify the configuration. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 172 2.0.0.1 sftp-server 2.0.0.2 logging-host 4.0.0.1 snmp-host 3.0.0.1 ip route-static 0.0.0.0 0.0.0.0 1.0.0.2 return Configuration file of Member-1. sysname Member-1 vlan batch 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 173 10 administrator-address 0001-0001-0001 name HUAWEI ip route-static 3.0.0.0 255.0.0.0 10.0.0.1 snmp-agent snmp-agent target-host trap address udp-domain 3.0.0.1 params securityname cluster return Configuration file of Member-3. sysname Member-3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 174: Example For Configuring The Batch Distribution Function For An Hgmp Cluster
Member-2 is 2 and the member ID of Member-3 is 3. Member-2 and Member-3 are required to download configuration files in batches from the FTP server. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 175 If the system software, patch files, or configuration files, batch distribution can be distributed in batches without accessing the FTP server out of the cluster, you can skip this step. Configure batch distribution on the administrator switch. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 176 [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit # Configure member switch 2. <Quidway> system-view [Quidway] sysname Member-2 [Member-2] vlan 10 [Member-2-vlan10] quit [Member-2] interface gigabitethernet 1/0/1 [Member-2-GigabitEthernet1/0/1] port link-type trunk Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 177 Status: Enabled, Packets Sent: 0, Packets Received: 11, Packets Error: 0 Neighbor 1: Aging Time: 2(s) MAC Address : 0002-0002-0002 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-1 Port Duplex : FULL Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 178 You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. [Administrator-1] display ntdp Network topology discovery protocol is enabled Hops Timer : 10 min Hop Delay : 200 ms Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 179 # On the administrator switch, set the range of IP addresses that can be assigned to the cluster to 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 180 3 HGMP Configuration After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 181 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 182 # Run the display startup command on member switches and you can find that names of the configuration files for the next startup of the member switch is changed. Take Member-2 as an example. <HUAWEI_2.Member-2> display startup Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 183 2.0.0.1 username user1 password 123 ftp-server 2.0.0.1 sftp-server 2.0.0.2 logging-host 4.0.0.1 snmp-host 3.0.0.1 ip route-static 0.0.0.0 0.0.0.0 1.0.0.2 return Configuration file of Member-1. sysname Member-1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 184 0001-0001-0001 name HUAWEI return Configuration file of Member-3. sysname Member-3 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 185: Example For Configuring The Batch Restart Function For An Hgmp Cluster
The member ID of Member-2 is 2 and the member ID of Member-3 is 3. Member switches Member-2 and Member-3 are required to be restarted. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 186 To complete the configuration, you need the following data: Management VLAN ID of the cluster, that is 10 IP address of VLANIF 10, that is 1.0.0.1/8 Address pool of the cluster, that is 10.0.0.0/8 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 187 [Member-2-GigabitEthernet1/0/1] port trunk allow-pass vlan 10 [Member-2-GigabitEthernet1/0/1] quit [Member-2] interface vlanif 10 [Member-2-Vlanif10] quit # Configure member switch 3. <Quidway> system-view [Quidway] sysname Member-3 [Member-3] vlan 10 [Member-3-vlan10] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 188 Aging Time: 5(s) MAC Address : 0003-0003-0003 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-2 Port Duplex : FULL Product Ver : S9300 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 189 Step 4 Enable the cluster function and set the management VLAN. # Configure the administrator switch. [Administrator-1] cluster enable [Administrator-1] cluster [Administrator-1-cluster] mngvlanid 10 [Administrator-1-cluster] quit # Configure member switch 1. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 190 [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 191 [HUAWEI_0.Administrator-1] interface vlanif 10 [HUAWEI_0.Administrator-1-Vlanif10] ip address 1.0.0.1 8 [HUAWEI_0.Administrator-1-Vlanif10] quit After the previous configuration, you can find that the interface on the administrator switch is in the Up state. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 192 : disabled Handshake timer:10 second(s) Handshake hold-time:60 second(s) IP pool:10.0.0.1/8 Logging host:4.0.0.1 SNMP host:3.0.0.1 FTP server:2.0.0.1 SFTP server:2.0.0.2 cluster-member ftp-timeout: 300 second(s)(default) Cluster SNMP NAT capability : enabled Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 193 10 ntdp enable ndp enable interface GigabitEthernet1/0/3 port link-type trunk port trunk allow-pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 ip-pool 10.0.0.1 255.0.0.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 194 10 ndp enable interface Vlanif10 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator-address 0001-0001-0001 name HUAWEI return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 195: Example For Configuring The Incremental Configuration Function For An Hgmp Cluster
To configure VLAN 100 to VLAN 200 on Member-2 and Member-3 and a static route with its next hop address being the administrator switch, you can use the incremental configuration function of the HGMP cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 196 Deliver the list of incremental configuration commands to the specified member switch. Data Preparation To complete the configuration, you need the following data: Management VLAN ID of the cluster, that is 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 197 [Member-2] interface gigabitethernet 1/0/1 [Member-2-GigabitEthernet1/0/1] port link-type trunk [Member-2-GigabitEthernet1/0/1] port trunk allow-pass vlan 10 [Member-2-GigabitEthernet1/0/1] quit [Member-2] interface vlanif 10 [Member-2-Vlanif10] quit # Configure member switch 3. <Quidway> system-view Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 198 Status: Enabled, Packets Sent: 6, Packets Received: 16, Packets Error: 0 Neighbor 1: Aging Time: 5(s) MAC Address : 0003-0003-0003 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 199 Total time for last collection:0 ms Step 4 Enable the cluster function and set the management VLAN. # Configure the administrator switch. [Administrator-1] cluster enable [Administrator-1] cluster [Administrator-1-cluster] mngvlanid 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 200 [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 201 IP address to VLANIF 10 on the administrator switch. # Assign an IP address to VLANIF 10. [HUAWEI_0.Administrator-1] interface vlanif 10 [HUAWEI_0.Administrator-1-Vlanif10] ip address 1.0.0.1 8 [HUAWEI_0.Administrator-1-Vlanif10] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 202 Management vlan id : 10 Cluster multicast MAC address : 0180-c200-000a(default) Cluster auto-join : disabled Handshake timer:10 second(s) Handshake hold-time:60 second(s) IP pool:10.0.0.1/8 Logging host:4.0.0.1 SNMP host:3.0.0.1 FTP server:2.0.0.1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 203 3 ntdp timer 10 ndp enable interface Vlanif10 ip address 1.0.0.1 255.0.0.0 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 204 10 administrator-address 0001-0001-0001 name HUAWEI return Configuration file of Member-2. sysname Member-2 vlan batch 10 cluster enable ntdp enable ntdp hop 3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 205: Example For Configuring The Configuration Synchronization Function For An Hgmp Cluster
ID of Member-2 is 2 and the member ID of Member-3 is 3. To synchronize the configuration files of all member switches to the FTP server as required, you can configure the configuration synchronization function for the HGMP cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 206 If it is not required to synchronize the configuration files of the HGMP cluster by accessing the FTP server out of the cluster, you can skip this step. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 207 [Member-1-GigabitEthernet1/0/2] quit [Member-1] interface vlanif 10 [Member-1-Vlanif10] quit # Configure member switch 2. <Quidway> system-view [Quidway] sysname Member-2 [Member-2] vlan 10 [Member-2-vlan10] quit [Member-2] interface gigabitethernet 1/0/1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 208 Status: Enabled, Packets Sent: 0, Packets Received: 11, Packets Error: 0 Neighbor 1: Aging Time: 2(s) MAC Address : 0002-0002-0002 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Device Name : Member-1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 209 You can find that the interval and range for NTDP to collect topologies is 10 minutes and 3 hops respectively. [Administrator-1] display ntdp Network topology discovery protocol is enabled Hops Timer : 10 min Hop Delay : 200 ms Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 210 # On the administrator switch, set the range of IP addresses that can be assigned to the cluster to 10.0.0.0/8, in which the IP address assigned to the administrator switch is 10.0.0.1/8. [Administrator-1] cluster [Administrator-1-cluster] ip-pool 10.0.0.1 8 # Create a cluster named HUAWEI on the administrator switch. [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright ©...
Page 211 3 HGMP Configuration After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 212 After the previous configuration, check information about the cluster to which the administrator switch belongs. You can find that the public log host, SNMP host, FTP server, and SFTP server are configured successfully. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 213 Configuration file of Administrator-1. sysname Administrator-1 vlan batch 10 cluster enable ntdp enable ntdp hop 3 ntdp timer 10 ndp enable interface Vlanif10 ip address 1.0.0.1 255.0.0.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 214 10 ntdp enable ndp enable cluster mngvlanid 10 administrator-address 0001-0001-0001 name HUAWEI return Configuration file of Member-2. sysname Member-2 FTP server enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 215: Example For Configuring Security Features For An Hgmp Cluster
Disable NDP and NTDP on the interfaces of all the member switches that do not need NDP or NTDP. To perform the action and improve the security of the cluster, you can configure security features for the HGMP cluster. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 216 HGMP Functions for a Cluster. On the administrator switch, disable NDP and NTDP on unrelated interfaces of member switches. Data Preparation To complete the configuration, you need the following data: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 217 [Member-2] interface gigabitethernet 1/0/1 [Member-2-GigabitEthernet1/0/1] port link-type trunk [Member-2-GigabitEthernet1/0/1] port trunk allow-pass vlan 10 [Member-2-GigabitEthernet1/0/1] quit [Member-2] interface vlanif 10 [Member-2-Vlanif10] quit # Configure member switch 3. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 218 Status: Enabled, Packets Sent: 6, Packets Received: 16, Packets Error: 0 Neighbor 1: Aging Time: 5(s) MAC Address : 0003-0003-0003 Port Name : GigabitEthernet1/0/1 Software Version: Version 5.110 V200R001C00 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 219 Total time for last collection:0 ms Step 4 Enable the cluster function and set the management VLAN. # Configure the administrator switch. [Administrator-1] cluster enable [Administrator-1] cluster Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 220 [Administrator-1-cluster] build HUAWEI [HUAWEI_0.Administrator-1-cluster] After the previous configuration, check information about the cluster to which the device belongs. You can find that the device name is changed, the cluster name is HUAWEI, and the management VLAN ID is 10. [HUAWEI_0.Administrator-1-cluster] display cluster Cluster name:"HUAWEI"...
Page 221 IP address to VLANIF 10 on the administrator switch. # Assign an IP address to VLANIF 10. [HUAWEI_0.Administrator-1] interface vlanif 10 [HUAWEI_0.Administrator-1-Vlanif10] ip address 1.0.0.1 8 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 222 Role:Administrator switch Management vlan id : 10 Cluster multicast MAC address : 0180-c200-000a(default) Cluster auto-join : disabled Handshake timer:10 second(s) Handshake hold-time:60 second(s) IP pool:10.0.0.1/8 Logging host:4.0.0.1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 223 3 ntdp timer 10 ndp enable interface Vlanif10 ip address 1.0.0.1 255.0.0.0 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 224 10 administrator-address 0001-0001-0001 name HUAWEI return Configuration file of Member-2. sysname Member-2 vlan batch 10 cluster enable ntdp enable ntdp hop 3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 225 10 ndp enable interface Vlanif10 interface GigabitEthernet1/0/1 port link-type trunk port trunk allow-pass vlan 10 ntdp enable ndp enable cluster mngvlanid 10 administrator-address 0001-0001-0001 name HUAWEI return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 226: Ntp Configuration
This part describes the application and working principles of NTP. 4.2 NTP Supported by the S9300&S9300E This part describes NTP operating modes supported by the S9300&S9300E. 4.3 Configuring Basic NTP Functions This section describes how to configure basic NTP functions, including the NTP operating modes.
Page 227: Introduction To Ntp
NTP. Switch A and Switch B are connected through a WAN. They both have their own system clocks. NTP implements automatic synchronization of their clocks. Suppose: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 228 11: 00:01 am (T2). When the NTP packet leaves Switch B, Switch B adds its transmitting timestamp to the NTP packet, which is 11:00:02 am (T3). Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 229: Ntp Supported By The S9300&S9300E
4.2 NTP Supported by the S9300&S9300E This part describes NTP operating modes supported by the S9300&S9300E. The switch supports the following NTP working modes Unicast Client/Server Mode...
Page 230: Broadcast Mode
The server works in manycast server mode, and continues to sense the incoming manycast packets. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 231: Configuring Basic Ntp Functions
To configure basic functions of NTP, you need the following data. Data Primary NTP clock and its stratum Interfaces to send and receive NTP packets NTP version Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 232: Configuring The Ntp Primary Clock
4.3.3 Configuring the Time Interval to Update Client Clock When the server clock is changed, the client clock should be synchronized to the server clock within the configured time interval. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 233: Configuring The Unicast Client/Server Mode
| vpn-instance vpn-instance-name | maxpoll max-number | minpoll min-number | preempt ] * The NTP server with specified IPv4 address is configured. The IP address of the NTP server is configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 234: Configuring The Peer Mode
NTP peer. It can be the IPv4 or IPv6 address of a host other than a broadcast address, a multicast address, or the IP address of the reference clock. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 235: Configuring The Broadcast Mode
The interface that sends NTP broadcast packets is specified. Run: ntp-service broadcast-server [ version number | authentication-keyid key- id ] The local switch is set as an NTP broadcast server. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 236: Configuring The Multicast Mode
This part describes how to configure the NTP multicast mode to synchronize clocks in a multicast domain. Procedure Configuring an NTP Multicast Server Do as follows on the switch functioning as an NTP multicast server: Run: system-view The system view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 237 Running the ntp-service max-dynamic-sessions command does not affect the existence of NTP sessions. When the number of the sessions reaches or exceeds the maximum, the new session cannot be set up further. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 238: Disabling The Interface From Receiving Ntp Packets
The interface on the switch is disabled from receiving NTP packets. ----End 4.3.9 (Optional) Setting the Maximum Number of Dynamic NTP Sessions Context Do as follows on the S9300&S9300E that functions as a client. Procedure Step 1 Run: system-view The system view is displayed.
Page 239: Disabling Ntp Service
Run the display ntp-service statistics packet [ ipv6 | [ peer [ ip-address [ vpn-instance vpn-instance-name ] | ipv6 [ ipv6-address [ vpn-instance vpn-instance-name ] ] ] ] ] command to view the statistics of global NTP packets. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 240 Max dynamic association reached : Autokey failures Others Last 2 packets drop reasons: [2011-11-24 12:19:26-08:00] Global drop: NTP service disabled for interface. [2011-11-24 12:20:30-08:00] Global drop: NTP service disabled for interface. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 241: Configuring Ntp Security Mechanisms
NTP supports two security mechanisms: access authority and NTP authentication. Access authority Access authority is a type of simple security method provided by the S9300&S9300E to protect local NTP services. The S9300&S9300E provides four access authority levels. When an NTP access request packet reaches the local end, it is matched in an order from the minimum access authority to the maximum access authority.
Page 242: Setting Ntp Access Authorities
Step 2 Run: ntp-service access { peer | query | server | synchronization } acl-number Access authority for the NTP service on the local switch is configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 243: Enabling Ntp Authentication
Configure the same authentication key on the server and client and affirm that the key is reliable; otherwise, NTP authentication fails. l Enable NTP authentication before performing actual authentication. Run: system-view The system view is displayed. Run: ntp-service authentication enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 244: Configuring Ntp Authentication In Unicast Client/Server Mode
NTP authentication in peer mode. Context Do as follows on the switch that functions as the symmetric active end. Procedure Step 1 Run: system-view The system view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 245: Configuring Ntp Authentication In Broadcast Mode
NTP authentication in multicast mode. Context Do as follows on the switch that functions as an NTP multicast server. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 246: Checking The Configuration
10.00 ms reference time: 15:51:36.259 UTC Apr 25 2010(C6179088.426490A3) Run the display ntp-service sessions [ verbose ] command to view the status of NTP sessions. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 247: Maintaining Ntp
Switch B functions as a unicast NTP client. Its clock needs to be synchronized with the clock of Switch A. Switch C and Switch D function as NTP clients of Switch B. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 248 Step 1 Configure the IP addresses of the Switches and ensure that the routes between them are reachable. Configure the IP addresses according to Figure 4-2 so that Switch A, Switch B, Switch C and Switch D are routable. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 249 [SwitchB] display ntp-service status clock status: synchronized clock stratum: 3 reference clock ID: 2.2.2.2 nominal frequency: 60.0002 Hz actual frequency: 60.0002 Hz clock precision: 2^18 clock offset: 3.8128 ms Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 250 26.50 ms peer dispersion: 10.00 ms reference time: 12:01:48.377 UTC Mar 2 2006(C7B15D2C.60A15981) ----End Configuration Files Configuration file of Switch A sysname SwitchA vlan batch 100 interface Vlanif100 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 251 111 port hybrid untagged vlan 111 ntp-service authentication enable ntp-service authentication-keyid 42 authentication-mode md5 %@ENC;8HX \#Q=^Q`MAF4<1!! ntp-service reliable authentication-keyid 42 ntp-service unicast-server 10.0.0.1 authentication-keyid 42 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 252: Example For Configuring The Common Ntp Peer Mode
The configuration roadmap is as follows: Configure the clock on Switch C as the master clock. The clock on Switch D should be synchronized to the clock on Switch C. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 253 [SwitchE] ntp-service unicast-peer 3.0.1.32 No master clock is configured on Switch E, so the clock on Switch E should be synchronized to the clock on Switch D. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 254 GigabitEthernet1/0/0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 ntp-service unicast-server 3.0.1.31 return Configuration file of Switch E sysname SwitchE vlan batch 100 interface Vlanif100 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 255: Example For Configuring Ntp Authentication In Broadcast Mode
Configure Switch C as the NTP broadcast server. Configure Switch A and Switch D as the NTP broadcast clients. Configure NTP authentication on Switch A, Switch C, and Switch D. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 256 [SwitchF-GigabitEthernet1/0/0] port hybrid untagged vlan 20 [SwitchF-GigabitEthernet1/0/0] quit [SwitchF] interface vlanif 20 [SwitchF-vlanif20] ip address 1.0.1.2 24 [SwitchF-vlanif20] quit # Configure the IP address of the VLANIF interface on Switch A. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 257 # Configure Switch A as the NTP broadcast client and configure Switch A to listen to NTP broadcast packets through VLANIF20. [SwitchA]interface vlanif 20 [SwitchA-vlanif20] ntp-service broadcast-client [SwitchA-vlanif20] quit Step 6 Verify the configuration. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 258 10 interface Vlanif10 ip address 3.0.1.31 255.255.255.0 ntp-service broadcast-server authentication-keyid 16 interface GigabitEthernet1/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ntp-service authentication enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 259: Example For Configuring The Common Ntp Multicast Mode
Figure 4-5, Switch C and Switch D are on the same network segment; Switch A is on another network segment; Switch F connects the two network segments. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 260 [SwitchC] interface gigabitethernet 1/0/0 [SwitchC-GigabitEthernet1/0/0] port hybrid pvid vlan 10 [SwitchC-GigabitEthernet1/0/0] port hybrid untagged vlan 10 [SwitchC-GigabitEthernet1/0/0] quit [SwitchC] interface vlanif 10 [SwitchC-Vlanif10]ip address 3.0.1.31 24 [SwitchC-Vlanif10]quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 261 Step 4 Configure Switch D, which resides on the same network segment with the server. # Configure Switch D as the NTP multicast client and configure Switch D to sense NTP multicast packets through VLANIF10. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 262 GigabitEthernet1/0/0 port hybrid pvid vlan 20 port hybrid untagged vlan 20 ospf 1 area 0.0.0.0 network 1.0.1.0 0.0.0.255 return Configuration file of Switch C sysname SwitchC Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 263 20 interface GigabitEthernet2/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 ospf 1 area 0.0.0.0 network 1.0.1.0 0.0.0.255 network 3.0.1.0 0.0.0.255 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 264: Ping And Tracert
5.4 Debugging Ping and Tracert This section describes how to locate faults through ICMP messages. 5.5 Configuration Examples This section provides a configuration example of ping and tracert operations. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 265: Ping
Tracert, also called Trace Route, is used to check the IP addresses and the number of gateways between the source and the destination. Tracert is helpful in testing network reachability and locating the fault on the network. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 266 S9300&S9300E. On the S9300&S9300E, run the tracert command. The destination IP address is the IP address of the log host and other parameters adopt the default values. The S9300&S9300E sends a UDP datagram to the log host, with the TTL value being 1 and the destination UDP port number being 33434.
Page 267: Performing Ping And Tracert Operations
This section describes the execution of the ping and tracert commands. 5.3.1 Establishing the Configuration Task Application Environment The Customer Edge (CE) connected to the S9300&S9300E cannot access the Internet. You need to run the ping and tracert commands to check network connectivity. Pre-configuration Tasks Before performing ping and tracert operations, complete the following tasks: Checking the physical connections between the CE and the S9300&S9300E...
Page 268: Locating Faults On The Network Through The Tracert Operation
Only some of the parameters are specified in the preceding tracert command. For details on more parameters, refer to the S9300&S9300E Terabit Routing Switch Command Reference. The output of the tracert command displays a list of gateways traversed between the source and the destination hosts.
Page 269: Debugging Ping And Tracert
Debugging affects the performance of the system. After debugging, run the undo debugging all command to disable it immediately. If you run the ping or the tracert command on the two S9300&S9300Es but the ping or tracert operation fails, you can run the following command respectively on each S9300&S9300E to further locate the fault after confirming that the physical link between the two S9300&S9300Es is normal.
Page 270 The display on Switch A shows that the log host is unreachable, which indicates that a fault occurs on some link segment between Switch A and the log host. Step 2 Run the tracert command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 271 Switch B and Router is recovered, you can repeat Step 1 and Step 2 to ensure that Switch A and the log host can communicate properly. ----End Configuration Files None. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 272: Nqa Configuration
The NQA function of the S9300&S9300E is controlled by the license. Generally, the NQA commands can be run on a new S9300&S9300E, but the NQA function cannot take effect. To make the NQA function of an S9300&S9300E effective, contact the Huawei regional office to buy the license.
Page 273 6.14 Configuring the Jitter Test This section describes how to configure a jitter test to check jitter on the network. You can perform a jitter test only when both the client and the server are Huawei devices. 6.15 Configuring the MAC Ping Test This section describes how to perform the MAC ping test with NQA.
Page 274 This section describes how to maintain an NQA test instance. You can restart the test instance and clear the statistics on the test result to maintain a test instance. 6.35 Configuration Examples This section provides several configuration examples of NQA. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 275: Introduction To Nqa
This helps them analyze network performance in time. NQA on the S9300&S9300E meets the preceding requirements. NQA measures the performance of each protocol running on the network and helps network...
Page 276: Nqa Server And Nqa Clients
6.4 NQA Supported by the S9300&S9300E This part describes NQA test types and scheduling modes supported by the S9300&S9300E. Issue 01 (2012-03-15) Huawei Proprietary and Confidential...
Page 277: Configuring The Icmp Test
Before configuring an ICMP test, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This can help you complete the configuration task quickly and accurately. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 278: Configuring Icmp Test Parameters
An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type icmp The test type is set to ICMP. Step 4 Run: destination-address { ipv4 ip-address | ipv6 ipv6-address } Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 279 | hh:mm:ss } [ end { at [ yyyy/mm/dd ] hh:mm:ss | delay { seconds second | hh:mm:ss } | lifetime { seconds second | hh:mm:ss } } ] command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 280: Checking The Configuration
Lost packet ratio: 0 % 6.6 Configuring the FTP Download Test This section describes how to configure a File Transfer Protocol (FTP) download test to check the FTP download performance. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 281: Establishing The Configuration Task
This part describes how to set parameters for the FTP download test. Context Do as follows on the NQA client (FTP client): Procedure Step 1 Run: system-view Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 282 During the FTP test, select a file with a relatively small size for the test. If the file is large, the test may fail because of timeout. Step 10 Run: start The NQA test is started. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 283: Checking The Configuration
RTD OverThresholds number: 0 MessageBodyOctetsSum: 448 Stats errors number: 0 Operation timeout number: 0 System busy operation number:0 Drop operation number:0 Disconnect operation number: 0 CtrlConnTime Min/Max/Average: 438/438/438 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 284: Configuring The Ftp Upload Test
(Optional) Source IP address of the FTP operation and VPN instance name and source and destination port numbers of the FTP operation Name or size of the uploaded file Start mode and end mode of the test Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 285: Configuring The Ftp Upload Test Parameters
The FTP operation type is set to Put. By default, the FTP operation type is Get. Step 7 Run: ftp-username name The FTP user name is configured. Step 8 Run: ftp-password password Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 286: Checking The Configuration
6.7.3 Checking the Configuration After configuring the FTP upload test, you can view the test result. Prerequisites The configurations of the FTP Upload Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 287: Configuring The Http Test
Time to set up a TCP connection: It is the time taken by the client to set up a TCP connection with an HTTP server through three-way handshake. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 288: Configuring Http Test Parameters
The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name An NQA test is created and the view is displayed. Step 3 Run: test-type http Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 289 | hh:mm:ss } [ end { at [ yyyy/mm/dd ] hh:mm:ss | delay { seconds second | hh:mm:ss } | lifetime { seconds second | hh:mm:ss } } ] command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 290: Checking The Configuration
TransactionTimeout: 0 Lost packet ratio:0% 6.9 Configuring the DNS Test This section describes how to configure a Domain Name System (DNS) test to check the DNS resolution speed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 291: Establishing The Configuration Task
Step 1 Run system-view The system view is displayed. Step 2 Run: dns resolve Enable dynamic DNS resolution. By default, the function is disabled. Step 3 Run: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 292: Checking The Configuration
NQA test results cannot be displayed automatically on a terminal. You must run the display nqa results command to view test results. By the default, the command output contains the records about only the last five tests. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 293: Configuring The Traceroute Test
Before configuring a traceroute test, configure reachable routes between the NQA client and the device to be tested. Data Preparation To configure a traceroute test, you need the following data. Data Administrator and name of an NQA test instance Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 294: Configuring Parameters For A Traceroute Test
To configure the source IP address, run: source-address { ipv4 ip-address | ipv6 ipv6-address } l To configure the destination port number, run: destination-port port-number Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 295: Checking The Configuration
NQA entry(t, t) :testflag is inactive ,testtype is trace 1 . Test 1 result The test is finished Completion:success Attempts number:1 Disconnect operation number:0 Operation timeout number:0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 296: Configuring The Snmp Query Test
NQA tests Start mode and end mode of the test 6.11.2 Configuring the SNMP Query Test Parameters This part describes how to set SNMP query test parameters. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 297 To perform the NQA test immediately, run the start now [ end { at [ yyyy/mm/dd ] hh:mm:ss | delay { seconds second | hh:mm:ss } | lifetime { seconds second | hh:mm:ss } } ] command. The test instance is started immediately. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 298: Checking The Configuration
Lost packet ratio: 0 % 6.12 Configuring the TCP Test This section describes how to configure a Transmission Control Protocol (TCP) test to check the responding speed of a TCP port. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 299: Establishing The Configuration Task
Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: nqa-server tcpconnect [ vpn-instance vpn-instance-name ] ip-address port-number The TCP monitoring service is configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 300: Configuring The Tcp Client
To configure the NQA test packets to be sent without searching the routing table, run the sendpacket passroute command. Step 7 Run: start The NQA test is started. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 301: Checking The Configuration
Run the display nqa results command. If the test is successful, the following is displayed. <Quidway> display nqa results NQA entry(admin, tcp) :testflag is inactive ,testtype is tcp 1 . Test 1 result The test is finished Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 302: Configuring The Udp Test
(Optional) Source IP addresses and source port numbers of test packets, interval for sending test packets, and percentage of the failed NQA tests Start mode and end mode of the test Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 303: Configuring The Udp Server
An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type udp The test type is set to UDP. Step 4 Run: destination-address ipv4 ip-address Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 304: Checking The Configuration
The test instance is started after a certain delay. ----End 6.13.4 Checking the Configuration After configuring the UDP test, you can view the test result. Prerequisites The configurations of the UDP Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 305: Configuring The Jitter Test
6.14 Configuring the Jitter Test This section describes how to configure a jitter test to check jitter on the network. You can perform a jitter test only when both the client and the server are Huawei devices. 6.14.1 Establishing the Configuration Task Before configuring a jitter test, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data.
Page 306: Configuring The Jitter Server
The IP address and number of the port monitored by the server must be identical with those configured on the client. Context Do as follows on the NQA server (Jitter server): Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 307: Configuring The Jitter Client
Step 4 Run: test-type jitter The test type is set to Jitter. Step 5 Run: destination-address { ipv4 ip-address | ipv6 ipv6-address } The destination IP address is configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 308 This command is applied only to Jitter voice test cases. Step 8 Run: start The NQA test is started. Select the start mode as required because the start command has several forms. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 309: Checking The Configuration
Max Positive SD:96 Max Positive DS:8 Positive SD Number:15 Positive DS Number:8 Positive SD Sum:172 Positive DS Sum:18 Positive SD Square Sum :9868 Positive DS Square Sum :86 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 310: Configuring The Mac Ping Test
Destination MAC address or REMP ID for the NQA test instance Maintenance domain (MD) and maintenance association (MA) of the NQA test instance Starting and ending modes of the NQA test instance Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 311: Setting Parameters For The Mac Ping Test
The interval for sending test packets is set. l Run: fail-percent percent The percentage of failed NQA tests is set. NOTE The interval should be longer than the timeout period. Step 8 Run: start Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 312: Checking The Configuration
Negative SD Sum:0 Negative DS Sum:0 Negative SD Square Sum :0 Negative DS Square Sum :0 Min Delay SD:0 Min Delay DS:0 Avg Delay SD:0 Avg Delay DS:0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 313: Configuring The Lsp Ping Test
Before configuring the LSP Ping test, you need the following configuration: LSP tunnel or an MPLS TE tunnel. or an MPLS CR-LSP hotstandby tunnel Data Preparation To configure the LSP Ping test, you need the following data. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 314: Configuring The Lsp Ping Test Parameters For The Ldp Tunnel
}* The destination IP address to be tested is configured. Step 6 (Optional) Perform the following as required to configure other parameters for the LSP Ping test: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 315: Configuring The Lsp Ping Test Parameters For The Mpls Te Tunnel
6.16.3 Configuring the LSP Ping Test Parameters for the MPLS TE Tunnel Before performing the TE LSP ping test, you need set parameters for a TE LSP ping test. Context Do as follows on the NQA client: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 316 } command. l To configure the percentage of the failed NQA tests, run the fail-percent percent command. Step 7 Run: start The NQA test is started. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 317: Configuring The Lsp Ping Test Parameters For The Cr-Lsp Hotstandby Tunnel
The tunnel type is set to be TE tunnel. Step 5 Run: lsp-tetunnel tunnel interface-number hot-standby The TE tunnel interface to be pinged is specified and the CR-LSP hotstandby tunnel is set to be tested. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 318: Checking The Configuration
6.16.5 Checking the Configuration After configuring the LSP ping test, you can view the test result. Prerequisites The configurations of the LSP Ping Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 319 Operation sequence errors number:0 RTT Stats errors number:0 Destination ip address:100.1.1.200 Min/Max/Average Completion Time: 4/5/4 Sum/Square-Sum Completion Time: 13/57 Last Good Probe Time: 2007-11-19 19:46:28.8 Lost packet ratio: 0 % Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 320: Configuring The Lsp Jitter Test
Start mode and end mode of the test 6.17.2 Configuring the LSP Jitter Test Parameters for the LDP Tunnel This part describes how to set parameters for an LDP LSP jitter test. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 321 To configure the padding character of the packet, run the datafill fillstring command. l To configure the interval for sending the test packets, run the interval seconds interval command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 322: Configuring The Lsp Jitter Test Parameters For The Mpls Te Tunnel
An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type lspjitter The test type is set to LSP Jitter. Step 4 Run: lsp-type te Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 323 | hh:mm:ss } [ end { at [ yyyy/mm/dd ] hh:mm:ss | delay { seconds second | hh:mm:ss } | lifetime { seconds second | hh:mm:ss } ] command. The test instance is started after a certain delay. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 324: Checking The Configuration
Completion:success RTD OverThresholds number:0 Min/Max/Avg/Sum RTT:1/24/3/156 Square Sum:928 NumOfRTT:60 Drop operation number:0 Operation sequence errors number:0 RTT Stats errors number:0 System busy operation number:0 Operation timeout number:0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 325: Configuring The Lsp Trace Test
The sender collects the test results based on the received Echo packets. Pre-configuration Tasks Before configuring the LSP Trace test, you need the following configuration: LSP tunnel Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 326: Configuring The Lsp Trace Parameters For The Ldp Tunnel
The test type is set to LSP Trace. Step 4 Run: lsp-type ipv4 The tunnel type is set to be the LSP tunnel. Step 5 Run: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 327 | hh:mm:ss } [ end { at [ yyyy/mm/dd ] hh:mm:ss | delay { seconds second | hh:mm:ss } | lifetime { seconds second | hh:mm:ss } ] command. The test instance is started after a certain delay. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 328: Configuring Lsp Traceroute Test Parameters For The Mpls Te Tunnel
To configure the initial and the maximum TTL values of the packet, run the tracert- livetime first-ttl first-ttl max-ttl max-ttl command. Step 7 Run: start Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 329: Configuring The Lsp Trace Test Parameters For The Cr-Lsp Hotstandby Tunnel
The tunnel type is set to be TE tunnel. Step 5 Run: lsp-tetunnel tunnel interface-number hot-standby The TE tunnel interface to be tracerouted is specified and the CR-LSP hotstandby tunnel is set to be tested. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 330: Checking The Configuration
NQA test results cannot be displayed automatically on a terminal. You must run the display nqa results command to view test results. By the default, the command output contains the records about only the last five tests. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 331 Receive response times: Min/Max/Average Completion Time: 80/110/93 Sum/Square-Sum Completion Time: 280/26600 RTD OverThresholds number: 0 Last Good Probe Time: 2009-4-24 11:22:21.2 Destination ip address:3.3.3.3 Lost packet ratio: 0 % Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 332: Configuring An Icmp Jitter Test
In the jitter test, you can set the number of packets to be sent consecutively in each test instance. Through this setting, the actual traffic of a kind of packet during a time period can be simulated. The devices at the two ends of the tested link can be both Huawei devices or not. Pre-configuration Tasks Before configuring an ICMP jitter test, configure a reachable route between the NQA client and the server.
Page 333: Configuring Parameters For The Icmp Jitter Test
The number of test probes to be sent each time is set. l Run: jitter-packetnum number The number of test packets to be sent during each test is set. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 334: Checking The Configuration
The configurations of the ICMP Jitter Test function are complete. NOTE NQA test results cannot be displayed automatically on the terminal. You should run the display nqa results command to check the test results. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 335: Configuring The Nqa Mtrace Test To Check The Rpf Path From The Multicast Source To The Querier
Before configuring an MTrace test for the RPF path from the multicast source to the querier, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This can help you complete the configuration task quickly and accurately. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 336: Creating An Nqa Mtrace Test
The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type mtrace Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 337: Configuring The Nqa Mtrace Test
This part describes how to set optional MTrace test parameters according to the network operating status. Context Do as follows on the switch with the MTrace test being configured: NOTE The steps described in this procedure are all optional. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 338: Starting The Nqa Mtrace Test
Do as follows on the switch that functions as the NQA client: NOTE The start mode of the MTrace test is the same as that of other NQA tests. Here, take one mode as an example. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 339: Checking The Configuration
Run the display nqa-agent command. If information about the NQA test is displayed, it means that the test is successful. For example: <Quidway> display nqa-agent admin aa verbose nqa test-instance aa aa test-type mtrace Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 340: Configuring The Nqa Mtrace Test To Check The Multicast Path From The Multicast Source To The Querier
To configure the MTrace test, you need the following data. Data Name of the test instance IP address of the multicast source Multicast group address VPN instance Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 341: Creating An Nqa Mtrace Test
Step 1 Run: system-view The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name The test instance view is displayed. Step 3 Run: mtrace-source-address ipv4 ip-address Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 342: Optional) Adjusting The Performance Of The Nqa Mtrace Test
The maximum hops traced in hop-by-hop mode is set. first-ttl must be set to 1. Step 5 Run: mtrace-response-address ipv4 ip-address [ ttl value ] The destination IP address and TTL of the IGMP Tracert-Response packet are set. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 343: Starting The Nqa Mtrace Test
----End 6.21.6 Checking the Configuration After performing the MTrace test for the multicast path from the multicast source to the querier, you can view the test result. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 344: Configuring The Nqa Mtrace Test To Check The Rpf Path From The Multicast Source To The Destination Host
NQA MTrace test. By performing this test, you can obtain the possible transmission path of multicast packets. During the test, actual multicast data flows are not required. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 345: Creating An Nqa Mtrace Test
An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type mtrace The test type is set to MTrace. Step 4 Run: quit Exit from the test instance view. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 346: Configuring The Nqa Mtrace Test
This part describes how to set optional MTrace test parameters according to the network operating status. Context Do as follows on the switch with the MTrace test being configured: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 347 Step 7 Run: mtrace-last-hop-address ipv4 ip-address The IP address of the last-hop switch is specified. If non-Huawei devices are deployed in the multicast network, this step is mandatory. Step 8 Run: source-address ipv4 ip-address The source IP address of the IGMP Tracert-Request packet is configured. The address must be the address of the local interface.
Page 348: Starting The Nqa Mtrace Test
Exit from the test instance view. ----End 6.22.6 Setting Policies for Filtering Queriers You can set policies to filter queriers only on the last-hop that receives the unicast IGMP Tracert Query packet. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 349: Checking The Configuration
Run the display nqa history command to view the history of the NQA test. Run the display mtrace statistics command to view the statistics of the MTrace packets. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 350: Configuring The Nqa Mtrace Test To Check The Multicast Path From The Multicast Source To The Destination Host
Pre-configuration Tasks Before configuring the MTrace test, you must enable the multicast function in the network. Data Preparation To configure the MTrace test, you need the following data. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 351: Creating An Nqa Mtrace Test
This part describes how to set parameters for the MTrace test for the multicast path from the multicast source to the destination host. Context Do as follows on the switch with the MTrace test instance being created: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 352 IP address of the last-hop switch. l multicast-tree: applies to the scenario where the current switch is on the multicast path from the multicast source to the destination host. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 353: Optional) Adjusting The Performance Of The Nqa Mtrace Test
The TTL value, that is, the maximum hops traced in max-hop mode is set for the IGMP Tracert- Request packet. Step 4 Run: tracert-livetime first-ttl first-ttl max-ttl max-ttl Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 354: Starting The Nqa Mtrace Test
The start mode of the MTrace test is the same as that of other NQA tests. Here, take one mode as an example. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 355: Setting Policies For Filtering Queriers
After performing the MTrace test for the multicast path from the multicast source to the destination host, you can view the test result. Prerequisites The configurations of the NQA MTrace Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 356: Configuring The Pwe3 Ping Test To Check The One-Hop Pw
PWE3 Ping test on the one-hop PW. Pre-configuration Tasks Before configuring the PWE3 Ping test on a one-hop PW, you must correctly configure the dynamic one-hop PW. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 357: Configuring Parameters For The Pwe3 Ping Test On A One-Hop Pw
The method of setting up a PW is configured. Step 5 (Optional) Run: local-pw-type { local-pw-type | ip-interworking } The type of the local PW is configured. By default, the type is Ethernet. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 358: Checking The Configuration
NQA test results cannot be displayed automatically on a terminal. You must run the display nqa results command to view test results. By the default, the command output contains the records about only the last five tests. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 359: Configuring The Pwe3 Ping Test To Check The Multi-Hop Pw
6.25 Configuring the PWE3 Ping Test to Check the Multi- Hop PW This section describes how to configure a PWE3 ping test to check the connectivity of a multi- hop PW. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 360: Establishing The Configuration Task
This part describes how to set PWE3 ping test parameters for a multi-hop PW. Context Do as follows on the NQA client: Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 361 Step 9 (Optional) Run the following commands to configure other parameters for the PWE3 Ping test. l To configure the response mode of the Echo packet, run the lsp-replymode { no-reply | udp | udp-via-vpls | udp-router-alert | level-control-channel } command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 362: Checking The Configuration
Run the display nqa results command. If the test is successful, the following is displayed. Statistics about errors – Number of unroutable connections – Number of wrong sequence numbers – Timeout times of the test packets Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 363: Configuring The Pwe3 Trace Test To Check The One-Hop Pw
To trace a one-hop PW using LDP as the signaling protocol, you can perform the PWE3 Trace test on the one-hop PW. Pre-configuration Tasks Before configuring the PWE3 Trace test on a one-hop PW, you must correctly configure the dynamic one-hop PW. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 364: Configuring Parameters For The Pwe3 Trace Test On A One-Hop Pw
The method of setting up a PW is configured. Step 5 (Optional) Run: local-pw-type { local-pw-type | ip-interworking } The type of the local PW is configured. By default, the type is Ethernet. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 365: Checking The Configuration
After performing the PWE3 trace test for a single-hop PW, you can view the test result. Prerequisites The configurations of the PWE3 Trace Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 366 Receive response times: 3 Min/Max/Average Completion Time: 8/10/9 Sum/Square-Sum Completion Time: 28/264 RTD OverThresholds number: 0 Last Good Probe Time: 2009-2-28 0:42:37.5 Destination ip address:3.14.2.14 Lost packet ratio: 0 % Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 367: Configuring The Pwe3 Trace Test To Check The Multi-Hop Pw
6.27.2 Configuring Parameters for the PWE3 Trace Test on a Multi- Hop PW This part describes how to set a PWE3 trace test parameters for a multi-hop PW. Context Do as follows on the NQA client: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 368 | udp-via-vpls | udp-router-alert | level-control-channel } command. l To configure the LSP EXP value, run the lsp-exp exp command. l To configure maximum hops of the PWE3 Trace test, run the tracert-hopfailtimes timescommand. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 369: Checking The Configuration
Run the display nqa results command. If the PWE3 Trace test on the multi-hop PW is successful, the following information is displayed. Statistics about errors – Number of unroutable connections Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 370: Configuring Universal Nqa Test Parameters
Applicable Environment NQA supports not only the configuration of the parameters for various types of tests, but also the configuration of universal options of a test group. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 371: Configuring Universal Parameters For The Nqa Test Instance
MTrace test instances. In the case that the icmp-jitter-type of the ICMPJitter test instanceis is icmp- echo, this parameter can be configured for ICMPJitter. l Run: datasize size The packet size is set for the NQA test instance. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 372 The size of the file is set for the FTP test instance. NOTE The size of the file can be configured only for the FTP test instance. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 373 This parameter can be configured for the PWE3 Ping and PWE3 Trace test instances. l Run: local-pw-type local-pw-type The PW type is set for the local device. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 374 MTrace test instance. NOTE This parameter can be configured only for MTrace test instances. l Run: mtrace-query-type { all-router | last-hop | destination | multicast-tree } Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 375 { all | { owd-ds | owd-sd | probefailure | rtd | testcomplete | testfailure } * } The condition for triggering the trap message is configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 376 The hop fail times are set for the Trace test instance. NOTE This parameter can be configured only for Trace, LSP Trace and PWE3 Trace test instances. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 377: Checking The Configuration
1 vc-type bgp nqa status : normal nqa test-instance a b test-type icmpjitter destination-address ipv4 100.1.1.201 source-address ipv4 100.1.1.200 hardware-based enable ttl 100 tos 100 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 378: Configuring Round-Trip Delay Thresholds
Network Management System (NMS). Context Do as follows on the switch to perform the NQA test: Procedure Step 1 Run: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 379: Checking The Configuration
Run the display nqa-agent verbose command. If the test is successful, the following is displayed. For example: <Quidway> display nqa-agent verbose NQA Tests Max:2000 NQA Tests Number: NQA Flow Max:1000 NQA Flow Remained:1000 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 380: Configuring Uni-Directional Transmission Delay Thresholds
Creating NQA tests and configuring related parameters correctly Data Preparation To configure the uni-directional transmission delay threshold, you need the following data. Data Administrator name and test name Uni-directional transmission delay threshold Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 381: Configuring Uni-Directional Transmission Delay Thresholds
6.30.3 Checking the Configuration After setting the one-way transmission delay threshold, you can view the configuration. Prerequisites The configurations of the Uni-directional Transmission Delay Thresholds Test function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 382: Configuring The Trap Function
If the number of packets that have no responses reaches the upper limit, trap messages are sent to a specified NM station. Trap message sent when an NQA test fails This message checks whether the test fails. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 383: Sending Trap Messages When Test Failed
6.31.2 Sending Trap Messages When Test Failed A trap message is sent to the NMS when the transmission of NQA test packets fails. Procedure Step 1 Run: system-view The system view is displayed. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 384: Sending Trap Messages When Probes Failed
An NQA test instance is created and the test instance view is displayed. Step 3 Run: test-type tcp The test type is configured. Step 4 Run: destination-address ipv4 ip-address Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 385: Sending Trap Messages When Probes Are Complete
Step 4 Run: destination-address ipv4 ip-address The destination IP address is configured. Step 5 (Optional)Run: destination-port port-number The destination port number is configured. Step 6 Run: send-trap testcomplete Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 386: Sending Trap Messages When The Transmission Delay Exceeds Thresholds
After the trap function is enabled in an NQA test instance, you can view trap messages in the trap buffer. Prerequisites The configurations of the Trap function are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 387: Configuring Test Results To Be Sent To The Ftp Server
Before configuring test results to be sent to the FTP server, complete the following tasks: Configuring the FTP server Configuring a reachable route between the NQA client and the NM station Configuring a test instance Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 388: Configuring Parameters For Connecting The Ftp Server
The password for logging into the FTP server is configured. Step 5 Run: nqa-ftp-record filename filename The file name used for saving test results is configured. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 389: Enabling The Function Of Saving Nqa Test Results Through Ftp
Each time, the system can send two test results to the FTP server. If the FTP server cannot continue to write the file after being interrupted, a new file is created on the FTP server for the test results sent each time. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 390: Optional) Enabling Alarms To Be Sent To The Nm Station After The Ftp Transmission Succeeds
FTP transmission succeeds, an alarm message is generated. ----End 6.32.7 Starting the Test Instance After you start a test instance, test results are field periodically. Context Do as follows on the NQA client: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 391: Checking The Configuration
The test instance is started after a certain delay. ----End 6.32.8 Checking the Configuration After configuring the system to send test results to the FTP server, you can view the configuration. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 392: Configuring A Threshold For The Nqa Alarm
Before configuring the threshold for the NQA alarm, complete the following task: Configuring a test instance Data Preparation To configure the threshold for the NQA alarm, you need the following data. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 393: Configuring The Event Corresponding To The Alarm Threshold
Context Do as follows on the NQA client: Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: nqa test-instance admin-name test-name Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 394: Starting The Test Instance
The test instance view is displayed. Step 3 Run: start The NQA test is started. Select the start mode as required because the start command has several forms. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 395: Checking The Configuration
NQA Alarm Max: 5 NQA Alarm Number: 2 ------------------------------------------------------ Run the display nqa-agent command to check the status of the test instance configured on the NQA client. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 396: Maintaining Nqa
When the statistics on the current test instance are saved to the FTP server, you can clear test results on the device. Prerequisites NQA statistics cannot be restored after you clear them. So, confirm the action before you use the command. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 397: Debugging Nqa
6-3, Switch A and Switch B must be connected at Layer 3 through the VLANIF interface. Switch A functions as the NQA client to check whether Switch B is reachable. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 398 [SwitchA-Vlanif10] ip address 10.1.1.1 24 # Configure Switch B. [SwitchB] interface vlanif 10 [SwitchB-Vlanif10] ip address 10.1.1.2 24 Step 3 Enable the NQA client and create an NQA ICMP test. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 399 Configuration file of Switch B sysname SwitchB vlan batch 10 interface Vlanif10 ip address 10.1.1.2 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 400: Example For Configuring The Ftp Download Test
[SwitchB-aaa] local-user user1 service-type ftp [SwitchB-aaa] local-user user1 ftp-directory cfcard: [SwitchB-aaa] quit Step 3 Configure an NQA FTP test on Switch A. <SwitchA> system-view [SwitchA] nqa test-instance admin ftp Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 401 Configuration file of Switch B sysname SwitchB vlan batch 10 interface Vlanif10 ip address 10.1.1.2 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 FTP server enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 402: Example For Configuring The Ftp Upload Test
Switch B and Switch C. The configuration details are not mentioned here. Step 2 Configure Switch C as the FTP server. <SwitchC> system-view [SwitchC] ftp server enable [SwitchC] aaa Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 403 10.2.1.2 source-address ipv4 10.1.1.1 ftp-filesize 10 ftp-username user1 ftp-password hello ftp-filename nqa-ftp-test.txt ftp-operation put ip route-static 10.2.1.0 255.255.255.0 10.1.1.2 return Configuration file of Switch B Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 404: Example For Configuring The Http Test
6-6, Switch is connected to the HTTP server through a WAN. Figure 6-6 Networking diagram for configuring the HTTP test HTTP Server 10.2.1.1/24 Switch 10.1.1.2/24 GE1/0/0 Network VLANIF10 10.1.1.1/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 405 TCPConnectRTT Sum/Min/Max: 0/0/0 TransactionRTT Sum/Min/Max: 11/3/4 RTT Sum/Min/Max/Avg: 18/5/7/6 DNSServerTimeout:0 TCPConnectTimeout:0 TransactionTimeout: 0 Lost packet ratio:0% ----End Configuration Files Configuration file of Switch sysname quidway vlan batch 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 406: Example For Configuring The Dns Test
Switch and the DNS server can be set up and to check the speed of responding to an address resolution request. Data Preparation To complete the configuration, you need the following data: IP address of the DNS server Name of the host to be accessed Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 407 100 port hybrid untagged vlan 100 nqa test-instance admin dns test-type dns destination-address url server.com dns-server ipv4 10.3.1.1 ip route-static 10.3.1.0 255.255.255.0 10.1.1.2 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 408: Example For Configuring The Traceroute Test
NQA entry(admin, trace) :testflag is inactive ,testtype is trace 1 . Test 1 result The test is finished Completion:success Attempts number:1 Disconnect operation number:0 Operation timeout number:0 System busy operation number:0 Connection fail number:0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 409 100 port hybrid untagged vlan 100 interface GigabitEthernet2/0/0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 return Configuration file of Switch C Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 410: Example For Configuring The Snmp Query Test
Step 1 Configure reachable routes between Switch A and Switch B, between Switch A and Switch C, and between Switch B and Switch C. The configuration details are not mentioned here. Step 2 Enable SNMP agent on Switch C. <SwitchC> system-view [SwitchC] snmp-agent Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 411 100 110 interface Vlanif100 ip address 10.1.1.2 255.255.255.0 interface Vlanif110 ip address 10.2.1.1 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 412: Example For Configuring The Tcp Test
Data Preparation To complete the configuration, you need the following data: Host address of the server Port number used to monitor the TCP service on the server Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 413 100 port hybrid untagged vlan 100 nqa test-instance admin tcp test-type tcp destination-address ipv4 10.2.1.2 destination-port 9000 ip route-static 10.2.1.0 255.255.255.0 10.1.1.2 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 414: Example For Configuring The Udp Test
Switch A and Switch C. Figure 6-11 Networking diagram for configuring the UDP test SwitchA SwitchB SwitchC GE1/0/0 GE1/0/0 GE2/0/0 GE1/0/0 VLANIF100 VLANIF100 VLANIF110 VLANIF110 10.1.1.1/24 10.1.1.2/24 10.2.1.1/24 10.2.1.2/24 NQA Server Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 415 Min/Max/Average Completion Time: 32/109/67 Sum/Square-Sum Completion Time: 203/16749 Last Good Probe Time: 2006-8-5 16:9:21.6 Lost packet ratio: 0 % ----End Configuration Files Configuration file of Switch A sysname SwitchA Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 416: Example For Configuring The Jitter Test
Switch A to Switch C. Switch A and Switch C synchronize the clock from Switch B so that the test precision is improved. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 417 S9300&S9300E Terabit Routing Switch Configuration Guide - Network Management 6 NQA Configuration NOTE For information about clock synchronization, see "NTP" in the S9300&S9300E Terabit Routing Switch Feature Description - Network Management. Figure 6-12 Networking diagram for configuring the Jitter test SwitchA...
Page 418 10.2.1.2 destination-port 9000 ip route-static 10.2.1.0 255.255.255.0 10.1.1.2 return Configuration file of Switch B sysname SwitchB vlan batch 100 110 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 419: Example For Configuring The Mac Ping Test
The NQA MAC Ping test is used to test the connectivity between Switch A and Switch B. Figure 6-13 Networking diagram for configuring the MAC Ping test NQA Client GE2/0/1 GE2/0/1 SwitchA SwitchB Configuration Roadmap The configuration roadmap is as follows: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 420 Max Negative SD:0 Max Negative DS:0 Negative SD Number:0 Negative DS Number:0 Negative SD Sum:0 Negative DS Sum:0 Negative SD Square Sum :0 Negative DS Square Sum :0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 421 11 cfm enable cfm md test ma test map vlan 11 mep mep-id 12 interface GigabitEthernet2/0/1 outward remote-mep mep-id 11 mac 0000-0000-0010 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 422: Example For Configuring The Lsp Ping Test For A Common Tunnel
Create an LSP Ping test on Switch A. Data Preparation To complete the configuration, you need the following data: Host address and mask of the NQA server Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 423 Step 2 Configure LDP on Switch A, Switch B, and Switch C. (The detailed procedure is not mentioned here.) For the configuration of LDP, refer to the S9300&S9300E Terabit Routing Switch Configuration Guide - MPLS. Step 3 # Configure Switch A.
Page 424 Configuration file of Switch C sysname SwitchC vlan batch 110 mpls lsr-id 3.3.3.9 mpls mpls ldp interface Vlanif110 ip address 10.2.1.2 255.255.255.0 mpls mpls ldp interface GigabitEthernet1/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 425: Example For Configuring The Lsp Jitter Test For A Common Tunnel
GE1/0/0 VLANIF110 VLANIF100 VLANIF110 VLANIF100 SwitchA 10.2.1.1/24 10.1.1.1/24 10.2.1.2/24 10.1.1.2/24 SwitchC SwitchB Configuration Roadmap The configuration roadmap is as follows: Configure Switch A as the NQA client. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 426 Step 2 Configure LDP on Switch A, Switch B, and Switch C. (The detailed procedure is not mentioned here.) For the configuration of LDP, refer to the S9300&S9300E Terabit Routing Switch Configuration Guide - MPLS. Step 3 Configure Switch A as the NQA client.
Page 427 110 interface LoopBack1 ip address 2.2.2.9 255.255.255.255 ospf 1 area 0.0.0.0 network 2.2.2.9 0.0.0.0 network 10.1.1.0 0.0.0.255 network 10.2.1.0 0.0.0.255 return Configuration file of Switch C Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 428: Example For Configuring The Lsp Jitter Test For The Mpls Te Tunnel
Switch A, Switch B and Switch C to set up a TE tunnel from Switch A and Switch C. It is required to perform an NQA LSP Jitter test to check the connectivity of the TE tunnel from Switch A to Switch C. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 429 Step 2 Configure MPLS RSVP-TE on Switch A, Switch B, and Switch C. (The detailed procedure is not mentioned here.) For the configuration of MPLS RSVP-TE, refer to the S9300&S9300E Terabit Routing Switch Configuration Guide - MPLS. Step 3 Set up a TE tunnel from Switch A to Switch C. (The detailed procedure is not mentioned here.) Step 4 Create an NQA test on Switch A.
Page 430 3000 mpls te commit ospf 1 opaque-capability enable area 0.0.0.0 network 10.1.1.0 0.0.0.255 network 1.1.1.9 0.0.0.0 mpls-te enable nqa test-instance admin lspjitter test-type lspjitter Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 431 3.3.3.9 mpls mpls te mpls rsvp-te interface Vlanif110 ip address 10.2.1.2 255.255.255.0 mpls mpls te mpls te bandwidth max-reservable-bandwidth 10000 mpls te bandwidth bc0 5000 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 432: Example For Configuring The Lsp Traceroute Test For The Te Tunnel
Figure 6-17 Networking diagram for configuring the LSP traceroute test area 0 Loopback1 Loopback1 Loopback1 2.2.2.9/32 3.3.3.9/32 1.1.1.9/32 GE1/0/0 GE2/0/0 GE1/0/0 GE1/0/0 VLANIF110 VLANIF110 VLANIF100 VLANIF100 10.2.1.2/24 10.2.1.1/24 SwitchA 10.1.1.1/24 10.1.1.2/24 SwitchC SwitchB Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 433 Step 3 Configure a TE tunnel on Switch A to connect Switch C. The configuration details are not mentioned here. For the configuration of MPLS RSVP-TE, refer to the S9300&S9300E Terabit Routing Switch Configuration Guide - MPLS. Step 4 Create an NQA test on Switch A.
Page 434 Tunnel1/0/0 return Configuration file of Switch B sysname SwitchB vlan batch 100 110 mpls lsr-id 2.2.2.9 mpls mpls te mpls rsvp-te Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 435 110 port hybrid untagged vlan 110 interface LoopBack1 ip address 3.3.3.9 255.255.255.255 ospf 1 opaque-capability enable area 0.0.0.0 network 3.3.3.9 0.0.0.0 network 10.2.1.0 0.0.0.255 mpls-te enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 436: Example For Configuring An Icmp Jitter Test
# Enable the NQA client and configure the ICMP jitter test instance. <RouterA> system-view [RouterA] nqa test-instance admin icmpjitter [RouterA-nqa-admin-icmpjitter] test-type icmpjitter [RouterA-nqa-admin-icmpjitter] destination-address ipv4 10.1.1.2 Step 3 Start the test. [RouterA-nqa-admin-icmpjitter] start now Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 437 10 port hybrid untagged vlan 10 nqa test-instance admin icmpjitter destination-address ipv4 10.1.1.2 test-type icmpjitter return Configuration file of SwitchB sysname SwitchB vlan batch 10 interface Vlanif10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 438: Example For Checking The Rpf Path From The Source To The Switch Through The Mtrace Test
11.1.1.1/24 11.1.4.2/24 GE1/0/0 GE1/0/0 VLANIF110 VLANIF160 11.1.5.2/24 11.1.3.2/24 SwitchB GE1/0/0 GE1/0/0 VLANIF110 GE2/0/0 VLANIF160 11.1.5.1/24 VLANIF120 11.1.3.1/24 11.1.4.1/24 SwitchA GE3/0/0 GE3/0/0 VLANIF170 VLANIF170 11.1.6.2/24 11.1.6.3/24 Receiver 11.1.6.4/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 439 Hop Time Delay(ms):39131 Input Packet Count:0 Output Packet Count:0 Input Rate(pps): 0xffffffff Output Rate(pps): 0xffffffff Input Loss Rate: 0xffffffff SG Loss Rate: 0xffffffff 3 . Hop 3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 440 120 160 170 interface Vlanif120 ip address 11.1.4.1 255.255.255.0 pim sm interface Vlanif160 ip address 11.1.3.1 255.255.255.0 pim sm interface Vlanif170 ip address 11.1.6.2 255.255.255.0 igmp enable pim sm Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 441 LoopBack0 c-rp LoopBack0 ospf 1 area 0.0.0.0 network 1.1.1.1 0.0.0.0 network 11.1.1.0 0.0.0.255 network 11.1.3.0 0.0.0.255 return Configuration file of Switch D Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 442 11.1.1.2 255.255.255.0 pim sm interface GigabitEthernet1/0/0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2/0/0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 443: Example For Checking The Multicast Path From The Source To The Switch Through The Mtrace Test
11.1.1.1/24 11.1.4.2/24 GE1/0/0 GE1/0/0 VLANIF110 VLANIF160 11.1.5.2/24 11.1.3.2/24 SwitchB GE1/0/0 GE1/0/0 VLANIF110 GE2/0/0 VLANIF160 11.1.5.1/24 VLANIF120 11.1.3.1/24 11.1.4.1/24 SwitchA GE3/0/0 GE3/0/0 VLANIF170 VLANIF170 11.1.6.2/24 11.1.6.3/24 Receiver 11.1.6.4/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 444 Protocol : PIM Forward Code:NO_ERROR Forward Ttl:1 Current Path Ttl:3 SG Packet Count:65 Hop Time Delay(ms): 0xffffffff Input Packet Count:9264 Output Packet Count:8792 Input Rate(pps): 0xffffffff Output Rate(pps): 0xffffffff Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 445 120 160 170 interface Vlanif120 ip address 11.1.4.1 255.255.255.0 pim sm interface Vlanif160 ip address 11.1.3.1 255.255.255.0 pim sm interface Vlanif170 ip address 11.1.6.2 255.255.255.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 446 Loopback0 ip address 1.1.1.1 255.255.255.255 igmp enable pim sm c-bsr LoopBack0 c-rp LoopBack0 ospf 1 area 0.0.0.0 network 1.1.1.1 0.0.0.0 network 11.1.1.0 0.0.0.255 network 11.1.3.0 0.0.0.255 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 447 11.1.0.1 255.255.255.0 pim sm interface Vlanif150 ip address 11.1.1.2 255.255.255.0 pim sm interface GigabitEthernet1/0/0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 448: Example For Checking The Rpf Path From The Source To Destination Host Through The Mtrace Test
You need to configure an NQA MTrace test on Switch C to implement the MTrace function. You can check the RPF path from the multicast source to the destination host. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 449 IP address of the Switch at the last hop: 11.1.6.2 Procedure Step 1 Configure an NQA MTrace test on Switch C. <SwitchC> system-view [SwitchC] nqa test-instance admin mtrace Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 450 Output Rate(pps): 0xffffffff Input Loss Rate: 0xffffffff SG Loss Rate: 0xffffffff ----End Configuration Files Configuration file of Switch A sysname SwitchA multicast routing-enable vlan batch 110 170 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 451 170 port hybrid untagged vlan 170 ospf 1 area 0.0.0.0 network 11.1.3.0 0.0.0.255 network 11.1.4.0 0.0.0.255 network 11.1.6.0 0.0.0.255 return Configuration file of Switch C Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 452 11.1.4.2 255.255.255.0 pim sm interface Vlanif130 ip address 11.1.2.1 255.255.255.0 igmp enable pim sm interface GigabitEthernet1/0/0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 453 150 interface GigabitEthernet3/0/0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 ospf 1 area 0.0.0.0 network 11.1.0.0 0.0.0.255 network 11.1.1.0 0.0.0.255 network 11.1.2.0 0.0.0.255 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 454: Example For Checking The Multicast Path From The Source To Destination Host Through The Mtrace Test
The configuration roadmap is as follows: Configure Switch C as the NQA client and create an MTrace test on it. Perform the test and view the test result. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 455 SG Loss Rate: 0xffffffff 3 . Hop 3 Outgoing Interface Address: 11.1.2.2 Incoming Interface Address: 11.1.0.1 Prehop Router Address: 0.0.0.0 Protocol : PIM Forward Code:NO_ERROR Forward Ttl:1 Current Path Ttl:2 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 456 11.1.3.1 255.255.255.0 pim sm interface Vlanif170 ip address 11.1.6.2 255.255.255.0 igmp enable pim sm interface GigabitEthernet1/0/0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 457 LoopBack0 nqa admin mtrace test-type mtrace destination-address ipv4 11.1.6.4 mtrace-query-type destination mtrace-source-address ipv4 11.1.0.2 mtrace-group-address ipv4 225.1.1.1 Return Configuration file of Switch D sysname SwitchD multicast routing-enable Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 458 140 interface GigabitEthernet2/0/0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface GigabitEthernet3/0/0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 459: Example For Configuring The Pwe3 Ping Test On A Single-Hop Pw
Set up the MPLS LDP peer relation between the two PE devices on the two ends of the Create an MPLS L2VC connection between the two PE devices. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 460 Step 1 Configure a dynamic single-hop PW. Configure a dynamic single-hop PW on the MPLS backbone network. For the detailed configuration procedure, see "PWE3 Configuration" in the S9300&S9300E Terabit Routing Switch Configuration Guide - VPN. Step 2 Configure a PWE3 Ping test of the single-hop PW.
Page 461 100 local-pw-type vlan ospf 1 area 0.0.0.0 network 192.2.2.2 0.0.0.0 network 10.1.1.0 0.0.0.255 return Configuration file of P sysname P Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 462 GigabitEthernet1/0/0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2/0/0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 463: Example For Configuring The Pwe3 Ping Test On A Multi-Hop Pw
S-PE is set as the switching node to set up a dynamic multi-hop PW between U-PE1 and U-PE2. The PWE3 Ping function of the multi-hop PW needs to be performed to test the connectivity of the PW between U-PE1 and U-PE2. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 464 MPLS LSR-IDs of U-PE1, S-PE, and U-PE2 IP address of the remote peer Encapsulation type of the switching PW Name and parameters of the PW template on U-PE devices Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 465 Step 1 Configure a dynamic multi-hop PW. Configure a dynamic multi-hop PW on the MPLS backbone network. For the detailed configuration procedure, see "PWE3 Configuration" in the S9300&S9300E Terabit Routing Switch Configuration Guide - VPN. Step 2 Configure a PWE3 Ping test on a multi-hop PW.
Page 466 P1 mpls lsr-id 2.2.2.9 mpls mpls ldp vlan batch 120 130 interface Vlanif120 ip address 10.1.1.2 255.255.255.0 mpls mpls ldp interface Vlanif130 ip address 20.1.1.1 255.255.255.0 mpls Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 467 140 port hybrid untagged vlan 140 interface LoopBack0 ip address 3.3.3.9 255.255.255.255 ospf 1 area 0.0.0.0 network 3.3.3.9 0.0.0.0 network 20.1.1.0 0.0.0.255 network 30.1.1.0 0.0.0.255 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 468 Vlanif150 ip address 40.1.1.2 255.255.255.0 mpls mpls ldp interface Vlanif160 mpls l2vc 3.3.3.9 200 interface GigabitEthernet1/0/0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 469: Example For Configuring The Pwe3 Trace Test On A Single-Hop Pw
192.2.2.2/32 GE2/0/0 GE2/0/0 GE1/0/0 GE2/0/0 VLANIF130 VLANIF120 10.2.2.2/24 10.1.1.1/24 VLANIF120 VLANIF130 GE1/0/0 GE1/0/0 10.2.2.1/24 PE-A VLANIF140 VLANIF110 PE-B 10.1.1.2/24 GE1/0/0 GE1/0/0 VLANIF10 VLANIF140 CE-B 100.1.1.1/24 100.1.1.2/24 CE-A Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 470 Step 1 Configure a dynamic single-hop PW. Configure a dynamic single-hop PW on the MPLS backbone network. For the detailed configuration procedure, see "PWE3 Configuration" in the S9300&S9300E Terabit Routing Switch Configuration Guide - VPN. Step 2 Configure a PWE3 Trace test of the single-hop PW.
Page 471 192.3.3.3 remote-ip 192.3.3.3 vlan batch 110 120 interface Vlanif110 mpls l2vc 192.3.3.3 100 interface Vlanif120 ip address 10.1.1.1 255.255.255.0 mpls Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 472 192.4.4.4 255.255.255.255 ospf 1 area 0.0.0.0 network 192.4.4.4 0.0.0.0 network 10.1.1.0 0.0.0.255 network 10.2.2.0 0.0.0.255 return Configuration file of PE-B sysname PE-B mpls lsr-id 192.3.3.3 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 473: Example For Configuring The Pwe3 Trace Test On A Multi-Hop Pw
S-PE is set as the switching node to set up a dynamic multi-hop PW between U-PE1 and U-PE2. The PWE3 Trace function of the multi-hop PW needs to be performed to test the connectivity of the PW between U-PE1 and U-PE2. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 474 MPLS LSR-IDs of U-PE1, S-PE, and U-PE2 IP address of the remote peer Encapsulation type of the switching PW Name and parameters of the PW template on U-PE devices Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 475 Step 1 Configure a dynamic multi-hop PW. Configure a dynamic multi-hop PW on the MPLS backbone network. For the detailed configuration procedure, see "PWE3 Configuration" in the S9300&S9300E Terabit Routing Switch Configuration Guide - VPN. Step 2 Configure a PWE3 Trace test of the multi-hop PW.
Page 476 3.3.3.9 100 interface Vlanif120 ip address 10.1.1.1 255.255.255.0 mpls mpls ldp interface GigabitEthernet1/0/0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 477 10.1.1.0 0.0.0.255 network 20.1.1.0 0.0.0.255 return Configuration file of S-PE sysname S-PE mpls lsr-id 3.3.3.9 mpls mpls l2vpn mpls switch-l2vc 5.5.5.9 200 between 1.1.1.9 100 encapsulation ppp Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 478 GigabitEthernet1/0/0 port hybrid pvid vlan 140 port hybrid untagged vlan 140 interface GigabitEthernet2/0/0 port hybrid pvid vlan 150 port hybrid untagged vlan 150 interface LoopBack0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 479 Configuration file of CE-B sysname CE-B vlan batch 160 interface Vlanif160 ip address 100.1.1.2 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 160 port hybrid untagged vlan 160 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 480: Example For Configuring The Test Of Sending Nqa Threshold Traps To The Nms
NQA Server 10.1.1.1/24 10.1.1.2/24 30.1.1.1/24 NOTE For the information about clock synchronization, see "NTP" in the S9300&S9300E Terabit Routing Switch Feature Description - Network Management. Configuration Roadmap The configuration roadmap is as follows: Configure a Jitter test. Configure the NQA thresholds.
Page 481 Operation sequence errors number:0 RTT Stats errors number:0 System busy operation number:0 Operation timeout number:0 Min Positive SD:1 Min Positive DS:0 Max Positive SD:27 Max Positive DS:0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 482 GigabitEthernet1/0/0 port hybrid pvid vlan 120 port hybrid untagged vlan 120 interface GigabitEthernet2/0/0 port hybrid pvid vlan 110 port hybrid untagged vlan 110 ospf 1 area 0.0.0.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 483 30.1.1.2 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 130 port hybrid untagged vlan 130 nqa-server udpecho 30.1.1.2 9000 ospf 1 area 0.0.0.1 network 30.1.1.0 0.0.0.255 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 484: Example For Configuring Test Results To Be Sent To The Ftp Server
Duration of saving test results through FTP Procedure Step 1 Configure parameters for connecting the FTP server. # Configure the IP address of the client that is connected to the FTP server. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 485 10 20 interface Vlanif10 ip address 11.1.1.11 255.255.255.0 interface Vlanif20 ip address 11.1.2.1 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 486: Example For Configuring A Threshold For The Nqa Alarm
NM station. Figure 6-29 Networking diagram of configuring a threshold for the NQA alarm NM Station 11.1.2.8/24 GE2/0/0 VLANIF20 11.1.2.1/24 GE1/0/0 GE1/0/0 SwitchA SwitchB VLANIF10 VLANIF10 11.1.1.20/24 11.1.1.1/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 487 Step 5 Verify the configuration. <SwitchA> display nqa-event NQA event information: ------------------------------------------------------ NQA Event Max: 100 NQA Event Number: 1 ------------------------------------------------------ <SwitchA> display nqa-alarm Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 488 Configuration file of Switch B sysname SwitchB vlan batch 10 interface Vlanif10 ip address 11.1.1.20 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 489: Example For Configuring Nqa Upper/Lower Alarm Threshold And Test Instance Linkage
Step 1 Enable the NQA client and create an NQA ICMP test instance. <SwitchA> system-view [SwitchA] nqa test-instance admin icmp [SwitchA-nqa-admin-icmp] test-type icmp [SwitchA-nqa-admin-icmp] destination-address ipv4 11.1.1.2 [SwitchA-nqa-admin-icmp] quit Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 490 Disconnect operation number:0 Operation timeout number:3 System busy operation number:0 Connection fail number:0 Operation sequence errors number:0 RTT Stats errors number:0 Destination ip address:11.1.1.2 Min/Max/Average Completion Time: 0/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 491 11.1.1.2 nqa test-instance admin icmpjitter alarm 10 lost-packet-ratio absolute rising-threshold 80 10 falling-threshold 10 10 return Configuration file of Switch B sysname SwitchB Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 492: Example For Configuring Mac Ping To Detect The Connectivity Of A Vlan Network
To complete the configuration, you need the following data: VLAN ID MAC address of the remote device Procedure Step 1 Configure the IP address. (The detailed procedure is not mentioned here.) Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 493 Step 4 Configure a MAC ping test instance to detect the connectivity of a VLAN network. Configure a VLAN MAC Ping test instance and start the test instance. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 494 Fragment-disorder Number: 0 Fragment-disorder Ratio: 0% ----End Configuration Files Configuration file of Switch A sysname SwitchA cfm enable interface GigabitEthernet1/0/1 undo shutdown portswitch port default vlan 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 495: Example For Configuring A Mac Ping Test Instance To Detect The Connectivity Of A Vpls Network
MAC ping test instance is configured on PE1, with the destination MAC address of trace packets being the MAC address of the interface on PE2. The test instance is initiated from PE1 to detect the connectivity between PE1 and PE2. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 496 Name and level of the MD, name of the MA, MEP ID, name of the interface where the MEP resides, and type of the MEP Destination MAC address Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 497 Step 5 Verify the configuration. Enter the MAC ping instance view on PE1 and then run the display nqa results command. You can see that the test result is "success". Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 498 2 peer 2.2.2.2 peer 3.3.3.3 mpls ldp interface GigabitEthernet1/0/0 undo shutdown interface GigabitEthernet1/0/0.1 undo shutdown vlan-type dot1q 10 l2 binding vsi ldp1 interface Gigabitethernet2/0/0 undo shutdown Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 499 10 l2 binding vsi ldp1 interface Gigabitethernet2/0/0 undo shutdown ip address 100.1.1.2 255.255.255.252 mpls mpls ldp interface Gigabitethernet3/0/0 undo shutdown ip address 100.3.1.1 255.255.255.252 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 500 Gigabitethernet3/0/0 undo shutdown ip address 100.3.1.2 255.255.255.252 mpls mpls ldp interface LoopBack1 ip address 3.3.3.3 255.255.255.255 cfm md md1 ma ma1 ccm-interval 10000 map vsi ldp1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 501: Example For Checking An Rpf Path From The Multicast Source To The Destination Host Of A Specified Multicast Vpn Network
Source to the Destination Host of a Specified Multicast VPN Network This part provides examples for configuring an MTrace test to check the RPF path from the multicast source to the destination host. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 502 Configure the MTI address of each PE as the IBGP peer interface address on the public network, and enable PIM on the MTI. Configure Switch B as an NQA client and create a Mtrace test instance on it. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 503 VPN instances. For configuration details, refer to the chapter "IPv4 Multicast VPN Configuration" in the S9300&S9300E Configuration Guide - IP Multicast. Step 3 Configure identical share-group address, MTI, and switch-address-pool range of Switch-MDT for the same VPN instance on each PE.
Page 504 SG Packet Count:0xffffffff Hop Time Delay(ms):0xffffffff Input Packet Count:0 Output Packet Count:0 Input Rate(pps): 0xffffffff Output Rate(pps): 0xffffffff Input Loss Rate: 0xffffffff SG Loss Rate: 0xffffffff ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 505 100:1 export-extcommunity vpn-target 100:1 import-extcommunity multicast routing-enable multicast-domain share-group 239.1.1.1 binding mtunnel 0 multicast-domain switch-group-pool 225.2.2.0 255.255.255.240 mpls lsr-id 2.2.2.2 mpls mpls ldp vlan batch 10 30 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 506 2.2.2.2 0.0.0.0 rip 2 vpn-instance red network 10.0.0.0 network 20.0.0.0 import-route direct import-route bgp cost 3 igmp nqa test-instance admin mtrace test-type mtrace destination-address ipv4 10.0.2.10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 507 20.0.5.0 0.0.0.255 network 3.3.3.3 0.0.0.0 igmp c-bsr LoopBack1 c-rp LoopBack1 return Configuration file of Switch D sysname SwitchD router id 4.4.4.4 multicast routing-enable ip vpn-instance red ipv4-family Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 508 2.2.2.2 enable peer 2.2.2.2 group vpn-g ipv4-family vpn-instance red import-route direct import-route rip 2 ospf 1 area 0.0.0.0 network 20.0.5.0 0.0.0.255 network 10.0.4.0 0.0.0.255 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 509: Example For Configuring The Lsp Trace Test For Checking The Cr-Lsp Hotstandby Tunnel
Figure 6-34, a TE tunnel with Switch C being the egress is set up on Switch A, and CR-LSP hot standby is configured on the TE tunnel. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 510 Configure Switch A as the NQA client and create an LSP Trace test instance on Switch Configure Switch C as the NQA server. Data Preparation To complete the configuration, you need the following data: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 511 Last Good Probe Time: 2009-4-24 11:22:21.2 Destination ip address:3.3.3.3 Lost packet ratio: 0 % ----End Configuration Files Configuration file of Switch A sysname SwitchA mpls lsr-id 1.1.1.1 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 512 1.1.1.1 0.0.0.0 network 30.1.1.0 0.0.0.255 mpls-te enable nqa test-instance admin lsptrace test-type lsptrace lsp-type te lsp-tetunnel Tunnel1/0/0 hot-standby return Configuration file of Switch B sysname SwitchB Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 513 40.1.1.2 255.255.255.0 mpls mpls te mpls te bandwidth max-reservable-bandwidth 50000 mpls rsvp-te interface GigabitEthernet1/0/0 port hybrid pvid vlan 40 port hybrid untagged vlan 40 interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 514 40 interface LoopBack1 ip address 4.4.4.4 255.255.255.255 ospf 1 opaque-capability enable area 0.0.0.0 network 4.4.4.4 0.0.0.0 network 30.1.1.0 0.0.0.255 network 40.1.1.0 0.0.0.255 mpls-te enable return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 515: Netstream Configuration
Context NOTE After the NetStream function is enabled on an S9300&S9300E, you cannot configure the IP source trail function on this S9300&S9300E. To configure the IP source trail function, you must disable the NetStream function of the S9300&S9300E. Currently, only the enhanced boards support the NetStream function.
Page 516 S9300&S9300E Terabit Routing Switch Configuration Guide - Network Management 7 NetStream Configuration This section provides several configuration examples of NetStream. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 517: Overview Of Netstream
As shown in Figure 7-1. Figure 7-1 Diagram of NetStream data collection and analysis SwitchA SwitchB Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 518: Netstream Features Supported By The S9300&S9300E
Aging depending on the inactive time of the original traffic After the inactive aging time is set, the traffic is aged if the S9300&S9300E does not receive any packet of the traffic in a certain period. Then the statistics collection is ended and the result is sent to the NSC.
Page 519: Collecting Ipv4 Traffic Statistics
The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: ip netstream { inbound | outbound } Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 520: Optional) Configuring The Version Of Exported Packets
By default, the suppression ratio on interfaces is 1000. The suppression ratio is used for packet sampling. After the suppression ratio is set, the S9300&S9300E does not sample the packets that are filtered out in the suppression. Step 5 (Optional) Run: ip netstream sampler fix-packets packet-interval { inbound | outbound } The fixed-packets sampling ratio is set on the interface.
Page 521: Optional) Aging The Tcp Traffic According To Its Fin Flag
If two aging modes, that is, inactive aging time of the original traffic and the FIN flag of TCP packets, are configured on the S9300&S9300E at the same time, the traffic is aged when one of the two aging conditions is met.
Page 522: Checking The Configuration
Pre-configuration Tasks Before configuring the statistics about the original traffic, complete the following tasks: Setting physical parameters on an interface Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 523: Configuring The Netstream Function On An Interface
By default, the suppression ratio on interfaces is 1000. The suppression ratio is used for packet sampling. After the suppression ratio is set, the S9300&S9300E does not sample the packets that are filtered out in the suppression. Step 5 (Optional) Run: ipv6 netstream sampler fix-packets packet-interval { inbound | outbound } The fixed-packets sampling ratio is set on the interface.
Page 524: Optional) Configuring The Format Of Exported Packets
The destination IP address of the exported statistics, that is, the IP address of the NSC, is configured. You can configure up to 2 destination addresses to implement the backup between 2 NSCs. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 525: Optional) Aging The Tcp Traffic According To Its Fin Flag
If two aging modes, that is, inactive aging time of the original traffic and the FIN flag of TCP packets, are configured on the S9300&S9300E at the same time, the traffic is aged when one of the two aging conditions is met.
Page 526: Checking The Configuration
To complete the configuration, you need the following data. Data Name and number of the interface on which traffic statistics need to be collected Version number of exported packets of the NetStream traffic statistics Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 527: Configuring The Netstream Function On An Interface
By default, the suppression ratio on interfaces is 1000. The suppression ratio is used for traffic sampling. After the suppression ratio is set, the S9300&S9300E does not sample the packets that are filtered out in the suppression. Step 5 (Optional) Run: ip netstream sampler fix-packets packet-interval { inbound | outbound } The fixed-packets sampling ratio on the interface is set.
Page 528: Optional) Configuring The Export Of Statistics
If no destination NSC address is configured in the NetStream aggregation view, aggregation traffic is sent to the destination NSC address configured in the system view. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 529: Configuring The Aggregation Function
IP address, source port number, destination port number, or traffic label on the IP network, you can configure Flexible NetStream. Pre-configuration Tasks Before configuring Flexible NetStream, complete the following task: Setting physical parameters on interfaces Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 530: Creating A Record And Entering The Record View
A record is created and the record view is displayed. ----End 7.6.3 Configuring Aggregation Key Words of Records Context Do as follows on the S9300&S9300E where the Flexible NetStream feature needs to be configured. Procedure Step 1 Run: system-view The system view is displayed.
Page 531: Optional) Configuring The Exported Traffic Statistics
The traffic statistics sent to the NSC contain the indexes of the inbound interface and outbound interface on the S9300&S9300E. ----End 7.6.5 Configuring NetStream and Setting the Packet Sampling Ratio Context Do as follows on the S9300&S9300E where the Flexible NetStream feature needs to be configured. Procedure Step 1 Run: system-view The system view is displayed.
Page 532: Enabling Flexible Netstream On Interfaces
Only one record can be configured on an interface. To modify the record in the same interface view, you must first delete the existing configuration by running the undo port ip netstream record command. ----End 7.6.7 Checking the Configuration Prerequisites All configurations are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 533: Configuring The Mapping Of Netstream Interface Indexes
Ensuring that interfaces work normally Setting the IP address of the interface Enabling the NetStream function on the S9300&S9300E Setting the version of the exported packets of NetStream original traffic to v9 Setting the version of the enabled aggregation traffic to v9 Data Preparation To complete the configuration, you need the following data.
Page 534: Checking The Configuration
32 ip netstream aggregation as enable export version 9 7.8 Maintaining NetStream This section describes how to clear NetStream statistics and debug NetStream. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 535: Debugging Netstream
10.2.1.2/24 10.1.1.1/24 GE1/0/0 VLANIF 100 10.1.1.2/24 SwitchA SwitchB Configuration Roadmap The configuration roadmap is as follows: Set IP addresses for interfaces on Switch A and Switch B. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 536 [SwitchB] ip netstream tcp-flag enable Step 5 Verify the configuration. # After successful configurations, run the display netstream all command in the user view of Switch B to check the configurations. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 537 100 200 ip netstream export source 10.2.1.1 ip netstream export host 10.2.1.2 6000 ip netstream timeout inactive 100 ip netstream tcp-flag enable interface Vlanif 100 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 538: Example For Configuring Ipv4 Aggregation Traffic Statistics
SwitchA GE2/0/0 ISP2 SwitchD Switch Physical interface VLANIF interface IP address Switch A GigabitEthernet1/0/0 VLANIF30 10.1.1.1/24 Switch B GigabitEthernet1/0/0 VLANIF10 10.2.1.1/24 GigabitEthernet2/0/0 VLANIF20 10.3.1.1/24 GigabitEthernet3/0/0 VLANIF30 10.1.1.2/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 539 Step 3 Set up BGP peer relations between Switch B, Switch C, and Switch D. # Set up dynamic BGP peer relations between Switch B and Switch C. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 540 # View the traffic statistics on the board in slot 1. <SwitchB> display ip netstream statistic slot 1 =====Netstream statistics:===== Origin ingress entries : 572 Origin ingress packets : 56122 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 541 10 port hybrid untagged vlan 10 ip netstream inbound ip netstream outbound ip netstream sampler fix-packets 100 inbound ip netstream sampler fix-packets 100 outbound interface GigabitEthernet2/0/0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 542 10.2.1.1 enable return Configuration file of Switch D sysname SwitchD vlan batch 20 interface Vlanif20 ip address 10.3.1.2 255.255.255.0 interface GigabitEthernet2/0/0 port hybrid pvid vlan 20 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 543: Example For Configuring Flexible Netstream
Configure the Flexible NetStream feature on GE 1/0/0 of Switch B. Data Preparation To complete the configuration, you need the following data: IP address of each interface Version of the exported packets Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 544 [SwitchB-GigabitEthernet1/0/0] ip netstream sampler fix-packets 100 outbound # Apply the record test to GE 1/0/0. [SwitchB-GigabitEthernet1/0/0] port ip netstream record test [SwitchB-GigabitEthernet1/0/0] quit Step 6 Verify the configuration. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 545 Configuration file of Switch A sysname SwitchA vlan 100 interface Vlanif 100 ip address 10.1.1.1 255.255.255.0 interface GigabitEthernet1/0/0 port hybrid pvid vlan 100 port hybrid untagged vlan 100 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 546 200 ip netstream record test match ip destination-address match ip destination-port collect counter packets collect counter bytes collect interface input collect interface output return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 547: Rmon And Rmon2 Configuration
This part describes working principles of and differences between RMON and RMON2. 8.2 RMON and RMON2 Suported by the S9300&S9300E This part describes the support for RMON and RMON2 on the S9300&S9300E. 8.3 Configuring RMON This section describes how to monitor the network status and traffic through RMON.
Page 548: Introduction To Rmon And Rmon2
NM Station collects only information on four groups (alarm, event, history, and statistics) and not the complete information on the RMON MIB. Currently, the S9300&S9300E implements the monitoring and statistics collection function only on the Ethernet interfaces of network devices.
Page 549: Rmon And Rmon2 Suported By The S9300&S9300E
The S9300&S9300E does not apply this mechanism because it will not generate the alarms for a long period. For the S9300&S9300E, the alarms are re-generated if the smapling value turns to the noraml threshold.
Page 550 The RMON Performance-MIB has one table: prialarmTable. In the S9300&S9300E, to save system resources, each entry is given a specific time span. The time span indicates the period for an entry to keep the invalid state. The entry is deleted when the time span goes down to 0.
Page 551: Configuring Rmon
HistoryControl table to be used and related parameters Event table to be used and related parameters Alarm table to be used and related parameters Prialarm table to be used and related parameters Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 552: Enabling The Rmon Statistics Function On The Interface
Step 2 Run: interface { ethernet | gigabitethernet | xgigabitethernet } interface-number The interface view is displayed. Step 3 Run: rmon statistics entry-number [ owner owner-name ] Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 553: Configuring The Historycontroltable
The short sampling interval enables a monitor to probe the sudden changes of traffic modes, and the long sampling interval is applicable if the interface status is relatively stable. Currently, the S9300&S9300E reserves up to 10 pieces of the latest records for each history control entry.
Page 554: Configuring The Alarmtable
OID is specified), the status of alarm recording is undercreation and no alarm is generated. Do as follows on the switch that is monitored: Procedure Step 1 Run: system-view Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 555: Configuring The Prialarmtable
{ absolute | changeratio | delta } rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 entrytype { cycle entry-period | forever } [ owner owner-name ] The prialarmTable is configured. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 556: Checking The Configuration
100 with alarm value 0. Alarm sample type is absolute. Run the display rmon history command to display the RMON history. <Quidway> display rmon history History control entry 1 owned by Test300 is VALID, Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 557: Configuring Rmon2
Pre-configuration Tasks Before configuring RMON2, configure parameters for Ethernet interface. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 558: Configuring The Hlhostcontroltable
Station, the status displayed is "notinservice". In this case, users can delete the entry but they cannot change it. When the interface status turns to Up, the status of the hlHostControlTable becomes active again. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 559: Configuring The Protocoldirtable
When the protocolDirStatus is set to inactive, the corresponding entry in the hlHostTable is deleted. ----End 8.4.4 Checking the Configuration After configuring RMON2, you can view the traffic statistics collected by RMON2. Prerequisites The configurations of the RMON2 are complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 560 InOctes - nlHostInOctets OutOctes - nlHostOutOctets OutMac - nlHostOutMacNonUnicastPkts ChgTm - nlHostTimeMark CrtTm - nlHostCreateTime HIdx PIdx Addr InPkts OutPkts InOctes OutOctes OutMac ChgTm CrtTm 10.110.99.2 10046 81489 40859 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 561: Maintaining Rmon And Rmon2
When an RMON fault occurs, run the following debugging command in the user view to locate the fault. For the description about the debugging commands, refer to the S9300&S9300E Terabit Routing Switch Debugging Reference. Perform the configuration in the user view.
Page 562 # Configure the function of sending trap messages to the specified NMS. [Switch] snmp-agent target-host trap address udp-domain 1.1.1.1 params securityname public Step 4 Enable the statistics function. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 563 # Check the effect of configurations. Only the last sampling record is displayed through the command lines. To display all the history records, you need special NMS software. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 564 The NMS receives trap messages when the set prialarm variable exceeds the preset threshold. ----End Configuration Files sysname Switch vlan batch 100 110 interface Vlanif100 ip address 2.2.2.1 255.255.255.0 interface Vlanif110 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 565: Examples For Configuring Rmon2
RMON2 can monitor remote hosts through the SNMP NMS, or through command lines. This example describes only command-line-based monitoring. Figure 8-2 Networking diagram for configuring RMON2 Console Network GE2/0/0 Switch VLANIF10 NM Station 10.1.1.1/24 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 566 OutPkts - nlHostOutPkts InOctes - nlHostInOctets OutOctes - nlHostOutOctets OutMac - nlHostOutMacNonUnicastPkts ChgTm - nlHostTimeMark CrtTm - nlHostCreateTime HIdx PIdx Addr InPkts OutPkts InOctes OutOctes OutMac ChgTm CrtTm Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 567 ----End Configuration Files sysname Quidway vlan batch 10 interface Vlanif10 ip address 10.1.1.1 255.255.255.0 interface GigabitEthernet2/0/0 port hybrid pvid vlan 10 port hybrid untagged vlan 10 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 568 8.0.0.0.1.0.0.8.0 parameter 2.0.0 descr ip host supportedon owner china status active rmon2 hlhostcontroltable index 123 datasource interface vlanif10 maxentry 100 owner china status active return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 569: Traffic Distribution Configuration
This section describes basic concepts of traffic distribution. 9.2 Traffic Distribution Features Supported by the S9300&S9300E This section describes the traffic distribution features supported by the S9300&S9300E. 9.3 Configuring Traffic Distribution Based on the Eth-Trunk This section describes how to configure traffic distribution based on the Eth-Trunk.
Page 570: Traffic Distribution Overview
9.2 Traffic Distribution Features Supported by the S9300&S9300E This section describes the traffic distribution features supported by the S9300&S9300E. During traffic distribution, the concealment and security of the traffic distribution device on the network must be ensured. Therefore, the traffic distribution device needs to provide the following...
Page 571: Configuring Traffic Distribution Based On The Eth-Trunk
The S9300&S9300E provides easy query of the outbound interface of traffic. According to the entered quintuple information, the S9300&S9300E obtains the outbound interface of traffic matching the quintuple information.
Page 572: Setting The Load Balancing Mode Of An Eth-Trunk
{ dst-ip | dst-mac | src-ip | src-mac | src-dst-ip | src-dst- mac | enhanced profile profile-name } The load balancing mode is set for the Eth-Trunk. By default, the load balancing mode of an Eth-Trunk is src-dst-ip. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 573: Optional) Configuring Unidirectional Single-Fiber Communication
Before running the single-fiber enable command, you need to run the undo negotiation auto command to configure the interface to work in non-auto negotiation mode, that is, forcible mode. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 574: Configuring A Traffic Policy
Step 4 Apply the traffic policy to the inbound interface where traffic distribution is configured. Run: system-view The system view is displayed. Run: interface gigabitethernet interface-number The GE interface view is displayed. Run: traffic-policy policy-name inbound Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 575: Checking The Configuration
As shown in Figure 9-2, Switch A is the traffic distribution switch. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 576: Configuring Static Routes
Through multiple static equal-cost routes, packets are forwarded to analysis devices according to the specified load balancing mode. Do as follows on the Switch where equal-cost routes need to be configured. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 577: Configuring Ecmp
Configuration Guide - Network Management 9 Traffic Distribution Configuration Procedure Configure static routes. For details, see the IP Static Route Configuration in the S9300&S9300E Terabit Routing Switch Configuration Guide - IP Routing. ----End 9.4.3 Configuring ECMP Context Because of high link bandwidth on the backbone network, a packet analysis device cannot analyze or process a large amount of traffic.
Page 578: Optional) Retaining The Original Ttl Value
The configurations of traffic distribution based on ECMP are complete. Procedure Run the display ecmp-profile [ profile-name ] command to check the configuration of the ECMP profile. ----End Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 579: Maintaining Traffic Distribution
UDP packets with destination port 10000 are matched. Ensure that the packets from the same source reach the same destination. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 580 <Quidway> system-view [Quidway] sysname SwitchA [SwitchA] interface eth-trunk 1 [SwitchA-Eth-Trunk1] trunkport gigabitethernet 1/0/1 to 1/0/4 # Configure load balancing based on traffic classification and monitoring on Eth-Trunk 1. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 581 SwitchA acl number 3000 rule 5 permit udp destination-port eq 10000 traffic classifier test if-match acl 3000 traffic behavior test redirect interface Eth-Trunk1 traffic policy test Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 582: Example For Configuring Traffic Distribution Based On Ecmp
GE interfaces and sent to four packet analysis servers. It is required that packets from the same source reach the same destination. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 583 Configure ECMP. Configure Switch A to retain the original TTL value. Data Preparation To complete the configuration, you need the following data: IP addresses of interfaces Static routes Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 584 Configuration file of Switch A sysname SwitchA vlan batch 1 to 100 interface Vlanif10 ip address 11.0.1.1 255.255.255.0 interface Vlanif20 ip address 11.0.2.1 255.255.255.0 interface Vlanif30 ip address 11.0.3.1 255.255.255.0 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 585 0.0.0.0 0.0.0.0 Vlanif10 11.0.1.2 ip route-static 0.0.0.0 0.0.0.0 Vlanif20 11.0.2.2 ip route-static 0.0.0.0 0.0.0.0 Vlanif30 11.0.3.2 ip route-static 0.0.0.0 0.0.0.0 Vlanif40 11.0.4.2 ecmp load-balance diffluence return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 586: Packet Capture Configuration
This will help you complete the configuration task quickly and accurately. 10.4 Capturing Packets Sent to the CPU Before capturing packets sent to the CPU on an S9300&S9300E switch, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the data required for configuration.
Page 587: Packet Capture Overview
S9300&S9300E Capturing Service Packets When a fault occurs on an S9300&S9300E switch, you can configure the packet capture function. The switch then captures packets matching the specified rules, and sends captured packet information to a TFTP or FTP server or saves information in the CF card for you to analyze.
Page 588: Capturing Packets Sent To The Cpu
The system limits the rate of captured packets. The default rate limit is 64 kbit/s. If the rate of packets exceeds the limit, some packets may be discarded. If captured packet information fails to be sent to the TFTP or FTP server, the S9300&S9300E switch saves captured packet information locally.
Page 589 Pre-configuration Tasks Before capturing packets sent to the CPU, complete the following tasks: Ensuring that routes are reachable between the S9300&S9300E and the FTP or TFTP server Data Preparation To packets sent to the CPU, you need the following data.
Page 590: Configuration Examples
S9300&S9300E Terabit Routing Switch Configuration Guide - Network Management 10 Packet Capture Configuration If captured packet information fails to be sent to the TFTP or FTP server, the S9300&S9300E switch saves captured packet information locally. ----End 10.5 Configuration Examples This section provides an example of packet capture configuration.
Page 591 123456 file capture_cpu.cap terminal Info: Test Connecting ftp server ... Info: Captured packets will be shown on terminal and stored on capture_cpu.cap(f tp 192.168.1.10) . [Switch] Packet: 1 ------------------------------------------------------- Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 592 100 (expected) 3 (actual) length: 128 (expected) ------------------------------------------------------- Step 3 Verify the configuration. Captured packet information is displayed on the FTP server. ----End Configuration Files None Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 593: Sflow Configuration
11.1 sFlow Overview This section describes sFlow concepts and process. 11.2 sFlow Features Supported by the S9300&S9300E This section describes the sFlow features supported by the S9300&S9300E. 11.3 Configuring sFlow This section describes how to configure sFlow. 11.4 Configuration Examples The section provides an sFlow configuration example.
Page 594: Sflow Overview
Counter sampling Switch sFlow Collector 11.2 sFlow Features Supported by the S9300&S9300E This section describes the sFlow features supported by the S9300&S9300E. NOTE Only the S9300 supports the sFlow. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 595: Configuring Sflow
0 to N. When the random value is smaller than the threshold, the sFlow agent samples packets. The actual sampling ratio is n/(N+1). The S9300&S9300E supports only random sampling. In flow sampling, an sFlow agent can sample packets in one direction or in both directions on an interface.
Page 596 Data Preparation To configure sFlow, you need the following data. Data Number of the interface where sFlow needs to be configured IP address of the sFlow collector Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 597: Configuring Sflow Agent And Sflow Collector Information
The address cannot be a link-local address. By default, an sFlow agent uses the IP address of the outbound interface in a route to the sFlow collector. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 598: Configuring An Sflow Sampling Mode
{ inbound | outbound } Flow sampling is configured in a specified direction on the interface. By default, flow sampling is enabled in both directions on an interface. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 599: Checking The Configuration
Flow sampling and counter sampling can only be used on Layer 2 physical interfaces, including member interfaces of an Eth-Trunk. ----End 11.3.4 Checking the Configuration Prerequisites The sFlow configuration in the interface view is complete. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 600: Configuration Examples
Figure 11-3 sFlow networking diagram sFlow Collector 3.3.3.2/16 GE1/0/1 Vlanif2 3.3.3.1/16 Network 1 sFlow Agent Network 2 GE1/0/2 GE1/0/3 Vlanif3 Vlanif4 1.1.1.2/16 2.2.2.1/16 Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 601 [Quidway] interface gigabitethernet 1/0/2 [Quidway-GigabitEthernet1/0/2] sflow flow-sampling rate 4000 # Specify sFlow collector 2 as the target collector to receive sFlow packets sent by the sFlow agent. Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 602 Port on slot 1 Information: Interface: GE1/0/2 Flow-sample collector: 2 Counter-sample collector Flow-sample rate(1/x): 4000 Counter-sample interval(s): 120 Flow-sample maxheader: Flow-sample direction: IN,OUT -------------------------------------------------------------------------- Port on slot 2 Information: Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
Page 603 120 sflow counter-sampling collector 2 sflow flow-sampling collector 2 sflow flow-sampling rate 4000 sflow collector 2 ip 3.3.3.2 description netserver sflow agent ip 3.3.3.1 return Issue 01 (2012-03-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

This manual is also suitable for:

S9300e

Huawei S9300 Configuration Manual

About this Document

1 SNMP Configuration

2 LLDP Configuration

3 HGMP Configuration

4 NTP Configuration

5 Ping and Tracert

6 NQA Configuration

Quick Links

Related Manuals for Huawei S9300

Summary of Contents for Huawei S9300