Table of Contents

Advertisement

Quick Links

Quidway S5700 Series Ethernet Switches
V100R006C00
Configuration Guide - Device
Management
Issue
01
Date
2011-07-15
HUAWEI TECHNOLOGIES CO., LTD.

Advertisement

Table of Contents
loading

Summary of Contents for Huawei V100R006C00

  • Page 1 Quidway S5700 Series Ethernet Switches V100R006C00 Configuration Guide - Device Management Issue Date 2011-07-15 HUAWEI TECHNOLOGIES CO., LTD.
  • Page 2 All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope.
  • Page 3: About This Document

    Indicates a tip that may help you solve a problem or save time. Provides additional information to emphasize or supplement NOTE important points of the main text. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 4: Command Conventions

    Change History Updates between document issues are cumulative. Therefore, the latest document issue contains all changes made in previous issues. Changes in Issue 01 (2011-07-15) Initial commercial release. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 5: Table Of Contents

    3.1 Stacking Overview............................25 3.2 Principle of Stacking............................25 3.3 Features of Stacking Supported by the S5700....................31 3.4 Typical Topology of a Stack..........................32 3.5 Configuring the Stacking Function on the S5700....................33 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 6 6.1.2 Information Center Supported by the S5700...................49 6.2 Configuring the Information Center.........................54 6.2.1 Establishing the Configuration Task.......................55 6.2.2 Enabling the Information Center......................55 6.2.3 (Optional) Naming the Information Channel..................56 6.2.4 Defining the Information Channel......................56 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 7 7.7 Canceling VLAN Mirroring..........................79 7.7.1 Establishing the Configuration Task.......................79 7.7.2 Canceling VLAN Mirroring........................79 7.7.3 Checking the Configuration........................80 7.8 Configuring MAC Address-based Local Mirroring..................80 7.8.1 Establishing the Configuration Task.......................80 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 8 7.15.4 Configuring CPU Mirroring........................95 7.15.5 Checking the Configuration........................95 7.16 Cancelling CPU Mirroring..........................96 7.16.1 Establishing the Configuration Task.....................96 7.16.2 Cancelling CPU Mirroring........................96 7.16.3 Checking the Configuration........................96 7.17 Configuration Examples..........................97 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 9 10.2.1 Restarting the S5700 Immediately Through Command Lines............132 10.2.2 Restarting the S5700 by Pressing the Power Button on the S5700.............132 10.3 Restarting the S5700 at a Fixed Time......................132 Issue 01 (2011-07-15) Huawei Proprietary and Confidential viii Copyright © Huawei Technologies Co., Ltd.
  • Page 10: Auto-Config

    1.3 Deploying Unconfigured Switches (Same Network Segment) This section describes how to deploy S5700s without configuration file. 1.4 Deploying Unconfigured Switches (Different Network Segments) This section describes how to deploy unconfigured S5700s. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 11: Overview

    Option 67 The Option 67 field is configured on the DHCP server to specify the configuration file. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 12: Auto-Config Features Supported By The S5700

    Option 147: authentication. 1.2 Auto-Config Features Supported by the S5700 This section describes how Auto-Config runs on the S5700. Figure 1-1 shows the basic process of Auto-Config. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 13 Timer expires, delete Specify it as next startup file temporary startup file configuration and make configuration Restart device Set the restart flag file effective Start a new AutoConfig process Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 14 If the flash memory does not contain any configuration file, the switch checks whether it is added to a Huawei Group Management Protocol (HGMP) cluster. If the switch is not in any HGMP cluster, the switch begins to...
  • Page 15: Deploying Unconfigured Switches (Same Network Segment)

    Ensuring that the switches are not added to any HGMP cluster Data Preparation To deploy unconfigured switches, you need the following data. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 16: Configuring The Dhcp Server

    After Auto-Config is enabled, packets from an unconfigured switch do not carry tags. Therefore, ensure that untagged packets can be transmitted between unconfigured switches and the DHCP server. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 17: Configuring The Ftp/Tftp Server

    Step 3 If the user has specified the activation delay, the configuration file will take effect after the delay. If the user has not specified the activation delay, the configuration file will take effect Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 18: Deploying Unconfigured Switches (Different Network Segments)

    Pre-configuration Tasks Before deploying unconfigured switches, complete the following tasks: Ensuring that there are routes from the DHCP server, DHCP relay, and FTP/TFTP server to the switches Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 19: Configuring The Dhcp Server

    Option 14x. l If you use ordinary characters to configure Option 150 or Option 143 on the DHCP server, the Auto-Config module cannot recognize the IP address. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 20: Configuring Dhcp Relay

    Save the intermediate file and configuration files to the working directory on the FTP/TFTP server. ----End 1.4.5 Checking the Configuration Prerequisite The configurations of the DHCP server, DHCP relay, and FTP/TFTP server are complete. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 21 If you access the switch when it is busy delivering configurations in the Auto-Config process, the switch may not respond in real time. After the configurations take effect, modify the configuration of the downstream interface on the DHCP relay as required. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 22: Nap Configuration

    This chapter describes how to configure the Neighbor Access Protocol (NAP) on the S5700. 2.1 NAP Overview NAP is a Huawei proprietary protocol that implements remote configuration and deployment of unconfigured devices. You can log in to an unconfigured device from a directly connected device and configure the unconfigured device remotely through NAP.
  • Page 23: Nap Overview

    2 NAP Configuration 2.1 NAP Overview NAP is a Huawei proprietary protocol that implements remote configuration and deployment of unconfigured devices. You can log in to an unconfigured device from a directly connected device and configure the unconfigured device remotely through NAP.
  • Page 24: Configuring And Starting The Nap Master Interface

    Do as follows on the switch to configure and start the NAP master interface. In NAP, IP addresses can be allocated either automatically or manually. Procedure Automatic allocation of IP addresses Run: system-view Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 25 The interface view is displayed. Run: nap port master The NAP master interface is configured and started. Run: nap local-ip mast-inter-mast-ip sub-ip mast-inter-sub-ip peer-ip sub- inter-mast-ip sub-ip sub-inter-sub-ip mask-length Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 26: Remote Login

    NAP address of the master device, the remote login fails. If ip source check user-bind enable command is executed on an interface, the interface cannot connect to the NAP neighbor. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 27: Disabling Nap On The Slave Device

    : Enable Nap ip-pool/Mask : 12.12.12.0/24 Run the display nap interface interface-type interface-number command to view the NAP status of the specified interface. <Quidway> display nap interface gigabitethernet0/0/1 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 28: Configuration Examples

    ------------------------------------------------------ 2.3 Configuration Examples This section provides upgrade and maintenance examples together with the configuration flowchart. The configuration examples explain networking requirements, configuration notes, and configuration roadmap. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 29: Example For Configuring Nap-Based Remote Deployment In Static Mode

    Step 1 Configure a NAP master interface on Switch B <Quidway> system-view [Quidway] sysname SwitchB [SwitchB] interface gigabitethernet0/0/1 [SwitchB-GigabitEthernet0/0/1] nap port master Step 2 Configure an IP address for establishing a NAP connection on Switch B Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 30: Example For Configuring Nap-Based Remote Deployment In Automatic Mode

    2-2, the user needs to perform a remote login to Switch B from Switch A. Switch B is the master device, and temporary neighbor relationship is to be set up between Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 31 Step 3 Shutting down NAP on the slave device. # Do as follows on Switch C. <Quidway> system-view [Quidway] sysname SwitchC [SwitchC] undo nap slave enable ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 32 Quidway S5700 Series Ethernet Switches Configuration Guide - Device Management 2 NAP Configuration Configuration Files None Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 33: Stacking

    This section describes how to configure the stacking function on the S5700. 3.6 Configuration Examples This section provides an example for configuring a stack in a ring topology. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 34: Stacking Overview

    The EI devices and SI devices cannot be used in the same stack system. Connect all devices by using leased stack cables and stack modules. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 35 Adding a member switch does not affect the status of the original master switch in the stack. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 36 For more details, see the description of adding a member switch to a stack system and quitting a stack system. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 37 The master switch reassigns stack IDs to these slave switches and synchronizes its configurations to these slave switches. In addition, services in this stack system are interrupted. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 38 B; Switch C and Switch D form Stack-C. In this case, Stack-A is divided into Stack-B and Stack- C, and the process of dividing a stack system is complete. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 39 The dividing of a stack system mentioned here refers to the case that the original master and standby switches belong to different stack systems after the original stack system is divided. In Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 40: Features Of Stacking Supported By The S5700

    For more details, see the related configuration guide. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 41: Typical Topology Of A Stack

    NOTE Do not directly connect stack ports on the same switch to form a loop. Figure 3-4 link Topology SwitchA SwitchB SwitchC stack link common link Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 42: Configuring The Stacking Function On The S5700

    Context When the default reserved VLAN of the stack is used for other services, you need to configure a new reserved VLAN before enabling the stacking function. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 43: Optional) Enabling The Stacking Function

    0s. If stack IDs are not configured for member switches before the stack system is created, the stack system assigns stack IDs to member switches after being Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 44: Optional) Configuring A Stack Priority For A Device

    The MAC address switchover time can be configured before or after the stack system is created. If the MAC address switchover time is configured for all the stack switches before the stack Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 45: Checking The Configuration

    MAC switch delay time: 2 min Stack reserve vlanid : 4093 slot# role Mac address Priority Device type ------ ---- -------------- ------ ------- Master 0018-82b1-6eb4 S5700 Standby 0018-82b1-6eba S5700 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 46: Configuration Examples

    The configuration roadmap is as follows: Configure the MAC address switchover time of the stack system on the master switch. Data Preparation To complete the configuration, you need the following data: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 47 Mac address Priority Device type ------ ---- -------------- ------ ------- Slave 0018-82d2-2e85 S5700 Slave 0018-82c6-1f44 S5700 Standby 0018-82c6-1f4c S5700 Master 0018-82b1-6eb8 S5700 Configuration Files None. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 48: Using Display Commands To Check The Status Of The Device

    This section describes function of display commands. 4.2 Checking the Status of the S5700 This section describes how to check the status of the S5700 by using the display commands. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 49: Introduction

    The version of the specified card is displayed. ----End 4.2.3 Checking the Electronic Labels Context You can run the display elabel command in any view to check the electronic labels. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 50: Checking Temperature

    4.2.6 Checking the Power Supply Status Before replacing a power supply, you need to check the status of the power supply. Procedure Step 1 Run the following command in any view: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 51: Checking The Cpu Usage

    Step 1 Run: display alarm urgent [ slot slot-id | time interval ] The alarms generated during device operation are displayed. ----End 4.2.10 Checking the Status of an Interface Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 52 The system view is displayed. Run: interface interface-type interface-number The interface view is displayed. Run: display this interface The status of the interface in the current interface view is displayed. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 53: Hardware Management

    This section describes how to back up the electronic label of the S5700. 5.4 Configuring Electrical Port Sleep This section describes how to configure electrical port sleep to save energy. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 54: Hardware Management Overview

    To back up the electronic label of the S5700, you need the following data. Data Name of the electronic label backup file Stack ID of the S5700 whose electronic label needs to be backed up Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 55: Backing Up The Electronic Label

    When a device is working normally, you can enable electrical port sleep to save energy. Pre-configuration Tasks None. Data Preparation To configure electrical port sleep, you need the following data. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 56: Enabling Electrical Port Sleep

    The system view is displayed. Run: interface { interface-type interface-number } The interface view is displayed. Run: display this Check whether port sleep is enabled. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 57: Monitoring The Device Through The Information Center

    This section describes how to send information to the specified direction. 6.4 Maintaining the Information Center This section describes how to clear the statistics. 6.5 Configuration Examples This section provides examples for configuring the information center. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 58: Information Center Overview

    BFD device is unreachable, or an internal fault that is generated by the device itself. The fault then needs to be analyzed and removed. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 59 You can, however, customize them to be output from other channels. For example, you can configure logs to be output to the log cache through Channel 6 rather than Channel 4. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 60 Outputs information to the log host that can receive logs, alarms, and debugging information. The information is saved to a log host in the file format for easy reference. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 61 Indication Description <Int_16> Leading character Before logs are output to log hosts, leading characters are added. Logs saved in the local device do not contain leading characters. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 62 Figure 6-3 shows the format of the output alarms. Figure 6-3 Format of the output alarms TimeStamp HostName ModuleName/Severity/BriefDescription Table 6-4 describes each field of the alarm format. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 63: Configuring The Information Center

    Provides brief information of the alarms. Description Description Provides a detailed description of the alarms. 6.2 Configuring the Information Center This section describes how to manage and configure the information center. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 64: Establishing The Configuration Task

    The information center view is displayed. NOTE The system sends the system information to the log host and the console only after the information center is enabled. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 65: Optional) Naming The Information Channel

    Step 2 Run: info-center timestamp debugging { boot | none | { short-date | format-date | date } [ precision-time { tenth-second | second } ] } Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 66: Checking The Configuration

    The system view is displayed. Step 2 Run: info-center console channel { channel-number | channel-name } Information is sent to the console. Step 3 Run: quit Return to the user view. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 67: Sending Information To The Telnet Terminal

    The terminal is enabled to display debugging information, logs, and traps. NOTE Step 4 Step 5 are not listed in sequence. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 68: Sending Information To The Snmp Agent

    Information is sent to the log buffer. ----End 6.3.5 Sending Information to the Trap Buffer Context Do as follows on the S5700. Procedure Step 1 Run: system-view The system view is displayed. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 69: Sending Information To The Log Host

    Run the preceding command. If the information center can send the statistics to the destination terminal, it means that the configuration succeeds. 6.4 Maintaining the Information Center This section describes how to clear the statistics. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 70: Configuration Examples

    Disable the sending of the traps and debugging information to the log host. Configure the log host. Data Preparation To complete the configuration, you need the following data: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 71 0, overwritten messages 0 Trap buffer: enabled,max buffer size 1024, current buffer size 256, current messages 1, channel number:3, channel name:trapbuffer dropped messages 0, overwritten messages 0 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 72 10 info-center loghost 1.0.0.1 vlan batch 10 interface vlanif10 ip address 2.0.0.1 255.0.0.0 interface GigabitEthernet0/0/1 port hybrid untagged vlan 10 return Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 73: Mirroring

    7.11 Configuring Local Flow Mirroring This section describes how to configure local flow mirroring. 7.12 Configuring Remote Flow Mirroring This section describes how to configure remote flow mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 74 This section describes how to configure CPU mirroring. 7.16 Cancelling CPU Mirroring This section describes how to cancel CPU mirroring. 7.17 Configuration Examples This section provides several configuration examples for mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 75: Introduction

    Remote mirroring The observing port and mirrored port are on different switches. NOTE The S5700 does not support the function of mirroring a flow to multiple observing ports. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 76: Port Mirroring

    Figure 7-2 Schematic diagram of flow mirroring Mirror port Switch Mirror Observe port port Port Match traffic classification Data flow Copy of data flow Sniffer host Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 77 Figure 7-3 Networking diagram of RSPAN Destination Source Switch Switch Observe port Mirror Observe port port Sniffer host Intermediate Switch Port Data flow Copy of data flow Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 78: Configuring Local Port Mirroring

    Data Preparation To configure local port mirroring, you need the following data. Data Type and number of the observing port Type and number of the mirrored port Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 79: Configuring Local Port Mirroring

    Action Command Check information about port display port-mirroring mirroring. Check information about the display observe-port observing port. If the following results are obtained, the configuration is successful: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 80: Configuring Remote Port Mirroring

    Procedure Specify a mirrored port and an RSPAN VLAN on the source switch. NOTE The mirrored port cannot be added to the RSPAN VLAN. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 81 Run: system-view The system view is displayed. Run: vlan vlan-id The RSPAN VLAN is created and the RSPAN VLAN view is displayed. Run: quit Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 82 The interface is added to the RSPAN VLAN. Run: interface interface-type interface-number The observing port view is displayed. Run: port hybrid untagged vlan vlan-id Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 83: Checking The Configuration

    You must cancel port mirroring on the bound observing port before deleting this observing port. Pre-configuration Tasks None. Data Preparation To cancel port mirroring, you need the following data. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 84: Canceling Port Mirroring

    Run the display port-mirroring command. If port mirroring is cancelled properly, the configuration is successful. 7.5 Configuring Local VLAN Mirroring This section describes how to configure local VLAN mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 85: Establishing The Configuration Task

    The view of the mirrored VLAN is displayed. Step 4 Run: mirroring to observe-port index inbound VLAN mirroring is configured. To observe incoming packets from multiple VLANs, repeat Step 3 Step ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 86: Checking The Configuration

    To configure remote VLAN mirroring, you need the following data. Data Type and number of the observing port ID of the mirrored VLAN ID of the RSPAN VLAN Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 87: Configuring Remote Vlan Mirroring

    The configuration is the same as that for remote port mirroring. For details, see 7.3.2 Configuring Remote Port Mirroring. Configure the remote observing port on the destination switch. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 88: Checking The Configuration

    Pre-configuration Tasks None. Data Preparation To cancel VLAN mirroring, you need the following data. Data ID of the mirrored VLAN to be deleted 7.7.2 Canceling VLAN Mirroring Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 89: Checking The Configuration

    S5700 as the observing port. Pre-configuration Tasks None. Data Preparation To configure local MAC address mirroring, you need the following data. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 90: Configuring Local Span Based On Mac Addresses

    Check information about port display port-mirroring mirroring. If the following results are obtained, the configuration is successful: The type of the observing port is configured properly. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 91: Configuring Rspan Based On Mac Addresses

    The mirrored port cannot be added to the RSPAN VLAN. The S5700SI series do not support remote MAC address mirroring. Run: system-view The system view is displayed. Run: vlan vlan-id Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 92: Checking The Configuration

    Command Check information about the display observe-port observing port. Check information about MAC display port-mirroring address mirroring. If the following results are obtained, the configuration is successful: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 93: Canceling Mirroring Based On Mac Addresses

    The view of the VLAN that monitored MAC address belongs to is displayed. Step 3 Run: undo mac-mirroring mac-address inbound Mirroring based on MAC addresses is canceled. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 94: Checking The Configuration

    There is no specified order among the matching rules in a traffic classifier. You can combine these rules. For details on configuring traffic classification rules, see Configuring Complex Traffic Classification in the Quidway S5700 Series Ethernet Switches Configuration Guide - QoS. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 95: Configuring Flow Mirroring

    A traffic policy is created and the policy view is displayed. Step 3 Run: classifier classifier-name behavior behavior-name A traffic behavior is configured for a specified class in the traffic policy. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 96: Checking The Configuration

    The traffic policy contains a proper traffic classifier and a traffic behavior and the traffic behavior contains a flow mirroring action. 7.12 Configuring Remote Flow Mirroring This section describes how to configure remote flow mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 97: Establishing The Configuration Task

    The mirrored port cannot be added to the RSPAN VLAN. The S5700SI series do not support remote flow mirroring. Run: system-view The system view is displayed. Run: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 98: Creating And Applying A Traffic Policy

    For how to configure traffic classification rules on the source S5700, see 7.11.4 Creating and Applying a Traffic Policy. 7.12.5 Checking the Configuration Run the following commands to check the previous configuration. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 99: Canceling Flow Mirroring

    To cancel flow mirroring, you need the following data. Data Type and number of the interface where flow mirroring needs to be cancelled Name of the traffic policy Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 100: Canceling Flow Mirroring

    7.13.3 Checking the Configuration Run the following commands to check the previous configuration. Action Command Check information about the display observe-port observing port. Check information about port display port-mirroring mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 101: Changing Or Deleting An Observing Port

    Type and number of the new observing port 7.14.2 (Optional) Deleting an Observing Port Prerequisite Before deleting an observing port, make sure that the observing port is not used in any mirroring configuration. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 102: Optional) Changing An Observing Port

    7.14.4 Checking the Configuration Run the following commands to check the previous configuration. Action Command Check information about the display observe-port observing port. Check information about port display port-mirroring mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 103: Configuring Cpu Mirroring

    An Access Control List (ACL) is created and the ACL view is displayed. For details on the acl command, see the Quidway S5700 Series Ethernet Switches - Command Reference. Step 3 Run: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 104: Configuring An Observing Port

    7.15.5 Checking the Configuration Run the following commands to check the previous configuration. Action Command Check information about port display port-mirroring mirroring. Check information about CPU display cpu port-mirroring mirroring. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 105: Cancelling Cpu Mirroring

    Step 3 (Optional) Run: undo observe-port index The index of the observing port is deleted. ----End 7.16.3 Checking the Configuration Run the following commands to check the previous configuration. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 106: Configuration Examples

    L2 Switch Configuration Roadmap The configuration roadmap is as follows: Configure GigabitEthernet 0/0/24 as an observing port. Configure GigabitEthernet 0/0/1 as a mirrored port. Data Preparation None. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 107: Example For Configuring Local Vlan Mirroring

    GigabitEthernet0/0/1 port trunk allow-pass vlan 1 port-mirroring to observe-port 1 inbound interface GigabitEthernet0/0/3 port trunk allow-pass vlan 1 return 7.17.2 Example for Configuring Local VLAN Mirroring Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 108: Networking Requirements

    Add GigabitEthernet0/0/2 to VLAN 10 as an access interface in the same way. Configure an observing port. # Set GigabitEthernet0/0/3 as an observing port. [Switch] observing-port 1 interface gigabitethernet 0/0/3 Configure a mirrored VLAN. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 109: Example For Configuring Mac Address-Based Local Mirroring

    VLAN 10 needs to be monitored. In this case, you can configure local MAC address mirroring on the Switch. GigabitEthernet 0/0/3 serves as an observing port. The MAC address of GigabitEthernet 1/0/1 is 0001-0001-0001. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 110 Observe index 2 is not set to any interface Observe index 3 is not set to any interface Observe index 4 is not set to any interface Configuration Files Configuration file of the Switch Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 111: Example For Configuring Local Flow Mirroring

    GigabitEthernet 0/0/1 and GigabitEthernet 0/0/5 and transmitted from GigabitEthernet 0/0/3 need to be monitored. In this example, packets with the 802.1p priority as 6 need to be monitored. GigabitEthernet 0/0/24 is configured as an observing port. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 112 VLAN in trunk mode. The following takes the configuration of GigabitEthernet 0/0/1 as an example. The configurations of GigabitEthernet 0/0/3 and GigabitEthernet 0/0/5 are the same as the configuration of GigabitEthernet 0/0/1 and are not mentioned here. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 113 GigabitEthernet 0/0/1 and GigabitEthernet 0/0/5. [Switch] display traffic policy interface Interface: GigabitEthernet0/0/1 Direction: Inbound Policy: p1 Classifier: c1 Rule(s) : if-match 8021p 6 Behavior: b1 Mirroring to observe-port 1 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 114: Example For Configuring Remote Port Mirroring

    7-8, Switch A is connected to PC1; Switch C is connected to PC2. Now, incoming traffic of GigabitEthernet0/0/2 on Switch A needs to be monitored on PC2. In this case, you can configure remote port mirroring on Switch A. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 115 [SwitchA-GigabitEthernet0/0/1] port trunk allow-pass vlan 2 [SwitchA-GigabitEthernet0/0/1] quit # Configure remote port mirroring for incoming traffic on GigabitEthernet0/0/2. [SwitchA] interface gigabitethernet 0/0/2 [SwitchA-GigabitEthernet0/0/2] port-mirroring to observe-port 1 inbound [SwitchA-GigabitEthernet0/0/2] quit Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 116 GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 2 interface GigabitEthernet0/0/2 port-mirroring to observe-port 1 inbound return Configuration file of Switch B sysname SwitchB vlan 2 Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 117: Example For Changing An Observing Port

    1 as an observing port. Enable host 1 to receive incoming traffic from GigabitEthernet 0/0/1. At present, host 2 needs to receive incoming traffic from GigabitEthernet 0/0/1. Therefore, the observing port needs to switch from GigabitEthernet 0/0/24 to GigabitEthernet 0/0/5. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 118 Direction Observe-port ---------------------------------------------------------- GigabitEthernet0/0/1 Inbound GigabitEthernet0/0/24 Delete the mirrored port. # Delete the mirrored port GigabitEthernet 0/0/1. <Switch> system-view [Switch] interface GigabitEthernet 0/0/1 [Switch-GigabitEthernet0/0/1] undo port-mirroring inbound Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 119 Direction Observe-port ---------------------------------------------------------- GigabitEthernet0/0/1 Inbound GigabitEthernet0/0/5 Configuration Files Configuration file of the Switch sysname Switch observe-port 1 interface GigabitEthernet0/0/5 interface GigabitEthernet0/0/1 port-mirroring to observe-port 1 inbound return Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 120: Poe Configuration

    This section describes the PoE features supported by the S5700. 8.3 Configuring PoE Functions This section describes how to configure PoE functions. 8.4 Configuration Examples This section provides an example for configuring PoE on the S5700. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 121: Poe Overview

    When two PoE power supplies are used, determine their working mode according to the following table. Power Supply Combination Available PoE Power 250 W constant current 123.2W – 500 W constant current 369.6W – Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 122: Configuring Poe Functions

    The maximum output power of a board is set. The value of maximum-power ranges from 15400 to 739200, in mW. (Optional) Configuring the PoE power supply management mode Run: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 123 Then the system software has time to power off interfaces of low priority to ensure stable running of other PDs. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 124: Configuring The Poe Function On An Interface

    By default, the PoE function is enabled on all interfaces. Step 2 Optional: Set the maximum output power of an interface. Run: system-view The system view is displayed. Run: interface interface-type interface-number Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 125 PDs that do not comply with IEEE 802.3af. Run: system-view The system view is displayed. Run: interface interface-type interface-number Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 126: Checking The Configuration

    Step 5 Run the display poe power-state interface interface-type interface-number command to view the status of PoE power supply on an interface. ----End 8.4 Configuration Examples This section provides an example for configuring PoE on the S5700. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 127: Example For Configuring Poe On The Switch

    Enable PoE on GE 0/0/3 of Switch, and set the maximum power consumption of GE 0/0/3. Configure the maximum power consumption of the interface connecting the AP on Switch. Configure the power supply management of Switch to be in automatic mode. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 128 Configuration file of Switch sysname Switch interface GigabitEthernet0/0/1 poe power 12000 poe priority critical interface GigabitEthernet0/0/2 poe power 20000 interface GigabitEthernet0/0/3 poe power 2500 interface GigabitEthernet0/0/4 return Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 129: Als Configuration

    Configuring ALS of the laser of an optical module in the interface view provides security protection and saves energy. 9.4 Configuration Examples This section provides a configuration example of ALS. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 130: Als Overview

    To solve this problem, you can enable the ALS function on the switch to protect safety of users. Figure 9-2 shows the connection. Figure 9-2 Connecting the switch and ONT through the fiber Switch Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 131: Configuring Als

    Before configuring ALS, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This helps you complete the configuration task quickly and accurately. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 132: Enabling Als On An Interface

    The link aggregation group does not support ALS. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 133: Optional) Setting The Restart Mode Of The Laser

    9.3.4 (Optional) Starting the Laser Manually When the laser works in automatic restart mode, you need to manually open the laser so that the laser sends one pulse. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 134: Optional) Setting The Als Pulse Interval And Width Of The Laser

    A smaller pulse width and a greater pulse interval save more energy but reduce the speed of fiber link recovery. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 135: Checking The Configuration

    After ALS is enabled on both interfaces of the fiber link, the laser stops sending pulses if a fault occurs on the fiber link. If the faulty link is recovered, the laser starts to send pulses. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 136 # Set the ALS pulse interval and width of the laser. [SwitchB-GigabitEthernet0/0/1] undo als restart mode manual [SwitchB-GigabitEthernet0/0/1] als restart pulse-interval 200 [SwitchB-GigabitEthernet0/0/1] als restart pulse-width 3 Step 3 Verify the configuration. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 137 200 als restart pulse-width 3 return Configuration file of Switch B sysname SwitchB interface GigabitEthernet0/0/1 als enable als restart pulse-interval 200 als restart pulse-width 3 return Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 138: Restarting And Resetting

    This section describes how to restart the S5700 immediately. 10.3 Restarting the S5700 at a Fixed Time This section describes how to restart the S5700 at a fixed time. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 139: Introduction

    BootROM asks you whether to reboot the system. The message is as follows: Info: The system is now comparing the configuration, please wait. System will reboot! Continue?[Y/N]:y Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 140: Restarting The S5700 Immediately

    Quidway S5700 Series Ethernet Switches Configuration Guide - Device Management 10 Restarting and Resetting BIOS LOADING ... Copyright (c) 2008-2010 HUAWEI TECH CO., LTD. CX22EFFE (Ver124, Jun 9 2010, 17:41:46) Press Ctrl+B to enter BOOTROM menu ... 0 Press Ctrl+B within two seconds. The system prompts you to enter the password of the advanced BootROM menu as follows: The default password is huawei.
  • Page 141: Restarting The S5700 Immediately Through Command Lines

    Step 2 Press the power button on the S5700 again to restart the S5700. ----End 10.3 Restarting the S5700 at a Fixed Time This section describes how to restart the S5700 at a fixed time. Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 142 The function of restarting the S5700 at a fixed time is enabled. The S5700 does not support the function of restarting the S5700 at a fixed time by default. ----End Issue 01 (2011-07-15) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

Table of Contents