MA5600 Multi-Service Access Module Operation and Maintenance ISSUE 1.0 Fixed Network Curriculum Development Section Objectives Upon completion of this course, you will be able to: Grasp the basic knowledge of command line Grasp the basic system configuration Grasp the basic service and function configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Command Line Basis return Login via serial port or TELNET quit Ordinary user mode enable MA5600> disable Privilege user mode MA5600 # Configure quit Global configuration mode MA5600(config)# ospf OSPF mode MA5600(config-ospf)# rip RIP mode MA5600(config-rip)# interface interface configuration mode MA5600(config-if-…)# BTV test BTV mode MA5600(config-btv)# TEST mode MA5600(config-test)# diagnose Diagnose mode MA5600 command line mode Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600(config-diagnose)# Command Line Basis Command line help By entering “?” , you can get list of commands with a brief description under any command mode MA5600#display? Key word matching MA5600#conf<space> ---- MA5600#configure Chinese/English language switching MA5600#Switch language mode Access history commands Access the previous history command: "Ctrl +P" Access the next history command: "Ctrl +N" Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment MA5600 control console provides two configuration modes: Setting up local configuration environment via the Console Local maintenance Setting up configuration environment via Telnet Local and remote maintenance In-band Telnet: Occupying service channels Out-band Telnet: Occupying no service channel Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment Setting up a local configuration environment via the Console Connect the computer serial port with the MA5300 Console via a standard RS232 serial cable, then configure hyper terminal in Windows or other operation systems. ADEF CON ETH MON SCU RS232 serial port cable PC Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600 Setting up Configuration Environment Open the hyper terminal Open-Program-Accessories- Communications-Hyper terminal: Double click Hypertrm. exe Setting the HyperTerminal parameters Enter the name: MA5600(The name can be defined by the user) Connection use: Directly connect to Serial port 1 (depending on actual conditions) Port setting: 9600bit/s, 8 data bits, no parity check 1 suspension bit, no flow control Terminal type: Confidential Information of Huawei. No Spreading without Permission. VT100 or automatic test Security Level: Internal Setting up Configuration Environment Setting up Configuration Environment via Telnet ADEF CON ETH MON workstation LAN SCU MA5600 ETH server workstation Telnet Terminal LAN local Telnet mode Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment workstation Local router LAN WAN ADEF Telnet terminal CON ETH MON SCU MA5600 LAN WAN remote Telnet configuration mode Remote router workstation Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment User login Via the Console After correctly connecting the hyper terminal, press Enter key according to the prompt to enter the configuration environment Via Telnet According to the prompt, enter correct user name and password to enter the configuration environment Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Out-band NM configuration MA5300(config)#interface meth 0 Enter the external network interface port mode. MA5300(config-if-meth0)#ip address 10.71.53.2 255.255.255.0 Configure the IP address of the external network interface MA5300(config-if-meth0)#undo shutdown Activate the external network interface Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal In-band NM Configuration Example Upstream 0 A S D M E F 0 B FE0/7/0 7 7 SCU MA5600 HAB Port MA5200 HRB ethernet 0/7/0 on the MA5600’s SCU board is connected to port 0 on the MA5200’s HAB board. The IP address of the MA5600 inband NMS is 10.10.20.2/24. The NMS VLAN ID is 1000. The IP address of the NMS is 10.10.21.1/24 The IP address of the MA5200’s VT interface is 10.10.20.254/24. The IP address of port 0 of the MA5200 HRB board is 10.10.40.1/30. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations In-band NM configuration MA5600(config)#vlan 1000 mux Add NM VLAN MA5600(config)#interface vlan-if 1000 Enter the Vlan-interface 1000 configuration mode . MA5600(config-if-vlanif1000)#ip address 10.10.20.2 255.255.255.0 Configure the equipment with a management address, which should be configured on vlan virtual interface 1000 . MA5600(config)#port vlan 1000 0/7 0 Add the upstream port Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations SNMP network management configuration MA5600(config)# snmp-agent community read public MA5600(config)# snmp-agent community write private Set the community name and access authority MA5600(config)# snmp-agent trap enable Enable sending Trap Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations MA5600(config)#snmp-agent target-host trap address 10.10.21.1 securityname private Set Trap destination address. MA5600(config)#snmp-agent trap source vlanif 1000 Specify IP address of the inband NMS as the Trap source address. MA5600(config)#route-static 10.10.41.1 30 10.10.20.254 Configure the equipment with a static route. MA5600(config)#save Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Operation terminal configuration Adding a User MA5600#terminal user name Deleting a User MA5600#undo terminal user name Modifying user level MA5600#terminal user level Modifying user password MA5600#terminal user password Modifying number re-entries MA5600#terminal user reenter Viewing User Information MA5600#display terminal user Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Board Management Query a Board MA5600#display board 0 MA5600#display board 0/2 Add a board(ADEF) MA5600(config)#board add 0/1 ADE Confirm a Board MA5600(config)#board confirm 0 Delete a board MA5600(config)#board delete 0/2 Reset a Board MA5600(config)#board reset 0/1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Equipment management Reset the system MA5600(config)#reboot system Show CPU Occupancy Ratio MA5600>display cpu 0/7 Display the system time Set the system time MA5600> display time MA5600#time HH:MM:SS YYYY/MM/DD Display the system version Setting hostname MA5600(config)#display version 0/7 MA5600(config)#sysname MA5600 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal System Management Configuration Configure File Management Query the initial configuration of the MA5300 intelligent IP integrated access equipment MA5600#display saved-configuration Query the current configuration of the MA5300 intelligent IP integrated access equipment MA5600#display current-configuration query the configuration commands of fault restoration. MA5600#display unresumed-configuration Save the current configuration MA5600#save Erase the configuration files in the Flash MA5600#erase flash data Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration To set the VPI/VCI of a port, run the command service-port. MA5600(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rxcttr 0 tx-cttr 0 To add multiple virtual ports to a VLAN at a time, run the command multi-service-port. MA5600(config)#multi-service-port 3 adsl 0/2 3-10 rx-cttr 0 txcttr 0 (vlan-id 3, board 0/2 ,port range 3/10 ) Unblocking Adsl port MA5600(config-if-adsl-0/2)#undo block all Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration CON ADEF SPLT ETH MON SCU MA5600 MODEM Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal PC ADSL Port Configuration Entering ADSL board configuration mode MA5600(config)#interface adsl 0/5 Add an ADSL2+ line profile MA5600(config)#adsl line-profile add huawei… Activate port 0 on the ADSL board with line-profile above: MA5600(config-if-adsl-0/5)#activate 0 huawei Resetting ADSL Chipset MA5300(config-if-adsl-0/2)#chipset reset 1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Through the bit allocation information, you can get to know the number of bits carried by every ADSL2+ tone (totally 512 tones), and analyze the performance of the line. MA5600(config-if-adsl-0/2)#display line bit-allocation 61 Upstream bits per frame: 312 Downstream bits per frame: 5616 0 0 …… 6 6 ****** 7 9 ********* 8 10 ********** Confidential Information of Huawei. No Spreading without Permission. 9 10 11 12 13 11 12 12 13 14 *********** ************ ************ ************* ************** Security Level: Internal 14 14 ************** 15 14 ************** …… 31 6 ****** …… ADSL Port Configuration Adding an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile add 3 (Refer to operation manual to see more detail) Bind alarm profile 1 with all ports of the ADSL2+ board residing in slot 10. MA5600(config-if-adsl-0/10)#alarm-config all 1 Deleting an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile delete 3 Querying ADSL line alarm profile information MA5600(config)#display adsl alarm-profile 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Querying ADSL Port Information MA5600(config)#display service-port port 0/10/1 Viewing line parameters of a port MA5600(config-if-adsl-0/2)#display parameter 2 view the statistics collected on an ADSL2+ port within the past 15 minutes or 24 hours, or all available performance statistics. MA5600(config-if-adsl-0/2)#display statistics performance 61 historic-15minutes 1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration CON SHEA ETH MON SCU MA5600 MODEM Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration Add an SHDSL line profile, and number it as 3 MA5600(config)#shdsl line-profile add 3 When operating in blocked state, an SHDSL port cannot transmit data, and any operation on the port is prohibited. To operate the port, you need to unblock the port first. MA5600(config-if-shdsl-0/1)#undo block all Activate all ports on the board residing in slot 4 using profile 3. MA5600(config-if-shl-0/3)# activate all 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration Adding an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile add 2 Bind alarm profile 2 with all ports of the SHDSL board residing in slot 3. MA5600(config-if-shdsl-0/3)#alarm-config all 2 Deleting an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile delete 2 Querying SHDSL line alarm profile information MA5600(config)#display shdsl alarm-profile 2 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration view the brief information on a port MA5600(config-if-shl-0/3)#display port state 0 -------------------------------------------------------------------Port Running Control Line ID Status Alarm Running Config Bind Status Profile Profile Operation Operation Status -------------------------------------------------------------------0 Activating Active 1 1 Normal None Normal -------------------------------------------------------------------MA5600(config-if-shl-0/3)#display line state 2 MA5600(config-if-shl-0/3)#display statistics performance 2 current Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Set duplex mode of an Ethernet port MA5600(config-if-scu-0/7)#duplex all full Set the bit rate of an Ethernet port MA5600(config-if-scu-0/7)#speed all 1000m Set an Ethernet port’s network cable type MA5600(config-if-scu-0/7)#mdi all auto Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Enable/Disable a Port’s Traffic Control Function MA5600(config-if-scu-0/7)#flow-control all Enable/Disable Traffic Suppression MA5600(config-if-scu-0/7)#traffic-suppress all broadcast value 1 Configure a Port's MAC Address Learning Attribute MA5600(config)#mac-address max-mac-count adsl 0/10/1 vpi 0 vci 35 10 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Enable/Disable Port Aggregation MA5600(config-if-scu-0/7)#link-aggregation 0-1 ingress MA5600(config-if-scu-0/7)#display link-aggregation ----------------------------------------------Master port Sub-ports Mode ----------------------------------------------0 1 ingress ----------------------------------------------- Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration View the configuration of an Ethernet port MA5600(config-if-scu-0/7)#display port state all -------------------------------------------------------------------Port Port Optic Native MDI Speed Duplex Flow- Active Link Type Status VLAN (Mbps) Control State -------------------------------------------------------------------0 GE absence 1 - 1000 full on active offline 1 GE absence 1 - 1000 full on active offline -------------------------------------------------------------------- Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal VLAN Service Configuration The MA5600 supports diverse VLAN applications, including: Standard VLAN Smart VLAN MUX VLAN Super VLAN QinQ VLAN Stacking VLAN Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Standard VLAN Configuration Example IP network To establish the above connections, do as follows: Add VLAN 9 A D Run the command port vlan on E F MA5600_A to add a port 0/7/0 0/7/1 on MA5600_B and a port on MA5600_A SCU MA5600-A A D E to a standard VLAN. F 0/7/0 0/7/1 MA5600-B Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SCU Standard VLAN Configuration Standard VLAN configuration involves: 1.Creating/Deleting a standard VLAN MA5600(config)#vlan 9 standard 2.Adding/Deleting a port to/from a standard VLAN MA5600(config)#port vlan 9 { frame/slot<S><3,4>|to<K> }:0/7 { portlist<S><1,256> }:0 MA5600(config)#port vlan 9 { frame/slot<S><3,4>|to<K> }:0/7 { portlist<S><1,256> }:1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Standard VLAN ServiceConfiguration 3.Displaying the information on a standard VLAN MA5600(config)#display vlan 9 VLAN ID: 9 VLAN attribute: standard Standard port number: 2 -------------------------F/ S/ P State -------------------------0/ 7/ 0 down 0/ 7/ 1 down -------------------------Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration The Smart VLAN configuration Upper involves: network 1.Adding/Deleting a Smart VLAN 2.Adding/Deleting a port to/from a Smart VLAN Smart VLAN ADEF ADEF 3.Displaying the information on a CON ETH MON ADSL link configuration MA5600 User User User…………………...User vlan 20 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration Create a Smart VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> |attrib<K>}:20 {vlantype<E><mux,standard,smart,super>|to<K> }:smart Add the upstream port MA5600(config)#port vlan 20 0/7 0 Configure multicast PVCs. MA5600(config)#vlan smart 20 { vpi<K> }:vpi 0 vci 35 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration Add port 1 on the ADSL board residing in slot 0/12 to VLAN 20. MA5600(config)#service-port vlan 20 adsl 0/12/1 vpi 0 vci 35 rx-cttr 2 Add port 0-31on the ADSL board residing in slot 0/0 to VLAN 20 MA5600(config)# multi-service-port vlan 20 adsl 0/0 0-31 rxcttr 2 tx-cttr 2 After the above configuration, the PCs can visit Internet but can not ping each other. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration The MUX VLAN configuration involves: 1.Creating/Deleting a MUX VLAN 2.Adding/Deleting a port to/from a MUX VLAN 3.Displaying the information on a MUX VLAN ADSL link configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration Create a MUX VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> }:10 { mux<K>|standard<K>|smart<K>|to<K> }:mux Add upstream port MA5600(config)#port vlan 10 0/7 0 Add/Delete a service port to/from a MUX VLAN MA5600(config)# service-port vlan 10 adsl 0/1/0 vpi 0 rx-cttr 0 tx-cttr 0 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration Add Multiple Ports to Different MUX VLAN Add all ADSL and SHDSL ports to MUX VLANs, with the first port corresponding to VLAN 2. MA5600(config)#multi-service-port from-vlan 2 board 0-15 vpi 0 vci 35 rx-cttr 2 tx-cttr 2 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal