Huawei SmartAX MA5603T Configuration Manual page 546

SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
Procedure
Step 1 Confirm the board.
huawei>enable
huawei#config
huawei(config)#board confirm 0
Step 2 Configure the NMS.
1.
2.
3.
Issue 01 (2014-04-30)
Configure the IP address of the inband NMS interface.
l Create the NMS VLAN.
huawei(config)#vlan 10 standard
l Add the upstream port.
huawei(config)#port vlan 10 0/19 0-1
It will take several minutes, and console may be timeout, please use
command
idle-timeout to set time
limit
Are you sure to add standard port(s)? (y/n)[n]:y
l Enter the NMS VLAN interface mode.
huawei(config)#interface vlanif 10
l Configure the IP address of the NMS interface.
huawei(config-if-vlanif10)#ip address 10.10.1.3 255.255.255.0
Add the route.
l Configure the route destined to the NMS (Trap destination address).
huawei(config)#ip route-static 2.2.2.2 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip route-static 2.2.2.3 255.255.255.255 10.10.1.1
preference 1
l Configure the route destined to the time server.
huawei(config)#ip route-static 4.4.4.4 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip route-static 4.4.4.5 255.255.255.255 10.10.1.1
preference 1
l Configure the route destined to the log host.
huawei(config)#ip route-static 3.3.3.3 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip route-static 3.3.4.3 255.255.255.255 10.10.1.1
preference 1
Add the ACL rule.
huawei(config)#acl 3050
huawei(config-acl-adv-3050)#rule permit ip source any destination any
huawei(config-acl-adv-3050)#rule deny ip source any destination 10.10.1.2
0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 2.2.2.2 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 2.2.2.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 4.4.4.4 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 4.4.4.5 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 3.3.3.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule permit ip source 3.3.4.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#quit
huawei(config)#packet-filter inbound ip-group 3050 port 0/19/0
huawei(config)#packet-filter inbound ip-group 3050 port 0/19/1
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 Example: Subtending Networking
521