Page 1: Configuration Guide
ZXR10 2900E Series Easy-Maintenance Secure Switch Configuration Guide Version: 2.05.11 ZTE CORPORATION No. 55, Hi-tech Road South, ShenZhen, P.R.China Postcode: 518057 Tel: +86-755-26771900 Fax: +86-755-26770801 URL: http://ensupport.zte.com.cn E-mail: support@zte.com.cn...
Page 2 ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners.
Page 3: Table Of Contents
5.6 LACP Configuration..................5-17 5.7 IGMP Snooping Configuration ................5-20 5.8 MLD Snooping Configuration ................5-24 5.9 IPTV Configuration ................... 5-27 5.10 STP Configuration ..................5-34 5.11 ACL Configuration ..................5-43 5.12 QoS Configuration ..................5-53 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 4 5.42 802.1ag Configuration ...................5-148 5.43 Y.1731 Configuration ..................5-154 5.44 MAC-based VLAN Command Configuration ............5-159 5.45 DHCP Relay Configuration................5-160 5.46 MFF Configuration..................5-164 5.47 SSL Configuration ..................5-167 5.48 ERPS Configuration ..................5-171 5.49 Debug Module Configuration ................5-178 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 5 7.3.6 Enable Password Lost ................7-6 7.3.7 Two Devices in the Same VLAN Cannot Communicate....... 7-7 7.3.8 Authentication Timed Out in Campus Network..........7-7 7.3.9 Solution to ARP Attacks in Campus Network..........7-9 Figures......................I Tables ......................VII Glossary ......................IX SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 6 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 7: About This Manual
Chapter Summary 1, Safety Instructions Describes safety instructions and signs. 2, System Overview Provides an overview about the ZXR10 2900E series switches. 3, Usage and Operation Describes configuration modes, command modes and usage of command line. 4, System Management Describes system management.
Page 8 Separates individual parameters in a series of parameters. Caution: indicates a potentially hazardous situation. Failure to comply can result in moderate injury, equipment damage, or interruption of minor services. Note: provides additional information about a certain topic. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 9: Chapter 1 Safety Instructions
The safety precautions mentioned in this manual are only supplement of local safety specifications. ZTE Corporation will assume no responsibility for consequences resulting from violation of general specifications for safety operations or of safety rules for design, production and use of the devices.
Page 10 ZXR10 2900E Series Configuration Guide Note: Indicates the description, hint, tip and so on for configuration operations. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 11: Chapter 2 System Overview
The ZXR10 2900E series switches are an important part of the ZXR10 series Ethernet switches. The ZXR10 2900E series products are Gigabit L2+ (between layer 2 and layer 3) Ethernet switches used for Gigabit network access and convergence, and 1 Gb is available for uplinks.
Page 12 Switching Capability The ZXR10 2900E series switches support layer-2 wire-speed switching on all ports. The data packets can be forwarded at wire-speed after being filtered and classified. The ports provide high throughput, low packet loss rate, and low time delay and jitter, which satisfy application requirements of key services.
Page 13 Provides queue scheduling algorithms including Strict Priority (SP) and Weighted Round Robin (WRR). Supports the Committed Access Rate (CAR) function. It manages asynchronous uplink and downlink data flows from uplinks by ingress strategy control and egress SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 14 Supports accessing the switches through CLI command lines, including Console, Telnet and SSH. Supports network management through Web. Supports the ZTE Group Manage Protocol (ZGMP). Functions The ZXR10 2900E uses the Store and Forward mode, and supports layer 2 wire-speed switching.
Page 15 42. It supports version/configuration upload and download through the Trivial File Transfer Protocol (TFTP). 43. It supports version/configuration upload and download through the 44. The ZXR10 2910E-PS/2918E-PS/2928E-PS supports the 802.3af Power over Ethernet (PoE) function. The power supply of at most 30 W is supported. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 16 ZXR10 2900E Series Configuration Guide This page intentionally left blank. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 17: Figure 3-1 Zxr10 2900E's Configuration Modes
PC. The VT100 terminal mode is applied in the Console port connection configuration. The following use the Windows HyperTerminal configuration as an example to illustrate the connection configuration. 1. Start the HyperTerminal program on the PC. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 18: Figure 3-2 Connection Description Dialog Box
ZXR10 2900E Series Configuration Guide Select Start > All programs > Accessories > Communications > HyperTerminal in the Windows operating system to start the HyperTerminal program. 2. Establish a connection. Enter a name and select an icon for the connection, and then click OK, see Figure 3-2.
Page 19: Chapter 3 Usage And Operation
Set the login password, The login-password <string> parameter value consists of at most 16 characters. set user {local | radius| tacacs-plus}<name> Set the administrator password, The admin-password <string> admin-password <string> parameter value consists of at most 16 characters. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 20: Figure 3-5 Running Telnet
ZXR10 2900E Series Configuration Guide Note: The default username is admin and the password is zhongxing. The default administrator password is empty. It is assumed that the IP address of the layer-3 port is 192.168.3.1 and this address can be pinged successfully from the local computer.
Page 21 4. Enable the web network management function (by default, this function is disabled) and set a listening port. Command Function Enable the web network management function set web enable (by default, this function is disabled). set web listen-port < 80,1025-49151 > Set a listening port. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 22: Command Modes
“>”, which is shown as follows: zte> The default host name is zte. You can modify the host name by running the hostname <name> command. The name length consists of at most 200 characters. In user mode, you can run the exit command to exit the switch configuration or run the show command to view the system configuration and operation information.
Page 23 TFTP uploading/downloading files through FTP copying files formatting the Flash memory SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 24 ZXR10 2900E Series Configuration Guide upgrading firmware To return to global configuration mode from file system configuration mode, run the exit command or press Ctrl+Z. NAS Configuration Mode In global configuration mode, you can run the config nas command to enter NAS...
Page 25 In global configuration mode, you can run the config ingress-acl link number <200-299> command to enter layer-2 ingress ACL configuration mode, which is shown as follows: zte(cfg)#config ingress-acl link number 200 zte(ingress-link-acl)# In layer-2 ingress ACL configuration mode, you can add, delete and move rules for a specified layer-2 ingress ACL.
Page 26 ZXR10 2900E Series Configuration Guide In basic egress ACL configuration mode, you can add, delete and move rules for a basic egress ACL. To return to global configuration mode from basic egress ACL configuration mode, run the exit command or press Ctrl+Z.
Page 27: Common Command Parameters
In global configuration mode, you can run the config ingress-acl user-define number <801- 828> command to enter user-defined ingress ACL configuration mode, which is shown as follows: zte(cfg)#config ingress-acl user-define number 811 zte(ingress-user-define-acl)# In user-defined ingress ACL configuration mode, you can add, delete, or move the rules of ACLs with the specified ACL numbers.
Page 28: Usage Of Command Line
ZXR10 2900E Series Configuration Guide Parameter Description <HH.HH.HH.HH.HH.HH> MAC address, for example, 00.22.33.44.55.66. <A.B.C.D> IP address, for example, 10.40.47.254. <A.B.C.D/M> IP address and mask bits. M must be an integer from 1 to 32, for example, 10.40.47.254/24. <string> String without spaces.
Page 29: Command Abbreviations
? <string> user name(maxsize:15) zte(cfg)#create user houyx ? admin create an administrator guest create a guest zte(cfg)#create user houyx guest ? <cr> <0-15> specify user's priviledge zte(cfg)#create user houyx guest zte(cfg)# <cr> Command Abbreviations In the ZXR10 2900E, a command or keyword can be abbreviated as a character or string that uniquely identifies this command or keyword.
Page 30: Table 3-3 Editing Commands Through Keystrokes
ZXR10 2900E Series Configuration Guide Command History The user interface supports the function of recording entered commands. A maximum of 20 historical commands can be recorded. The function is very useful for recalling a long or complicated command. To recall commands from the history buffer, perform one of the following actions.
Page 31 <Ctrl+C> to break —–” is displayed at the bottom of the current page. You can press Return to scroll down one line, or Space to scroll down one screen. To stop the output, press Q or Ctrl+C. 3-15 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 32 ZXR10 2900E Series Configuration Guide This page intentionally left blank. 3-16 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 33 For the procedure to manage file system directories, refer to the table below: Step Command Function Enters file system config tffs zte(cfg)# configuration mode. md <directory name> Creates a directory. zte(cfg-tffs)# SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 34 ZXR10 2900E Series Configuration Guide Step Command Function rename <file-name> <file-name> Modifies the directory name. zte(cfg-tffs)# cd <directory name> Changes the current directory, zte(cfg-tffs)# and opens this directory. Lists the current directories. zte(cfg-tffs)# You can run the remove <file-name> command to delete a specified directory. The img, cf g, and data directories created by default and all non-empty directories cannot be deleted.
Page 35: Chapter 4 System Management
TFTP server using TFTP server software (TFTPD) as an example. Steps 1. Run the Tftpd software at the back-end computer. The TFTP server window is displayed, see Figure 4-1. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 36: Configuring The Ftp Server
ZXR10 2900E Series Configuration Guide Figure 4-1 TFTP Server 2. Select Tftpd > Configure. The Tftpd Settings dialog box is displayed, see Figure 4-2. Figure 4-2 Tftpd Settings Dialog Box 3. Click the Browse button on the upper side of the dialog box and select a directory to save the version file or configuration file.
Page 37: Figure 4-3 Connect To Server Dialog Box
2. Set Server Address, Port and Administration password, and click OK. The FileZilla Server window is displayed, see Figure 4-4. Figure 4-4 FileZilla Server Window 3. Select Edit > Users. The Users dialog box is displayed, see Figure 4-5. Create a user name and password. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 38: Figure 4-5 Users Dialog Box
ZXR10 2900E Series Configuration Guide Figure 4-5 Users Dialog Box 4. Select Shared folders in the left area and set a primary directory for the new user, Figure 4-6. Figure 4-6 Directory Setting SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 39: Importing And Exporting The Configuration File
Flash memory. This file can also be uploaded to the TFTP server for view, modification and bulk configuration. zte(cfg-tffs)#cd cfg zte(cfg-tffs)#tftp 192.168.1.102 upload startrun.dat zte(cfg-tffs)#cd .. Importing the Configuration startrun.dat is a configuration file.
Page 40: Downloading The Software Version Automatically
ZXR10 2900E Series Configuration Guide To prevent damage to the configuration data, back up the configuration data by using the tftp command. Run the following commands to upload the configuration file in the Flash memory to the back-end TFTP server: zte(cfg-tffs)#cd cfg zte(cfg-tffs)#tftp 192.168.1.102 upload startrun.dat...
Page 41 DHCP client broadcast-flag is enabled. The following table lists the complete adaptation relation: Device Configuration File Name ZXR10 2910E-PS ZXR10_2910E-PS.dat ZXR10 2918E-PS ZXR10_2918E-PS.dat ZXR10 2918E ZXR10_2918E.dat ZXR10 2928E-PS ZXR10_2928E-PS.dat ZXR10 2928E ZXR10_2928E.dat ZXR10 2952E ZXR10_2952E.dat SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 42: Configuring Automatic Saving Of A Configuration File
ZXR10 2900E Series Configuration Guide Figure 4-7 Network Architecture for Automatic Configuration File Download The network architecture is shown in Figure 4-7. Set the TFTP server address and version file name on the DHCP server. For example, set the TFTP server address to 10.40.89.78, and the file name to *.dat@zImage.
Page 43: Upgrading The Software Version
In global configuration mode, use the show version command to display the system hardware and software version information. The displayed contents are as follows: zte(cfg)#show version ZXR10 Router Operating System Software, ZTE Corporation: ZXR10 2928E Version Number : 2928E Series V2.05.11B04 4-11 SJ-20130731155059-002|2013-11-27 (R1.0)
Page 44 ZXR10 2900E Series Configuration Guide Copyright (c) 2001-2013 By ZTE Corporation Compiled: 11:14:25 Aug 27 2013 System uptime is 0 years 1 days 13 hours 20 minutes 46 seconds Main processor : arm926ejs Bootrom Version : v2.03 Creation Date : Aug 27 2013...
Page 45 2. Restart the switch. On the HyperTerminal, press any key as prompted to enter ZXR10 Boot status. ZXR10 2928E BootRom Version v1.08 Compiled Feb 27 2012 10:32:29 Copyright (c) 2010 by ZTE Corporation. boot location [0:Net,1:Flash] : 0 actport serverip : 10.40.89.78...
Page 46 5. Start the TFTP server software on the back-end computer and configure the TFTP by referring to 4.2 Configuring the TFTP Server. 6. In ZX10 Boot status, enter zte to enter BootManager status of the switch. Enter ? to display the command list for this status. [ZXR10 Boot]:zte [bootManager]: ?
Page 47: File System Configuration Commands
TFTP server. tftp commander {download | upload}<remote Uploads or downloads files to/from zte(cfg-tffs)# -file-name>[<local-file-name>] the cluster commander. copy <source-pathname><dest-pathname> Copies files. zte(cfg-tffs)# Formats the Flash memory. format zte(cfg-tffs)# Updates the bootrom. update bootrom zte(cfg-tffs)# 4-15 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 48 ZXR10 2900E Series Configuration Guide Command Function set dhcp download{enable | disable} Enables or disables the automatic zte(cfg)# download function of a DHCP client. set auto-saveconfig {enable | disable} Enables or disables the system zte(cfg)# to automatically upload the configuration file to a TFTP server.
Page 49 GARP/GVRP Configuration ..................5-93 DHCP Configuration....................5-95 DHCPv6 Configuration ...................5-101 VBAS Configuration ....................5-104 PPPoE-PLUS Configuration ...................5-106 ZESR Configuration ....................5-108 ZESS Configuration....................5-121 OAM Configuration....................5-126 sFlow Configuration....................5-132 PP Configuration ....................5-133 LLDP Configuration ....................5-135 Single Port Loop Detection Configuration ...............5-137 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 50 ZXR10 2900E Series Configuration Guide UDLD Configuration ....................5-140 TACACS+ Configuration..................5-143 Time Range Configuration..................5-145 Voice VLAN Configuration ..................5-146 802.1ag Configuration ....................5-148 Y.1731 Configuration ....................5-154 MAC-based VLAN Command Configuration ............5-159 DHCP Relay Configuration ..................5-160 MFF Configuration....................5-164 SSL Configuration ....................5-167 ERPS Configuration ....................5-171 Debug Module Configuration ..................5-178...
Page 51: Chapter 5 Service Configuration
{admin | guest} authentication user. set user tacacs-plus Sets the management password for the TACACS+ zte(cfg)# admin-password [<string>] user. set user multi-user {enable | Sets the multi-user login function. zte(cfg)# disable} SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 52 ZXR10 2900E Series Configuration Guide Command Function cpu-threshold <30-90> Sets the CPU usage threshold. zte(cfg)# mem-threshold <60-90> Sets the memory usage threshold. zte(cfg)# Saves the current configuration information to the write zte(cfg)# Flash memory and recovers the information when the switch is rebooted.
Page 53 The banner is stored in the system file, and spaces are supported. Sets the end identifier of the banner. set banner endwith zte(cfg)# Clears the banner displayed on the welcome screen. clear banner zte(cfg)# SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 54: Port Configuration
ZXR10 2900E Series Configuration Guide 5.2 Port Configuration Port Configuration Overview The port parameters can be configured on the ZXR10 2900E. They include auto-negotiation, duplex mode, rate and line detection. The commands include the following types: 1. Port basic parameters configuration 2.
Page 55 Enables or disables the port protection function. zte(cfg)# | disable} set mac protect port <portlist> action Sets the port protection action. zte(cfg)# {shutdown | restrict | protect} show mac protect port <portlist> Displays the port protection state. zte(cfg)# SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 56: Poe Configuration
ZXR10 2900E Series Configuration Guide 5.3 PoE Configuration PoE Configuration Overview Power over Ethernet (PoE) is an extended feature that supports network devices with Ethernet electrical ports. The network devices (switches or routers) supporting the PoE function can provide power supply through Twisted Pair for remote Powered Devices (PDs) such as IP phones, WLAN Access Points (APs), or network cameras, which realizes remote power supply.
Page 57 – set poe power maxvalue <1 500>[threshold <0-30>] Sets device maximum output zte(cfg)# power and protection threshold. set poe port <port list> enable time-range <word> Enables the port PoE. zte(cfg)# SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 58 ZXR10 2900E Series Configuration Guide Command Function show poe device (all configuration modes) Displays the PoE status of the device. show poe status [port <portlist>] (all configuration modes) Displays the PoE status of the port. show poe config [port <portlist>] (all configuration modes) Displays PoE configuration information.
Page 59: Port Mirroring
<portlist>{ingress | egress} mirroring source port according to the session. set mirror session <1-3> add dest-port <1-28>{ingress Adds an egress or ingress zte(cfg)# | egress| rspan} mirroring destination port according to the session. 5-11 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 60: Figure 5-2 Port Mirroring Configuration Instance
Figure 5-2 Port Mirroring Configuration Instance Configuration Procedure 1. The following example describes how to set port mirroring in ingress direction. zte(cfg)#set mirror session 1 add source-port 1 ingress zte(cfg)#set mirror session 1 add dest-port 2 ingress zte(cfg)#set mirror statistical sample-interval 100 ingress...
Page 61: Mac Address Table Operation
2 egress zte(cfg)#set mirror statistical sample-interval 100 egress /*set the port sample-interval of mirror statistic*/ zte(cfg)#set mirror rspan-tag vlan-id 100 priority 7 engress /*set VLAN tag added after port mirroring*/ Configuration Verification Check port mirroring configuration.
Page 62 ZXR10 2900E Series Configuration Guide MAC address table Function operation MAC filtering function When the switch receives the packets with specified source address or destination address, it drops them according to the source MAC address and the destination MAC address.
Page 63 <1-15>} limit-num <0-16384> source packets based on global/port/trunk. set mac to permanent {port <1-28>| trunk Sets the function of converting MAC zte(cfg)# <1-15>}{enable | disable | max-number <1-128>} addresses as permanent in batches. 5-15 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 64 ZXR10 2900E Series Configuration Guide Command Function Sets the time when MAC addresses set mac to permanent auto-save-time zte(cfg)# <300-7200> converted to permanent ones are automatically saved. set mac to static {port <1-28>| trunk <1-15>| Sets the function of converting MAC zte(cfg)# vlan <1-4094>}{enable | disable}...
Page 65: Lacp Configuration
<1-15>{add | delete} port <portlist> Adds or deletes a specified port zte(cfg)# to/from an LACP aggregation group. set lacp aggregator <1-15> mode {dynamic | static | Sets aggregation mode of an zte(cfg)# mixed } LACP aggregation group. 5-17 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 66 ZXR10 2900E Series Configuration Guide Command Function set lacp port <portlist> mode {active | passive} Sets the mode used by the port to zte(cfg)# participate in the aggregation. set lacp port <portlist> timeout {long | short} Sets the timeout information...
Page 67: Figure 5-3 Lacp Configuration Instance
Configuration Procedure 1. The detailed configuration of switch A is as follows: zte(cfg)#set lacp enable zte(cfg)#set lacp aggregator 3 add port 15-16 zte(cfg)#set lacp aggregator 3 mode dynamic zte(cfg)#set lacp load-balance packet L2 zte(cfg)#set vlan 2 add trunk 3 tag...
Page 68: Igmp Snooping Configuration
ZXR10 2900E Series Configuration Guide PortNum GroupNum GroupMode LacpTime LacpActive ----------- ----------- ----------- ----------- ----------- Dynamic Long True Dynamic Long True zte(cfg)#show lacp aggregator 3 Group 3 Actor Partner ---------------------------- ---------------------------- Priority : 32768 32768 00.d0.d0.fa.29.20 00.d0.d0.fc.88.63 Ports 16, 15 16, 15 The above displayed result proves that the link aggregation is successful.
Page 69 {v2 | v3} Sets the IGMP version of the query zte(cfg)# packet sent by the switch. set igmp snooping fastleave {enable | disable} Enables or disables the fast leave zte(cfg)# function. 5-21 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 70 ZXR10 2900E Series Configuration Guide Command Function set igmp snooping v3 {enable | disable} Enables or disables the IGMP V3 zte(cfg)# function. set igmp snooping proxy version {v2 | auto} Sets the IGMP version of the zte(cfg)# query message that the switch responses to the router.
Page 71: Figure 5-4 Network Topology Of Igmp Snooping Configuration Instance
Figure 5-4. Figure 5-4 Network Topology of IGMP Snooping Configuration Instance Configuration Procedure zte(cfg)#set vlan 200 add port 1, 3, 5, 10 untag zte(cfg)#set port 1, 3, 5, 10 pvid 200 zte(cfg)#set vlan 200 enable zte(cfg)#set igmp snooping enable zte(cfg)#set igmp snooping add vlan 200...
Page 72: Mld Snooping Configuration
ZXR10 2900E Series Configuration Guide zte(cfg)#show igmp snooping vlan Maximal group number: 1024 Current group number: 1 VlanId Group Last_Report PortMember ---- ------- --------------- --------------- ---------------- 230.44.45.157 194.85.1.3 1,3,5,10 zte(cfg)#show igmp filter report IGMP Filter: enabled Index Type IpAddress IpMask...
Page 73 <1-4094>[group Displays the MLD snooping result. <ipv6-address>| port-info | group-source-filter | host-source-filter ] (all configuration modes) show mld snooping mr-port-info (all configuration Displays MLD router port information. modes) 5-25 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 74: Figure 5-5 Mld Snooping Configuration Instance
Figure 5-5 MLD Snooping Configuration Instance Configuration Procedure zte(cfg)#set vlan 200 add port 1, 3, 5, 10 untag zte(cfg)#set port 1, 3, 5, 10 pvid 200 zte(cfg)#set vlan 200 enable...
Page 75: Iptv Configuration
<1-4094> groupip <A.B.C.D> Adds channel (multicast group) to zte(cfg-nas)# count <1-1032>[prename <prename>] the specified VLAN in batch and names channels in batch. iptv channel name <channel-name> rename Modifies channel name. zte(cfg-nas)# <new-name> 5-27 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 76 ZXR10 2900E Series Configuration Guide Command Function iptv channel {name <channel-name>| id-list < Enables or disables channel log zte(cfg-nas)# channel-list>} cdr {enable | disable} function. iptv channel {name <channel-name>| id-list Specifies the preview configuration zte(cfg-nas)# <channel-list>}{viewfile-name <viewfile-name>| viewfile-id file of the channel.
Page 77 < package-idlist >| all} clear iptv view-profile{name <viewfile-name>| Deletes a preview configuration zte(cfg-nas)# id-list <viewfile-lis>| all} file. clear iptv port <portlist>[vlan <1-4094>] package Deletes the package allocated for zte(cfg-nas)# {name <package-name>| id-llist <package-idlist>} users. 5-29 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 78 ZXR10 2900E Series Configuration Guide Command Function clear iptv client [index <0-255>| mac Deletes an IPTV user. zte(cfg-nas)# <HH.HH.HH.HH.HH.HH>| port <portlist>[vlan <1-4094>]] show iptv control (all configuration modes) Displays IPTV global configuration. show iptv channel [name <channel-name>| id <channel-id>] (all...
Page 79 4000 group 225.1.1.1 name CCTV1 id 1 zte(cfg-nas)#iptv port 1 service start zte(cfg-nas)#iptv port 1 control-mode channel zte(cfg-nas)#iptv port 1 channel id-list 1 order zte(cfg-nas)#iptv port 1 add mvlan 4000 uvlan 100 Configuration Verification 5-31 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 80: Figure 5-7 Iptv Configuration Instance 2
ZXR10 2900E Series Configuration Guide Check configuration zte(cfg-nas)#show iptv rule MaxRuleNum:64 CurRuleNum:1 HisRuleNum:1 Id Port Vlan Mbase Mode Service Cdr Order Preview Query PkgNum -- ---- ---- ----- ------- ------- -------- ----- ------- ----- ------ false channel in disabled 1...
Page 81: Configure Vlan
Chapter 5 Service Configuration 1. Configure VLAN zte(cfg)#set vlan 100 add port 1 zte(cfg)#set vlan 4000 add port 1, 4 zte(cfg)#set vlan 100, 4000 enable zte(cfg)#set port 1 pvid 100 zte(cfg)#set port 4 pvid 4000 /*IGMP Snooping*/ zte(cfg)#set igmp snooping enable...
Page 82: Stp Configuration
ZXR10 2900E Series Configuration Guide preview 225.1.1.1 0:0:0:16 5.10 STP Configuration STP Overview The Spanning Tree Protocol (STP) is applicable to the network with data loops. It uses certain algorithms to block some redundant links, thus preventing possible network loops.
Page 83: Figure 5-8 Mstp Topological Structure
For the relationships between the port role and the port state, refer to Table 5-1. Table 5-1 Port Role and Port State Port Role Port State Master Forward Root Forward Designated Forward Backup Discard 5-35 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 84 ZXR10 2900E Series Configuration Guide Port Role Port State Alternate Discard Edged Forward Protection Feature Overview BPDU Protection on a Port A boundary port is not expected to receive any BPDUs. Receipt of any BPDUs indicates a failure in the network. To avoid this situation, BPDU protection can be configured on a boundary port.
Page 85 MSTP. set stp name <name> Sets the name of the MSTP zte(cfg)# domain. set stp revision <0-65535> Sets the revision level of the zte(cfg)# MSTP. 5-37 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 86 ZXR10 2900E Series Configuration Guide Command Function set stp instance <0-63>{add | delete} vlan <vlanlist> Adds or deletes the VLAN to/from zte(cfg)# the MSTP instance. set stp instance <0-63>{port <1-28>| trunk < trunklist Sets the priority of the port/trunk zte(cfg)# >} priority <0-240>...
Page 87: Figure 5-9 Stp Configuration Instance
Figure 5-9 STP Configuration Instance Configuration Procedure zte(cfg)#set stp enable /*enable the stp protocol of switch1 and switch2*/ zte(cfg)#set stp forceversion stp /*set STP forceversion as stp*/ Configuration Verification 1. Check the STP state of switch 1 in the system view.
Page 88: Figure 5-10 Rstp Configuration Instance
ZXR10 2900E Series Configuration Guide 128.1 200000 Forward Root SSTP None 128.2 200000 Discard Alternate SSTP None RSTP Configuration Instance Configuration Description Configure the RSTP function of switch 1 and switch 2, take switch 1 as the root bridge and block a redundant port in the loop. This realizes loop protection and link backup between switches.
Page 89: Figure 5-11 Mstp Configuration Instance
The configuration is as follows: establish mapping between instance 1 and service VLAN10-20; set Name to zte and Revision to 10. Take switch 1 as the root bridge in instance 1. See Figure 5-11.
Page 90 ZXR10 2900E Series Configuration Guide Cisco digest: 0x00000000000000000000000000000000 Huawei key: 0x13ac06a62e47fd51f95d2ba243cd0346 Huawei digest: 0x00000000000000000000000000000000 Instance VlanMap -------- ------------------- 1-9,21-199,211-4094 10-20,200-210 2. Check the STP state of switch 1 in the system view. zte(cfg)#show stp instance MST00 Spanning tree enabled protocol mstp...
Page 91: Acl Configuration
If there are no restrictions, the switch forwards the packet. Otherwise, the switch drops the packet. The ZXR10 2900E supports the following functions. The ZXR10 2900E provides two binding types, including physical port and VLAN port. 5-43 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 92 ZXR10 2900E Series Configuration Guide ACL rules can be added, deleted, and sorted. 1. Rules can be added to a configured ACL. Regular ID number range is 1-500. 2. Configured ACL can be deleted regularly. If the specified ACL instance number or rule number is not configured, a false message will return.
Page 93 ACL is used to match any}[icmp-type <0-254><icmp-code>][dscp <0-63>][fragment] ICMP packets. rule <1-500>{permit | deny} ip Sets the rule that an extended zte(extend-acl-group)# {<source-ipaddr><sip-mask>| any}{<destination-ipaddr><dip-mask>| ingress ACL is used to match IP any}[dscp <0-63>][fragment] packets. 5-45 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 94 ZXR10 2900E Series Configuration Guide Command Function rule <1-500>{permit | deny} Sets the rule that an extended zte(extend-acl-group)# tcp {<source-ipaddr><sip-mask>| any}[source-port ingress ACL is used to match TCP <0-65535><sport-mask>]{<destination-ipaddr><dip-mask>| packets. any}[dest-port <0-65535><dport-mask>][establishing | established][dscp <0-63>][fragment] rule <1-500>{permit | deny} Sets the rule that an extended zte(extend-acl-group)# udp {<source-ipaddr><sip-mask>| any}[source-port...
Page 95 ACL is used to match IPv6-UDP <0-65535><sport-mask>][<destination-ipv6addr><dipv6-mask>| packets. any][dest-port <0-65535><dport-mask>][<vlan-id>] rule <1-500>{permit | Sets the rule that a hybrid ingress zte(hybrid-acl-group)# deny} ipv6 any {<source-ipv6addr><sipv6-mask>| ACL is used to match IPv6 packets. any}[<destination-ipv6addr><dipv6-mask>| any][<vlan-id>] 5-47 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 96 ZXR10 2900E Series Configuration Guide Command Function rule <1-500>{permit | Sets the rule that a hybrid ingress zte(hybrid-acl-group)# deny} ipv6 icmp {<source-ipv6addr><sipv6-mask>| ACL is used to match IPv6 ICMP packets. any}[<destination-ipv6addr><dipv6-mask>| any][<vlan-id>] rule <1-500>{permit | deny} all Sets the rule that a hybrid ingress zte(hybrid-acl-group)# ACL is used to match any packet.
Page 97 < 1-500>{ permit | deny} tcp {< Sets an extended egress ACL that zte(egress-extend-acl)# source-ipaddr>< sip-mask>| any}[ ssourrce-porrtt < 0-65535>< matches TCP packets. sport-mask>]{< destination-ipaddr>< dip-mask>| any}[ desstt-porrtt < 0-65535>< dport-mask>][ establishing | established][ dsscp < 0-63>][ fragment] 5-49 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 98 ZXR10 2900E Series Configuration Guide Command Function rule < 1-500>{ permit | deny} udp {< Sets an extended egress ACL that zte(egress-extend-acl)# source-ipaddr>< sip-mask>| any}[ ssourrce-porrtt < 0-65535>< matches UDP packets. sport-mask>]{< destination-ipaddr>< dip-mask>| any}[ desstt-porrtt < 0-65535>< dport-mask>][ dsscp < 0-63>][ fragment] rule <...
Page 99 Sets a hybrid egress ACL that zte(egress-hybrid-acl)# matches any packet. clear egress-acl hybrid number < 700-799> Clears a hybrid egress ACL zte(cfg)# instance. config ingress-acl user-define udb <1-15> anchor Sets a user-defined anchor and zte(cfg)# <0-3>[offset <0-31>][data-length<1-6>] offset. 5-51 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 100 ZXR10 2900E Series Configuration Guide Command Function config ingress-acl user-define udb <1-15> description Sets a description for a zte(cfg)# <string> user-defined byte. Clears the description of a clear acl udb <1-15> description zte(cfg)# user-defined byte. move <1-500>{after | before}<1-500> (all ACL configuration Sorts rules in ACL instance.
Page 101: Qos Configuration
2 deny arp any 192.168.0.1 255.255.255.255 zte(ingress-hybrid-acl)#exit zte(cfg)#set port 1-24 acl 300 enable zte(cfg)#set time-range worktime range period 09:00 to 18:00 daily zte(cfg)#set time-range worktime acl 300 rule 1 enable zte(cfg)#set time-range worktime acl 300 rule 2 enable 5.12 QoS Configuration QoS Overview can provide end-to-end data exchange with a high quality.
Page 102 ZXR10 2900E Series Configuration Guide For the data packet QoS handling method on the network edge device on the access side, there are the following conditions: The switch can select whether to trust the packet and which fields of the packet, such as UP or DSCP, can be trusted when receiving the packet.
Page 103 Enables or disables the trap zte(cfg)# function for a port. set qos traffic-limit ge-port <25-28>{data-rate Sets 1000 M port ingress rate zte(cfg)# <32-1000000>| disable} limit, in which, <32-100000> is the maximum of data transmission rate. 5-55 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 104 ZXR10 2900E Series Configuration Guide Command Function set qos traffic-limit ge-port <25-28>{packet-rate Sets 1000 M port ingress rate limit. zte(cfg)# <0-14881000>[packet-lenth <64-10240>]| disable} set qos traffic-limit xge-port <2/1-2/4>{data-rate Sets the ingress rate limit for zte(cfg)# <0-10000000>| disable} the 10000 M port, in which, <0-100000>...
Page 105 <1-3>{enable | disable} Sets the session between flow zte(cfg)# mapping port and port mapping . set policy mirror in acl <1-399,800-828> rule Copies the specified data flow to zte(cfg)# <1-500>{cpu | analyze-port} the monitor port. 5-57 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 106 ZXR10 2900E Series Configuration Guide Command Function set policy redirect in acl <1-399,800-828> rule Redirects the specified data flow zte(cfg)# <1-500>{cpu | port <1-28>} to the user-specified egress port. set policy statistics in acl <1-828> rule <1-500> Implements flow statistic for the zte(cfg)# counter <0-1023>...
Page 107: Figure 5-13 Qos Configuration Instance
1 data-rate 2000 zte(cfg)#set qos traffic-limit fe-port 2 data-rate 2000 /*Omitted*/ zte(cfg)#set qos traffic-limit fe-port 24 data-rate 2000 zte(cfg)#set qos traffic-shaping ge-port 26 data-rate 20 burst-size 10 Configuration Verification zte(cfg)#show qos traffic-shaping port 26 Port Egress Traffic Shaping Table:...
Page 108: Pvlan Configuration
The ports within a VLAN are separated. Users can only communicate with their default gateways, and the network security is guaranteed. The ZXR10 2900E series switches support four PVLAN sessions. Each PVLAN session supports an unlimited number of hybrid ports. Each PVLAN supports an unlimited number of isolated or community ports.
Page 109 Add a hybrid port 26 and isolated ports 1, 2, and 3 to session 1. See Figure 5-14. Figure 5-14 PVLAN Configuration Example 1 Configuration Procedure zte(cfg)#set vlan pvlan session 1 promis-port 26 isolate-port 1-3 Configuration Verification zte(cfg)#show vlan pvlan pvlan session promis-ports...
Page 110: Figure 5-15 Pvlan Configuration Example 2
1 mode dynamic 2. Configuration of switch B: zte(cfg)#set lacp enable zte(cfg)#set lacp aggregator 1 add port 1-3 zte(cfg)#set lacp aggregator 1 mode dynamic zte(cfg)#set vlan pvlan session 2 promis-trunk 1 isolate-port 4-6 Configuration Verification zte(cfg)#show vlan pvlan pvlan session promis-ports...
Page 111: Layer 2 Protocol Transparent Transmission Configuration
The common layer-2 protocols are shown below. Protocol Number Protocol 0x00 0x02 LACP/OAM 0x03 802.1x 0x09 ZGMP 0x0E LLDP 0x21 GVRP Configuring Layer 2 Protocol Transparent Transmission The configuration of layer-2 protocol transparent transmission includes the following commands: 5-63 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 112: Figure 5-16 Layer 2 Protocol Transparent Transmission Configuration Topology
Figure 5-16 Layer 2 Protocol Transparent Transmission Configuration Topology Configuration Procedure zte(cfg)#set l2pt 0x02 enable zte(cfg)#set vlan 100 enable zte(cfg)#set vlan 100 add port 1, 3 zte(cfg)#set port 1,3 pvid 100 zte(cfg)#set vlan 200 enable zte(cfg)#set vlan 200 add port 2, 4...
Page 113: Ipv4 Layer 3 Configuration
Layer 3 interface related configuration ARP related configuration Static route related configuration The ZXR10 2900E series system supports the hardware routing function to increase IP packets forwarding speed. To configure the IPv4 layer-3 function, use the config router command to enter the layer-3 configuration mode first.
Page 114 ZXR10 2900E Series Configuration Guide Command Function ping <A.B.C.D>[<0-65535>[<28-65535>[<1-255>[<0-65 Detects the network connectivity. zte(cfg)# 535>[<A.B.C.D>]]]]] trace <A.B.C.D>[max-ttl <1-255>[min-ttl Router trace, which is used zte(cfg)# <1-255>[repeat <1-65535>[source <A.B.C.D>[timeout to determine the path of IP <1-60>[udp-port <1-65535>]]]]]] data messages to access the destination.
Page 115: Figure 5-17 Layer-3 Configuration Instance
Figure 5-17. Figure 5-17 Layer-3 Configuration Instance Configuration Procedure zte(cfg)#set vlan 100 enable zte(cfg)#set vlan 100 add port 1 zte(cfg)#set port 1 pvid 100 zte(cfg)#config route zte(cfg-router)#set ipport 0 ipaddress 192.168.1.2 255.255.255.0 zte(cfg-router)#set ipport 0 vlan 100 zte(cfg-router)#set ipport 0 enable...
Page 116: Ipv6 Layer 3 Configuration
ZXR10 2900E Series Configuration Guide 5.16 IPv6 Layer 3 Configuration IPv6 Layer 3 Function Overview The ZXR10 2900E supports IPv6 layer-3 functions for remote configuration and management. The Layer 3 functions are as follows: 1. IPv6 interface configuration 2. Ping v6 for checking network connectivity 3.
Page 117: Dai Configuration
Chapter 5 Service Configuration Figure 5-18 Layer-3 IPv6 Configuration Instance Configuration Procedure zte(cfg)#set vlan 300 enable zte(cfg)#set vlan 300 add port 10 zte(cfg)#set port 10 pvid 300 zte(cfg)#config route zte(cfg-router)#set ipv6port 0 ipv6address 12:12::c055:40/128 zte(cfg-router)#set ipv6port 0 vlan 300 zte(cfg-router)#set ipv6port 0 enable...
Page 118: Figure 5-19 Dai Configuration Instancetopology
ZXR10 2900E Series Configuration Guide Command Function set arp-inspection validate {ip | dst-mac | Enables or disables the inspection zte(cfg)# src-mac}{enable | disable} of each field of an ARP packet. set arp-inspection vlan <vlanlist>{enable | disable} Enables or disables DAI function zte(cfg)# based on the VLAN.
Page 119: Access Service Configuration
Chapter 5 Service Configuration zte(cfg)#set arp-inspection port 49 limit 15 zte(cfg)#set arp-inspection validate ip enable zte(cfg)#set arp-inspection validate dst-mac enable zte(cfg)#set arp-inspection validate src-mac enable Note: DAI detection condition: the port sending packets is a non-trusted port, and the DAI function is enabled on the VLAN.
Page 120 ZXR10 2900E Series Configuration Guide physical ports or MAC address, VLAN, or IP address of the user equipment), the authentication system has two logical ports: controlled port and uncontrolled port. 1. The uncontrolled port is always in the state that the bidirectional connections are available.
Page 121: Figure 5-20 Using Pap Mode For Identity Authentication
Challenge string. Then it compares this Challenge string with the encrypted password of the server and returns a response accordingly. For the process of using the CHAP mode for identity authentication, see Figure 5-21. 5-73 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 122: Figure 5-21 Using Chap Mode For Identity Authentication
ZXR10 2900E Series Configuration Guide Figure 5-21 Using Chap Mode for Identity Authentication Extensible Authentication Protocol - Message Digest 5 (EAP-MD5) EAP is a type of authentication mode of transmitting EAP message transparently including EAP-MD5 and PEAP. The following example is about EAP-MD5 description.
Page 123 {port <portlist>| vlan <vlanlist>} Deletes the client end user of zte(cfg-nas)# specified port/VLAN. show dot1x (all configuration modes) Displays 802.1x configuration information. show client (all configuration modes) Displays the information of all access users. 5-75 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 124 ZXR10 2900E Series Configuration Guide Command Function show client index <0-255> (all configuration modes) Displays the information of an access user. show client mac <HH.HH.HH.HH.HH.HH> (all configuration Displays access user information modes) on the specified MAC address. show client port <portlist> (all configuration modes) Displays access user information on the specified port.
Page 125 The user installs a radius client on a PC. The switch connects the radius server and the user’s PC through a network cable. The user can log in to the switch through the 5-77 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 126: Figure 5-23 Access Authentication Configuration Instance
ZXR10 2900E Series Configuration Guide console port and configure the access server, and then enable client software on the user PC to originate authentication request. See Figure 5-23. Figure 5-23 Access Authentication Configuration Instance Configuration Procedure 1. Configure layer-3 interface commands zte(cfg-router)#set ipport 0 ip 10.40.89.106/24...
Page 127: Mac Authentication Configuration
MAC addresses. Clears a specific MAC clear mac-authentication client mac zte(cfg-nas)# <HH.HH.HH.HH.HH.HH> authentication client. clear mac-authentication client {port <portlist>| Clears clients on a specific port or zte(cfg-nas)# vlan <vlanlist>} in a specific VLAN. 5-79 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 128: Qinq Configuration
ZXR10 2900E Series Configuration Guide Command Function show aaa mac-authentication (all configuration modes) Displays MAC authentication configuration information. show aaa mac-authentication client (all configuration modes) Displays information of all MAC authentication clients. 5.20 QinQ Configuration QinQ Overview A QinQ is the IEEE 802.1Q tunneling protocol and is also called VLAN stacking. The QinQ technology is the addition of one more VLAN tag (outer tag) to the original VLAN tag (inner tag).
Page 129 The VLAN number is 100. The port connecting upstream BRAS in Switch1 is port 24. The port connecting the downstream Switch2 is port 1. The NM vlan of Switch1 is 999 and the management IP address is 192.168.0.1/24. See Figure 5-25. 5-81 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 130: Sqinq Configuration
Figure 5-25 QinQ Configuration Instance Configuration Procedure /*set qinq, the outer label is 100*/ zte(cfg)#set vlan 100 enable zte(cfg)#set vlan 100 add port 1 untag zte(cfg)#set vlan 100 add port 24 tag zte(cfg)#set port 1 pvid 100 zte(cfg)#set vlan qinq customer port 1 enable...
Page 131: Figure 5-26 Sqinq Configuration Instance
997,998 add port 1 untag zte(cfg)#set vlan 997,998 add port 2 tag zte(cfg)#set vlan 10,12,997,998 enable zte(cfg)#set vlan sqinq session 1 customer-port 1 customer-vlan 10 uplink-vlan 997 zte(cfg)#set vlan sqinq session 2 customer-port 1 customer-vlan 12 uplink-vlan 998 Configuration Verification The following example shows how to show the SVLAN instance.
Page 132: Vlan Configuration
ZXR10 2900E Series Configuration Guide zte(cfg)#show vlan sqinq Session number Customer Port Customer Vlan List : 10 Uplink Vlan : 997 Session number Customer Port Customer Vlan List : 12 Uplink Vlan : 998 5.22 VLAN Configuration VLAN Overview The Virtual Local Area Network (VLAN) protocol is a basic protocol of layer-2 switching equipment, which enables the administrator to divide a physical LAN into multiple VLANs.
Page 133 Note: By default, VLAN1 is enabled, all ports are in VLAN1 and in untag mode. Configuration Procedure zte(cfg)#set vlan 100 add port 1, 2 untag zte(cfg)#set vlan 100 add port 7, 8 tag zte(cfg)#set port 1, 2 pvid 100 zte(cfg)#set vlan 100 enable...
Page 134: Figure 5-27 Vlan Transparent Transmission Configuration Instance
Figure 5-27 VLAN Transparent Transmission Configuration Instance Configuration Procedure 1. Configuration of switch A zte(cfg)#set vlan 2 add port 16 tag zte(cfg)#set vlan 2 add port 1 untag zte(cfg)#set vlan 3 add port 16 tag zte(cfg)#set vlan 3 add port 3 untag...
Page 135: Vlan Mapping Configuration
VLAN convergence function needs to be fulfilled in the switches in access layer to transmit the same service, which is transferred by different users in different VLANs, through one VLAN. Figure 5-28 VLAN Mapping Network Diagram 5-87 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 136 ZXR10 2900E Series Configuration Guide Mapping Modes: Uplink: replace the CVLAN with SVLAN based on “Interface+customer VLAN”. Downlink: replace the SVLAN in the outermost layer with CVLAN based on “SVLAN + Destination MAC address”. The whole system supports 400 sessions, and up to 400 CVLANs can be supported.
Page 137: Syslog Configuration
The following example shows how to configure the VLAN Mapping instance. zte(cfg)#set vlan 1-100,1000 add port 1,24 tag zte(cfg)#set vlan 1-100,1000 enable zte(cfg)#set vlan mapping session 1 customer-port 1 customer-vlan 1-100 uplink-vlan 1000 Configuration Verification The following example shows how to show the SVLAN instance.
Page 138: Table 5-2 Syslog Log Information
ZXR10 2900E Series Configuration Guide The Syslog protocol is classified by information source and the information is filtered by function module, which satisfies customized user demands. The Syslog protocol can classify the log information into eight levels from the highest to the lowest level of importance.
Page 139: Ntp Configuration
1 ipaddress 192.168.1.1 name server1 Configuration Verification zte(cfg)#show syslog status Syslog status: enable Syslog level: informational...
Page 140 ZXR10 2900E Series Configuration Guide Command Function set ntp source <A.B.C.D> Sets the source IP address that is zte(cfg)# used for the switch to send NTP packets. set ntp clock-period <5-2147483647> Sets the period of NTP zte(cfg)# synchronization. set ntp timezone <(-12)-(+13)>...
Page 141: Garp/Gvrp Configuration
GARP/GVRP Configuration Instance Configuration Description Switch A connects with switch B through port 1. By configuring GVRP, the two switches can register each other and refresh their VLAN table. See Figure 5-30. 5-93 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 142: Figure 5-30 Gvrp Configuration Instance
ZXR10 2900E Series Configuration Guide Figure 5-30 GVRP Configuration Instance Configuration Procedure 1. Configuration of switch A: zte(cfg)#set garp enable zte(cfg)#set gvrp enable zte(cfg)#set gvrp port 1 enable zte(cfg)#set vlan 10-20 enable zte(cfg)#set vlan 10-20 add port 1 2. Configuration of switch B:...
Page 143: Dhcp Configuration
Use Option82 technique to provide more additional information, and then strengthen the network safety ability. In the DHCP service system, the ZXR10 2900E series switches are provided with a lot of automatically deployed functions. For details, see Downloading the Software Version Automatically.
Page 144 ZXR10 2900E Series Configuration Guide Command Function set dhcp snooping-and-option82 {enable | disable} Enables or disables DHCP zte(cfg)# snooping and Option82 globally. set dhcp snooping {add | delete}{port <portlist>| trunk Enables or disables the DHCP zte(cfg)# <trunklist>} Snooping function based on the port/trunk.
Page 145 DHCP packets sent to the server. set ipport <0-63> dhcp relay server Sets the address of the DHCP zte(cfg-router)# <A.B.C.D> relay server onthe IP port. When DHCP packets are forwarded to a server, this server is preferred. 5-97 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 146 ZXR10 2900E Series Configuration Guide Command Function set dhcp relay global-ipport <0-63>{enable | disable} Enables the DHCP relay function zte(cfg)# on an IP port globally. When the DHCP relay selects a source IP address, if no IP address is configured for the VLAN, the IP address of the IP port is used as the source address.
Page 147: Figure 5-31 Dhcp Snooping/Option82 Configuration Instance Topology
DHCP servers from affecting hosts in the network. See Figure 5-31. Figure 5-31 DHCP Snooping/Option82 Configuration Instance Topology Configuration Procedure zte(cfg)#set dhcp snooping-and-option82 enable zte(cfg)#set dhcp snooping add port 49,50 zte(cfg)#set dhcp port 49 client zte(cfg)#set dhcp port 50 server 5-99 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 148: Configuring Dhcp Client
ZXR10 2900E Series Configuration Guide zte(cfg)#set dhcp ip-source-guard add port 49 zte(cfg)#set dhcp option82 add port 49,50 Configuration Verification zte(cfg)#show dhcp snooping DHCP snooping is enabled on the following port(s): PortId PortType ------ -------- Client Server DHCP snooping disabled vlan: none...
Page 149: Dhcpv6 Configuration
The Dynamic Host Configuration Protocol of IPv6 (DHCPv6) is used by a network host to dynamically request host configuration from a server. The ZXR10 2900E series system supports the following DHCPv6 functions: DHCPv6 snooping function: DHCPv6 servers and clients do not support authentication mechanism.
Page 150 ZXR10 2900E Series Configuration Guide server. The system filters out packets with other source IP addresses on ports, thus preventing spoofing. Configuring DHCPv6 The DHCPv6 configuration includes the following commands: Command Function set dhcpv6 snooping {enable | disable} Enables or disables the DHCPv6 zte(cfg)# snooping function globally.
Page 151: Figure 5-33 Dhcpv6 Snooping/Option82 Configuration Instance
It is required to prevent illegal DHCP server from affecting the PCs on the network. Figure 5-33 DHCPv6 Snooping/Option82 Configuration Instance Configuration Procedure zte(cfg)#set dhcpv6 snooping enable zte(cfg)#set dhcpv6 snooping add port 49,50 5-103 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 152: Vbas Configuration
ZXR10 2900E Series Configuration Guide zte(cfg)#set dhcpv6 port 49 client zte(cfg)#set dhcpv6 port 50 server zte(cfg)#set dhcpv6 ip-source-guard add port 49 zte(cfg)#set dhcpv6 option82 enable zte(cfg)#set dhcpv6 option82 add port 49,50 Configuration Verification zte(cfg)#show dhcpv6 snooping DHCP v6 snooping is enabled on the following port(s):...
Page 153: Figure 5-34 Vbas Typical Network
VBAS Configuration Instance Configuration Description Figure 5-35, this example describes how to set trust port of switch A as port 1, cascade port as port 2, trust port of switch B as port 1. 5-105 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 154: Pppoe-Plus Configuration
ZXR10 2900E Series Configuration Guide Figure 5-35 VBAS Configuration Instance Topology Configuration Procedure 1. Configuration of switch A: zte(cfg)#set vbas enable zte(cfg)#set vbas trust-port 1 enable zte(cfg)#set vbas cascade-port 2 enable 2. Configuration of switch B: zte(cfg)#set vbas enable zte(cfg)#set vbas trust-port 1 enable 3.
Page 155: Figure 5-36 Pppoe-Plus Configuration Instance Topology
5-36. Figure 5-36 PPPOE-PLUS Configuration Instance Topology Configuration Procedure Configure switch A zte(cfg)#set pppoe-plus enable zte(cfg)#set pppoe-plus tag-format port 1 dsl-forum Configuration Verification zte(cfg)#show pppoe-plus PPPoE plus is enabled. zte(cfg)#show pppoe-plus port 1 PPPoE Vendor-Specific Tag format on port 1:DSL-Forum PPPoE-PLUS option mode information on port 1: Default PPPoE VST remote ID on port 1 has not been set.
Page 156: Zesr Configuration
5.31 ZESR Configuration ZESR Overview ZESR is a private ring network protection technology developed by ZTE Corporation. Evolved from EAPS, ZESR ensures that there is only one logically connected path between any two nodes in the ring network. Basic ZESR Concepts...
Page 157: Figure 5-37 Diagram Of The Master Node Blocking Its Secondary Port When The Ring Is In Up State
PC 1 interchanges service data traffic with PC 2. The arrows in the diagrams indicate the flow of the service data. Figure 5-37 Diagram of the Master Node Blocking its Secondary Port When the Ring is in UP State 5-109 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 158: Figure 5-38 Diagram Of The Master Node Opening Its Secondary Port When The Ring Is In Down State
ZXR10 2900E Series Configuration Guide Figure 5-38 Diagram of the Master Node Opening its Secondary Port When the Ring is in DOWN State As shown in Figure 5-37, all links operate properly, the ring is in UP state, the secondary port of the master node is blocked, and traffic needs to go through switch C and switch D.
Page 159: Figure 5-39 Transmission Link Fault Diagram
<1-4094> Configures a node as the master node ZXR10(config)# level <1-2> seg <1-10> role {master | or a transit node on a secondary ring. transit}{primary-port <port1>| primary-trunk <trunkId>}{secondary-port <port2>| secondary-trunk <trunkId>} 5-111 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 160 ZXR10 2900E Series Configuration Guide Step Command Function set zesr ctrl-vlan <1-4094> Configures a node as an edge assistant ZXR10(config)# level <1-2> seg <1-10> role {edge-assistant | node or an edge control node on a edge-control}{edge-port <port>| edge-trunk secondary ring.
Page 161 ZESR region must have the same configuration, that is, all nodes must be configured to Normal mode or Special mode. Normal mode: the destination MAC address of a ZESR protocol packet uses the address 00-E0-2B-00-00-04. 5-113 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 162 ZXR10 2900E Series Configuration Guide Step Command Function Special mode: the destination MAC address of a ZESR protocol packet uses a ZTE-defined address. set zesr restart-time <30-600> Configures the ZESR restart time (s). ZXR10(config)# Default: 120. Restart-time: the ZESR initialization time during the device startup.
Page 163: Figure 5-40 Zesr Single-Domain Multi-Ring Configuration Example
/*Run the following command to configure switch A as the edge assistant node of the secondary ring Level1Seg1 with port 1/4 as its boundary port.*/ Switch_A(config)#set zesr ctrl-vlan 4000 level 1 seg 1 role edge-assistant port 1/4 5-115 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 164 ZXR10 2900E Series Configuration Guide Configurations on switch B: /*Run the following commands to configure the spanning tree instance.*/ Switch_B(config)#set stp enable Switch_B(config)#set stp forceversion mstp Switch_B(config)#set stp instance 1 add vlan 100-110 /*Run the following command to configure the ZESR domain with VLAN 4000 as the control VLAN and protection instance 1 as the protection instance.*/...
Page 165: Figure 5-41 Zesr Single-Ring Multi-Domain Configuration Example
The control VLAN of ZESR domain 1 is VLAN 4000, and the protection instance is instance 1 (including VLANs 100 to 110). The control VLAN of ZESR domain 2 is VLAN 4001, and the protection instance is instance 2 (including VLANs 200 to 210). 5-117 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 166 ZXR10 2900E Series Configuration Guide Switch A is the master node in ZESR domain 1 with port 1/1 as its primary port and port 1/2 as its secondary port. Switch A is also the master node in ZESR domain 2 with port 1/2 as its primary port and port 1/1 as its secondary port.
Page 167 The control VLAN of the ZESR domain is VLAN 4000, and the service VLANs are VLANs 100 to 110. Switch A is the master node with port 1/2 as its primary port and port 1/1 as its secondary port. Switch B is the transit node. 5-119 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 168: Figure 5-42 Zesr Dual-Node Dual-Uplink Configuration Example
ZXR10 2900E Series Configuration Guide In order for switch C and the top network to perceive the topology change of the underlying network, port 1/1 of switch A and port 1/1 of switch B are enabled with the TCN packet sending function to notify the network topology change upwards.
Page 169: Zess Configuration
UP indicates that each link in a ZESS domain operates properly. DOWN indicates that at least one link in a ZESS domain is disconnected. ZESS Node A device that is configured with a ZESS domain is called a ZESS node. 5-121 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 170 ZXR10 2900E Series Configuration Guide Name Description Control VLAN The control VLAN of a ZESS domain forwards ZESS protocol packets (Flush packets). A Flush packet is sent from a ZESS node during ZESS link switching to inform the relevant devices to refresh the MAC address table. The control VLAN is not required for a ZESS domain.
Page 171: Figure 5-43 Zess Network Topology
<1-16> primary {port The control VLAN must be elected from <port-name>| trunk <trunk-name>} secondary idle VLANs. It cannot have any conflict with {port <port-name>| trunk <trunk-name>} service VLANs or Network Management VLANs. 5-123 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 172 ZXR10 2900E Series Configuration Guide Step Command Function set zess domain <1-4> mode Configures the ZESS switching mode. The ZXR10(config)# {revertive | non_revertive} default value is reversal mode. Here are two ZESS switching modes: Revertive: reversal mode. Non_revertive: non-reversal mode.
Page 173: Figure 5-44 Zess Networking Configuration
Switch_B(config)#set zess receive-vlan 4000 port 1/2 Switch_B(config)#set zess receive-vlan 4001 port 1/2 Switch_B(config)#exit Configurations on switch C: /*Run the following commands to configure a protection instance.*/ Switch_C(config)#set stp enable Switch_C(config)#set stp instance 1 add vlan 100-110 5-125 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 174: Oam Configuration
3. Emergency Events: The un-defined emergency event happens. OAM Remote Loopback: The ZXR10 2900E series switch provides optional data link layer frame level loopback mode by OAM function. OAM remote loopback is used to locate failure and examine the link performance. When remote DTE is on the OAM remote loopback mode, the statistic data of local and remote DTE can be inquired and compared at any time.
Page 175 Chapter 5 Service Configuration Link Monitoring: The ZXR10 2900E series switch monitors and examines the link state, and announces the specified frame events by OAM function. The specified frame events can be classified into four types: error symbol period event, error frame event and error frame period event, error frame-second statistic event.
Page 176: Figure 5-45 Remote Loop Network
ZXR10 2900E Series Configuration Guide Command Function show ethernet-oam (all configuration modes) Displays OAM global configuration information. show ethernet-oam port (all configuration modes) Displays OAM port summary information. show ethernet-oam port <portlist> discovery (all configuration Displays port OAM discovery modes) state.
Page 177 : 00.d0.d0.29.28.02 /*the system MAC of the remote device. The MAC address is 00.00.00.00.00.00 when discovery fails.*/ PDU Revision : 967 zte(cfg)#set ethernet-oam remote-loopback port 2 start zte(cfg)#show ethernet-oam port 2 discovery PortId 2: ethernet oam enabled Local DTE -----------...
Page 178 ZXR10 2900E Series Configuration Guide Stable : yes Discovery : done Loopback : on(Master) /*the local is the active originator (Master). The other end displays as slave.*/ PDU Revision : 1431 Remote DTE ----------- Config: Mode : active Link Monitor...
Page 179: Figure 5-46 Link Control Network
1 enable zte(cfg)#set ethernet-oam port 1 link-monitor enable zte(cfg)#set ethernet-oam port 1 lin symbol-period threshold 10 window 10 zte(cfg)#set ethernet-oam port 1 lin frame threshold 10 window 20 zte(cfg)#set ethernet-oam port 1 link-monitor frame-period threshold 5...
Page 180: Sflow Configuration
ZXR10 2900E Series Configuration Guide Errored Seconds Threshold : 10(s) Total Errored Frame Seconds : 0(s) Local Total Errored Frame Seconds Events Remote Total Errored Frame Seconds Events : 0 5.34 sFlow Configuration The sFlow configuration includes the following commands:...
Page 181: Pp Configuration
Clears specified mac drop rules. zte(cfg)# show protocol-protect statistic [port <portlist>] (all configuration Displays statistics information of modes) protocol packet alarms on a PP port. show protocol-protect limit (all configuration modes) Displays PP rate limit information. 5-133 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 182: Figure 5-47 Pp Configuration Instance
ZXR10 2900E Series Configuration Guide Command Function show protocol-protect priority (all configuration modes) Displays packet priority configuration information. show protocol-protect mac-drop port [<portlist>](all configuration Displays the rules and statistics modes) bound with a specified port. show protocol-protect mac-drop rule [<1-128>](all configuration Displays specified mac drop rules.
Page 183: Lldp Configuration
A recommended update frequency is defined by the IEEE, that is, to send messages at 30-second intervals. 5-135 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 184 ZXR10 2900E Series Configuration Guide Optional TLVs: includes a basic management TLV set (such as port description TLV), a special TLV set defined by IEEE 802.1, a special TLV set defined by IEEE 802.3, and an LLDP-MED TLV set defined by TIA.
Page 185: Single Port Loop Detection Configuration
Single port loop detection is to check whether a loop exists in the ports of the switch. If such a loop exists, it may result in errors in learning MAC addresses and may easily cause a broadcast storm. In severe case, switch and network may be down. Starting the single port 5-137 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 186 ZXR10 2900E Series Configuration Guide loop detection and disabling the port with loop can efficiently avoid the influence caused by port loop. The switch sends a test packet through a port. If this test packet is received through the port without any change (or only a tag is attached), it indicates that a loop exists in this port.
Page 187: Figure 5-49 Single Port Loop Detection Configuration Topology
Switch 1 can detect the loop on Switch 2 and block Port 1. Figure 5-49 Single Port Loop Detection Configuration Topology Configuration Procedure zte(cfg)#set loopdetect port 1 enable Configuration Verification Check the loop detection state of Switch 2: zte(cfg)#show loopdetect...
Page 188: Udld Configuration
ZXR10 2900E Series Configuration Guide Double Ports Loop Detection Configuration Instance Configuration Description Figure 5-50, configure the double ports loop detection function of loop-detect of switch2 to suppress broadcast storm of network under switch2. Figure 5-50 Double Ports Loop Detection Configuration Topology...
Page 189 BiDirectional status and the port is steady. udld port <portlist> recovery {enable | disable} Enables or disables the UDLD zte(cfg)# recovery function. udld port <portlist> recovery timer <10-600> Sets the recovery interval. zte(cfg)# 5-141 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 190: Figure 5-51 Udld Configuration Instance
ZXR10 2900E Series Configuration Guide Command Function udld port <portlist> reset Recovers the link establishment zte(cfg)# function on a port manually. udld <portlist> force-check {enable | disable} Enables or disables the forced zte(cfg)# monologue detection function. udld <portlist> force-check timer <15-300>...
Page 191: Tacacs+ Configuration
TACACS+ server group. tacacs-plus loginauthen default group <group-name> Sets the default TACACS+ zte(cfg-nas)# login authentication server group. tacacs-plus loginauthor default group <group-name> Sets the default server group zte(cfg-nas)# authorized for TACACS+ login. 5-143 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 192 ZXR10 2900E Series Configuration Guide Command Function tacacs-plus adminauthen default group <group-name> Sets the default server group zte(cfg-nas)# authenticated for TACACS+ management. Sets the default server tacacs-plus accounting commands default group zte(cfg-nas)# <group-name> group for TACACS+ MML accounting. Sets the default server...
Page 193: Time Range Configuration
Chapter 5 Service Configuration Figure 5-52 TACACS+ Configuration Instance Configuration Procedure zte(cfg)#set loginauth tacacs-plus+local zte(cfg)#set adminauth tacacs-plus+local zte(cfg)#config router zte(cfg-router)#set ipport 1 ipaddress 192.168.1.1 255.255.255.0 zte(cfg-router)#set ipport 1 vlan 1 zte(cfg-router)#set ipport 1 enable zte(cfg-router)#exit zte(cfg)#config nas zte(cfg-nas)#tacacs-plus group zte enable zte(cfg-nas)#tacacs-plus group zte add host 192.168.1.100...
Page 194: Voice Vlan Configuration
ZXR10 2900E Series Configuration Guide Configuring a Time Range The time range configuration includes the following commands: Command Function set time-range <word> period <hh:mm> to Sets a periodic time range. zte(cfg)# <hh:mm>{daily | day-off | day-working | monday | tuesday | wednesday | thursday | friday | saturday | sunday} set time-range <word>...
Page 195: Figure 5-53 Voice Vlan Configuration Instance
VLAN is VLAN 100. Figure 5-53 Voice VLAN Configuration Instance Configuration Procedure zte(cfg)#set vlan 10,20,100 add port 1-3 tag zte(cfg)#set vlan 10,20,100 enable zte(cfg)#set vlan voice-vlan port 1 oui-id 1 mac-addr 00.00.01.00.00.01 5-147 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 196: Ag Configuration
ZXR10 2900E Series Configuration Guide mac-mask FF.FF.FF.FF.FF.FF zte(cfg)#set vlan voice-vlan port 2 oui-id 1 mac-addr 00.00.01.00.00.02 mac-mask FF.FF.FF.FF.FF.FF zte(cfg)#set vlan voice-vlan port 1 ingress-vlan 10 voice-vlan 100 zte(cfg)#set vlan voice-vlan port 2 ingress-vlan 20 voice-vlan 100 Configuration Verification zte(cfg)#show vlan voice-vlan...
Page 197: Figure 5-54 Single Management Domain
This ends until the message reaches the destination or cannot be further forwarded. Link Trace Reply (LTR): A unicast CFM protocol data unit. It is sent by the MP receiving an LTM to reply to the LTM. 5-149 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 198 ZXR10 2900E Series Configuration Guide Loopback Message (LBM): A unicast CFM protocol data unit. It is sent to a specified MP from an MEP, expected to receive an LBR message. Loopback Reply (LBR): A unicast CFM protocol data unit. It is sent by the MP receiving an LBM as the reply to the LBM.
Page 199 <hh.hh.hh.hh.hh.hh>| dmip-mac <hh.hh.hh.hh.hh.hh>}[repeat <1-200>[size <0-400>[timeout <1-10>]]] cfm ltm md-session <1-16> ma-session <1-32> Detects ltm. zte(cfg)# smep-id <1-8191>{dmep-id <1-8191>| dmep-mac <hh.hh.hh.hh.hh.hh>| dmip-mac <hh.hh.hh.hh.hh.hh>}[ttl <1-64>[timeout <5-10>]] cfm read trans-id <1-4294967295> Reads the ltm path tree. zte(cfg)# 5-151 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 200: Figure 5-55 Single-Domain Cfm Network Without Mip
1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 1 direction down zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 state enable...
Page 201: Figure 5-56 Single-Domain Cfm Network With Mip
1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 1 direction down zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 state enable...
Page 202: Configuration
ZXR10 2900E Series Configuration Guide zte(cfg)#create cfm md-session 1 ma-session 1 rmep-session 2 rmep-id 1 remote-mac 00.d0.d0.c0.00.01 zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 ccm-receive enable 5.43 Y.1731 Configuration Y.1731 Overview The Y.1731 protocol complements the 802.1ag protocol. It defines a series of extensions in which is used to measure the network link status and performance.
Page 203: Figure 5-57 Lm Network Configuration Instance
1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 1 direction down zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 state enable...
Page 204: Figure 5-58 Dm Network Configuration Instance
1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 2 direction down zte(cfg)#cfm md-session 1 ma-session 1 mep-id 2 state enable...
Page 205: Figure 5-59 Ais/Lck Network Configuration Instance
Chapter 5 Service Configuration zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 ccm-receive enable zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 assign port 1 zte(cfg)#create cfm md-session 1 ma-session 1 rmep-session 2 rmep-id 2 remote-mac 00.d0.d0.c0.00.02 zte(cfg)#cfm md-session 1 ma-session 1 mep-id 2 ccm-receive enable...
Page 206 1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 1 direction down zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 state enable...
Page 207: Mac-Based Vlan Command Configuration
Chapter 5 Service Configuration zte(cfg)#cfm md-session 10 ma-session 10 mep-id 20 ais (lck) enable zte(cfg)#cfm md-session 10 ma-session 10 mep-id 20 client-level 5 Configuration on S4: zte(cfg)#cfm enable zte(cfg)#create cfm md-session 1 name zte_1 level 5 zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1...
Page 208: Dhcp Relay Configuration
100 zte(mac-based-vlan)#rule 2 mac-address 00.d0.d0.00.00.00 mac-mask ff.ff.ff.00.00.00 vlan 200 zte(cfg)#set vlan mac-based port 1 session 1 bind 5.45 DHCP Relay Configuration DHCP Relay Overview DHCP Relay interacts with both the Client and the Server, acting different roles. From the view of the DHCP Client, the DHCP Relay Agent can be considered as its DHCP Server and the DHCP Relay implements the response to the IP address requests from the Client.
Page 209 Displays the DHCP relay show dhcp relay configuration. Displays the DHCP Relay option60 show dhcp vclass-id configuration. Clears the device ID information. clear dhcp option82 sub-option device ani zte(cfg)# 5-161 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 210: Figure 5-60 Dhcp Relay Configuration Instance
ZXR10 2900E Series Configuration Guide Command Function show dhcp relay binding [port <1-28>| trunk <1-15>] (all Displays the DHCP relay binding configuration modes) information. Displays the DHCP relay option82 show dhcp relay option82 port<1-28> (all configuration modes) configuration of the port.
Page 211 0 ipaddress 169.1.15.1 255.255.0.0 zte(cfg-router)#set ipport 0 vlan 1 zte(cfg-router)#set ipport 0 enable zte(cfg-router)#set ipport 0 dhcp relay agent zte(cfg-router)#set ipport 0 dhcp relay server 10.230.72.2 zte(cfg-router)#set ipport 63 ipaddress 10.230.72.1 255.255.255.0 zte(cfg-router)#set ipport 63 vlan 1000 zte(cfg-router)#set ipport 63 enable...
Page 212: Mff Configuration
ZXR10 2900E Series Configuration Guide Lease Clear request: - Dhcp relay configuration as follows: Relay agent : enable Server IP : 10.230.72.2 5.46 MFF Configuration MFF Overview function is used on a user access device to isolate users at the access side. It implements layer-2 isolation and layer-3 interworking between users in a broadcast domain without any extra VLAN being created.
Page 213 Displays information about MFF gateway show mff gateway zte(cfg)# configuration. show mff gateway -keepalive-info {port} Displays information about ARP keep-alive zte(cfg)# configuration, including gateway ARP keep-alive configuration and user ARP keep-alive configuration. MFF Configuration Instance Configuration Description 5-165 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 214: Figure 5-61 Mff Configuration Instance
1/1,1/2,1/4 pvid 400 Configure the MFF attributes for the ports and VLAN: à zte(cfg)#set mff vlan 400 add port 1/1 userport zte(cfg)#set mff vlan 400 add port 1/2 userport zte(cfg)#set mff vlan 400 add port 1/4 network Configure an intra-VLAN gateway: à...
Page 215: Ssl Configuration
5-62, a layer-3 port is configured on the switch, and the IP address is set to 192.168.100.110/24. The IP address of the PC is set to 192.168.100.109/24. The switch operates as the SSL server, and the browser on the PC operates as the SSL client. 5-167 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 216: Figure 5-62 Ssl Configuration Instance
ZXR10 2900E Series Configuration Guide Figure 5-62 SSL Configuration Instance Configuration Procedure Configure the switch: zte(cfg)#create ca 192.168.100.110/24 ca is creating ,please wait..Rootcafile /flash/data/root.cer, has created! Servercafile /flash/data/server.pem, has created! Serverkeyfile /flash/data/server.key, has created! FS is releasing ,please wait..
Page 217: Figure 5-63 Internet Options Dialog Box
Chapter 5 Service Configuration Figure 5-63 Internet Options Dialog Box b. Click the Content tab, and then click Certificates. The Certificates dialog box is displayed, see Figure 5-64. Figure 5-64 Certificates Dialog Box 5-169 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 218: Figure 5-65 Certificates Dialog Box-Importing A Certificate
ZXR10 2900E Series Configuration Guide c. Click the Trusted Root Certification Authorities tab, and then click Import…, see Figure 5-65. The dialog box for certificate import wizard is displayed. Figure 5-65 Certificates Dialog Box—Importing a Certificate d. Based on the wizard, click Next, a dialog box is displayed. Select the root.cer file.
Page 219: Erps Configuration
(such as the FS or MS command) is executed, the delay time (called WTB time, guard timer time plus five seconds) must be set long enough to receive potential FS, SF, or MS requests from the remote end. This time is long enough for an Ethernet ring 5-171 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 220 ZXR10 2900E Series Configuration Guide node to consecutively send two R-APS messages, and it is also the condition for determining that the Ethernet ring node exists. Note: The WTB timer is valid for the RPL owner node only, and the value range depends on the guard timer.
Page 221: Figure 5-68 Example Of The Primary Node Blocking The Secondary Port (Ring Status: Up)
After the link between switches C and D is restored, the RPL port of the owner node is blocked again, and the ring status changes to pending as shown in Figure 5-68. Configuring ERPS To configure ERPS, perform the following steps. 5-173 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 222 ZXR10 2900E Series Configuration Guide Step Command Function set ERPS domain <1-4> Creates an ERPS domain. ZXR10(config)# protect-instance <1-16> Configures an ERPS ring node. set erps domain ZXR10(config)# <1-4> ring-id <1-239> raps-vlan The raps-vlan parameter should specify a <1-4094>{ring-east {port <portid>| trunk service-unrelated VLAN (not conflicted with <portid>} ring-west {port <portid>| trunk...
Page 223: Figure 5-70 Configuration Example Of A Single Erps Domain With Multiple Loops
1/2 rpl-role neighbour rpl-port west The configuration on switch C is as follows: /*The following commands configure a spanning tree instance:*/ Switch_C(config)#set stp enable Switch_C(config)#set stp instance 1 add vlan 100-110 5-175 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 224 ZXR10 2900E Series Configuration Guide /*The following command configures protection instance 1 for the ERPS domain:*/ Switch_C(config)#set ERPS domain 1 protect-instance 1 /*The following command configures switch C to be a none node: */ Switch_C(config)#set ERPS domain 1 ring-id 1 raps-vlan 4000 ring-east port 1/1...
Page 225: Figure 5-71 Configuration Example Of Multiple Erps Domains
Switch_B(config)#set stp instance 2 add vlan 200-210 /*The following commands configure protection instance 1 for ERPS domain 1*/ /*and protection instance 2 for ERPS domain 2:*/ Switch_B(config)#set ERPS domain 1 protect-instance 1 Switch_B(config)#set ERPS domain 2 protect-instance 2 5-177 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 226: Debug Module Configuration
ZXR10 2900E Series Configuration Guide /*The following command configures switch B to be a neighbor node in domain 1*/ /*and its port 1/2 to be an RPL port:*/ Switch_B(config)#set ERPS domain 1 ring-id 1 raps-vlan 4000 ring-east port 1/1 ring-west port 1/2 rpl-role neighbour rpl-port west...
Page 227 Enables the debug function of layer 3 IP debug protocol layer3 ip enable zte(cfg)# messages. Shows statistical data of all ip ports. debug protocol layer3 ip port zte(cfg)# 5-179 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 228 The following information is an example of the host receiving or sending ARP messages: zte(cfg)#ARP: received request scr 168.1.23.5 0000.0000.0001, dst 168.1.23.218 ipport 1 Enter disable to disable the debug function. 2. Run the debug protocol layer3 ip enable command to the debug information of IP messages, including the link-mtu parameter of IP ports, MAC addresses for receiving messages, and size of IP messages.
Page 229 !!! user not find, can't send trap! decode msg header successfully!!! decode msg context successfully!!! ***encode successfully !!!*** 5-181 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 230 ZXR10 2900E Series Configuration Guide This page intentionally left blank. 5-182 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 231 Permits or denies switch access zte(cfg)# nmp | telnet | ssh | web}{permit | deny}] from a specified IP address or network segment through SSH/SNMP/Telnet/Web. clear remote-access all Deletes all IP address zte(cfg)# configurations. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 232 ZXR10 2900E Series Configuration Guide Command Function clear remote-access ipaddress <A.B.C.D>[<A.B.C.D>] Deletes the configuration of a zte(cfg)# specified IP address and network segment. show remote-access (all configuration modes) Displays the configuration information of Remote-Access. Remote-Access Configuration Instance 1 Configuration Description Only allow the network management user to access the switch from 192.168.1.0/24...
Page 233: Chapter 6 Management
Chapter 6 Management 192.168.1.1/255.255.255.255 snmp, telnet, ssh, web zte(cfg)#set remote-access ipaddress 192.168.1.1 255.255.255.255 snmp deny zte(cfg)#set remote-access ipaddress 192.168.1.1 255.255.255.255 web deny zte(cfg)#show remote-access Whether check remote manage address: YES Allowable remote manage address(es) and application(s): 192.168.1.1/255.255.255.255 telnet,ssh 6.2 SSH...
Page 234: Figure 6-1 Ssh Remote Login Example
ZXR10 2900E Series Configuration Guide Figure 6-1 SSH Remote Login Example Configuration Procedure 1. Switch configuration zte(cfg)#set ssh enable zte(cfg)#show ssh SSH is enabled. There's no ssh user logging in this system. 2. Software configuration The SSH v2.0 client can use the free software PuTTY developed by Simon Tatham.
Page 235: Figure 6-3 Setting The Ssh Version Number
Figure 6-3 Setting the SSH Version Number c. For the first time to log in, user confirmation is needed, see Figure 6-4. Figure 6-4 User Confirmation Dialog Box d. The SSH login result is displayed, see Figure 6-5. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 236: Figure 6-5 Ssh Login Result
ZXR10 2900E Series Configuration Guide Figure 6-5 SSH Login Result SFTP Configuration Instance Configuration Description Figure 6-6, a layer-3 port is configured on the switch, and the IP address is 192.168.1.1/24. The IP address of the PC is 192.168.1.100/24. The SSH and SFTP server functions are enabled on the switch.
Page 237: Figure 6-7 Winscp Login Dialog Box-Creating A Session
Figure 6-7. Figure 6-7 WinSCP Login Dialog Box—Creating a Session 2. From the left navigation tree, select Environment > SFTP, and then set the parameters (you can use the default settings), see Figure 6-8. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 238: Figure 6-8 Winscp Login Dialog Box-Setting Sftp Parameters
ZXR10 2900E Series Configuration Guide Figure 6-8 WinSCP Login Dialog Box—Setting SFTP Parameters 3. From the left navigation tree, select Preferences. The Preferences dialog box is displayed, see Figure 6-9. By default, WinSCP fragments large-size files and adds filepart postfix names.
Page 239: Figure 6-9 Preferences Dialog Box
4. Click OK. The WinSCP Login dialog box is displayed. Click Login. When you log in to the SFTP server for the first time, the Warning dialog box is displayed, Figure 6-10. Figure 6-10 Warning Dialog Box 5. Click Yes. The system starts authentication, see Figure 6-11. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 240: Figure 6-11 Authentication Banner Dialog Box
ZXR10 2900E Series Configuration Guide Figure 6-11 Authentication Banner Dialog Box 6. Click Continue. Enter your password, see Figure 6-12. Figure 6-12 Password Dialog Box 7. Click OK. A message indicating successful authentication is displayed, see Figure 6-13. 6-10 SJ-20130731155059-002|2013-11-27 (R1.0)
Page 241: Privilege
This protects switch configuration from being modified by any user with any permission. Privilege Configuration The Privilege configuration includes the following commands: Command Function privilege {enable | disable} Enables/disables the command zte(cfg)# level function. 6-11 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 242 Configure the switch: /*Enable the privilege function*/ zte(cfg)#privilege enable /*Grant level-12 permission to all functions of the set node*/ zte(cfg)#privilege 12 session 1 part cfg set Configuration Verification 1. Execute the following commands to check the command permission rule. zte(cfg)#show privilege session...
Page 243: Snmp
MIBs. SNMP Configuration The SNMP configuration includes the following commands: Command Function Sets the SNMP engine ID of a set engineID zte(cfg-snmp)# device. 6-13 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 244 ZXR10 2900E Series Configuration Guide Command Function set recvpacket <0-100> Sets the number of SNMP zte(cfg-snmp)# messages that the SNMP protocol stack can handle in a unit time. set src-ipport <0-63> Sets the source IP address of zte(cfg-snmp)# SNMP. create community <string>{public |...
Page 245 Create a community named “zte” with the read/write permission and a view named “vvv”, and then associate the community “zte” with the view “vvv”. Set the IP address of the computer receiving traps to 10.40.92.105, and the community to “zte”.
Page 246 1 vlan 1 zte(cfg-router)#set ipport 1 enable zte(cfg-router)#exit zte(cfg)#config snmp zte(cfg-snmp)#set group ztegroup v3 priv zte(cfg-snmp)#set user zteuser ztegroup v3 md5-auth zte des56-priv zte zte(cfg-snmp)#set host 10.40.92.77 inform v3 zteuser priv 6-16 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 247: Figure 6-15 Mac Change Notification Configuration Network
(that is, 60 seconds). Figure 6-15 MAC Change Notification Configuration Network Configuration Procedure zte(cfg-snmp)#set trap macnotification enable zte(cfg-snmp)#set trap macnotification port 1 enable zte(cfg-snmp)#set trap macnotification history-size 50 zte(cfg-snmp)#set trap macnotification interval 60 Configuration Verification If the number of changed MAC entries reaches 50 within one minute, the switch sends trap information when the number reaches 50 instead of waiting until one minute.
Page 248: Rmon
ZXR10 2900E Series Configuration Guide number of sent entries is 50. If the number of changed MAC entries does not reach 50 within one minute, the switch sends trap information when one minute expires. The number of sent entries is less than or equal to 50. By default, the MAC change notification function is disabled.
Page 249 The instance describes how to set event 2, history 2, alarm 2 and statistics 1 respectively. The DUT device is directly connected to the network management server. Switch Configuration zte(cfg-snmp)#set event 2 description It'sJustForTest!! zte(cfg-snmp)#set event 2 type logandtrap zte(cfg-snmp)#set event 2 community public zte(cfg-snmp)#set event 2 owner zteNj...
Page 250 2 variable 1.3.6.1.2.1.16.2.2.1.6.2.1 zte(cfg-snmp)#set alarm 2 sample absolute zte(cfg-snmp)#set alarm 2 startup rising zte(cfg-snmp)#set alarm 2 threshold 8 eventindex 2 rising zte(cfg-snmp)#set alarm 2 threshold 15 eventindex 2 falling zte(cfg-snmp)#set alarm 2 owner zteNj zte(cfg-snmp)#set alarm 2 status valid...
Page 251: Zgmp
6.6 ZGMP ZGMP Overview ZGMP is ZTE Group Manage Protocol. A cluster is a set of switches in a specific broadcast domain. The switches form a unified management domain, providing an external public network IP address and management interface, and the ability to manage and access each member in the cluster.
Page 252: Figure 6-16 Cluster Management Network
ZXR10 2900E Series Configuration Guide Figure 6-16 Cluster Management Network For changeover rules of the four roles of switches within a cluster, see Figure 6-17. 6-22 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 253: Figure 6-17 Changeover Rules Of Roles
(all configuration modes) Displays detailed ZDP neighbor information. set ztp {enable | disable} Enables or disables the global ZTE zte(cfg-group)# Topology Protocol (ZTP) function. set ztp {port <portlist>| trunk Enables or disables the ZTP zte(cfg-group)# <trunklist>}{enable | disable}...
Page 254 ZXR10 2900E Series Configuration Guide Command Function set ztp hop <1-128> Sets a range (hop count) of zte(cfg-group)# collecting topology information. Sets a time interval for collecting set ztp timer<0-60> zte(cfg-group)# topology information automatically. set ztp portdelay <1-100> Sets a port delay for forwarding zte(cfg-group)# topology requests.
Page 255 2525, the IP address to 100.1.1.10/24, the gateway address to 100.1.1.1, the cluster management VLAN to 4000, the private address pool to 192.168.1.0/24, and the IP address of the TFTP Server in the cluster to 110.1.1.2. 6-25 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 256: Figure 6-18 Cluster Management Network
Figure 6-18 Cluster Management Network Configuration Procedure 1. Configure the public network IP address of the command switch and the gateway. zte(cfg)#set vlan 2525 enable zte(cfg)#set vlan 2525 add port 1-24 tag zte(cfg)#config router zte(cfg-router)#set ipport 25 ipaddress 100.1.1.10/24 zte(cfg-router)#set ipport 25 vlan 2525 zte(cfg-router)#set ipport 25 enable zte(cfg-router)#iproute 0.0.0.0/0 100.1.1.1...
Page 257 Connecting ... Mem1.zte> Mem1.zte>enable password: Mem1.zte (cfg)#set vlan 4000 enable Mem1.zte (cfg)#set vlan 4000 add port 1-16 tag 4. Delete the cluster created on VLAN 1. Cmdr.ZTE(cfg-group)#set group delete member 1-3 Deleting member id : 1 Successed to del member!
Page 258: Sflow
ZXR10 2900E Series Configuration Guide 00.50.43.3c.3b.5d candi ZXR10 2910E-PS 00.00.00.00.33.33 candi ZXR10 2918E Cmdr.zte(cfg-group)#set group add device 1-3 Adding device id : 1 Successed to add member! Adding device id : 2 Successed to add member! Adding device id : 3 Successed to add member! Cmdr.zte(cfg-group)#show group member...
Page 259: Web
1. Open Microsoft Internet Explorer. 2. Enter the IP address of the switch in the address bar (this address is that switch can connect). The system login interface is displayed, see Figure 6-19. 6-29 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 260: Figure 6-19 System Login Interface
ZXR10 2900E Series Configuration Guide Figure 6-19 System Login Interface 3. Enter a username and a password, and select a user privilege. The Admin user needs to enter a login password and a management password. Guest users only need to enter a login password.
Page 261: Figure 6-21 System Information Page
Port Management Port State Information Check Click the directory tree on the left of the system main page, Configuration > Port > Port State. The port state information page is displayed, see Figure 6-22. 6-31 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 262: Figure 6-22 Port State Information Page
ZXR10 2900E Series Configuration Guide Figure 6-22 Port State Information Page This page displays the following port information: Parameter Description PortClass Port class LinkState Port linkup/linkdown state Duplex Duplex working state of the port Speed Working speed of the port Note: Port linkdown means that port hasn’t a physical connection.
Page 263: Figure 6-23 Port Configuration Information Page
Single Port Configuration Click the Config button in the line of the port to be configured on the port configuration information page. The configuration page of this port is displayed, see Figure 6-24. 6-33 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 264: Figure 6-24 Single Port Configuration Page
ZXR10 2900E Series Configuration Guide Figure 6-24 Single Port Configuration Page Configure the attribute of the selected port on this page. After configuration, click the Apply button to complete the configuration. Note: “Security” and “MacLimit” are conflicting. The two attributes cannot be set to be enabled at the same time.
Page 265: Figure 6-25 Bulk Port Configuration Page
You can click previous or next to turn pages or select a page number from the GO drop-down list box. This page displays the following information: 6-35 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 266: Figure 6-27 Vlan Number Entering Page
ZXR10 2900E Series Configuration Guide Parameter Description VlanName VLAN name AdminStatus VLAN enabled or not Tag Ports Port with a tag in the VLAN UntagPorts Port without a tag in the VLAN TagTrunks Trunk with a tag in the VLAN...
Page 267: Figure 6-28 Single Vlan Configuration Page
à Figure 6-29 Bulk VLAN Configuration Page Admin of Select items is used to enable the VLAN. Port is ordinary port of bulk VLAN configuration. Trunk is trunk group of bulk VLAN configuration. 6-37 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 268: Figure 6-30 Pvlan Information Page
ZXR10 2900E Series Configuration Guide After setting some attributes on this page, click Apply to complete the configuration. PLAN Management PVLAN Information Check Click Configuration > PVLAN > Pvlan Overview on the left of the main page. The PVLAN information page is displayed, see Figure 6-30.
Page 269: Figure 6-31 Pvlan Configuration Page
Port Mirroring Management Port Mirroring Information Check Click Configuration > MIRROR > Mirror Overview on the left of the main page. The mirror information page is displayed, see Figure 6-32. 6-39 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 270: Figure 6-32 Mirror Information Page
ZXR10 2900E Series Configuration Guide Figure 6-32 Mirror Information Page This page displays the following information: Parameter Description Source port Mirroring source port Destination port Mirroring destination port Port Mirroring Configuration Click Configuration > MIRROR > Mirror Configure on the left of the main page. The...
Page 271: Figure 6-34 Lacp Basic Attribute Page
When setting the same configuration of bulk aggregation port attribute, click the corresponding check box to select multiple aggregation ports (select Select All to select all ports), and then click Set. The configuration page of bulk aggregation port is displayed, see Figure 6-35. 6-41 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 272: Figure 6-35 Bulk Aggregation Port Configuration Page
ZXR10 2900E Series Configuration Guide Figure 6-35 Bulk Aggregation Port Configuration Page After setting attributes of the aggregation port on this page, click Apply to submit. Aggregation Group Information Check Click Configuration > Lacp > Lacp State on the left of the main page.
Page 273: Figure 6-37 Aggregation Group Configuration Page
Otherwise, the network management will be interrupted. Monitoring Information Terminal Log Check Click Monitoring > Terminal Log on the left of the main page. The terminal log information page is displayed, see Figure 6-38. 6-43 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 274: Figure 6-38 Terminal Log Information Page
ZXR10 2900E Series Configuration Guide Figure 6-38 Terminal Log Information Page Click the Refresh button to update terminal log information. Port Statistics Information Check Click Monitoring > Port Statistics on the left of the main page. The port statistics information page is displayed, see Figure 6-39.
Page 275: Figure 6-40 Configuration Information Page
This page displays configuration information of switch. System Maintenance Configuration Saving Page Click Maintenance > Save on the left of the main page. The saving configuration information page is displayed, see Figure 6-41. 6-45 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 276: Figure 6-41 Saving Configuration Page
ZXR10 2900E Series Configuration Guide Figure 6-41 Saving Configuration Page Click Ok to save configuration or click Cancel to cancel configuration. Caution! Saving configuration will cover the original configuration file. Make sure that the configuration need to be covered before clicking Ok.
Page 277: Figure 6-43 File Upload Page
If the operation is not correct, the switch cannot work. Unprofessional personnel are not recommended to use this function. User Management Click Maintenance > User Manager on the left of the main page. The user management page is displayed, see Figure 6-44. 6-47 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 278: Figure 6-44 User Management Page
ZXR10 2900E Series Configuration Guide Figure 6-44 User Management Page By default, the Modify tab is displayed. Modify the login password and management password of the user, and then click Apply to submit. Adding User Click the add button on the user management page. The adding user page is...
Page 279: M_Button
Select the user to be deleted, and then click Apply to submit. 6.9 M_Button Introduction to the M_Button Function The M_button function is used to display the key statistics data and indicate the key events through the panel indicators, which facilitates device maintenance. 6-49 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 280: Table 6-1 Zxr10 2900E Port Indicator Descriptions
ZXR10 2900E Series Configuration Guide For a description of the port indicators on the ZXR10 2900E, refer to Table 6-1. Table 6-1 ZXR10 2900E Port Indicator Descriptions Indicator State Description LINK No link. On (green) Indicator for the physical link on an optical port.
Page 281 2 seconds, the mode indicator is off. The device enters this mode and executes the function of this mode. If the button is pressed in 2 seconds, the next mode indicator begins flashing. The previous process is repeated. 6-51 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 282: Telnet
Internet login service. With this protocol, users can perform operations on a remote switch through a local PC. A ZTE switch can be used as both a Telnet client and a Telnet server. User can set the listening port number when the device is logged in to through Telnet, also user can set the port number and source IP address when the device is used as a Telnet client to log in to another device.
Page 283: Figure 6-48 Telnet Login Instance
By default, the Telnet service is installed in Windows 2000. Execute the Telnet command on the PC, see Figure 6-49. Figure 6-49 Executing the Telnet Command on the PC For the Telnet login result, see Figure 6-50. 6-53 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 284 ZXR10 2900E Series Configuration Guide Figure 6-50 Telnet Login Result 6-54 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 285: Chapter 7 Maintenance
Monthly Maintenance Items 1. Summarizing daily operations every month. a. Summarizing problems encountered during daily operation. If necessary, discuss with ZTE maintenance engineers. b. Summarizing daily maintenance experience to perform more efficient maintenance in the future. 2. Cleaning the equipment room.
Page 286: Table 7-1 Maintenance Period Of The Ethernet Switch
ZXR10 2900E Series Configuration Guide b. Cleaning cable troughs and secure loosened wires. 3. Cleaning the switch. Ensuring that the cloth is not too wet and that the operation does not affect interfaces. 4. Backing up alarm information, statistics information, and configuration information.
Page 287: Overview
/* Wiring pair for sending data in the twisted pair cable */ Cable Test Passed. No problem found. Cable Length is unknown. Example 2 zte(cfg)#show vct port 8 Cable Test Result for Port 8 RX PAIR : Cable Test Passed. Cable is open.
Page 288: Telnet Connection Failed
ZXR10 2900E Series Configuration Guide Solution 1. Use a correct configuration cable. 2. Check the serial port attributes of HyperTerminal. The correct settings are as follows: Bits per Second (baud rate) is 9600, Data bit is 8, Parity is None, and Flow control is None.
Page 289: Login Username Or Password Lost
: ZXR10 : 00:d0:d0:29:28:01 Press any key to stop autoboot: [ZXR10 Boot]: 2. In [ZXR10 Boot] state, enter [ZXR10 Boot]:zte to enter [BootManager] state of the switch. Enter <?> for command help. [BootManager]: ? - alias for 'help' SJ-20130731155059-002|2013-11-27 (R1.0)
Page 290: Enable Password Lost
ZXR10 2900E Series Configuration Guide - change current path exit - exit from BootManager mode format - format flash - get/put file from/to FTP server help - print online help load - load zImage - list files in current directory...
Page 291: Two Devices In The Same Vlan Cannot Communicate
Most students registered and activated their accounts. After the preparation was completed, ZTE’s maintenance engineers enabled the DOT1X function on the access layer devices of the six buildings, as required by the customer. The configuration of the ZXR10 2900E was as follows: Two devices connected to two ports in the same VLAN cannot ping each other.
Page 292 The students’ accounts and configuration were correct, and the configuration of the ZXR10 2900E was correct. Even if ZTE’s maintenance engineers replaced the faulty switch with a new one, the problem still existed. The diagnosis result was that the interconnection between devices of ZTE and company B was faulty.
Page 293: Solution To Arp Attacks In Campus Network
2. Notify the central equipment room of the school to prohibit the computer from accessing the Internet before its hard disk is formatted and the system is reinstalled. 3. Install an ARP virus kill tool on all computers. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 294 ZXR10 2900E Series Configuration Guide This page intentionally left blank. 7-10 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 295 Figure 5-14 PVLAN Configuration Example 1 ............5-61 Figure 5-15 PVLAN Configuration Example 2 ............5-62 Figure 5-16 Layer 2 Protocol Transparent Transmission Configuration Topology ....................5-64 Figure 5-17 Layer-3 Configuration Instance ............5-67 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 296 ZXR10 2900E Series Configuration Guide Figure 5-18 Layer-3 IPv6 Configuration Instance ............ 5-69 Figure 5-19 DAI Configuration InstanceTopology ............ 5-70 Figure 5-20 Using PAP Mode for Identity Authentication ......... 5-73 Figure 5-21 Using Chap Mode for Identity Authentication ........5-74 Figure 5-22 Using EAP Mode for Identity Authentication .........
Page 297 Figure 6-9 Preferences Dialog Box ................6-9 Figure 6-10 Warning Dialog Box ................6-9 Figure 6-11 Authentication Banner Dialog Box ............6-10 Figure 6-12 Password Dialog Box................6-10 Figure 6-13 Authentication Banner Dialog Box—Successful Authentication .... 6-11 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 298 ZXR10 2900E Series Configuration Guide Figure 6-14 WinSCP Desktop Window..............6-11 Figure 6-15 MAC Change Notification Configuration Network ......... 6-17 Figure 6-16 Cluster Management Network.............. 6-22 Figure 6-17 Changeover Rules of Roles ..............6-23 Figure 6-18 Cluster Management Network.............. 6-26 Figure 6-19 System Login Interface ................
Page 299 Figures Figure 6-49 Executing the Telnet Command on the PC ........... 6-53 Figure 6-50 Telnet Login Result ................6-54 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 300 Figures This page intentionally left blank. SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 301 Table 5-2 Syslog Log Information................5-90 Table 5-3 Basic ZESR Concepts ................5-108 Table 5-4 Basic ZESS Concepts ................5-121 Table 6-1 ZXR10 2900E Port Indicator Descriptions..........6-50 Table 7-1 Maintenance Period of the Ethernet Switch ..........7-2 SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 302 Tables This page intentionally left blank. VIII SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 303 - Common and Internal Spanning Tree - Class of Service - Common Spanning Tree C-VLAN - Customer VLAN - Dynamic ARP Inspection DHCP - Dynamic Host Configuration Protocol - Delay Measurement - Denial of Service SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 304 ZXR10 2900E Series Configuration Guide DSCP - Differentiated Services Code Point EAPOL - Extensible Authentication Protocol Over LAN EAPS - Ethernet Automatic Protection Switching ERPS - Ethernet Ring Protection Switching - File Transfer Protocol GARP - Generic Attribute Registration Protocol...
Page 305 - Operation, Administration and Maintenance - Organizationally Unique Identifier - Provider Edge - Power over Ethernet PPPoE - Point to Point Protocol over Ethernet PVLAN - Private Virtual Local Area Network - Quality of Service SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 306 ZXR10 2900E Series Configuration Guide RADIUS - Remote Authentication Dial In User Service - Remote Defect Indication RMON - Remote Monitoring - Ring Protection Link RSTP - Rapid Spanning Tree Protocol - Side Smart Bias Tee SNMP - Simple Network Management Protocol...
Page 307 VLAN - Virtual Local Area Network - Virtual Private Network - Weighted Round Robin - ZTE Discovery Protocol ZESR - ZTE Ethernet Switch Ring ZESS - ZTE Ethernet Smart Switch - ZTE Topology Protocol XIII SJ-20130731155059-002|2013-11-27 (R1.0) ZTE Proprietary and Confidential...

Zte ZXR10 2900E series Configuration Manual

Chapter 1 Safety Instructions

Chapter 2 System Overview

Chapter 3 Usage and Operation

Chapter 4 System Management

Chapter 5 Service Configuration

Chapter 6 Management

Chapter 7 Maintenance

Quick Links

Configuration Guide

Related Manuals for Zte ZXR10 2900E series

Summary of Contents for Zte ZXR10 2900E series