Dasan Networks V5812G User Manual

Dasan Networks V5812G User Manual

Gpon olt system
Table of Contents

Advertisement

Quick Links

V5812G
GPON OLT system
User Manual

Advertisement

Table of Contents
loading

Summary of Contents for Dasan Networks V5812G

  • Page 1 V5812G GPON OLT system User Manual...
  • Page 2 UMN:CLI User Manual V5812G ※ Copyright 2011 ⓒ DASAN Networks, Inc. Issued by Technical Documentation Team Korea Technical modifications possible. Technical specifications and features are binding only insofar as they are specifically and expressly agreed upon in a written contract.
  • Page 3 User Manual UMN:CLI V5812G Contents of Update Issue No. 1 Chapter/Section Contents Initial release Issue History Issue Date Update Number May. 2011 Initial release (NOS version 4.80)
  • Page 4: Table Of Contents

    UMN:CLI User Manual V5812G Contents 1 Introduction ..................25 Audience ....................25 Document Structure ................25 Document Convention ................26 Document Notation ................26 Virus Protection ..................27 GPL/LGPL Warranty and Liability Exclusion ........27 2 System Overview ................29 System Features ..................
  • Page 5 User Manual UMN:CLI V5812G 4.1.8.1 Manual System Rebooting ................55 4.1.9 Auto Reset Configuration ................56 4.1.9.1 CPU Load ...................... 56 4.1.9.2 Memory ......................56 4.1.9.3 Network Connection ..................57 System Authentication ................59 4.2.1 Authentication Method ................59 4.2.2 Authentication Interface ................
  • Page 6 UMN:CLI User Manual V5812G 4.5.2.2 Interval of Re-Authentication ................76 4.5.2.3 Interval of Requesting Re-Authentication ............76 4.5.2.4 802.1x Re-Authentication ................76 4.5.3 Initializing Authentication Status ..............77 4.5.4 Restoring Default Value ................77 4.5.5 Displaying 802.1x Configuration ..............77 4.5.6...
  • Page 7 User Manual UMN:CLI V5812G 6.2.2 Writing System Configuration ..............98 6.2.3 Auto-Saving....................99 6.2.4 System Configuration File ................99 6.2.5 Restoring Default Configuration ..............100 6.2.6 Core Dump File ..................101 System Management ................102 6.3.1 Network Connection .................. 102 6.3.2...
  • Page 8 UMN:CLI User Manual V5812G 7.2.1 Enabling OAM ..................126 7.2.2 OAM Link Monitoring ................127 7.2.3 EFM OAM Mode ..................128 7.2.4 OAM Loopback ..................128 7.2.5 OAM Unidirection ..................129 7.2.6 Displaying EFM OAM Configuration ............129 Link Layer Discovery Protocol (LLDP) ..........130 7.3.1...
  • Page 9 User Manual UMN:CLI V5812G 7.6.2 Packet Classification ................. 148 7.6.2.1 Flow Mode ....................149 7.6.2.2 Flow Creation ....................149 7.6.2.3 Configuring Flow ..................150 7.6.2.4 Applying and modifying Flow................ 152 7.6.2.5 Class Creation ....................152 7.6.3 Packet Conditioning .................. 153 7.6.3.1...
  • Page 10 UMN:CLI User Manual V5812G 7.13.2 Configuring MAC Filter Policy ..............183 7.13.3 Listing MAC Filter Policy ................184 7.13.4 Displaying MAC Filter Policy ..............184 7.14 Address Resolution Protocol (ARP) ........... 185 7.14.1 ARP Table ....................185 7.14.1.1 Registering ARP Table ................. 185 7.14.1.2 ARP Log Interval ..................
  • Page 11 User Manual UMN:CLI V5812G 8.1.8 Displaying VLAN Information ..............215 8.1.9 QinQ ......................215 8.1.9.1 Double Tagging Operation ................216 8.1.9.2 Double Tagging Configuration ..............217 8.1.9.3 TPID Configuration ..................217 8.1.10 Layer 2 Isolation ..................218 8.1.10.1 Port Isolation ....................218 8.1.10.2 Shared VLAN ....................
  • Page 12 UMN:CLI User Manual V5812G 8.3.9.3 Max Age ....................... 252 8.3.9.4 BPDU Hop ....................252 8.3.9.5 BPDU Filter ....................253 8.3.9.6 BPDU Guard ....................253 8.3.9.7 Displaying BPDU Configuration ..............254 8.3.10 Sample Configuration ................254 Ethernet Ring Protection (ERP) ............257 8.4.1...
  • Page 13 User Manual UMN:CLI V5812G 8.6.2.3 Relay Agent Information Pattern ..............280 8.6.2.4 Associating DHCP Class ................281 8.6.2.5 Range of IP Address for DHCP Class ............281 8.6.3 DHCP Lease Database ................282 8.6.3.1 DHCP Database Agent ................. 282 8.6.3.2 Displaying DHCP Lease Status ..............
  • Page 14 UMN:CLI User Manual V5812G 8.6.11 Debugging DHCP ..................304 Virtual Router Redundancy Protocol (VRRP) ........305 8.7.1 Configuring VRRP ..................306 8.7.1.1 Associated IP Address ................. 306 8.7.1.2 Access to Associated IP Address ..............306 8.7.1.3 Master Router and Backup Router .............. 306 8.7.1.4...
  • Page 15 User Manual UMN:CLI V5812G 9.2.1.2 Forwarding Entry Aging ................338 9.2.1.3 Displaying McFDB Information ..............338 9.2.2 IGMP Snooping Basic ................339 9.2.2.1 Enabling IGMP Snooping ................340 9.2.2.2 IGMP Snooping Version ................340 9.2.2.3 IGMP Snooping Robustness Value .............. 341 9.2.3...
  • Page 16 UMN:CLI User Manual V5812G 9.3.2.3 Neighbor Filtering ..................370 9.3.2.4 PIM Join/Prune Message Group Filtering ............ 371 9.3.2.5 PIM Hello Message ..................371 9.3.2.6 PIM Join/Prune Interval ................372 9.3.2.7 PIM VIF Flap Discredit ................. 372 9.3.2.8 PIM Static Join ..................... 373 9.3.2.9...
  • Page 17 User Manual UMN:CLI V5812G 10.1.8.5 Session Reset of Peer Group............... 404 10.1.9 Displaying and Managing BGP ..............405 10.1.9.1 BGP Neighbor ....................405 10.1.9.2 Logging Neighbor Changes ................. 406 10.1.9.3 Checking the BGP Network Route ............... 406 10.1.9.4 Sending SNMP Trap ..................406 10.1.10 BGP Debug ....................
  • Page 18 UMN:CLI User Manual V5812G 10.3.1 Enabling RIP .................... 439 10.3.2 RIP Neighbor Router ................440 10.3.3 RIP Version ....................441 10.3.4 Creating available Static Route only for RIP ..........442 10.3.5 Redistributing Routing Information ............442 10.3.6 Metrics for Redistributed Routes .............. 444 10.3.7 Administrative Distance ................
  • Page 19 User Manual UMN:CLI V5812G 11.2.1.5 Changing ONU Registration Mode ............... 467 11.2.1.6 ONU Description ..................467 11.2.2 Assigning IP address ................467 11.2.3 Activating Administration for UNI .............. 468 11.2.4 ONU Reset ....................468 11.2.5 Forward Error Correction (FEC) Mode ............. 468 11.2.6 Loopback ....................
  • Page 20 UMN:CLI User Manual V5812G 11.5.4.1 GEM Port Configuration ................503 11.5.4.2 Displaying T-CONT Information ..............503 11.5.5 IP Host Service Configuration ..............503 11.5.5.1 IP Address ....................504 11.5.5.2 DNS ......................504 11.5.5.3 VLAN Tagging Operating ................504 11.5.5.4 VLAN Tagging Filtering ................505 11.5.5.5 VoIP Service Link ..................
  • Page 21 User Manual UMN:CLI V5812G 11.7.4 Payload Size ..................... 530 11.7.5 Payload Encapsulation Delay ..............531 11.7.6 Timing Mode ..................... 531 11.7.7 RTP Pseudowire Parameter ..............531 11.7.7.1 Clock Reference ................... 532 11.7.7.2 RTP Time Stamp Mode ................532 11.7.7.3 RTP Payload Type ..................532 11.7.7.4 RTP Synchronization Source ...............
  • Page 22 UMN:CLI User Manual V5812G Illustrations Fig. 2.1 V5812G ......................29 Fig. 3.1 Overview of Configuration Mode ..............41 Fig. 4.1 Process of 802.1x Authentication ..............71 Fig. 4.2 Multiple Authentication Servers ..............72 Fig. 5.1 Port Mirroring ....................85 Fig. 6.1 Ping Test for Network Status ...............
  • Page 23 Example of Cascading ................. 314 Fig. 8.41 Rate Limit and Flood Guard ................. 319 Fig. 9.1 The V5812G with IGMP Snooping ............... 325 Fig. 9.2 The V5812G with PIM-SM ................326 Fig. 9.3 The Switch with IGMP Snooping and PIM-SM ..........326 Fig.
  • Page 24 UMN:CLI User Manual V5812G Tables Tab. 1.1 Overview of Chapters ..................25 Tab. 1.2 Command Notation of Guide Book ..............26 Tab. 3.1 Main Command of Privileged EXEC View Mode .......... 34 Tab. 3.2 Main Command of Privileged EXEC Enable Mode ........34 Tab.
  • Page 25: Introduction

    V5812G 1 Introduction Audience This manual is intended for V5812G multi-platform GPON OLT system operators and maintenance personnel for providers of Gigabit passive optical network (GPON) and Ethernet services. This manual assumes that you are familiar with the following: •...
  • Page 26: Document Convention

    UMN:CLI User Manual V5812G Document Convention This guide uses the following conventions to convey instructions and information. Information This information symbol provides useful information when using commands to configure and means reader take note. Notes contain helpful suggestions or references.
  • Page 27: Virus Protection

    You will, however, be required to reimburse Dasan Networks for its costs of postage and copying. Any source code request made by you must be sent within 3 years of your purchase of the product.
  • Page 28 User Manual V5812G You have no warranty claims against Dasan Networks when a defect in the product is or could have been caused by changes made by you in any part of the software or its configuration. In addition, you have no warranty claims against Dasan Networks when the Open Source Software infringes the intellectual property rights of a third party.
  • Page 29: System Overview

    Ethernet in the first mile, providing voice, data, and video solutions. V5812G is a compact GPON Optical Line Terminal (OLT) that is comprised of GPON OLT 4-port modules with SFP GPON OLT transceiver. Up to four GPON links can be serviced through the development system‘s 8 Gigabit Ethernet interfaces as combo uplink ports.
  • Page 30: System Features

    Network operator can use MIB also to monitor and manage the V5812G. IP Routing The V5812G is Layer 3 switch, which has routing table and IP address as router. Therefore, it supports static routing, RIPv1/v2, OSPFv2 and BGPv4 for unicast routing.
  • Page 31 V5812G Spanning Tree Protocol (STP) To prevent loop and preserve backup route in Layer 2 network, the V5812G supports Spanning Tree Protocol (STP) defined in IEEE 802.1D. Between STP enabled switches, a root bridge is automatically selected and the network remains in tree topology. However, the recovery time in STP is very slow (about 30 seconds), Rapid Spanning Tree Protocol (RSTP) is also provided.
  • Page 32 User Manual V5812G RADIUS and TACACS+ The V5812G supports client authentication protocol, that is RADIUS (Remote Authentication Dial-In User Service) and TACACS+ (Terminal Access Controller Access Control System Plus). Not only user IP and password registered in switch but also authentication through RADIUS server and TACACS+ server are required to access.
  • Page 33: Command Line Interface (Cli)

    V5812G connects inband to the cascading switch, and then from the cascading switch to the management network through the outband interface. The V5812G also provides the RS232 console interface to simply access the system with a provided RJ45-to-DB9 cable.
  • Page 34: Privileged Exec View Mode

    UMN:CLI User Manual V5812G 3.1.1 Privileged EXEC View Mode When you log in to the switch, the CLI will start with Privileged EXEC View mode which is a read-only mode. In this mode, you can see a system configuration and information with several commands.
  • Page 35: Global Configuration Mode

    User Manual UMN:CLI V5812G 3.1.3 Global Configuration Mode In Global Configuration mode, you can configure general functions of the system. You can also open another configuration mode from this mode. To open Global Configuration mode, enter the configure terminal command, and then the system prompt will be changed from SWITCH# to SWITCH(config)#.
  • Page 36: Dhcp Pool Configuration Mode

    DHCP Pool Configuration Mode In DHCP Pool Configuration mode, you can configure general functions of DHCP per each DHCP pool. The V5812G supports multiple DHCP environments with this pool- based DHCP configuration. To open DHCP Pool Configuration mode, enter the ip dhcp pool command, then the system prompt will be changed from SWITCH(config)# to SWITCH(config-dhcp[POOL])#.
  • Page 37: Dhcp Option 82 Configuration Mode

    User Manual UMN:CLI V5812G Tab. 3.7 is the main commands of DHCP Option Configuration mode. Command Description attr Configures the attribute for option field in the DHCP packet. Tab. 3.6 Main Command of DHCP Option Configuration Mode 3.1.7 DHCP Option 82 Configuration Mode In DHCP Option 82 Configuration mode, you can configure DHCP option 82 for DHCP relay agent.
  • Page 38: Rule Configuration Mode

    Main Command of Rule Configuration Mode 3.1.10 RMON Configuration Mode In RMON Configuration mode, you can configure RMON alarm, RMON event and RMON history. The V5812G provides three different configuration modes to configure each type of RMON. Command Mode Description rmon-alarm <1-65535>...
  • Page 39: Router Configuration Mode

    In Router Configuration mode, you can configure IP routing protocols and VRRP. The V5812G provides three IP routing protocols such as RIP v2, BGP v4 and OSPF v2. To open Rule Configuration mode, enter the router command, then the system prompt will be changed from SWITCH(config)# to SWITCH(config-router)#.
  • Page 40: Gpon Configuration Mode

    UMN:CLI User Manual V5812G Tab. 3.12 shows main commands of Route-map Configuration mode. Command Description match Classifies routing information to permit or deny. Configures routing information options. Tab. 3.12 Main Command of Route-map Configuration Mode 3.1.13 GPON Configuration Mode In PON Configuration mode, you can configure GPON-related functions. To open GPON Configuration mode, enter the gpon command, then the system prompt will be changed from SWITCH(config)# to SWITCH(gpon)#.
  • Page 41: Configuration Mode Overview

    Configures an VLAN filtering. Tab. 3.14 Main Command of ONU Profile Configuration Mode Configuration Mode Overview Fig. 3.1 shows the overview of the configuration mode for the V5812G. Privileged EXEC View SWITCH> exit Back to previous mode enable Privileged EXEC Enable...
  • Page 42: Useful Tips

    UMN:CLI User Manual V5812G Useful Tips This section describes useful tips for operating the V5812G with a CLI. • Listing Available Command • Calling Command History • Using Abbreviation • Using Command of Privileged EXEC Enable Mode • Exit Current Command Mode 3.3.1...
  • Page 43 -- more -- Press the <ENTER> key to skip to the next list. In case that the V5812G installed command shell, you can find out commands starting with a specific alphabet. Input the first letter and question mark without space. The following is an example of finding out the commands starting ―s‖...
  • Page 44: Calling Command History

    UMN:CLI User Manual V5812G The V5812G also provides the simple instruction of calling the help string with the help command. You can see the instruction using the command regardless of the configuration mode. To display the instruction of calling the help string for using CLI, use the following command.
  • Page 45: Using Abbreviation

    User Manual UMN:CLI V5812G To save the command history in non-volatile memory, use the following command. Command Mode Description Saves the command history. history non-volatile [<10-2000>] Global 10-2000: history recording max. count (default:2000) To delete the non-volatile command history, use the following command.
  • Page 46: Using Command Of Privileged Exec Enable Mode

    UMN:CLI User Manual V5812G 3.3.4 Using Command of Privileged EXEC Enable Mode You can execute the commands of Privileged EXEC Enable mode as show, ping, telnet, traceroute, and so on regardless of which mode you are located on. To execute the commands of Privileged EXEC Enable mode on different mode, use the following command.
  • Page 47: System Connection And Ip Address

    4 System Connection and IP Address System Connection After installing the system, the V5812G is supposed to examine that each port is correctly connected to network and management PC. You can connect to the system to configure and manage the V5812G. This section provides instructions how to change password for system connection and how to connect to the system through telnet as the following order.
  • Page 48: Password For Privileged Exec Enable Mode

    UMN:CLI User Manual V5812G 4.1.2 Password for Privileged EXEC Enable Mode You can configure a password to enhance the security for Privileged EXEC Enable mode. To configure a password for Privileged EXEC Enable mode, use the following command. Command Mode...
  • Page 49: Changing Login Password

    4.1.4.1 Creating System Account For the V5812G, the administrator can create a system account. In addition, it is possible to set the security level from 0 to 15 to enhance the system security. To create a system account, use the following command.
  • Page 50: Security Level

    4.1.4.2 Security Level For the V5812G, it is possible to configure the security level from 0 to 15 for a system account. The level 15, as the highest level, has a read-write authority. The administrator can configure from level 0 to level 14. The administrator decides which level user uses which commands in which level.
  • Page 51 User Manual UMN:CLI V5812G Command Mode Description privilege rmon-alarm level <0-15> {COMMAND | all} privilege rmon-event level Uses the specific command of RMON Configuration <0-15> {COMMAND | all} mode in the level. privilege rmon-history level <0-15> {COMMAND | all} privilege dhcp-pool level...
  • Page 52 UMN:CLI User Manual V5812G To delete a configured security level, use the following command. Command Mode Description no privilege Deletes all configured security levels. no privilege view level <0-15> {COMMAND | all} no privilege enable level <0-15> {COMMAND | all} no privilege configure level <0-15>...
  • Page 53 User Manual UMN:CLI V5812G The following is an example of creating the system account test0 having a security level 10 and test1 having a security level 1 with no password. SWITCH(config)# user add test0 level 0 level0user Changing password for test0 Enter the new password (maximum of 8 characters) Please use a combination of upper and lower case letters and numbers.
  • Page 54: Limiting Number Of Users

    4.1.5 Limiting Number of Users For the V5812G, you can limit the number of users accessing the switch through both console interface and telnet. In case of using the system authentication with RADIUS or TACACS+, a configured number includes the number of users accessing the switch via the authentication server.
  • Page 55: System Rebooting

    If you reboot the system without saving new configuration, new configuration will be deleted. So, you have to save the configuration before rebooting. Not to make that mistake, the V5812G is supported to print the following message to ask if user really wants to reboot and save configuration.
  • Page 56: Auto Reset Configuration

    4.1.9 Auto Reset Configuration The V5812G reboots the system according to user‘s configuration. There are 3 basises for system rebooting. These are CPU, ping and memory. CPU is rebooted in case CPU Load or Interrupt Load continues for the configured time. Memory is automatically rebooted in case memory low occurs as the configured times.
  • Page 57: Network Connection

    You can use auto reset function by sending and then listening for a PING. If there is no response within a specified time period and option values, the V5812G will automatically reset the system. To configure the option values in use for monitoring the network connection using PING test, use the following command.
  • Page 58 UMN:CLI User Manual V5812G Command Mode Description Shows a current configured auto system show auto-reset ping Enable/Global/Bridge rebooting by ping transaction To clear auto-reset counters of ping, use the following command. Command Mode Description clear auto-reset ping-reboot- Resets the counters of auto rebooting which has...
  • Page 59: System Authentication

    Deletes a configured system authentication method. no login 4.2.2 Authentication Interface If more than 2 interfaces exist in the V5812G, you can set one interface to access RA- DIUS or TACACS server. To set an authentication interface, use the following command. Command...
  • Page 60: Primary Authentication Method

    UMN:CLI User Manual V5812G 4.2.3 Primary Authentication Method You can set the order of the authentication method by giving the priority to each authentication method. To set the primary authentication method, use the following command Command Mode Description Sets a system authentication method.
  • Page 61: Timeout Of Authentication Request

    Deletes a specified timeout value. 4.2.4.4 Frequency of Retransmit In case of no response from a RADIUS server, the V5812G is supposed to retransmit an authentication request. To set the frequency of retransmitting an authentication request, use the following command.
  • Page 62: Timeout Of Authentication Request

    UMN:CLI User Manual V5812G 4.2.5.3 Timeout of Authentication Request After the authentication request, the V5812G waits for the response from the TACACS+ server for specified time. To specify a timeout value, use the following command. Command Mode Description Specifies a timeout value.
  • Page 63: Accounting Mode

    4.2.6 Accounting Mode The V5812G provides the accounting function of AAA (Authentication, Authorization, and Accounting). Accounting is the process of measuring the resources a user has consumed. Typically, accounting measures the amount of system time a user has used or the amount of data a user has sent and received.
  • Page 64: Configuring Interface

    The Layer 2 switches do not need IP addresses to transmit packets. However, if you want to access to the V5812G from a remote place with TCP/IP through SNMP or telnet, it requires an IP address.
  • Page 65: Assigning Ip Address To Network Interface

    User Manual UMN:CLI V5812G 4.3.2 Assigning IP Address to Network Interface After enabling an interface, assign an IP address. To assign an IP address to a network interface, use the following command. Command Mode Description ip address A.B.C.D/M primary Assigns a primary IP address to an interface.
  • Page 66: Interface Description

    UMN:CLI User Manual V5812G route A.B.C.D/M {GATEWAY | null} [<1-255>] To configure a default gateway, use the following command. Command Mode Description ip route default {GATEWAY | Global Configures a default gateway. null} [<1-255>] To delete a configure default gateway, use the following command.
  • Page 67: Displaying Interface

    User Manual UMN:CLI V5812G output errors 0, aborted 0, carrier 0, fifo 0, heartbeat 0, window 0 collisions 0 SWITCH(config)# 4.3.5 Displaying Interface To display an interface status and configuration, use the following command. Command Mode Description Enable Global Shows an interface status and configuration.
  • Page 68: Secure Shell (Ssh)

    4.4.1 SSH Server The V5812G can be operated as SSH server. You can configure the switch as SSH server with the following procedure. • Enabling SSH Server •...
  • Page 69: Assigning Specific Authentication Key

    Login to SSH Server • Secured File Copy • Authentication Key 4.4.2.1 Login to SSH Server To login to SSH server after configuring the V5812G as SSH client, use the following command. Command Mode Description Logins to SSH server. login...
  • Page 70: Authentication Key

    It is safer to use authentication key than inputting password every time for login, and it is possible to connect to several SSH servers with using one authentication key. To configure an authentication key in the V5812G, use the following command. Command Mode...
  • Page 71: Authentication

    802.1x authentication adopts EAP (Extensible Authentication Protocol) structure. In EAP system, there are EAP-MD5 (Message Digest 5), EAP-TLS (Transport Level Security), EAP-SRP (Secure Remote Password), EAP-TTLS (Tunneled TLS) and the V5812G supports EAP-MD5 and EAP-TLS. Accessing with user‘s ID and password, EAP-MD5 is 1-way Authentication based on the password.
  • Page 72: Authentication

    UMN:CLI User Manual V5812G 4.5.1 802.1x Authentication 4.5.1.1 Enabling 802.1x To configure 802.1x, the user should enable 802.1x daemon first. To enable 802.1x daemon, use the following command. Command Mode Description dot1x system-auth-control Enables 802.1x daemon. Global no dot1x system-auth-control Disables 802.1x daemon.
  • Page 73: Authentication Mode

    User Manual UMN:CLI V5812G After default server is designated, all requests start from the RADIUS server. If there‘s no response from default server again, the authentication request is tried for RADIUS server designated as next one. To configure IP address of RADIUS server and key value, use the following command.
  • Page 74: Authentication Port

    4.5.1.6 Interval for Retransmitting Request/Identity Packet In the V5812G, it is possible to specify how long the device waits for a client to send back a response/identity packet after the device has sent a request/identity packet. If the client does not send back a response/identity packet during this time, the device retransmits the request/identity packet.
  • Page 75: Interval Of Request To Radius Server

    4.5.1.8 Interval of Request to RADIUS Server For the V5812G, it is possible to set the time for the retransmission of packets to check RADIUS server. If there is a response from other packets, the switch waits for a response from RADIUS server during the configured time before resending the request.
  • Page 76: Interval Of Re-Authentication

    In the V5812G, you can set the number of seconds that the authenticator should wait for a response to request/identity packet from the suppliant before retransmitting the request.
  • Page 77: Initializing Authentication Status

    User Manual UMN:CLI V5812G 4.5.3 Initializing Authentication Status The user can initialize the entire configuration on the port. Once the port is initialized, the supplicants accessing to the port should be re-authenticated. Command Mode Description dot1x initialize PORTS Global Initializes the authentication status on the port.
  • Page 78: Sample Configuration

    UMN:CLI User Manual V5812G 4.5.7 Sample Configuration The following is the example of configuring the port 6 with the port-based authentication specifying the information of RADIUS server. SWTICH(config)# dot1x system-auth-control SWTICH(config)# dot1x nas-port 6 SWTICH(config)# dot1x port-control force-authorized 6 SWTICH(config)# dot1x radius-server host 10.1.1.1 auth-port 1812 key test SWTICH(config)# show dot1x 802.1x authentication is enabled.
  • Page 79: Port Configuration

    Gigabit Ethernet components. In this chapter, you can find the instructions for the basic port configuration such as auto-negotiation, flow control, transmit rate, etc. Please read the following instructions carefully before you configure a port in the V5812G. This chapter contains the following sections.
  • Page 80: Auto-Negotiation

    UMN:CLI User Manual V5812G The following is an example of disabling the Ethernet port 5. SWITCH(bridge)# show port 5 ------------------------------------------------------------------------ TYPE PVID STATUS MODE FLOWCTRL INSTALLED (ADMIN/OPER) (ADMIN/OPER) ------------------------------------------------------------------------ Ethernet Up/Down Auto/Full/0 Off/ Off SWITCH(bridge)# port disable 5 SWITCH(bridge)# show port 5...
  • Page 81: Duplex Mode

    User Manual UMN:CLI V5812G 5.2.4 Duplex Mode Ethernet operates in either half-duplex or full-duplex mode. In full-duplex mode, frames travel in both directions simultaneously over two channels on the same connection for an aggregate bandwidth of twice that of half-duplex mode. Full duplex networks are very efficient since data can be sent and received simultaneously.
  • Page 82: Traffic Statistics

    UMN:CLI User Manual V5812G 5.2.7 Traffic Statistics 5.2.7.1 Packet Statistics To display the traffic statistics of an Ethernet port, use the following command. Command Mode Description show port statistics avg-pkt Shows the traffic statistics of the average packet for a [PORTS] specified Ethernet port.
  • Page 83 [PORTS] Bridge CPU. The V5812G can be configured to generate a syslog message when the number of the packets handled by CPU exceeds a specified value. This function allows system administrators to monitor the switch and network status more effectively.
  • Page 84: Protocol Statistics

    UMN:CLI User Manual V5812G 5.2.7.3 Protocol Statistics To enables/disables the system to collect the statistics of the protocols, use the following command. Command Mode Description protocol statistics {enable Global Enables/disables the system to collect the statistics of disable} [arp | icmp | ip | tcp | Bridge the protocols.
  • Page 85: Port Mirroring

    User Manual UMN:CLI V5812G Port Mirroring Port mirroring is the function of monitoring a designated port. Here, one port to monitor is called monitor port and a port to be monitored is called mirrored port. Traffic transmitted from mirrored port are copied and sent to monitor port so that user can monitor network traffic.
  • Page 86 UMN:CLI User Manual V5812G Step 3 Designate the mirrored ports, use the following command. Command Mode Description Designates the mirrored ports. mirror add PORTS [ingress | PORTS: port number Bridge egress] ingress: ingress traffic egress: egress traffic Step 4 To delete and modify the configuration, use the following command.
  • Page 87: System Environment

    User Manual UMN:CLI V5812G 6 System Environment Environment Configuration You can configure a system environment of the V5812G with the following items: • Host Name • Time and Date • Time Zone • Network Time Protocol (NTP) • Simple Network Time Protocol (SNTP) •...
  • Page 88: Time Zone

    6.1.3 Time Zone The V5812G provides three kinds of time zone, GMT, UCT and UTC. The time zone of the switch is predefined as GMT (Greenwich Mean Time). You can also set the time zone where the network element belongs.
  • Page 89: Network Time Protocol (Ntp)

    User Manual UMN:CLI V5812G 6.1.4 Network Time Protocol (NTP) The network time protocol (NTP) provides a mechanism to synchronize time on computers across an internet. The specification for NTP is defined in RFC 1119. To enable/disable the NTP function, use the following command.
  • Page 90 UMN:CLI User Manual V5812G slew rate of the PC which provides a very high degree of accuracy. The algorithm deter- mines if the values are accurate by identifying time server that doesn‘t agree with other time servers. It then speeds up or slows down the PC's drift rate so that the PC's time is always correct and there won't be any subsequent time jumps after the initial correction.
  • Page 91: Terminal Configuration

    6.1.6 Terminal Configuration By default, the V5812G is configured to display 24 lines composed by 80 characters on console terminal. You can change the number of displaying lines by using the terminal length command. The maximum line displaying is 512 lines.
  • Page 92: Fan Operation

    Global Deletes DNS server and domain name. 6.1.9 Fan Operation For the V5812G, it is possible to control fan operation. To control fan operation, use the following command. Command Mode Description fan operation {on | off | auto} Global Configures fan operation.
  • Page 93: Ftp Server

    IP address. However, an interface of the V5812G may have multiple IP addresses. In such a multiple-IP environment, a primary IP address is normally used. You can configure the V5812G to use one of the secondary IP addresses as a source IP of an FTP client.
  • Page 94: System Threshold

    6.1.13 System Threshold You can configure the system with various kinds of the system threshold such as CPU load, traffic, temperature, etc. Using this threshold, the V5812G generates syslog messages, sends SNMP traps, or performs a relevant procedure. 6.1.13.1 CPU Load To set the threshold of CPU load, use the following command.
  • Page 95: Fan Operation

    User Manual UMN:CLI V5812G The threshold of the port is set to the maximum rate of the port by default. You can also set the blocking timer. When incoming traffic via a given port exceeds a configured threshold, the port will discard that traffic during a specified time.
  • Page 96: System Temperature

    UMN:CLI User Manual V5812G 6.1.13.4 System Temperature To set the threshold of system temperature, use the following command. Command Mode Description Sets the threshold of system temperature in the unit of threshold temp <-40-100> centigrade (°C). Global -40-100: system temperature (default: 80) no threshold temp Deletes a configured threshold of system temperature.
  • Page 97: Enabling Ddm

    User Manual UMN:CLI V5812G To delete the threshld of module operation depending on specified monitoring type, use the following command. Command Mode Description no threshold module {rxpower | voltage | txbias | txpower | Global Deletes the configured threshold of SFP module.
  • Page 98: Configuration Management

    UMN:CLI User Manual V5812G Configuration Management You can verify if the system configurations are correct and save them in the system. This section contains the following functions. • Displaying System Configuration • Writing System Configuration • Auto-Saving • System Configuration File •...
  • Page 99: Auto-Saving

    6.2.3 Auto-Saving The V5812G supports the auto-saving feature, allowing the system to save the system configuration automatically. This feature prevents the loss of unsaved system configuration by unexpected system failure. To allow the system to save the system configuration automatically, use the following command.
  • Page 100: Restoring Default Configuration

    Enable Shows a current startup configuration. Global show config-list Shows a list of configuration files. Bridge The following is an example of displaying a list of configuration files. SWITCH(config)# copy running-config V5812G SWITCH(config)# show config-list ========================= CONFIG-LIST ========================= l3_default V5812G SWITCH(config)# 6.2.5...
  • Page 101: Core Dump File

    The V5812G can be configured to generate core dumps and save them in ramdisk for useful debugging aids in several situations such as accesses to non-existent memory, segmentation errors.
  • Page 102: System Management

    UMN:CLI User Manual V5812G System Management When there is any problem in the system, you must find what the problem is and its solution. Therefore, you should not only be aware of a status of the system but also verify if the system is correctly configured.
  • Page 103: Tab. 6.2 Options For Ping For Multiple Ip Addresses

    User Manual UMN:CLI V5812G The following is an example of ping test 5 times to verify network status with IP address 10.55.193.110. SWITCH# ping Protocol [ip]: ip Target IP address: 10.55.193.110 Repeat count [5]: 5 Datagram size [100]: 100 Timeout in seconds [2]: 2 Extended commands [n]: n PING 10.55.193.110 (10.55.193.110) 100(128) bytes of data.
  • Page 104: Ip Icmp Source Routing

    Ping Test for Network Status Fig. 6.1, if you perform ping test from PC to C, it goes through the route of A→B→C. This is the general case. But, the V5812G can enable to perform ping test from PC as the route of A→E→D→C.
  • Page 105: Tracing Packet Route

    To perform ping test as the route which the manager designated, use the following steps. Step 1 Enable IP source-routing function from the equipment connected to PC which the PING test is going to be performed. To enable/disable IP source-routing in the V5812G, use the following command. Command Mode Description ip icmp source-route Enable IP source-routing function.
  • Page 106: Displaying User Connecting To System

    UMN:CLI User Manual V5812G The followings are the configurable options to trace the routes. Items Description Protocol [ip] Supports ping test. Default is IP. Sends ICMP echo message by inputting IP address or host name of Target IP address destination in order to check network status with relative.
  • Page 107: Mac Table

    User Manual UMN:CLI V5812G 6.3.5 MAC Table To display MAC table recorded in specific port, use the following command. Command Mode Description show mac [BRIDGE] Enable Shows MAC table. Global BRIDGE: bridge name show mac BRIDGE PORTS Bridge The following is an example of displaying a current MAC table.
  • Page 108: System Memory Information

    Global 6.3.10 Running Process The V5812G provides a function that shows information of the running processes. The information with this command can be very useful to manage the switch. To display information of the running processes, use the following command.
  • Page 109: Displaying System Software

    6.3.13 Default OS The V5812G supports the dual OS feature. You can verify the running OS in the flash memory with the show flash command. When two system OSs are installed, you can set one of those as the default OS. To set the default OS of the system, use the following command.
  • Page 110: Switch Status

    To reduce the effort to acquire the detail informtation of the system for a technical suppport, the V5812G provides the function that generates all the system information reflecting the current state. Using this function, you can verify all the details on a console screen or even in the remote place via FTP/TFTP.
  • Page 111: Network Service Module (Nsm) Daemon Debugging

    User Manual UMN:CLI V5812G 6.3.17 Network Service Module (NSM) Daemon Debugging To enable NSM daemon debugging, use the following command. Command Mode Description Enables NSM debugging. debug nsm [all] all: all NSM debugging debug nsm {events | kernel} Enables NSM events/kernel debugging.
  • Page 112: Network Management

    SNMP agent sends a trap to administrator for specific cases. Trap is a warning message to alert network status to SNMP administrator. The V5812G enhances access management of SNMP agent and limits the range of OID opened to agents. The following is how to configure SNMP.
  • Page 113: Information Of Snmp Agent

    User Manual UMN:CLI V5812G To display configured SNMP community, use the following command. Command Mode Description Enable show snmp community Global Shows created SNMP community. Bridge The following is an example of creating 2 SNMP communities. SWITCH(config)# snmp community ro public...
  • Page 114: Snmp Com2Sec

    UMN:CLI User Manual V5812G 7.1.3 SNMP Com2sec SNMP v2 authorizes the host to access the agent according to the identity of the host and community name. The com2sec command specifies the mapping from the identity of the host and community name to security name.
  • Page 115: Snmp View Record

    User Manual UMN:CLI V5812G 7.1.5 SNMP View Record You can create an SNMP view record to limit access to MIB objects with object identity (OID) by an SNMP manager. To configure an SNMP view record, use the following command. Command...
  • Page 116: Snmp Version 3 User

    UMN:CLI User Manual V5812G To display a granted SNMP group to access to a specific SNMP view record, use the following command. Command Mode Description Enable Shows a granted SNMP group to access to a specific show snmp access Global SNMP view record.
  • Page 117: Snmp Trap Host

    User Manual UMN:CLI V5812G 7.1.8.2 SNMP Trap Host To set an SNMP trap host, use the following command. Command Mode Description snmp trap-host A.B.C.D [COMMUNITY COMMUNITY add TRAP-INDEX | add TRAP- Specifies an SNMP trap v1 host. INDEX | del TRAP-INDEX]...
  • Page 118 UMN:CLI User Manual V5812G • temp-threshold is shown when the system temperature exceeds the thresh-old con- figured by user. when system temperature falls below the threshold, trap message will be shown. • dhcp-lease is shown when no more IP address is left in the DHCP pool. Even if this occurs only in one DHCP pool of several pools, this trap message will be shown.
  • Page 119: Disabling Snmp Trap

    User Manual UMN:CLI V5812G 7.1.8.4 Disabling SNMP Trap To disable the SNMP trap, use the following command. Command Mode Description no snmp trap auth-fail no snmp trap cold-start no snmp trap link-up PORTS [NODE] no snmp trap link-down PORTS [NODE]...
  • Page 120: Snmp Alarm

    7.1.9 SNMP Alarm The V5812G provides an alarm notification function. The alarm will be sent to a SNMP trap host whenever a specific event in the system occurs through CLI. You can also set the alarm severity on each alarm and make the alarm be shown only in case of selected severity or higher.
  • Page 121: Default Alarm Severity

    User Manual UMN:CLI V5812G The order of alarm severity is critical > major > minor > warning > intermediate. 7.1.9.3 Default Alarm Severity To set default alarm severity, use the following command. Command Mode Description snmp alarm-severity default Sets default alarm severity.
  • Page 122 UMN:CLI User Manual V5812G snmp alarm-severity port-tx-threshold-over Sets severity of an alarm for port Tx {critical major minor warning threshold over. intermediate} snmp alarm-severity power-fail {critical | major Sets severity of an alarm for system | minor | warning | intermediate} power failure.
  • Page 123: Adva Alarm Severity

    User Manual UMN:CLI V5812G 7.1.9.5 ADVA Alarm Severity To set ADVA alarm severity, use the following command. Command Mode Description snmp alarm-severity adva-fan-fail {critical | Sets ADVA severity of an alarm for major | minor | warning | intermediate} system temperature high.
  • Page 124: Stp Guard Alarm Severity

    UMN:CLI User Manual V5812G 7.1.9.6 STP Guard Alarm Severity To set severity of an alarm for STP guard, use the following command. Command Mode Description snmp alarm-severity stp-bpdu- guard {critical | major | minor | Sets severity of an alarm for BPDU guard disabled.
  • Page 125: Disabling Snmp

    User Manual UMN:CLI V5812G 7.1.11 Disabling SNMP To disable SNMP, use the following command. Command Mode Description no snmp Global Disables SNMP. When you use the no snmp command, all configurations of SNMP will be lost. Operation, Administration and Maintenance (OAM) In the enterprise, Ethernet links and networks have been managed via Simple Network Management Protocol (SNMP).
  • Page 126: Enabling Oam

    UMN:CLI User Manual V5812G OAM is responsible for monitoring and troubleshooting individual Ethernet links or end-to- end Ethernet instances. EFM OAM provides mechanisms for remote fault detection and loopback controls. It provides single-hop functionality in that it works only between two directly connected Ethernet stations, called local Data Terminal Equipment (DTE) and a remote DTE.
  • Page 127: Oam Link Monitoring

    User Manual UMN:CLI V5812G To configure an interval of EFM OAMPDUs which are exchanged between local DTE and remote DTE, use the following command. Command Mode Description Configures the interval of OAMPDUs. (default: 1 oam efm interval <1-10> PORTS Global...
  • Page 128: Efm Oam Mode

    UMN:CLI User Manual V5812G To clear the collected statistics of EFM OAM link monitoring, use the following command. Command Mode Description Clears the collected statistics of EFM OAM clear oam efm link-monitor stats PORTS Global link monitoring. To configure how to handle the event notifications that the switch is received, use the following command.
  • Page 129: Oam Unidirection

    User Manual UMN:CLI V5812G To configure loopback function of the host connected to the switch, use the following command. Command Mode Description oam efm remote-loopback Enables loopback function of peer device. enable PORTS oam efm remote-loopback Global Disables loopback function of peer device.
  • Page 130: Link Layer Discovery Protocol (Lldp)

    LAN according to IEEE 802.1ab standard. 7.3.1 LLDP Operation The V5812G supporting LLDP transmits the management information between near switches. The information carries the management information that can recognize the network elements and the function. This information is saved in internal Management Information Base (MIB).
  • Page 131: Lldp Message

    Deletes the specified TLV location ID. 7.3.5 LLDP Message For the V5812G, it is possible to configure the interval time and times of sending LLDP message. To configure the interval time and times of LLDP message, use the following command.
  • Page 132: Displaying Lldp Configuration

    UMN:CLI User Manual V5812G To configure delay time of transmitting LLDP frame, use the following command. Command Mode Description Configures delay time of transmitting LLDP frame. lldp txdelay <1-8192> Bridge (default: 2) 7.3.7 Displaying LLDP Configuration To display LLDP configuration, use the following command.
  • Page 133: Remote Monitoring (Rmon)

    RMON. There are nine RMON MIB groups defined in RFC 1757: Statistics, History, Alarm, Host, Host Top N, Matrix, Filter, Packet Capture and Event. The V5812G supports two MIB groups of them, most basic ones: Statistics (only for uplink ports) and History.
  • Page 134: Source Port Of Statistical Data

    UMN:CLI User Manual V5812G write Write running configuration to memory or terminal SWITCH(config-rmonhistory[5])# 7.4.1.1 Source Port of Statistical Data To specify a source port of statistical data, use the following command. Command Mode Description Specifies a data object ID: data-source NAME RMON NAME: enters a data object ID.
  • Page 135: Deleting Configuration Of Rmon History

    User Manual UMN:CLI V5812G Before activating RMON history, check if your configuration is correct. After RMON history is activated, you cannot change its configuration. If you need to change configuration, you need to delete the RMON history and configure it again.
  • Page 136: Subject Of Rmon Alarm

    UMN:CLI User Manual V5812G 7.4.2.1 Subject of RMON Alarm You need to configure RMON alarm and identify subject using many kinds of data from alarm. To identify subject of alarm, use the following command. Command Mode Description Identifies subject using relevant data, enter the name...
  • Page 137: Lower Bound Of Threshold

    User Manual UMN:CLI V5812G After configuring upper bound of threshold, configure to generate RMON event when object is more than configured threshold. Use the following command. Command Mode Description Configures to generate RMON event when object is rising-event <1-65535> RMON more than configured threshold.
  • Page 138: Interval Of Sample Inquiry

    UMN:CLI User Manual V5812G To configure the first alarm to occur when object is firstly more than threshold or less than threshold, use the following command. Command Mode Description Configures the first Alarm to occur when object is firstly startup-type rising-and-falling RMON more than threshold or less than threshold.
  • Page 139: Event Community

    User Manual UMN:CLI V5812G 7.4.3.1 Event Community When RMON event occurs, you need to input community to transmit SNMP trap message to host. Community means a password to give message transmission right. To configure community for trap message transmission, use the following command.
  • Page 140: Activating Rmon Event

    UMN:CLI User Manual V5812G 7.4.3.5 Activating RMON Event After finishing all configurations, you should activate RMON event. To activate RMON event, use the following command. Command Mode Description active RMON Activates RMON event. 7.4.3.6 Deleting Configuration of RMON Event Before changing the configuration of RMON event, you should delete RMON event of the number and configure it again.
  • Page 141: Syslog

    User Manual UMN:CLI V5812G Syslog The syslog is a function that allows the network element to generate the event notification and forward it to the event message collector like a syslog server. This function is enabled as default, so even though you disable this function manually, the syslog will be enabled again.
  • Page 142 UMN:CLI User Manual V5812G Syslog Output Level with a Priority To set a user-defined syslog output level with a priority, use the following command. Command Mode Description syslog output priority {auth | authpriv | kern | local0 | local1 |...
  • Page 143: Facility Code

    User Manual UMN:CLI V5812G Syslog Index Level with a Priority To set a user-defined syslog message index level with a priority, use the following command. Command Mode Description syslog index {system | physical- entity | dhcp | filter | gpon}...
  • Page 144: Syslog Bind Address

    UMN:CLI User Manual V5812G To set a facility code, use the following command. Command Mode Description syslog local-code <0-7> Sets a facility code. Global no syslog local-code Deletes a specified facility code. The following is an example of configuring priority of all syslog messages which is transmitted to remote host 10.1.1.1, as the facility code 0.
  • Page 145: Displaying Syslog Message

    User Manual UMN:CLI V5812G 7.5.6 Displaying Syslog Message To display the received syslog message in the system memory, use the following command. Command Mode Description Shows the received syslog messages. show syslog local {volatile | volatile: removes the syslog messages after restart.
  • Page 146: Rule And Qos

    V5812G Rule and QoS The V5812G provides a rule and QoS feature for traffic management. The rule classifies incoming traffic, and then processes the traffic according to user-defined policies. You can use the physical port, 802.1p priority (CoS), VLAN ID, DSCP, and so on to classify incoming packets.
  • Page 147: How To Operate Qos

    User Manual UMN:CLI V5812G 7.6.1 How to Operate QoS QoS operation is briefly described as below. Incoming packets are classified by configured conditions, and then processed by packet counter and rate-limiting on specific policer. After marking and remarking action, the switch transmits those classified and processed packets via a given scheduling algorithm.
  • Page 148: Packet Classification

    • Scheduling Algorithm To handle traffic, you need to configure differently processing orders of traffic by using scheduling algorithms. The V5812G provides: – Strict Priority Queuing (SP) – Deficit Round Robin (DRR) – Weighted Round Robin (WRR) An already applied rule cannot be modified. It needs to be deleted and then created again with changed values.
  • Page 149: Flow Mode

    User Manual UMN:CLI V5812G via flow, which is with unique name. If you specify the value of parameters, the V5812G classifies the packets corresponding to the parameters. 7.6.2.1 Flow Mode The V5812G gives you two flow modes. The flow mode decides the number of rule you can create.
  • Page 150: Configuring Flow

    UMN:CLI User Manual V5812G 7.6.2.3 Configuring Flow The packet classification condition needs to be defined. You can classify the packets via MAC address, IP address, Ethernet type, CoS, DSCP etc. To specify a packet-classifying pattern with source/destination IP address or MAC address, use the following command.
  • Page 151 User Manual UMN:CLI V5812G When specifying a source and destination IP address as a packet-classifying pattern, the destination IP address must be after the source IP address. To specify a packet-classifying pattern with various parameters (DSCP, CoS, ToS, IP precedence, packet length, Ethernet type, IP header), use the following command.
  • Page 152: Applying And Modifying Flow

    UMN:CLI User Manual V5812G To delete a specified packet-classifying pattern, use the following command. Command Mode Description no cos no dscp no tos no length no ip-precedence no ethtype Deletes a specified packet-classifying pattern for each Flow option. no mac...
  • Page 153: Packet Conditioning

    User Manual UMN:CLI V5812G To delete configured class or all classes, use the following command. Command Mode Description no class all Deletes all classes. no class NAME Deletes specified class, enter the class name. Global no class NAME flow FLOW1 Removes specified flows from class.
  • Page 154: Packet Counter

    UMN:CLI User Manual V5812G 7.6.3.2 Packet Counter The packet counter function provides information on the total number of packets that the rule received and analyzed. This feature allows you to know the type of packets transmitted in the system according to rule configuration.
  • Page 155: Rule Action

    User Manual UMN:CLI V5812G To save and apply a policer, use the following command. Command Mode Description apply Policer Applies a policer to the system. To modify a policer, use the following command. Command Mode Description policer NAME modify Global Modifies a policer, enter a policer name.
  • Page 156: Metering

    The V5812G provides Token Bucket (srTCM and trTCM) meters. Token Bucket The token bucket is a control mechanism that transmits traffic by tokens in the bucket.
  • Page 157: Fig. 7.4 Token Bucket Meter

    User Manual UMN:CLI V5812G tokens in the bucket are consumed out, traffic cannot be transmitted any more; a flow can transmit traffic up to its peak burst rate. The transmitting cost and regenerating rate of tokens are configurable. Tokens are regenerated...
  • Page 158: Fig. 7.5 Behavior Of Srtcm (1)

    UMN:CLI User Manual V5812G The following figures show the behavior of the srTCM. Tokens are regenerated Tokens are regenerated based on CIR based on CIR Bucket C Bucket E Token Token Tokens are decremented by the size of the packet...
  • Page 159: Fig. 7.7 Bahavior Of Srtcm (3)

    User Manual UMN:CLI V5812G Tokens are regenerated Tokens are regenerated based on CIR based on CIR Bucket C Bucket E Empty Empty If both buckets are empty, a packet is marked red Packet Red Color-Marking Fig. 7.7 Bahavior of srTCM (3)
  • Page 160: Fig. 7.8 Behavior Of Trtcm (1)

    UMN:CLI User Manual V5812G The following figures show the behavior of the trTCM. Tokens are regenerated Tokens are regenerated based on PIR faster than CIR based on CIR Bucket P Bucket C Token Token Tokens in both buckets are decremented by the size of...
  • Page 161: Fig. 7.10 Behavior Of Trtcm (3)

    User Manual UMN:CLI V5812G Tokens are regenerated Tokens are regenerated based on PIR faster than CIR based on CIR Bucket P Bucket C Empty Empty If the bucket P is empty, a packet is marked red Packet Red Color-Marking Fig. 7.10 Behavior of trTCM (3) To set the metering mode, use the following command.
  • Page 162: Policy Priority

    UMN:CLI User Manual V5812G In the color-blind mode, you can configure all red-colored or yellow-colored packets to discard. To configure the meter to discard all red-colored or yellow-colored packets, use the following command. Command Mode Description Configures the meter to discard red-colored or yellow- color {red | yellow} action drop colored packets.
  • Page 163: Setting Cos And Tos Values

    User Manual UMN:CLI V5812G Command Mode Description action match egress filter PORT Deletes a specified egress port. Policy action match egress port PORT Overwrites a specified egress port To delete a specified rule action, use the following command. Command Mode...
  • Page 164: Applying And Modifying Policy

    UMN:CLI User Manual V5812G To attach a policy to an interface, use the following command. Command Mode Description Attaches the policy to a specified ingress port or any interface-binding port ingress port. {PORTS | cpu | any } PORTS: port number...
  • Page 165: Admin Rule

    Shows all configurations of each rule policer | policy } 7.6.6 Admin Rule For the V5812G, it is possible to block a specific service connection like telnet, FTP, ICMP, etc with an admin rule function. 7.6.6.1 Creating Admin Flow for packet classification To classify packets by a specific admin flow for the V5812G, you need to open Admin- Flow Configuration mode first.
  • Page 166: Configuring Admin Flow

    UMN:CLI User Manual V5812G 7.6.6.2 Configuring Admin Flow You can classify the packets according to IP address, ICMP, TCP, UDP and IP header length. To specify a packet-classifying pattern, use the following command. Command Mode Description Classifies an IP address: ip {A.B.C.D | A.B.C.D/M | any}...
  • Page 167: Applying And Modifying Admin Flow

    User Manual UMN:CLI V5812G To delete a specified packet-classifying pattern, use the following command. Command Mode Description no ip Deletes a specified packet-classifying pattern for each Admin-Flow option. no ip header-length 7.6.6.3 Applying and modifying Admin Flow After configuring an admin flow using the above commands, apply it to the system with the following command.
  • Page 168: Admin Rule Action

    User Manual V5812G 7.6.7 Admin Rule Action 7.6.7.1 Admin Policy Creation For the V5812G, you need to open Admin-Policy Configuration mode first. To open Policy Configuration mode, use the following command. Command Mode Description Creates an admin policy and opens Admin-Policy...
  • Page 169: Admin Policy Priority

    User Manual UMN:CLI V5812G To remove flow or class from the policy, use the following command. Command Mode Description no include-flow Removes the admin flow from this policy. Admin- Policy no include-class Removes the admin class from this policy. 7.6.7.2...
  • Page 170: Applying And Modifying Admin Policy

    UMN:CLI User Manual V5812G 7.6.7.4 Applying and Modifying Admin Policy After configuring an admin policy using the above commands, apply it to the system with the following command. If you do not apply this policy to the system, all specified configurations from Admin-Policy Configuration mode will be lost.
  • Page 171: Scheduling

    UMN:CLI V5812G 7.6.9 Scheduling To process incoming packets by the queue scheduler, the V5812G provides the scheduling algorithm as Strict Priority Queuing (SP), Weighted Round Robin (WRR) and Deficit Round Robin (DRR). Strict Priority Queuing (SP) SPQ processes first more important data than the others. Since all data are processed by their priority, data with high priority can be processed fast but data without low priority might be delayed and piled up.
  • Page 172: Fig. 7.12 Deficit Round Robin

    UMN:CLI User Manual V5812G Deficit Round Robin Queing Queue1 (50% b/w, Quantum [1] = 1000 Scheduler Queue2 (25% b/w, Quantum [2] = 500 Queue3 (25% b/w, Quantum [3] = 500 Fig. 7.12 Deficit Round Robin Weighted Round Robin (WRR) WRR processes packets as much as weight. Processing the packets that have higher priority is the same way as strict priority queuing.
  • Page 173: Scheduling Mode

    User Manual UMN:CLI V5812G 7.6.9.1 Scheduling mode To select a packet scheduling mode, use the following command. Command Mode Description Selects a packet scheduling mode for a ports: sp: strict priority queuing qos scheduling-mode {sp | wrr | wrr: weighted round robin...
  • Page 174: Maximum And Minimum Bandwidth

    UMN:CLI User Manual V5812G 7.6.9.3 Maximum and Minimum Bandwidth To set a maximum bandwidth, use the following command. Command Mode Description Sets a maximum bandwidth for each port and queue: PORTS: port numbers qos max-bandwidth PORTS <0- Global 0-3: queue number 3>...
  • Page 175: The Traffic Of Queue

    User Manual UMN:CLI V5812G You can also limit the number of dynamic cell value per port or system. A cell unit is the pointer of 128 bytes. To set the dynamic cell limit value, use the following command. Command Mode Description Specifies the dynamic cell limit value.of the port.
  • Page 176: Netbios Filtering

    However, the more computers are used recently, the more strong security is required. To secure individual customer‘s information and prevent information leakages in the LAN environ-men, the V5812G provides NetBIOS filtering function. Without NetBIOS filtering, customer‘s data may be opened to each other even though the data should be kept.
  • Page 177: Martian Filtering

    User Manual UMN:CLI V5812G Martian Filtering It is possible to block packets, which trying to bring different source IP out from same network. If packet brings different IP address, not its source IP address, then it is impossible to know it makes a trouble. Therefore, you would better prevent this kind of packet outgoing from your network.
  • Page 178: Max Host

    UMN:CLI User Manual V5812G Max Host You can limit the number of users by configuring the maximum number of users also named as max hosts for each port. In this case, you need to consider not only the number of PCs in network but also devices such as switches in network.
  • Page 179: Port Security

    User Manual UMN:CLI V5812G 7.10 Port Security You can use the port security feature to restrict input to an interface by limiting and identifying MAC addresses of the PCs that are allowed to access the port. When you assign secure MAC addresses to a secure port, the port does not forward packets with source addresses outside the group of defined addresses.
  • Page 180: Port Security Aging

    UMN:CLI User Manual V5812G To disable the configuration of port secure, use the following command. Command Mode Description no port security PORTS Disables port security on the port. no port security PORTS mac- Deletes a secure MAC address for the port.
  • Page 181: Displaying Port Security

    Bridge 7.11 Outband Management Port Security The V5812G provides the function that prevents users from accessing the outband management network via the subscriber interface. Using this function, in case that a certain packet‘s destination is MGMT interface—the V5812G‘s outband management interface, the system discards that packet.
  • Page 182 UMN:CLI User Manual V5812G To remove the registered dynamic MAC addresses from the MAC table, use the following command. Command Mode Description Clears dynamic MAC addresses. clear mac [NAME] NAME: bridge name Enable Clears dynamic MAC addresses. clear mac NAME PORT...
  • Page 183: Mac Filtering

    User Manual UMN:CLI V5812G 7.13 MAC Filtering It is possible to forward frame to MAC address of destination. Without specific performance degradation, maximum 4096 MAC addresses can be registered. 7.13.1 Default MAC Filter Policy The basic policy of filtering based on system is set to allow all packets for each port.
  • Page 184: Listing Mac Filter Policy

    UMN:CLI User Manual V5812G To delete MAC filtering policy, use the following command. Command Mode Description mac-filter del SRC-MAC-ADDR Bridge Deletes filtering policy for specified MAC address. [<1-4094>] To delete MAC filtering function, use the following command. Command Mode Description...
  • Page 185: Address Resolution Protocol (Arp)

    (VLAN ID) where packets are forwarded. The V5812G ARP saves IP/MAC addresses mappings in ARP table for quick search. Referring to the information in ARP table, packets attached IP address is transmitted to network.
  • Page 186: Arp Log Interval

    Although clients are joined in the same client switch, it may be impossible to communicate between them for security reasons. When you need to make them communicate each other, the V5812G supports ARP alias, which responses the ARP request from client net through the concentrating switch.
  • Page 187: Arp Inspection

    User Manual UMN:CLI V5812G Registers gateway IP address within IP address range to make the system response automatically MAC arp alias A.B.C.D A.B.C.D vlan address of gateway. VLAN gateway GATEWAY VLAN: 1-4094 GATEWAY: gateway IP address no arp alias A.B.C.D A.B.C.D Deletes the registered IP address range of ARP alias.
  • Page 188: Arp Access List

    UMN:CLI User Manual V5812G 7.14.3.1 ARP Access List You can exclude a given range of IP addresses from the ARP inspection using ARP access lists. ARP access lists are created by the arp access-list command on the Global Configuration mode. ARP access list permits or denies the ARP packets of a given range of IP addresses.
  • Page 189 User Manual UMN:CLI V5812G To delete the configured range of IP address for discarding ARP packets, use the following command. Command Mode Description no deny ip any mac {any | host Deletes a configured range of IP address to discard MACADDR} ARP packets.
  • Page 190: Enabling Arp Inspection Filtering

    VLAN using the ip arp inspection filter command. 7.14.3.3 ARP Address Validation The V5812G also provides the ARP validation feature. Regardless of a static ARP table, the ARP validation will discard ARP packets in the following cases: • In case a sender MAC address of ARP packet does not match a source MAC address of Ethernet header.
  • Page 191: Arp Inspection On Trust Port

    This function saves the information of users who are discarded by ARP inspection and generates periodic syslog messages. Log-buffer function is automatically enabled with ARP inspection. If V5812G receives invalid or denied ARP packets by ARP inspection, it creates the table of entries that include the information of port number, VLAN ID, source IP address, source MAC address and time.
  • Page 192: Displaying Arp Inspection

    UMN:CLI User Manual V5812G To configure the options of log-buffer function, use the following command. Command Mode Description ip arp inspection log-buffer Specifies the number of entries in log-buffer. entries <0-1024> 0-1024: the max. number of entries (default: 32) Sets the interval for displaying syslog messages of...
  • Page 193: Gratuitous Arp

    7.14.5 Proxy ARP The V5812G supports the proxy ARP. Proxy ARP is the technique in which one host, usually a router, answers ARP requests intended for another machine. By ―faking‖ its identity, the router accepts responsibility for routing packets to the ―real‖ destination.
  • Page 194: Fig. 7.15 Proxy Arp

    D, it will reply with its own MAC address to the host A. The proxy ARP replies that the V5812G sends to the host A. The proxy ARP reply packet is encapsulated in an Ethernet frame with its MAC address as the source address and the host A‘s MAC address as the destination address.
  • Page 195: Icmp Message Control

    User Manual UMN:CLI V5812G 7.15 ICMP Message Control ICMP stands for Internet Control Message Protocol. When it is impossible to transmit data or configure route for data, ICMP sends error message about it to host. The first 4 bytes of all ICMP messages are same, but the other parts are different according to type field value and code field value.
  • Page 196: Interval For Transmit Icmp Message

    UMN:CLI User Manual V5812G To release the blocked echo reply message, use the following command. Command Mode Description Releases blocked echo reply message to all partners no ip icmp ignore echo all who are taking ping test to device. Global...
  • Page 197: Tcp Flag Control

    Bridge 7.16 TCP Flag Control Transmission Control Protocol (TCP) header includes six kinds of flags that are URG, ACK, PSH, RST, SYN, and FIN. For the V5812G, you can configure RST and SYN as the below. 7.16.1 RST Configuration RST sends a message when TCP connection cannot be done to a person who tries to make it.
  • Page 198: Syn Configuration

    7.16.2 SYN Configuration SYN sets up TCP connection. The V5812G transmits cookies with SYN to a person who tries to make TCP connection. Only when transmitted cookies are returned, it is possible to permit TCP connection. This function prevents connection overcrowding because of accessed users who are not using and helps the other users use service.
  • Page 199: Packet Dump With Option

    User Manual UMN:CLI V5812G 7.17.2 Packet Dump with Option You can verify packets with tcpdump options using the following command. Command Mode Description Enable debug packet OPTION Shows packet dump using options. Global The following table shows the options for packet dump.
  • Page 200: Debug Packet Dump

    7.17.3 Debug Packet Dump The V5812G provides network debugging function to prevent system overhead for unknown packet inflow. Monitoring process checks CPU load per 5 seconds. If there is more traffic than threshold, user can capture packets using tcpdump and save it to file.
  • Page 201 User Manual UMN:CLI V5812G To delete a dump file, use the following command. Command Mode Description Deletes a specified dump file. delete dumpfile [FILENAME] Enable FILENAME: dump file name To display a list of dump files, use the following command.
  • Page 202: Access List

    An IP access list (ACL) is a filter that enables you to restrict specific IP traffic. If you create an ACL entry to filter multicast packets based on their destination IP address, the V5812G can deny the packets matching to the destination IP address, a multicast address.
  • Page 203: Standard Access List

    User Manual UMN:CLI V5812G Wildcard Bits Masks are used with IP addresses in IP ACLs to specify a range of IP addresses. Com- pared to subnet mask, masks for IP ACLs are the reverse. The mask bits 0.0.0.255 in IP ACL are same as 255.255.255.0 in subnet mask, for instance.
  • Page 204: Extended Access List

    UMN:CLI User Manual V5812G To delete an existing standard IP address-based access list entry, use the following command. Command Mode Description no access-list {<1-99> | <1300- 1999>} {deny | permit} A.B.C.D [WILDCARD-BITS] no access-list {<1-99> | <1300- 1999>} {deny | permit} any Global Deletes an entry of the standard ACL.
  • Page 205 User Manual UMN:CLI V5812G Command Mode Description Specifies a deny or permit statement of the extended access-list {<100-199> | <2000- ACL with a single source host and other variables. 2699>} {deny | permit} ip host host: single source host A.B.C.D any A.B.C.D: source IP address of a host to match...
  • Page 206: Named Access List

    UMN:CLI User Manual V5812G Command Mode Description access-list {<100-199> <2000-2699>} {deny | permit} ip host A.B.C.D host A.B.C.D access-list {<100-199> <2000-2699>} {deny | permit} ip any A.B.C.D A.B.C.D WILDCARD- BITS access-list {<100-199> Global Deletes an entry of the extended ACL.
  • Page 207: Access List Range

    User Manual UMN:CLI V5812G Add entries to the list by repeating the command for different IP addresses. To delete an entry of the named ACL, use the following command. Command Mode Description no access-list WORD {deny | permit} A.B.C.D/M [exact-match]...
  • Page 208: Displaying Access List Entries

    UMN:CLI User Manual V5812G To write comments for the specified access list range, use the following command. Command Mode Description Writes comments for the specified ACL range. access-list-range {<1-1024> 1-1024: IP standard access list range WORD} remark LINE WORD: IP access-list-range name...
  • Page 209: System Main Functions

    User Manual UMN:CLI V5812G 8 System Main Functions Virtual Local Area Network (VLAN) The first step in setting up your bridging network is to define VLAN on your switch. VLAN is a bridged network that is logically segmented by customer or function. Each VLAN contains a group of ports called VLAN members.
  • Page 210: Port-Based Vlan

    UMN:CLI User Manual V5812G 8.1.1 Port-based VLAN The simplest implicit mapping rule is known as port-based VLAN. A frame is assigned to a VLAN based solely on the switch port on which the frame arrives. In the example depicted in Fig.
  • Page 211: Creating Vlan

    User Manual UMN:CLI V5812G 8.1.1.1 Creating VLAN To configure VLAN on user‘s network, use the following command. Command Mode Description Creates new VLAN by assigning VLAN ID: vlan create VLANS Bridge VLANS: VLAN ID (1-4094, multiple entries possible) The variable VLANS is a particular set of bridged interfaces. Frames are bridged only among interfaces in the same VLAN.
  • Page 212: Protocol-Based Vlan

    8.1.3 MAC-based VLAN The V5812G can assign a frame to a VLAN based on the source MAC address in the received frames. Using this, all frames emitted by a given end station will be assigned to the same VLAN, regardless of the port on which the frame arrives. This is useful for mobility application.
  • Page 213: Subnet-Based Vlan

    V5812G 8.1.4 Subnet-based VLAN An IP address contains two parts: a subnet identifier and a station identifier. The V5812G performs two operations to create IP subnet-based VLANs. • Parse the protocol type to determine if the frame encapsulates an IP datagram.
  • Page 214: Vlan Description

    UMN:CLI User Manual V5812G There are two methods for identifying the VLAN membership of a given frame: • Parse the frame and apply the membership rules (implicit tagging). • Provide an explicit VLAN identifier within the frame itself. VLAN Tag A VLAN tag is a predefined field in a frame that carries the VLAN identifier for that frame.
  • Page 215: Vlan Precedence

    User Manual UMN:CLI V5812G To display a specified VLAN description, use the following command. Command Mode Description Enable show vlan description Global Shows a specified VLAN description. Bridge 8.1.7 VLAN Precedence To make precedence between MAC address and Subnet based VLAN, you can choose one of both with below command.
  • Page 216: Double Tagging Operation

    User Manual V5812G If QinQ is configured on the V5812G, it transmits packets adding another Tag to original Tag. Customer A group and customer B group can guarantee security because telecommunication is done between each VLANs at Double Tagging part.
  • Page 217: Double Tagging Configuration

    User Manual UMN:CLI V5812G Step 4 The V5812G switch has 0x8100 TPID value as default and other values are used as hexadecimal number. 8.1.9.2 Double Tagging Configuration Step 1 Designate the QinQ port. Command Mode Description Configures a qinq port.
  • Page 218: Layer 2 Isolation

    The V5812G provides Private VLAN function like Private VLAN edge of Cisco product. Because it does not create any sub-VLAN, port security is provided by port isolation. If you want to configure Private VLAN on the V5812G switch, refer to Port Isolation configuration.
  • Page 219: Shared Vlan

    8.1.10.2 Shared VLAN This chapter is only for Layer 2 switch operation. The V5812G is Layer 3 switch, but it can be used for Layer 2 also. Because there is no routing information in Layer 2 switch, each VLAN cannot communicate. Especially, the uplink port should receive packets from all VLANs.
  • Page 220: Fig. 8.6 Incoming Packets Under Layer 2 Shared Vlan Environment (1)

    Incoming Packets under Layer 2 Shared VLAN Environment (2) In conclusion, to use the V5812G as Layer 2 switch, user should add the uplink port to all VLANs and create new VLAN including all ports. If the communication between each...
  • Page 221: Vlan Translation

    User Manual UMN:CLI V5812G To configure FID, use the following command. Command Mode Description vlan fid VLANS FID Bridge Configures FID. 8.1.11 VLAN Translation VLAN Translation is simply an action of Rule. This function is to translate the value of specific VLAN ID which classified by Rule.
  • Page 222 UMN:CLI User Manual V5812G SWITCH(interface)# shutdown SWITCH(interface)# exit SWITCH(config)# bridge SWITCH(bridge)# no vlan br3 SWITCH(bridge)# show vlan u: untagged port, t: tagged port ----------------------------------------------------------------- Name( VID| FID) |123456789012345678901234567890123456789012 ----------------------------------------------------------------- default( 1) |u...uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu br2( 2) |.u........br4( 4) |...u........SWITCH(bridge)# Sample Configuration 3: Configuring QinQ Port 10 of SWITCH 1 and port 11 of SWITCH 2 are connected to the network where different VLANs are configured.
  • Page 223 UMN:CLI V5812G Sample Configuration 5: Configuring Shared VLAN with FID Configure br2, br3, br4 in the V5812G configured Layer 2 environment and port 24 as Uplink port is configured. To transmit untagged packet through Uplink port rightly, follow below configuration.
  • Page 224: Link Aggregation (Lag)

    (default: srcdstmac) srcip | srcmac} It is possible to input 0 to 5 to the trunk group ID because the V5812G supports 6 logical aggregated ports, and the group ID of port trunk and the aggregator number of LACP...
  • Page 225: Disabling Port Trunk

    Therefore, the V5812G is configured to decide the way of packet route in order to divide on member port effectively when packets enter. It is decided with source IP address, destination IP address, source MAC address, destination MAC address and the user could get information of packets to decided packet route.
  • Page 226: Configuring Lacp

    Therefore, the V5812G is configured to decide the way of packet route in order to distribute (or forward) packets to the member port effectively when packets enter. It is...
  • Page 227: Operation Mode

    MAC address and the user could get information of packets to decided packet route. dstip is destination IP address and dstmac means destination MAC address. For the V5812G, a source destination MAC address is basically used to decide packet route.
  • Page 228: Priority Of Switch

    UMN:CLI User Manual V5812G To delete the configured operation mode of the member port, use the following command. Command Mode Description Deletes the configured operation mode of the member no lacp port activity PORTS Bridge port. 8.2.2.4 Priority of Switch In case the member ports of connected switches are configured as Active mode (LACP system enabled), it is required to configure which switch would be a standard for it.
  • Page 229: Bpdu Transmission Rate

    User Manual UMN:CLI V5812G 8.2.2.6 BPDU Transmission Rate Member port transmits BPDU with its information. For the V5812G, it is possible to configure the BPDU transmission rate, use the following command. Command Mode Description Configures BPDU transmission rate: lacp port timeout PORTS {short | PORTS: select the port number.
  • Page 230: Displaying Lacp Configuration

    UMN:CLI User Manual V5812G 8.2.2.9 Displaying LACP Configuration To display a configured LACP, use the following command. Command Mode Description show lacp Shows the information of lacp configuration. show lacp aggregator Shows the information of aggregated port. show lacp aggregator Enable Shows the information of selected aggregated port.
  • Page 231: Spanning-Tree Protocol (Stp)

    User Manual UMN:CLI V5812G Spanning-Tree Protocol (STP) The local area network (LAN), which is composed of double paths like token ring, has the advantage that it is possible to access in case of disconnection with one path. However, there is another problem called a loop when you always use the double paths.
  • Page 232: Stp Operation

    (STP). It is easy and fast to configure new protocol. The IEEE 802.1w also supports backward compatibility with IEEE 802.1d. The V5812G provides STP, RSTP and MSTP. For more detail description of STP and RSTP, refer to the following sections. •...
  • Page 233: Fig. 8.12 Designated Switch

    User Manual UMN:CLI V5812G After configuring STP, switches exchange their information. The priority of SWITCH A is 8, the priority of SWITCH B is 9 and the priority of SWITCH C is 10. In this case, SWITCH A is automatically configured as root switch.
  • Page 234: Fig. 8.13 Port Priority

    UMN:CLI User Manual V5812G Port Priority Meanwhile, when the path-cost of two paths are same, port-priority is compared. As the below picture, suppose that two switches are connected. Since the path-costs of two paths are 100, same, their port priorities are compared and port with smaller port priority is selected to transmit packet.
  • Page 235: Rstp Operation

    User Manual UMN:CLI V5812G • Blocking a port that is enabled, but that is neither a Designated port nor a Root port, will be in the blocking state. A blocking port will not receive or forward data frames, nor will it transmit BPDUs, but instead it will listen for other‘s BPDUs to determine if and when...
  • Page 236: Fig. 8.15 Alternate Port And Backup Port

    UMN:CLI User Manual V5812G Fig. 8.15 Alternate Port and Backup Port The difference of between alternate port and backup port is that an alternate port can alternate the path of packet when there is a problem between Root switch and SWITCH C but Backup port cannot provide stable connection in that case.
  • Page 237: Fig. 8.16 Example Of Receiving Low Bpdu

    User Manual UMN:CLI V5812G Fig. 8.16 Example of Receiving Low BPDU Rapid Network Convergence A new link is connected between SWITCH A and root. Root and SWITCH A is not directly connected, but indirectly through SWITCH D. After SWITCH A is newly connected to root, packet cannot be transmitted between the ports because state of two switches becomes listening, and no loop is created.
  • Page 238: Fig. 8.18 Network Convergence Of 802.1W (1)

    UMN:CLI User Manual V5812G disconnected during two times of BPDU Forward-delay till a port connected to switch D and SWITCH C is blocked. Then, right after the connection, it is possible to transmit BPDU although packet cannot be transmitted between switch A and root.
  • Page 239: Fig. 8.20 Network Convergence Of 802.1W (3)

    User Manual UMN:CLI V5812G SWITCH B has only edge-designated port. Edge designated does not cause loop, so it is defined in 802.1w to be changed to forwarding state. Therefore, SWITCH B does not need to block specific port to forwarding state of SWITCH A. However since SWITCH C has a port connected to SWITCH D, you should make blocking state of the port.
  • Page 240: Mstp Operation

    8.3.3 MSTP Operation To operate the network more efficiently, the V5812G uses MSTP (Multiple Spanning-Tree Protocol). It constitutes the network with VLAN subdividing existing LAN domain logically and configure the route by VLAN or VLAN group instead of existing routing protocol.
  • Page 241: Fig. 8.23 Cst And Ist Of Mstp (1)

    User Manual UMN:CLI V5812G Fig. 8.23 CST and IST of MSTP (1) In CST, SWITCH A and B are operating with STP and SWITCH C, D and E are operating with MSTP. First, in CST, CIST is established to decide a CST root. After the CST root is decided, the closest switch to the CST root is decided as IST root of the region.
  • Page 242: Configuring Stp/Rstp/Mstp/Pvstp/Pvrstp Mode (Required)

    IST root in order to request itself to be a CST root. However, if any BPDU having higher priority than that of SWITCH B is sent, SWITCH B cannot be a CST root. For the V5812G, the commands configuring MSTP are also used to configure STP and RSTP.
  • Page 243: Path-Cost

    User Manual UMN:CLI V5812G having the lowest priority is decided as root switch. To change the root switch by configuring priority for it, use the following command. Command Mode Description Configures the priority of the switch: stp mst priority MSTID-RANGE MSTID-RANGE: select instance number 0.
  • Page 244: Port-Priority

    MSTID-RANGE PORTS 8.3.5.5 MST Region If MSTP is established in the V5812G, decide a MST region the switch is going to belong to by configuring the MST configuration ID. Configuration ID contains a region name, revision, and a VLAN map.
  • Page 245: Mstp Protocol

    Deletes the configured revision number. After configuring the configuration ID in the V5812G, you should apply the configuration to the switch. After changing or deleting the configuration, you must apply it to the switch. If not, it does not being reflected into the switch.
  • Page 246: Edge Ports

    UMN:CLI User Manual V5812G To configure the point-to-point status, use the following command. Command Mode Description Sets point-to-point MAC: PORTS: select the port number stp point-to-point-mac PORTS auto: auto detect Bridge {auto | force-true | force-false} force-true: force to point-to-point MAC...
  • Page 247: Configuring Pvstp/Pvrstp

    With the show stp command, it is possible to check the information for STP/RSTP/MSTP. How to distinguish them is to check which one is marked on the mode. In case STP or RSTP is configured in the V5812G, you should configure MSTID-RANGE as 0.
  • Page 248: Activating Pvstp/Pvrstp

    UMN:CLI User Manual V5812G Fig. 8.25 Example of PVSTP 8.3.6.1 Activating PVSTP/PVRSTP To configure PVSTP or PVRSTP, configure force-version in order to decide the mode. In order to decide force-version, use the following command. Command Mode Description stp pvst enable VLAN-RANGE Bridge Activates PVSTP or PVRSTP function.
  • Page 249: Root Switch

    User Manual UMN:CLI V5812G 8.3.6.2 Root Switch To establish PVSTP and PVRSTP function, first of all, Root switch should be decided. Each switch has its own Bridge ID and Root switch on same LAN is decided by comparing their Bridge ID. However, the user can change Root switch by configuring Priority for it.
  • Page 250: Restarting Protocol Migration

    STP mode even though RSTP is enabled at both. To prevent this, the V5812G provides the stp clear-detected-protocol command. If you use this command, the switch checks STP protocol packet once again.
  • Page 251: Bpdu Configuration

    User Manual UMN:CLI V5812G 8.3.9 BPDU Configuration BPDU is a transmission message in LAN in order to configure, and maintain the configuration for STP/RSTP/MSTP. Switches that STP is configured exchange their information BPDU to find the best path. MSTP BPDU is a general STP BPDU having additional MST data on its end.
  • Page 252: Forward Delay

    UMN:CLI User Manual V5812G 8.3.9.2 Forward Delay It is possible to configure forward delay, which means time to take port status from listening to forwarding. To configure forward delay, use the following command. Command Mode Description Modifies forward-delay in STP, RSTP or MSTP, enter a stp mst forward-delay <4-30>...
  • Page 253: Bpdu Filter

    User Manual UMN:CLI V5812G To configure the number of hops of BPDU in MSTP, use the following command. Command Mode Description Configures the number of hops for BPDU, set the stp mst max-hops <1-40> number of possible hops in the region.
  • Page 254: Displaying Bpdu Configuration

    To prevent this problem, the V5812G provides BPDU guard auto-recovery function. When an edge port is down for BPDU packet, which came from other switch, the port is recovered automatically after configured time.
  • Page 255: Fig. 8.27 Example Of Layer 2 Network Design In Rstp Environment

    User Manual UMN:CLI V5812G Fig. 8.27 Example of Layer 2 Network Design in RSTP Environment In ordinary case, data packets go to Root switch A through the blue path. The black arrows describe the routine path to the Aggregation Switch. And the dot lines are in blocking state.
  • Page 256: Fig. 8.28 Example Of Layer 2 Network Design In Mstp Environment

    UMN:CLI User Manual V5812G Fig. 8.28 Example of Layer 2 Network Design in MSTP Environment The following is an example of configuring MSTP in the switch. SWITCH(bridge)# stp force-version mstp SWITCH(bridge)# stp mst enable SWITCH(bridge)# stp mst config-id map 2 1-50...
  • Page 257: Ethernet Ring Protection (Erp)

    V5812G Ethernet Ring Protection (ERP) The ERP is Dasan Networks protection protocol for Ethernet ring topology to prevent Loop from a link failure or recovery. It is designed to minimize the time for removing Loop within 50 milliseconds while there is an enormous amount of traffic flow in Metro Ethernet network.
  • Page 258 – RM Link Up: This is used to inform the normal nodes of re-blocking status of its secondary port caused by link recovery. ERP implementation of the V5812G has the following restrictions, so you should keep in mind those before configuring ERP.
  • Page 259: Fig. 8.29 Erp Operation In Case Of Link Failure

    User Manual UMN:CLI V5812G Fig. 8.29 shows an example of ERP operation when a link failure occurs. Fig. 8.29 ERP Operation in case of Link Failure After RM node receives Link Down messages from other nodes, it unblocks its secondary port for traffic transmission with Node B directly connected to the secondary port.
  • Page 260: Fig. 8.31 Link Failure Recovery

    UMN:CLI User Manual V5812G If Node A and Node B detect the link failure being recovered, they send Link Up message to RM node. But these nodes keep the blocking status of the link recovered ports. Fig. 8.31 shows an example of a Link Failure Recovery operation.
  • Page 261: Loss Of Test Packet (Lotp)

    User Manual UMN:CLI V5812G 8.4.2 Loss of Test Packet (LOTP) ERP recognizes the Link Failure using Loss of Test Packet (LOTP) mechanism. RM Node periodically sends periodic ―RM Test Packet‖ message. The state of LOTP means that ―RM Test Packet‖ message does not return three consecutive times to RM node through Ethernet Ring.
  • Page 262: Configuring Erp Domian

    UMN:CLI User Manual V5812G 8.4.4 Configuring ERP Domian 8.4.4.1 ERP Domain To configure the switch with ERP, you should create ERP domain first. To create an ERP domain, use the following command. Command Mode Description Creates ERP domain. erp domain <1-4094>...
  • Page 263: Protected Activation

    User Manual UMN:CLI V5812G 8.4.5 Protected Activation When you finish configuring specific ERP domain with Domain ID, primary port and secondary port, you should activate the ERP domain to apply to the system. To activate an ERP domain, use the following command.
  • Page 264: Wait-To-Restore Time

    UMN:CLI User Manual V5812G To delete the configured a Learning Disable Time, use the following command. Command Mode Description no erp learn-dis-time <1-4094> Bridge Configures ERP learning disable time as default value 8.4.8 Wait-to-Restore Time If a port‘s link failure is recovered on the normal node, the blocked port should be changed to the forwarding status.
  • Page 265: Erp Ring Priority

    User Manual UMN:CLI V5812G 8.4.10 ERP Ring Priority The Super Loop occurs because of a shared link‘s failure between two ERP rings. A domain with higher priority (one of the RM nodes) is the only responsible for monitoring the ports of a shared link. The control packets of a domain with lower ring priority can be transmitted to another domain with higher priority to prevent the super loop.
  • Page 266: Erp Trap

    UMN:CLI User Manual V5812G 8.4.12 ERP Trap To enable the system to generate ERP trap message, use the following command. Command Mode Description erp trap <1-4094> {lotp | ulotp | multiple-rm | Enables the system to send ERP Trap Bridge rmnode-reachability} message in case of the event.
  • Page 267: Displaying Erp Configuration

    User Manual UMN:CLI V5812G promiscuous and protected ports within a PVLAN. • Protected: An protected port has complete Layer 2 separation from the other ports within the same PVLAN, but it floods the traffic to the promiscuous ports. PVLANs block all traffic to protected ports except traffic from promiscuous ports. Traffic from protected port is forwarded only promiscuous ports.
  • Page 268: Loop Detection

    LAN like loop topology. That superfluous traffic eventually can result in network fault. It causes superfluous data transmission and network fault. To prevent this, the V5812G provides the loop detecting function. The loop detecting mechanism is as follows:...
  • Page 269 User Manual UMN:CLI V5812G To set the interval of sending the loop-detecting packet, use the following command. Command Mode Description loop-detect PORTS period <1- Sets the interval of sending the loop-detecting packet. Bridge 60> (default: 30 seconds) You can also configure the source MAC address of the loop-detecting packet. Normally the system‘s MAC address will be the source MAC address of the loop-detecting packet,...
  • Page 270: Dynamic Host Configuration Protocol (Dhcp)

    UMN:CLI User Manual V5812G Dynamic Host Configuration Protocol (DHCP) Dynamic Host Configuration Protocol (DHCP) is a TCP/IP standard for simplifying the administrative management of IP address configuration by automating address configuration for network clients. The DHCP standard provides for the use of DHCP servers as a way to manage dynamic allocation of IP addresses and other relevant configuration details to DHCP-enabled clients on the network.
  • Page 271: Dhcp Server

    User Manual UMN:CLI V5812G The V5812G flexibly provides the functions as the DHCP server or DHCP relay agent according to your DHCP configuration. This chapter contains the following sections: • DHCP Server • DHCP Address Allocation with Option 82 •...
  • Page 272: Dhcp Pool Creation

    UMN:CLI User Manual V5812G 8.6.1.1 DHCP Pool Creation The DHCP pool is a group of IP addresses that will be assigned to DHCP clients by DHCP server. You can create various DHCP pools that can be configured with a different network, default gateway and range of IP addresses.
  • Page 273: Default Gateway

    User Manual UMN:CLI V5812G The following is an example for specifying the range of IP addresses. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# default-router 100.1.1.254 SWITCH(config-dhcp[sample])# range 100.1.1.1 100.1.1.100 SWITCH(config-dhcp[sample])# You can also specify several inconsecutive ranges of IP addresses in a single DHCP pool, e.g.
  • Page 274: Dns Server

    UMN:CLI User Manual V5812G The following is an example of setting default and maximum IP lease time. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# default-router 100.1.1.254 SWITCH(config-dhcp[sample])# range 100.1.1.1 100.1.1.100 SWITCH(config-dhcp[sample])# lease-time default 5000 SWITCH(config-dhcp[sample])# lease-time max 10000 SWITCH(config-dhcp[sample])# 8.6.1.6...
  • Page 275: Domain Name

    8.6.1.10 Static Mapping The V5812G provides a static mapping function that enables to assign a static IP address without manually specifying static IP assignment by using a DHCP lease database in the DHCP database agent. To perform a static mapping, use the following command.
  • Page 276: Recognition Of Dhcp Client

    UMN:CLI User Manual V5812G For more information of the file naming of a DHCP lease database, see Section 8.6.3.1. 8.6.1.11 Recognition of DHCP Client Normally, a DHCP server is supposed to prohibit assigning an IP address when DHCP packets have no client ID (CID). However, some Linux clients may send DHCP discover messages without CID.
  • Page 277: Prohibition Of 1:N Ip Address Assignment

    Some network devices may need plural IP addresses, but most DHCP clients like personal computers need only a single IP address. In this case, you can configure the V5812G to prohibit assigning plural IP addresses to a single DHCP client.
  • Page 278: Ignoring Bootp Request

    UMN:CLI User Manual V5812G To prohibit assigning plural IP addresses to a DHCP client, use the following command. Command Mode Description ip dhcp check client-hardware- Prohibits assigning plural IP addresses. address Global dhcp check client- Permits assigning plural IP addresses.
  • Page 279: Setting Dhcp Pool Size

    User Manual UMN:CLI V5812G 8.6.1.17 Setting DHCP Pool Size To limit a size of DHCP pool, use the following command. Command Mode Description ip dhcp max-pool-size <1-8> Global Configures a maximum size of DHCP pool. 8.6.1.18 Displaying DHCP Pool Configuration To display a DHCP pool configuration, use the following command.
  • Page 280: Dhcp Address Allocation With Option 82

    8.6.2 DHCP Address Allocation with Option 82 The DHCP server provided by the V5812G can assign dynamic IP addresses based on DHCP option 82 information sent by the DHCP relay agent. The information sent via DHCP option 82 will be used to identify which port the DHCP_REQUEST came in on.
  • Page 281: Associating Dhcp Class

    User Manual UMN:CLI V5812G To delete specified option 82 information for IP assignment, use the following command. Command Mode Description no relay-information remote-id ip A.B.C.D [circuit-id {hex HEXSTRING | index <0-65535> | text STRING}] relay-information remote-id DHCP Deletes specified option 82 information...
  • Page 282: Dhcp Lease Database

    8.6.3.1 DHCP Database Agent The V5812G provides a feature that allows to a DHCP server automatically saves a DHCP lease database on a DHCP database agent. The DHCP database agent should be a TFTP server, which stores a DHCP lease data- base as numerous files in the form of leasedb.MAC-ADDRESS, e.g.
  • Page 283: Deleting Dhcp Lease Database

    User Manual UMN:CLI V5812G 8.6.3.3 Deleting DHCP Lease Database To delete a DHCP lease database, use the following command. Command Mode Description clear ip dhcp leasedb A.B.C.D/M Deletes a DHCP lease database a specified subnet. clear ip dhcp leasedb pool...
  • Page 284: Dhcp Helper Address

    Deletes a specified packet forwarding address. {A.B.C.D | all} If a DHCP helper address is specified on an interface, the V5812G will enable a DHCP relay agent. You can also specify an organizationally unique identifier (OUI) when configuring a DHCP helper address.
  • Page 285: Dhcp Server Id Option

    User Manual UMN:CLI V5812G To enable the smart relay agent forwarding, use the following command. Command Mode Description ip dhcp smart-relay Enables a smart relay. Global no ip dhcp smart-relay Disables a smart relay. 8.6.4.3 DHCP Server ID Option In case that more than two DHCP servers are connected to one DHCP relay agent, if the...
  • Page 286: Dhcp Option

    UMN:CLI User Manual V5812G 8.6.5 DHCP Option This function enables administrators to define DHCP options that are carried in the DHCP communication between DHCP server and client or relay agent. The following indicates the format of the DHCP options field.
  • Page 287: Configuring Dhcp Option Format

    User Manual UMN:CLI V5812G 8.6.5.2 Configuring DHCP Option Format To configure a DHCP option format, use the following command. Command Mode Description attr <1-32> type <0-255> length Sets the type, length, and value of an attribute for a {<1-64> | variable} value {hex | DHCP option.
  • Page 288: Dhcp Option 82

    UMN:CLI User Manual V5812G 8.6.6 DHCP Option 82 In some networks, it is necessary to use additional information to further determine which IP addresses to allocate. By using the DHCP option 82, a DHCP relay agent can include additional information about itself when forwarding client-originated DHCP packets to a DHCP server.
  • Page 289: Enabling Dhcp Option 82

    User Manual UMN:CLI V5812G Fig. 8.36 shows how the DHCP relay agent with the DHCP option 82 operates. Fig. 8.36 DHCP Option 82 Operation 8.6.6.1 Enabling DHCP Option 82 To enable/disable the DHCP option 82, use the following command. Command...
  • Page 290: Option 82 Reforwarding Policy

    UMN:CLI User Manual V5812G To specify a remote ID, use the following command. Command Mode Description system-remote-id hex HEXSTRING system-remote-id ip A.B.C.D Specifies a remote ID. Option 82 (default: system MAC address) system-remote-id text STRING system-remote-id option format NAME To specify a circuit ID, use the following command.
  • Page 291: Option 82 Trust Policy

    {normal | option82 | all} 8.6.7 DHCP Snooping For enhanced security, the V5812G provides the DHCP snooping feature. The DHCP snooping filters untrusted DHCP messages and builds/maintains a DHCP snooping binding table. The untrusted DHCP message is a message received from outside the network, and an untrusted interface is an interface configured to receive DHCP messages from outside the network.
  • Page 292: Enabling Dhcp Snooping

    UMN:CLI User Manual V5812G The DHCP snooping basically permits all the trusted messages received from within the network and filters untrusted messages. In case of untrusted messages, all the binding entries are recorded in a DHCP snooping binding table. This table contains a hardware address, IP address, lease time, VLAN ID, interface, etc.
  • Page 293: Dhcp Filter On Trust Port

    User Manual UMN:CLI V5812G 8.6.7.3 DHCP Filter on Trust Port To filter broadcast request packets outgoing from the specified trust port, use the following command. Command Mode Description ip dhcp snooping trust PORTS Filters egress broadcast request packets on the trust filter egress bcast-req port.
  • Page 294: Dhcp Lease Limit

    UMN:CLI User Manual V5812G To display the rate limit for DHCP packets, use the following command. Command Mode Description Shows the rate limit for DHCP packets. show ip dhcp snooping limit- Enable config: user configuration rate {config | status} Global status: current status of DHCP packets limit 8.6.7.5...
  • Page 295: Source Mac Address Verification

    8.6.7.6 Source MAC Address Verification The V5812G can verify that the source MAC address in a DHCP packet that is received on untrusted ports matches the client hardware address in the packet. To enable the source MAC address verification, use the following command.
  • Page 296: Arp Inspection Start Time

    DHCP packets back and forth the V5812G, would be lost. Thus, ARP inspection should be delayed to start during some time so that DHCP snooping table can build entries. If no time given, ARP inspection sees empty snooping table and drop every ARP packet.
  • Page 297: Dhcp Snooping Option

    User Manual UMN:CLI V5812G To enable/disable the switch which is enabled by DHCP snooping to insert or remove DHCP option82 field, use the following command. Command Mode Description ip dhcp snooping information Enables the switch to insert DHCP option 82 field in option forwarded DHCP packets to the DHCP server.
  • Page 298: Displaying Dhcp Snooping Configuration

    UMN:CLI User Manual V5812G To specify a DHCP server default option, use the following command. Command Mode Description ip dhcp snooping default-option Specifies a snooping default option format for a switch. code <1-254> format NAME NAME: DHCP option format name...
  • Page 299: Enabling Ip Source Guard

    User Manual UMN:CLI V5812G permitted. When IP source guard is enabled in IP and MAC filtering mode, the DHCP snooping option 82 must be enabled to ensure that the DHCP protocol works properly. Without option 82 data, the switch cannot locate the client host port to forward the DHCP server reply.
  • Page 300: Static Ip Source Binding

    8.6.9 DHCP Client An interface of the V5812G can be configured as a DHCP client, which can obtain an IP address from a DHCP server. The configurable DHCP client functionality allows a DHCP client to use a user-specified client ID, class ID or suggested lease time when requesting an IP address from a DHCP server.
  • Page 301: Dhcp Class Id

    Configures a DHCP client not to request a specified Interface {domain-name | dns} option. 8.6.9.7 Forcing Release or Renewal of DHCP Lease The V5812G supports two independent operation: immediate release a DHCP lease for a DHCP client and force DHCP renewal of a lease for a DHCP client.
  • Page 302: Displaying Dhcp Client Configuration

    8.6.10.1 DHCP Packet Filtering For the V5812G, it is possible to block the specific client with MAC address. If the MAC address blocked by administrator requests an IP address, the server does not assign IP. This function is to strength the security of DHCP server.
  • Page 303: Dhcp Server Packet Filtering

    User Manual UMN:CLI V5812G 8.6.10.2 DHCP Server Packet Filtering Dynamic Host Configuration Protocol (DHCP) makes DHCP server assign IP address to DHCP clients automatically and manage the IP address. Most ISP operators provide the service as such a way. At this time, if a DHCP client connects with the equipment that can be the other DHCP server such as Internet access gateway router, communication failure might be occurred.
  • Page 304: Debugging Dhcp

    UMN:CLI User Manual V5812G To display a status of the DHCP server packet filtering, use the following command. Command Mode Description Enable show dhcp-server-filter Global Show a status of the DHCP server packet filtering. Bridge 8.6.11 Debugging DHCP To enable/disable a DHCP debugging, use the following command.
  • Page 305: Virtual Router Redundancy Protocol (Vrrp)

    VRRP routers to prevent network failure caused by one dedicated router. You can configure maximum 255 VRRP routers in VRRP group of V5812G. First of all, decide which router plays a roll as Master Virtual Router. The other routers will be Backup Virtual Routers.
  • Page 306: Configuring Vrrp

    UMN:CLI User Manual V5812G 8.7.1 Configuring VRRP To configure the V5812G as device in Virtual Router, use the following command on Global Configuration mode. Then you can configure VRRP by opening VRRP Configuration mode. Command Mode Description router vrrp INTERFACE GROUP- Configures Virtual Router (VRRP Group).
  • Page 307 User Manual UMN:CLI V5812G be higher precedence. If a problem occurs on Master Router and there are more than two routers, one of them is selected as new Master Router according to their precedence. To configure Priority of Virtual Router or delete the configuration, use the following commands.
  • Page 308 3.620 sec [1] associate address : 10.0.0.5 By default, Priority of the V5812G is configured as ―100‖. Therefore, unless you configure specific Priority, this switch becomes Master Router because a device, which has lower IP address, has higher precedence.
  • Page 309: Vrrp Track Function

    Master Router cannot be recognized, the communication would be impossible. For the V5812G, you can configure Master Router to be changed by giving lower Priority to Master Router when the link of Master Router is disconnected. This function is VRRP...
  • Page 310: Fig. 8.39 Vrrp Track

    UMN:CLI User Manual V5812G Fig. 8.39 VRRP Track To configure VRRP Track, use the following command. Command Mode Description track interface INTERFACE Enables the interface tracking and decreases the VRRP priority <1-254> VRRP priority as the track results. To release VRRP Track configuration, use the following command.
  • Page 311: Authentication Password

    User Manual UMN:CLI V5812G 8.7.1.5 Authentication Password If anyone knows Group ID and Associated IP address, he can configure another device as a Virtual Router. To prevent this, user needs to configure a password, named authentication password that can be used only in Virtual Router user configured.
  • Page 312: Vrrp Monitoring And Management

    UMN:CLI User Manual V5812G 8.7.2 VRRP Monitoring and Management You can view all kinds of statistics and database recorded in IP routing table. The information can be used to enhance system utility and solve problem in case of trouble. You can check network connection and data routes through the transmission.
  • Page 313: Vrrp Debug

    User Manual UMN:CLI V5812G 8.7.2.3 VRRP Debug To enable VRRP debugging, use the following command. Command Mode Description Enables VRRP debugging. debug vrrp [all] all: all VRRP debugging Enables VRRP debugging. nsm: NSM notifications debugging debug vrrp nsm [interface | bfd]...
  • Page 314: Single Ip Management

    It is named Single IP Management because you can easily manage various switches and subscribers connected to the switch with this cascading function. The V5812G provides the function. The following is an example of the network where the cascading is configured.
  • Page 315: Designating Master And Slave Switch

    User Manual UMN:CLI V5812G The port that connects Master and Slave switch must belong to the same VLAN. 8.8.2 Designating Master and Slave Switch Designate Master switch using the following command. Command Mode Description stack master Global Sets the switch as a master switch.
  • Page 316: Accessing To Slave Switch From Master Switch

    UMN:CLI User Manual V5812G 8.8.5 Accessing to Slave Switch from Master Switch After configuring all stacking configurations, it is possible to configure and mange by accessing to Slave switch from Master switch. To access to Slave switch from Master switch, use the following command in Bridge Configuration mode.
  • Page 317 User Manual UMN:CLI V5812G Step 2 Configure Switch A as Master switch. Configure VLAN to belong to the same switch group and after registering Slave switch, configure it as a Master switch. <Switch A – Master Switch> SWITCH_A(config)# stack master...
  • Page 318: Rate Limit

    Egress and ingress can be configured both to be same and to be different. The V5812G can apply the rate limit with 64 Kbps unit for GE port, and support ingress policing and egress shaping. To set a rate limit for ports, use the following command.
  • Page 319: Flood Guard

    User Manual UMN:CLI V5812G 8.10 Flood Guard Flood guard limits number of packets, how many packets can be transmitted, in configured bandwidth, whereas Rate limit controls packets through configuring width of bandwidth, which packets pass through. This function prevents receiving packets more than configured amount without enlarging bandwidth.
  • Page 320: Cpu Flood Guard

    A packet flooding occurs unexpectedly when a large number of broadcast or multicast packets are received on a port, which may cause unnecessary network congestion. V5812G provides the system flood guard function that controls traffic for a port by given threshold. If the number of incoming packets exceeds the threshold, the system...
  • Page 321 User Manual UMN:CLI V5812G generates a syslog message/SNMP trap or discards those packets. To enable/disable the system flood guard, use the following command. Command Mode Description system-flood-guard {enable Bridge Enables/disables the system flood guard. disable} To specify the number of packets per second according to the type of packets, which is transmitted to a specific port, use the following command.
  • Page 322: Pps Control

    The V5812G provides the PPS control function that controls traffic for a port by given threshold. If the number of incoming packets exceeds the threshold, the system generates a syslog message and SNMP trap.
  • Page 323: Storm Control

    The packet range that can be capable to accept is from 64 bytes to 1518 bytes. Therefore, packets not between these ranges will not be taken. However, the V5812G can accept jumbo frame larger than 1518 bytes through user‘s configuration.
  • Page 324: Bandwidth

    Blocking Packet Forwarding RFC 2644 recommends that system blocks broadcast packet of same network bandwidth with interface of equipment, namely direct broadcast packet. Hereby, V5812G is supposed to block direct broadcast packet by default setting. However, you can enable or disable it in V5812G.
  • Page 325: Ip Multicast

    Fig. 9.1 shows an example of the IP multicast network. In this case, the V5812G is configured only with IGMP snooping (L2 multicast forwarding feature) in the Layer 2 network.
  • Page 326: Fig. 9.2 The V5812G With Pim-Sm

    Fig. 9.2 The V5812G with PIM-SM If more than one port are on the same Layer 2 interface and the V5812G is a border router of the Layer 3 network, you should configure the V5812G with both IGMP snooping and PIM-SM together.
  • Page 327: Multicast Group Membership

    Using IGMP, hosts express an interest in a certain multicast group, and routers maintain the multicast group membership database by collecting the interests from the hosts. The V5812G supports IGMP version 1, 2, and 3 each defined in RFC 1112, 2236, and 3376. 9.1.1...
  • Page 328: Igmp Version

    UMN:CLI User Manual V5812G 9.1.1.1 IGMP Version By default, the V5812G runs IGMP version 3. To change the IGMP protocol version on a current interface, use the following command. Command Mode Description Sets an IGMP version on a current interface.
  • Page 329: Igmp Debug

    User Manual UMN:CLI V5812G 9.1.1.4 IGMP Debug To enable debugging of all IGMP or a specific feature of IGMP, use the following command. Command Mode Description Enables IGMP debugging. all: all IGMP decode: IGMP decoding debug igmp {all | decode |...
  • Page 330: Igmp Static Join

    UMN:CLI User Manual V5812G • Leave group This is used to explicitly leave a group. IGMPv2 Operation An IGMP querier is the only router that sends membership query messages for a network segment. In IGMP version 2, the querier is a router with the lowest IP address on the subnet.
  • Page 331 User Manual UMN:CLI V5812G To configure the IGMP static join, use the following command. Command Mode Description Configures the IGMP static join. ip igmp static-group A.B.C.D A.B.C.D: IGMP group address vlan VLAN port PORT [reporter VLANS: VLAN ID (1-4094) A.B.C.D]...
  • Page 332: Igmp Access Control

    UMN:CLI User Manual V5812G To display the IGMP static join group list, use the following command. Command Mode Description show ip igmp static-group Shows the IGMP static join group list. show ip igmp static-group list Enable 1-99: IP standard access list...
  • Page 333 V5812G IGMP Startup Query Interval The V5812G needs to acquire information of its multicast members for the updated membership when it becomes the querier on the specified IGMP interface. For the updated membership, V5812G sends general query messages as a querier. You can specify the interval to send this query messages as many as the configured QRV value.
  • Page 334: Igmp Immediate Leave

    UMN:CLI User Manual V5812G Upon receiving a leave message, a querier then sends out a group-specific (IGMPv2) or group-source-specific query (IGMPv3) message to determine if there is still any host interested in receiving the traffic. If there is no reply, the querier stops forwarding the multicast traffic.
  • Page 335: Igmp Version 3

    Each record specifies the information of the filter mode and source list. The report can contain multiple group records, allowing reporting of full current state using fewer packets. The V5812G runs IGMPv3 by default, and there are no additional IGMPv3 parameters you need to configure. IGMPv3 snooping features are provided. IGMPv3 Messages...
  • Page 336: Displaying Igmp Information

    UMN:CLI User Manual V5812G lowing information: – Current-state: This indicates the current filter mode including/excluding the speci- fied multicast address. – Filter-mode-change: This indicates a change from the current filter mode to the other mode. – Source-list-change: This indicates a change allowing/blocking a list of the multi- cast sources specified in the record.
  • Page 337: Multicast Functions

    IGMP Filtering and Throttling 9.2.1 Multicast Forwarding Database Internally, the V5812G forwards the multicast traffic referred to the multicast forwarding database (McFDB). The McFDB maintains multicast forwarding entries collected from multicast protocols and features, such as PIM, IGMP, etc. The McFDB has the same behavior as the Layer 2 FDB. When certain multicast traffic comes to a port, the switch looks for the forwarding information (the forwarding entry) for the traffic in the McFDB.
  • Page 338: Forwarding Entry Aging

    UMN:CLI User Manual V5812G 9.2.1.2 Forwarding Entry Aging To specify the aging time for forwarding entries on the McFDB, use the following command. Command Mode Description Specifies the aging time for forwarding entries on the ip mcfdb aging-time McFDB. <10-10000000>...
  • Page 339: Igmp Snooping Basic

    By maintaining this multicast forwarding table, the V5812G dynamically forward multicast traffic only to those interfaces that want to receive it as nominal unicast forwarding does.
  • Page 340: Enabling Igmp Snooping

    UMN:CLI User Manual V5812G 9.2.2.1 Enabling IGMP Snooping You can enable IGMP snooping globally or on each VLAN respectively. By default, IGMP snooping is globally disabled. To enable IGMP snooping, use the following command. Command Mode Description ip igmp snooping Enables IGMP snooping globally.
  • Page 341: Igmp Snooping Robustness Value

    User Manual UMN:CLI V5812G 9.2.2.3 IGMP Snooping Robustness Value The robustness variable allows tuning for the expected packet loss on a network. If a network is expected to be lossy, the robustness variable may be increased. When receiving the query message that contains a certain robustness variable from an IGMP snooping querier, a host returns the report message as many as the specified robustness variable.
  • Page 342 UMN:CLI User Manual V5812G To disable the IGMP snooping querier, use the following command. Command Mode Description no ip igmp snooping querier [address] Disables the IGMP snooping querier. Global address: source address of IGMP snooping query igmp snooping vlan VLANS querier [address] If you do not specify a source address of an IGMP snooping query, the IP address configured on the VLAN is used as the source address by default.
  • Page 343: Igmp Snooping Last Member Query Interval

    User Manual UMN:CLI V5812G To specify a maximum query response time advertised in general query messages, use the following command. Command Mode Description ip igmp snooping querier max- Specifies a maximum query response time. response-time <1-25> 1-25: maximum response time (default: 10 seconds)
  • Page 344: Igmp Snooping Immediate Leave

    UMN:CLI User Manual V5812G To delete a specified an interval to send group-specific or group-source-specific query messages, use the following command. Command Mode Description igmp snooping last- member-query-interval Global Deletes a specified last member query interval. igmp snooping vlan VLANS...
  • Page 345: Igmp Snooping Report Suppression

    The hosts received the group- specific queries send the report messages according to their IGMP membership status. However, V5812G is enabled as IGMP snooping S-Query report agency, the group- specific queries are not sent downstream. When the switch receives a group-specific query, the switch terminates the query and sends an IGMP report if there is a receiver for the group.
  • Page 346: Explicit Host Tracking

    UMN:CLI User Manual V5812G To enable IGMP snooping S-Query Report Agency, use the following command. Command Mode Description ip igmp snooping s-query-report Global Enables IGMP snooping s-query-report agency. agency To disable IGMP snooping S-Query Report Agency, use the following command.
  • Page 347: Multicast Router Port Configuration

    User Manual UMN:CLI V5812G To enable IGMP group-specific queries Suppression, use the following command. Command Mode Description Enables IGMP group-specific queries suppression. It igmp snooping explicit- Global does not send a group specific query to member host tracking s-query-suppression after one sends a leave message on a VLAN.
  • Page 348 UMN:CLI User Manual V5812G To specify a multicast router port, use the following command. Command Mode Description Specifies a multicast router port globally. ip igmp snooping mrouter port PORTS: port number {PORTS | cpu} cpu: CPU port Global ip igmp snooping vlan VLANS Specifies a multicast router port on a VLAN.
  • Page 349: Tcn Multicast Flooding

    User Manual UMN:CLI V5812G Command Mode Description multicast mrouter-pass- Enables to forward multicast traffic to the multicast through router ports. Global no ip multicast mrouter-pass- Disables to forward multicast traffic to the multicast through router ports. Displaying Multicast Router Port To display a current multicast router port for IGMP snooping, use the following command.
  • Page 350 UMN:CLI User Manual V5812G To disable the switch to flood multicast traffic when TCN is received, use the following command. Command Mode Description no ip igmp snooping tcn flood Disables the switch to flood multicast traffic when TCN Global no ip igmp snooping tcn vlan...
  • Page 351: Igmpv3 Snooping

    User Manual UMN:CLI V5812G To disable the switch to send a query solicitation when TCN is received, use the following command. Command Mode Description no ip igmp snooping tcn query Disables the switch to send a query solicitation when Global solicit [address] TCN is received.
  • Page 352 UMN:CLI User Manual V5812G To display the collected IGMP snooping statistics, use the following command. Command Mode Description Enable show ip igmp snooping stats Shows the collected IGMP snooping statistics. Global port {PORTS | cpu} PORTS: port number Bridge To clear the collected IGMP snooping statistics, use the following command.
  • Page 353: Multicast Vlan Registration (Mvr)

    MVR also provides the fast convergence for topology changes in the Ethernet ring-based service provider network with STP and IGMP snooping TCN, guaranteeing stable multicast services. MVR implemented for the V5812G has the following restrictions, so you must keep in mind those, before configuring MVR. •...
  • Page 354: Source/Receiver Port

    UMN:CLI User Manual V5812G 9.2.6.3 Source/Receiver Port You need to specify the source and receiver ports for MVR. The followings are the definitions for the ports. • Source Port This is connected to multicast routers or sources as an uplink port, which receives and sends the multicast traffic.
  • Page 355: Igmp Filtering And Throttling

    User Manual UMN:CLI V5812G 9.2.7 IGMP Filtering and Throttling IGMP filtering and throttling control the distribution of multicast services on each port. IGMP filtering controls which multicast groups a host on a port can join by associating an IGMP profile that contains one or more IGMP groups and specifies whether an access to the group is permitted or denied with a port.
  • Page 356 • IGMP filtering only supports IGMPv2. By the following command, V5812G can permit or deny the IGMP packets by referring to its DHCP snooping binding table. This reference enables the system to permit IGMP messages only when the source IP address and MAC address of host have identified from the DHCP snooping binding table.
  • Page 357: Igmp Throttling

    User Manual UMN:CLI V5812G 9.2.7.2 IGMP Throttling You can configure the maximum number of multicast groups that a host on a port can join. To specify the maximum number of IGMP groups per port, use the following command. Command Mode...
  • Page 358: Igmp Proxy

    IGMP Proxy enables this L3 switch to issue IGMP host messages on behalf of hosts that the switch discovered through standard IGMP interfaces. The switch acts as a proxy for its hosts. The V5812G supports IGMPv2. IGMP Proxy can only work in a simple tree topology; where traffic is distributed to explicit upstream and downstream.
  • Page 359: Configuring Upstream Interface Mode

    Configuring Upstream Interface Mode When a single downstream interface is specified with multiple upstream interfaces, V5812G supports two methods of IGMP proxy operation that are priority mode and load balancing mode. You can choose the way how to handle multicast traffic going to upstream interfaces.
  • Page 360 IF flapping, which can increase the stability and quality for multicast service. Using this function, the V5812G gives a discredit to a IGMP IF for every flapping time, and then the IF is not selected as a forwarding path until its credit is regenerated.
  • Page 361: Disabling Verification Of Source Ip Of Igmp Packets

    User Manual UMN:CLI V5812G Command Mode Description clear ip igmp if flap discredit Enable Restores the current credit to a default value (100). [NAME] Global NAME: IGMP interface name 9.2.8.5 Disabling Verification of Source IP of IGMP Packets RPF (Reverse Path Forwarding) Check is basic operation to correctly forward multicast traffic down the distribution tree.
  • Page 362: Querying With Real Querirer's Source Ip Address

    UMN:CLI User Manual V5812G 9.2.8.7 Querying with Real Querirer’s Source IP Address To send hosts queries with the actual source IP addresses, not with mroute-proxy interface‘s IP address, use the following command. Command Mode Description ip igmp mroute-proxy querier Sets IGMP queries with original query‘s source IP...
  • Page 363: Multicast-Source Trust Port

    Disables a configured IGMP state limit per interface. 9.2.10 Multicast-Source Trust Port Any port of V5812G can be specified as a multicast-source trust port which is registered in the multicast forwarding table. Only multicast-source trust ports can be received the multicast traffic.
  • Page 364: Multicast Routing

    Multicast Routing 9.3.1.1 Enabling Multicast Routing By default, multicast routing is disabled. To configure the V5812G to forward multicast traffic via Layer 3 network, you need to enable multicast routing. To enable Layer 3 multicast routing, use the following command.
  • Page 365: Ecmp Load Splitting

    User Manual UMN:CLI V5812G To specify a TTL threshold for multicast packets, use the following command. Command Mode Description ip multicast ttl-threshold Specifies a TTL threshold for multicast packets. <0-255> 0-255: TTL value (default: 1) Interface no ip multicast ttl-threshold Deletes a specified TTL threshold for multicast packets.
  • Page 366: Displaying Mrib Entry

    UMN:CLI User Manual V5812G To specify the maximum number of multicast routing entries, use the following command. Command Mode Description Specifies the limit of the maximum number of multicast ip multicast route-limit LIMIT routing entries. [THRESHOLD] LIMIT: number of routing entries (1-214783647)
  • Page 367: Displaying Mrib Statistics

    User Manual UMN:CLI V5812G To clear the multicast forwarding cache (MFC) and tree information base (TIB) entries in the PIM-SM protocol level, use the following command. Command Mode Description clear ip mroute * [pim sparse- Deletes all MFC and TIB entries in the PIM-SM mode] protocol.
  • Page 368: Mrib Debug

    Prune messages are then used to prevent from propagating to routers with no group members. Both PIM protocols use the same message formats. The V5812G currently support PIM-SM only. PIM Messages The followings are simple descriptions of PIM control messages: •...
  • Page 369: Pim Mode

    User Manual UMN:CLI V5812G • Register Register messages are sent by the DR to the RP when a multicast packet needs to be transmitted on the RPT. These messages may contain the encapsulated multicast traffic. Both register and register-stop messages are unicast.
  • Page 370: Neighbor Filtering

    UMN:CLI User Manual V5812G other neighbor PIM routers and compares its DR priority in those from neighbors. The router with the highest priority then is elected as the DR. In case of more than one router with the same highest priority value, the one with the higher IP address is elected. If no PIM hello message is received from the DR for a certain period of time, another DR election is held.
  • Page 371: Pim Join/Prune Message Group Filtering

    User Manual UMN:CLI V5812G 9.3.2.4 PIM Join/Prune Message Group Filtering If necessary, you can filter PIM join/prune messages from seperate group using access lists. When you enable this feature, a specifid PIM group of PIM join/prune messages from the trusted neighbor are denied by a specified range of access lists.
  • Page 372: Pim Join/Prune Interval

    VIF flapping, which can increase the stability and quality for multicast service. Using this function, the V5812G gives a discredit to a VIF for every flapping time, and then the VIF is not selected as a forwarding path until its credit is regenerated.
  • Page 373: Pim Static Join

    User Manual UMN:CLI V5812G If you configure this rate as 0, the VIF credit is not regenerated! To set the current credit as the default (100), use the following command. Command Mode Description clear ip pim vif flap discredit [vif Enable Sets the current credit as the default (100).
  • Page 374: Pim-Sm

    UMN:CLI User Manual V5812G 9.3.3 PIM-SM Rendezvous Point Tree (RPT) PIM-SM mainly uses a shared tree to deliver multicast traffic, called the RP tree (RPT). As its name implies, it relies on a core router called the Rendezvous Point (RP) that receives all multicast traffic from the sources and forwards that traffic to the receivers.
  • Page 375: Fig. 9.7 Shortest Path Tree

    User Manual UMN:CLI V5812G To establish the SPT to the multicast source, the DR sends the join message with (S, G) state toward that source. When the SPT between the receiver and source is established, and multicast traffic is sent via that distribution tree, the DR sends the prune message with (*, G) state toward the RP to prune the existing shared tree to receive the traffic.
  • Page 376: Rendezvous Point

    Static RP To elect the RP among candidate RPs in the shared tree, the V5812G supports the BSR mechanism (see Section 9.3.3.2) and static RP, and also supports the simultaneous use of those.
  • Page 377 User Manual UMN:CLI V5812G Interface for Candidate RP To elect the RP, each candidate RP sends its information to the BSR. This advertisement contains the IP address and priority of the candidate RP and the multicast groups that it can service. The BSR then periodically distributes the bootstrap message that includes a set of the information received from each candidate RP (RP-set) to all the routers in the PIM-SM domain.
  • Page 378: Bootstrap Router

    UMN:CLI User Manual V5812G Displaying RP Information To display the RP information, use the following command. Command Mode Description show ip pim rp mapping Shows group-to-RP mappings and the RP-set. Enable Global Shows the RP to be chosen for a specified group.
  • Page 379: Source Registration

    User Manual UMN:CLI V5812G To clear all RP-set, use the following command. Command Mode Description clear ip pim sparse-mode bsr rp- Global Clears all RP-set. set * Displaying BSR Configuration To display the BSR information, use the following command. Command...
  • Page 380 UMN:CLI User Manual V5812G Registration Suppression Time Once a multicast routing entry with (S, G) state is established by the source registration, the periodic reregistration is needed to keep the state for the entry. After the registration, the DR periodically sends the PIM null-register message that does not contain the encapsulated multicast traffic to the RP, and the RP returns the register-stop message.
  • Page 381: Spt Switchover

    User Manual UMN:CLI V5812G Source Address of Register Message You can specify the source IP address of PIM register messages sent by the DR. This address is used to send corresponding PIM register-stop messages in response. By default, the source address of register messages is the IP address of the interface toward the RP.
  • Page 382: Cisco's Router Interoperability

    The Cisco‘s routers, however, validate the checksum for the whole register message including the data portion, resulting in incompatibility with the standard-based routers. To guarantee compatibility with the Cisco‘s routers, the V5812G provides the checksum option, which expands the range of the checksum calculation.
  • Page 383: Pim Debug

    The rebooted router then is able to quickly recover from the reboot. Some older Cisco‘s routers cannot recognize the GenID option in the hello messages, so the V5812G provides the exclude-GenID option for the compatibility with the Cisco‘s routers.
  • Page 384: Source Specific Multicast (Ssm)

    UMN:CLI User Manual V5812G ot: override timer debug pim timer register [rst] Enables PIM-SM register timer debugging. To disable PIM-SM timer debugging, use the following command. Command Mode Description no debug pim timer no debug pim timer assert [at] no debug pim timer bsr [bst |...
  • Page 385: Static Ssm Mapping

    If V5812G receives IGMPv1 or IGMPv2 report message from the host when static SSM mapping is enabled, it handles as if it receives IGMPv3 report messages.
  • Page 386 UMN:CLI User Manual V5812G To display the sources that SSM mapping uses for a particular group, use the following command. Command Mode Description Enable Shows a static SSM mapping information show ip igmp ssm-map [A.B.C.D] Global A.B.C.D: multicast group address...
  • Page 387: 10 Ip Routing Protocol

    User Manual UMN:CLI V5812G 10 IP Routing Protocol 10.1 Border Gateway Protocol (BGP) The Border Gateway Protocol (BGP) is an exterior gateway protocol (EGP) that is used to exchange routing information among routers in different autonomous systems (AS). BGP routing information includes the complete route to each destination. BGP uses the routing information to maintain a database of network reachability information, which it exchanges with other BGP systems.
  • Page 388: Basic Configuration

    The ZebOS type requires no specific configuration for sending out BGP community and extended community attributes. ZebOS type is the default for the V5812G. To select configuration type of the BGP router, use the following command.
  • Page 389: Disabling Bgp Routing

    AS number. 1-65535: AS number 10.1.2 Advanced Configuration The V5812G is possibly configured for the additional configurations related BGP. 10.1.2.1 Summary of Path Aggregation combines the characteristics of several different routes and advertises a single route. In the example of 2 routes information of 172.16.0.0/24 and 172.16.1.0/24, the as-set parameter creates an aggregate entry advertising the path for a single route of 172.16.0.0/23, consisting of all elements contained in all paths being summarized.
  • Page 390: Automatic Summarization Of Path

    UMN:CLI User Manual V5812G as-set [summary-only] to the other routers. A.B.C.D/M: network address aggregate-address A.B.C.D/M summary-only: transmits IP prefix only. summary-only [as-set] as-set: transmits one AS-path information. To delete the route‘s information of specific network address, use the following command.
  • Page 391: Local Preference

    BGP routers. Then, the MED is considered when selecting the best path among many alternative paths. The V5812G, MED comparison is configured only among all paths from the autonomous system. You can configure the comparison of MEDs among all BGP routers within autonomous system.
  • Page 392: Choosing Best Path

    When comparing similar routes from more than 2 peers the BGP router does not consider router ID of the routes. It selects the first received route. The V5812G uses router ID in the selection process; similar routes are compared and the route with lowest router ID is selected as the best route.
  • Page 393: Graceful Restart

    UMN:CLI V5812G The V5812G is basically configured not to compare MED values of the path information that exchanges between the Confederation Peers. But just in case, it can be configured to compare MED values of the path information that exchanges between Confederation Peers.
  • Page 394: Administrative Distance For Bgp

    UMN:CLI User Manual V5812G Therefore, 2 options of the time can be used to speed up routing convergence by its peer in case that BGP doesn‘t come back after a restart. • Restart Time It‘s the waiting time for the restarting of Neighboring router‘s BGP process. Restart time allows BGP process time to restart and implement the internal connection (The session).
  • Page 395: Ip Address Family

    10.1.5.1 Default Route The V5812G can be configured that particular neighboring BGP routers or peer group is assigned by default route as 0.0.0.0. Then, neighboring router or member of peer group is able to receive the information of default route from the designated routers.
  • Page 396: Peer Group

    UMN:CLI User Manual V5812G The following command allows neighboring BGP routers or Peer Group to transmit 0.0.0.0 as the default route. To generate the default route to BGP neighbor or peer group, use the following command. Command Mode Description Generates the default route to BGP Neighbor.
  • Page 397: Route Map

    10.1.5.4 Force Shutdown The V5812G supports the feature to force to shutdown any active session for the specified BGP router or peer group and to delete the routing data between them. It shutdowns all connections and deletes the received path information from neighboring router or peer group.
  • Page 398: Neighbor Password

    UMN:CLI User Manual V5812G 10.1.5.6 Neighbor Password To enable/disable MD5 authentication on a TCP connection between BGP neighbors, use the following command. Command Mode Description neighbor {A.B.C.D WORD} Sets password to the neighbor. password PASSWORD A.B.C.D: BGP neighbor IP address...
  • Page 399: Updates For Inbound Soft Reconfiguration

    10.1.5.9 Updates for Inbound Soft Reconfiguration Soft-reconfiguration may be used in lieu of BGP route refresh capability. The V5812G can store updates for inbound soft reconfiguration. When a soft reset (inbound) is done on this neighbor, the locally stored routes are reprocessed according to the inbound policy.
  • Page 400 UMN:CLI User Manual V5812G To configure BGP dampening parameters, use the following command. Command Mode Description bgp dampening <1-45> Configures BGP dampening parameters. 1-45: reachability half-life time in minute (default: 15 dampening <1-45> <1- minutes) 20000> <1-20000> <1-255> 1-20000: reuse limit value (default: 750) dampening <1-45>...
  • Page 401: Bgp Session Reset

    Because the internal connections are re-established newly after resetting, the route information of the connected routers is restored by default. You can reset the session in specified condition. The V5812G is available with several parameters to reset the BGP connections.
  • Page 402: Session Reset Of Peers Within Particular As

    UMN:CLI User Manual V5812G To reset the sessions of all peers and initialize the details of route configurations, use the following command. Command Mode Description clear ip bgp * in [prefix-filter] Resets the session of specific group under * condition.
  • Page 403: Session Reset Of Specific Route

    User Manual UMN:CLI V5812G Command Mode Description clear ip bgp <1-65535> soft [in | Updates the route information only while the session is out] possible of BGP neighboring routers which are Global configured a particular AC number. Apply the route clear ip bgp <1-65535>...
  • Page 404: Session Reset Of Peer Group

    UMN:CLI User Manual V5812G See Section 10.1.8.1 when you configure the detail parameters. To reset the sessions of BGP router connected to external AS and initialize the details of route configurations, use the following command. Command Mode Description clear ip bgp external in [prefix-...
  • Page 405: Displaying And Managing Bgp

    User Manual UMN:CLI V5812G clear ip bgp peer-group GROUP Resets the route information only while the session is soft [in | out] possible for all members of specified peer group. Apply clear ip bgp peer-group GROUP the route either incoming or outgoing routes.
  • Page 406: Logging Neighbor Changes

    Enables logging of BGP neighbor status changes Router no bgp log-neighbor-changes Disables logging of BGP neighbor status changes The V5812G logs the following events using the above command. • BGP notification received • Erroneous BGP update received •...
  • Page 407: Bgp Debug

    User Manual UMN:CLI V5812G 10.1.10 BGP Debug To enable BGP debugging, use the following command. Command Mode Description debug bgp Enables BGP debugging. Enables BGP debugging. all: all BGP debugging dampening: BGP dampening debugging Enable debug bgp { all | dampening |...
  • Page 408: Open Shortest Path First (Ospf)

    UMN:CLI User Manual V5812G 10.2 Open Shortest Path First (OSPF) Open shortest path first (OSPF) is an interior gateway protocol developed by the OSPF working group of Internet Engineering Task Force (IETF). OSPF designed for IP network supports IP subnetting and marks on information from exterior network. Moreover, it supports packet authorization and transmits/receives routing information through IP multicast.
  • Page 409 Use the clear ip ospf process command to restart OSPF process. If there is changing router ID while OSPF process is operating, configuration must be processed from the first. In this case, the V5812G can change only router ID without changing related configurations. Command...
  • Page 410: Abr Type Configuration

    10.2.2 ABR Type Configuration The V5812G supports 4 types of OSPF ABR which are Cisco type ABR (RFC 3509), IBM type ABR (RFC 3509), IETF Draft type and RFC 2328 type. To configure ABR type of OSPF, use the following command.
  • Page 411: Authentication Key

    User Manual UMN:CLI V5812G If there is no choice of authentication type, the code communication will be based on text. To delete comfigured authentication, use the following command. Command Mode Description no ip ospf authentication Interface Deletes configured authentication. ospf A.B.C.D...
  • Page 412: Interface Cost

    UMN:CLI User Manual V5812G To delete a configured authentication key, use the following command. Command Mode Description no ip ospf authentication-key no ip ospf authentication-key {first | second} ospf A.B.C.D authentication-key Interface Deletes a configured authentication key. no ip ospf A.B.C.D authentica-...
  • Page 413: Routing Protocol Interval

    User Manual UMN:CLI V5812G To release a blocked interface, use the following command. Command Mode Description no ip ospf database-filter Interface Releases a blocked interface. no ip ospf A.B.C.D database- filter 10.2.4.5 Routing Protocol Interval Routers on OSPF network exchange various packets, about that packet transmission,...
  • Page 414: Ospf Maximum Transmission Unit (Mtu)

    UMN:CLI User Manual V5812G To configure a retransmit interval, use the following command. Command Mode Description ip ospf retransmit-interval <1- 65535> Configures a retransmit interval in the unit of second. 1-65535: interval value (default: 5) ospf A.B.C.D retransmit- interval <1-65535>...
  • Page 415: Ospf Priority

    User Manual UMN:CLI V5812G On the other hands, if there are two routers which have different MTU, it can be participated with OSPF network through the configuration that skips the verification of MTU value when there is DD exchanging. To configure the switch to skip the MTU verification in DD process, use the following command.
  • Page 416: Non-Broadcast Network

    UMN:CLI User Manual V5812G broadcast network type. NBMA type network need virtual circuit to connect routers. But Point-to-multipoint type uses virtual circuit on part of network to save the management expenses. It does not to need to configure Neighbor router to connect routers which are not directly connected. It also saves IP resources and no need to configure the process for destination router.
  • Page 417: Ospf Area

    User Manual UMN:CLI V5812G 10.2.6 OSPF Area Router configuration on OSPF network includes Area configuration with each interface, network. Area has various and special features. It needs to be configured pertinently to make effective management on whole of OSPF network.
  • Page 418: Blocking The Transmission Of Routing Information Between Area

    Blocking the Transmission of Routing Information Between Area ABR transmits routing information between Areas. In case of not to transmit router information to other area, the V5812G can configure it as a blocking. First of all, use the access-list or prefix-list command to assign LIST-NAME. And use the following command to block the routing information on LIST-NAME.
  • Page 419: Not So Stubby Area (Nssa)

    User Manual UMN:CLI V5812G 10.2.6.4 Not So Stubby Area (NSSA) NSSA (Not So Stubby Area) is stub Area which can transmit the routing information to Area by ASBR. On the other hand, Stub Area cannot transmit the routing information to area.
  • Page 420 UMN:CLI User Manual V5812G To configure NSSA with one option, use the following command. Command Mode Description area {<0-4294967295> | A.B.C.D} nssa default- information-originate area {<0-4294967295> | A.B.C.D} nssa default- information-originate metric <0-16777214> area {<0-4294967295> | A.B.C.D} nssa default- information-originate metric-type <1-2>...
  • Page 421 User Manual UMN:CLI V5812G To delete configured NSSA, use the following command. Command Mode Description no area {<0-4294967295> | A.B.C.D} nssa no area {<0-4294967295> | A.B.C.D} nssa default-information- originate no area {<0-4294967295> | A.B.C.D} nssa default-information- originate no-redistribution [no summary] no area {<0-4294967295>...
  • Page 422: Area Range

    UMN:CLI User Manual V5812G no area {<0-4294967295> | A.B.C.D} nssa translator-role default-information-originate [no-redistribution] [no- summary] no area {<0-4294967295> | A.B.C.D} nssa translator-role no- redistribution [default-information-originate] [no-summary] no area {<0-4294967295> | A.B.C.D} nssa translator-role no- summary [no-redistribution] [default-information-originate] 10.2.6.5 Area Range In case of OSPF belongs to several Areas, Area routing information can be shown in one routing path.
  • Page 423: Stub Area

    User Manual UMN:CLI V5812G To releases the configured shortcut option, use the following command. Command Mode Description area {<0-4294967295> A.B.C.D} shortcut {default Router Releases the configured shortcut option. disable | enable} 10.2.6.7 Stub Area Stub Area is that ABR is connected to Backbone Area. If it is assigned as Stub Area, ABR will notify the default path to Stub Area and other routing protocol information will not transmit to Stub Area.
  • Page 424 UMN:CLI User Manual V5812G OSPF network regards virtual link routers as Point-to-point router. Therefore, the Hello- interval, Retransmit-interval, Transmit-delay must be consistent across all routers in an attached network. User can configure Authentication for security, Authentication key for password, and time period for Hello-interval, Retransmit-interval, Transmit-delay and Dead-interval to operate virtual link.
  • Page 425 User Manual UMN:CLI V5812G To configure a virtual link with one option, use the following command. Command Mode Description area {<0-4294967295> | A.B.C.D} virtual-link A.B.C.D authentication [message-digest | null] area {<0-4294967295> | A.B.C.D} virtual-link A.B.C.D authentication-key KEY area {<0-4294967295> | A.B.C.D} virtual-link A.B.C.D message-digest-key KEY md5 KEY...
  • Page 426: Default Metric

    UMN:CLI User Manual V5812G 10.2.7 Default Metric OSPF finds metric based on interface bandwidth. For example, default metric of T1 link is 64, but default metric of 64K line is 1562. If there are plural lines in the bandwidth, you can view costs to use line by assigning metric to each line.
  • Page 427: Opaque-Lsa Support

    <1- 1800> 10.2.9 Opaque-LSA Support Opaque-LSA is LSA Type-9, Type-10, Type-11. The V5812G enables Opaque-LSA as a default but it can be released by user. To release the enabled Opaque-LSA management, use the following command. Command...
  • Page 428: Default Route

    UMN:CLI User Manual V5812G 10.2.10 Default Route You can configure ASBR (Autonomous System Boundary Router) to transmit default route to OSPF network. Autonomous System Boundary router transmits route created externally to OSPF network. However, it does not create system default route.
  • Page 429: Finding Period

    User Manual UMN:CLI V5812G The following example shows how to configure default route with more than 2 options: • default-information originate metric-type <1-2> always • default-information originate route-map MAP-NAME metric <0-16777214> To delete the configuration, use the following command. Command...
  • Page 430 UMN:CLI User Manual V5812G Those 4 kinds of additional configuration can be selected more than 2 options without order, and it applies to consistent across all external routes in an attached network. The following is explaining 4 options of command: •...
  • Page 431: Ospf Distance

    User Manual UMN:CLI V5812G 10.2.13 OSPF Distance An administrative distance is a rating of the trustworthiness of a routing information source, such as an individual router or a group of routers. Numerically, an administrative distance is an integer between 0 and 255. In general, the higher the value is, the lower the trust rating is.
  • Page 432: Passive Interface

    [A.B.C.D] 10.2.16 Blocking Routing Information The V5812G can classify and restrict the routing information. To configure this function, sort the specific routing information in access-list first, and block the routing information in access-list. To block the routing information in access-list, use the following command.
  • Page 433: Summary Routing Information

    User Manual UMN:CLI V5812G 10.2.17 Summary Routing Information In case of external routing protocol transmits to OSPF network, more than 2 routing information can be summarized as one. For example, 192.168.1.0/24 and 192.168.2.0/24 can become 192.168.0.0/16 to transmit to OSPF network. This summary reduces the...
  • Page 434 UMN:CLI User Manual V5812G To display OSPF routing table to ABR and ASBR, use the following command. Command Mode Description Enable show ospf [<0-65535>] Global Shows OSPF routing table to ABR and ASBR. border-routers Bridge To display the OSPF database, use the following command.
  • Page 435: Sending Snmp Trap

    User Manual UMN:CLI V5812G To display the information of neighbor route, use the following command. Command Mode Description show ip ospf [<0-65535>] neighbor show ip ospf [<0-65535>] neighbor A.B.C.D [detail] Enable Shows the information of neighbor show ip ospf [<0-65535>] neighbor interface Global router.
  • Page 436: Limiting Number Of Database

    10.2.18.4 Limiting Number of Database The V5812G can limit the Number of Database to process in OSPF. For example, if a router connected with many of routers, it carries overload to process the database. Therefore, Limiting the Number of Database reduces the overload on system.
  • Page 437: Ospf Debug

    User Manual UMN:CLI V5812G 10.2.19 OSPF Debug To enable OSPF debugging, use the following command. Command Mode Description debug ospf [all] Enables OSPF debugging. Enables debugging about OSPF operation such as debug ospf events [abr | asbr | OSPF neighbor...
  • Page 438 UMN:CLI User Manual V5812G To display the OSPF debugging information, use the following command. Command Mode Description Enable show debugging ospf Global Shows the debugging information of OSPF. Bridge...
  • Page 439: Routing Information Protocol (Rip)

    RIP v2 uses broadcast User Datagram Protocol (UDP) data packets to exchange routing information. The V5812G sends routing information and updates it every 30 seconds. This process is termed advertised. If a router does not receive an update from another router for 180 seconds or more, it marks the routes served by the non-updating router as being unusable.
  • Page 440: Rip Neighbor Router

    UMN:CLI User Manual V5812G Step 2 Configure the network to operate as RIP. Command Mode Description Establishes the network to operate as RIP. network {A.B.C.D/M A.B.C.D/M: IP prefix (e.g. 35.0.0.0/8) INTERFACE } INTERFACE: interface name Router network {A.B.C.D/M Removes a specified network to operate as RIP.
  • Page 441: Rip Version

    10.3.3 RIP Version Basically, the V5812G supports RIP version 1 and 2. However, you can configure to receive either RIP v1 type packets only or RIP v2 type packets only. To configure RIP version, use the following command. Command...
  • Page 442: Creating Available Static Route Only For Rip

    10.3.5 Redistributing Routing Information The V5812G can redistribute the routing information from a source route entry into the RIP tables. For example, you can instruct the router to re-advertise connected, kernel, or static routes as well as other routes established by routing protocol. This capability applies to all the IP-based routing protocols.
  • Page 443 User Manual UMN:CLI V5812G To delete the configuration for redistributing routing information in another router‘s RIP table, use the following command. Command Mode Description redistribute {kernel connected | static | ospf | bgp} redistribute {kernel connected | static | ospf | bgp }...
  • Page 444: Metrics For Redistributed Routes

    UMN:CLI User Manual V5812G Command Mode Description Transmits information matched with specified metric, match metric <0-4294967295> enter the metric value. Configures Neighbor router‘s address. set ip next-hop A.B.C.D Route-map A.B.C.D: IP address of next hop Sets the metric value for destination routing protocol.
  • Page 445: Originating Default Information

    10.3.9.1 Filtering Access List and Prefix List The V5812G switch is able to permit and deny conditions that you can use to filter inbound or outbound routes by access-list or prefix-list. Use the distribute-list command to apply the access list to routes received from or forwarded to a neighbor.
  • Page 446: Disabling The Transmission To Interface

    UMN:CLI User Manual V5812G To block the route information based on matching access list or prefix list, use the following command. Command Mode Description distribute-list ACCESS-LIST {in | Apply a specific access list or prefix list to incoming or out} [INTERFACE] outgoing RIP route updates on interface in order to block the route.
  • Page 447: Maximum Number Of Rip Routes

    User Manual UMN:CLI V5812G 10.3.10 Maximum Number of RIP Routes You can set the maximum number of RIP routes for using on RIP protocol. To set the maximum number of routes, use the following command. Command Mode Description Sets the maximum number of routes of RIP.
  • Page 448: Authentication Key

    If a key chain is not configured, plain text authentication can be performed using string command. The V5812G supports two modes of authentication on an interface for which RIP authentication is enabled: plain text authentication and MD5 authentication. The default authentication in every RIP v2 packet is plain text authentication.
  • Page 449: Restarting Rip

    Removes a configured period. [<1-65535>] 10.3.15 UDP Buffer Size of RIP RIP protocol exchanges the routing information between routers using UDP packets. The V5812G can be configured theses UDP packets buffer size, use the following command. Command Mode Description recv-buffer size <8196- Sets the UDP Buffer size value for using RIP.
  • Page 450: Displaying Rip Protocol Information

    UMN:CLI User Manual V5812G 10.3.16.1 Displaying RIP Protocol Information To display RIP information, use the following command. Command Mode Description show ip rip [database] Shows RIP information being used in router. Enable show ip route [database] rip Shows a routing table information involved in RIP.
  • Page 451 User Manual UMN:CLI V5812G To display the debugging information, use the following command. Command Mode Description Enable show debugging rip Global Shows the debugging information of RIP. Bridge...
  • Page 452: 11 Gpon Configuration

    UMN:CLI User Manual V5812G 11 GPON Configuration Gigabit Passive Optical (GPON) technology has the active network elements OLT (Optical Line Termination) at the central office and ONU/ONT (Optical Network Unit / Termination) at the subscriber site. Typical GPON configuration consists of a single PON port at the OLT and a number of ONUs connected to it over a single fiber feeder.
  • Page 453: Fig. 11.2 Cli Structure Of Gpon Configuration Mode

    User Manual UMN:CLI V5812G Specifying OLT and ONU ID When specifying an OLT ID in the CLI, you can simply put the number in the form of PORT such as 1, 2, 3, 4. Multiple input is also possible, e.g. 1, 2, 3 or 3-4.
  • Page 454: Olt Management

    UMN:CLI User Manual V5812G GPON configuration commands: clear Reset functions dba-profile Configure GPON DBA Profile debug Debugging functions To run exec commands in config mode exit End current mode and down to previous mode gpon-olt Configure GPON-OLT help Description of the interactive help system...
  • Page 455: Olt Description

    User Manual UMN:CLI V5812G 11.1.1.1 OLT Description To specify or modify a description of an OLT, use the following command. Command Mode Description olt description DESCRIPTION Registers the OLT‘s description. GPON-OLT no olt description Deletes the description of OLT. To display a description of an OLT, use the following command.
  • Page 456: Olt Bandwidth

    UMN:CLI User Manual V5812G To display the status of encryption mode or information of the encryption key exchange process, use the following command. Command Mode Description Shows the status of encryption mode. show onu encryption [ONU-ID] ONU-ID: ONU ID (1 to 64) or ONU serial number...
  • Page 457: Olt Optical Transceiver Parameter

    The auto ONU fault detecting mechanism is as follows: When detecting an error signal (an ONU fault) in a certain OLT, the V5812G generates a corresponding syslog message, and then disables the laser of each ONU currently connected to the OLT one by one for 60 seconds.
  • Page 458: Maximal Distance Between Olt And Onu (Ont)

    UMN:CLI User Manual V5812G To display a current configuration of the auto ONU fault detection, use the following command. Command Mode Description Shows a current configuration of the auto ONU (ONT) show olt signal-check GPON-OLT fault detection. 11.1.6 Maximal Distance between OLT and ONU (ONT) PON systems distribute the bandwidth of each fiber core among up to 64 line termination points using splitters.
  • Page 459: Mac Aging Time

    If the power of ONU is turned off by user, this ONU is supposed to send the alarm message of dying-gasp to OLT. When the last ONU is deregistered from the V5812G after it generates an alarm by ONU dying-gasp event, we can regard that the link of this GPON port is down and it‘s not the cable connection problem.
  • Page 460: Maximum Number Of Onu

    11.1.11 OLT Anti-Spoofing When the V5812G learns the same MAC address from the two (or more) different ONUs on the same GPON, the system regards the latest ONU(s) as the fault operation, and make the ONU(s) block the inflow of sub-level MAC by MAC filtering. Through this anti- spoofing, the V5812G can prevent the malicious spoofing attack.
  • Page 461: Displaying Olt Information

    Shows the information of active/inactive GPON OLT show olt status [OLT-ID] GPON-OLT IDs. The following is an example of displaying active/inactive OLT IDs of V5812G. SWITCH(gpon)# show olt status ------------------------------------------------------------ OLT_ID | Status | Protect | Distance | FEC mode(DS/US)
  • Page 462 UMN:CLI User Manual V5812G The following is an example of displaying traffic statistics of the OLT 2. SWITCH(config-gpon-olt[2])# show olt statistics ------------------------------------------------------------------------------ OLT : Downstream Upstream ------------------------------------------------------------------------------ (Pon counter) Pon valid eth packets Pon CPU packets Pon ploams Pon invalid packets...
  • Page 463: Mac Address

    User Manual UMN:CLI V5812G 11.1.12.2 MAC Address To display the MAC addresses and a total MAC entry counts of the ONUs (ONTs) connected to a current OLT, use the following command. Command Mode Description show olt mac Shows the MAC addresses of ONUs (ONTs) connected...
  • Page 464: Olt Rx Power

    UMN:CLI User Manual V5812G 11.1.12.5 OLT Rx Power Even if ONU‘s transmitting power is constant, the Rx power on OLT may be not even for a certain reason. To display the OLT Rx power, use the following command. Command Mode Description Shows OLT Rx power.
  • Page 465: Onu Management

    (ONTs) periodically. OLT registers a specific ONU which replies to OLT with its serial number. V5812G can allocate ONU-ID to an ONU which sends a valid serial number to OLT. When ONU with the specific serial number is activated, it is assigned the allocated ONU-ID.
  • Page 466: Manual Onu (Ont) Registration Mode

    UMN:CLI User Manual V5812G 11.2.1.3 Manual ONU (ONT) Registration Mode To register/delete ONU (ONT) manually, use the following command. Command Mode Description Registers ONU (ONT) with specified ONU-ID, serial number and password. onu add ONU-ID SERIAL_NUM Enables/disables the password auto-learning mode of...
  • Page 467: Changing Onu Registration Mode

    User Manual UMN:CLI V5812G 11.2.1.5 Changing ONU Registration Mode If user wants to change automatically the states of ONU (ONT) to manage manually at a time, use the following command. Command Mode Description Changes automatically registered ONUs (ONTs) to onu fix {all | ONU-ID} GPON-OLT manage manually.
  • Page 468: Activating Administration For Uni

    UMN:CLI User Manual V5812G To display the assigned IP address on ONU, use the following command. Command Mode Description Shows the assigned IP address on ONU. show onu ip-host ONU-ID GPON-OLT ONU-ID: ONU ID (1 to 64) or ONU serial number The show onu ip-host command is useful when you check the assigned IP address on ONU especially in case of DHCP assignment.
  • Page 469: Loopback

    User Manual UMN:CLI V5812G If you want to enable the upstream FEC mode for ONU, you should enable upstream FEC mode for OLT first. For the detail of how to enable the upstream FEC mode for OLT, 11.1.7 Forward Error Correction (FEC) Mode.
  • Page 470: Source Mac Address Monitoring

    11.2.8 Source MAC address Monitoring The V5812G can monitor its source MAC table to find a defective ONUs (ONTs). Auto ONU (ONT) blocking function can be used to manage and troubleshoot the defective ONU-related problems. To enable/disable OLT for source MAC address monitoring, use the following command.
  • Page 471: Pots Interface Configuration

    Deletes the configured data parameters of VoIP user. number pots POTS-NUMBER For the enhanced system security, the V5812G can use authentication for a VoIP user to have access to the softswitch. To configure the authentication user name and password for VoIP user to have access to softswitch, use the following command.
  • Page 472: Onu Firmware Upgrade

    11.2.10 ONU Firmware Upgrade The V5812G provides the remote ONU (ONT) upgradeability. This feature allows the system administrators not to offer the local service for a single ONU (ONT) upgrade at the customer premise. To upgrade an ONU (ONT) successfully, you need to download a new ONU (ONT) firmware in the system.
  • Page 473 User Manual UMN:CLI V5812G Command Mode Description Downloads ONU (ONT) firmware in the ONU (ONT). onu firmware download ONU-ID GPON-OLT ONU-ID: ONU ID (1-64) or ONU serial number FILE_NAME [os1 | os2] FILE_NAME: ONU firmware name You can see the status of ONU firmware by the show onu firmware version command as follows: To display the status of ONU firmware, use the following command.
  • Page 474: Manual Upgrade (2)

    UMN:CLI User Manual V5812G To display the status of ONU firmware, use the following command. Command Mode Description Enable Shows the status of ONU firmware. show onu firmware version OLT- Global OLT-ID: GPON port number ID [ONU-IDs] GPON ONU-ID: ONU ID (1-64) or ONU serial number...
  • Page 475 User Manual UMN:CLI V5812G Command Mode Description Enable Global Shows the downloaded ONU (ONT) firmware list in show onu firmware-list GPON OLT. GPON-OLT (2) Upgrading Firmware To upgrade an ONU (ONT) with the downloaded ONU (ONT) firmware, use the following command.
  • Page 476: Auto Upgrade

    ONU-ID: ONU ID (1 to 64) or ONU serial number 11.2.10.3 Auto Upgrade For efficient system maintenance, the V5812G provides the auto upgrade functionality for ONU firmware in the operational environment. You can simply upgrade the ONU firmware without an effort for every single ONU.
  • Page 477 User Manual UMN:CLI V5812G To display the list of the downloaded ONU (ONT) firmware in OLT, use the following command. Command Mode Description Enable Global Shows the downloaded ONU (ONT) firmware list in show onu firmware-list GPON OLT. GPON-OLT (2) Auto Upgrade Configuration (on GPON Configuration mode) To configure the auto upgrade for ONU, use the following command.
  • Page 478 UMN:CLI User Manual V5812G The following is an example of displaying the information of the specified TFTP/FTP server. SWITCH(gpon)# show onu auto-upgrade firmware info --------------------------------------------------------------------------------- Firmware Name | T/FTP | User | Password --------------------------------------------------------------------------------- G_ONU_DALLAS_22_0_8_33.bin | TFTP | 10.55.2.4 |...
  • Page 479 User Manual UMN:CLI V5812G (3) Specifying Time and Retry Count • Specifying Time for Auto Upgrade You should set the clock of switch to start auto upgrade of ONU (download to ONU) at specified time. To specify the time to start auto upgrade of ONU, use the following command.
  • Page 480 UMN:CLI User Manual V5812G (5) Enabling Auto Upgrade (on GPON-OLT Configuration mode) To enable/disable ONU auto upgrade on the specific OLT port, use the following command. Command Mode Description auto-upgrade {enable Enables/disables ONU auto upgrade configuration on GPON-OLT disable} the OLT port.
  • Page 481 User Manual UMN:CLI V5812G H645 | 22.0.8.26 SWITCH(config-gpon-olt[1])# To display the firmware for ONU auto-upgrade, use the following command. Command Mode Description show auto-upgrade Shows the firmware information of auto-upgraded GPON firmware ONU. show onu auto-upgrade current- GPON-OLT Shows the firmware to be auto-upgraded currently.
  • Page 482: Displaying Onu Information

    UMN:CLI User Manual V5812G 11.2.11 Displaying ONU Information To display the ONU (ONT) information, use the following command. Command Mode Description Enable Shows the information of ONU (ONT) per OLT ID. show onu info [OLT-IDs] Global OLT-IDs: GPON port number...
  • Page 483 User Manual UMN:CLI V5812G To display a reason of ONU deactivation, use the following command. Command Mode Description Shows the reason of inactive ONUs. show onu deactive-reason GPON-OLT ONU-ID: ONU ID (1 to 64) or ONU serial number To display the model names of the ONUs connected to a specified OLT, use the following command.
  • Page 484 UMN:CLI User Manual V5812G To display the assigned IP address on ONU, use the following command. Command Mode Description Shows the assigned IP address on ONU. show onu ip-host ONU-ID GPON-OLT ONU-ID: ONU ID (1 to 64) or ONU serial number The show onu ip-host command is useful when you check the assigned IP address on ONU especially in case of DHCP assignment.
  • Page 485: Onu Profile

    ONU Profile Fig. 11.3 ONU Profile The V5812G provides the easy and efficient management solution for various service environments with the ONU profile. The ONU profile is a collection of configurations for the operation of an ONU (ONT). You can manage all the ONUs connected to an OLT by simply applying the configured profile to ONUs without any local configuration.
  • Page 486: Configuring Onu Profile

    UMN:CLI User Manual V5812G To modify an existing ONU profile, use the following command. Command Mode Description Modifies an ONU profile. onu-profile NAME modify GPON NAME: ONU profile name To delete a created ONU profile, use the following command. Command...
  • Page 487: Card Type Configuration

    User Manual UMN:CLI V5812G To configure a polling interval and count for rogue ONT, use the following command. Command Mode Description Specifies a polling interval and count for rogue ONT. rogue onu polling [<10-60000> 10-60000: polling interval value (unit: millisecond) <1-250>]...
  • Page 488: Applying Traffic & Pm Profile

    UMN:CLI User Manual V5812G 11.3.2.4 Applying Traffic & PM Profile To add/delete the user-defined Traffic profile to a specified ONU profile, use the following command. Command Mode Description Adds the existing Traffic profile to ONU profile. traffic-profile NAME NAME: Traffic profile name...
  • Page 489: Vlan Configurations

    User Manual UMN:CLI V5812G 11.3.3.1 VLAN Configurations To configure a VLAN tagging operation for a specific UNI port, use the following command. Command Mode Description Sets the policy of VLAN tagging for upstream frame. uni eth UNI-PORT vlan-operation keep: keeps forwarding the existing tagged/untagged...
  • Page 490: Igmp Group List

    UMN:CLI User Manual V5812G 11.3.3.4 IGMP Group List You can configure the maximum number of multicast groups that a host on a port can join. To specify the maximum number of IGMP groups per UNI-side port, use the following command.
  • Page 491: Applying Onu Profile

    User Manual UMN:CLI V5812G 11.3.5 Applying ONU Profile If you want to apply a created ONU profile to connected ONUs (ONTs), open GPON-OLT Configuration mode where you want to apply the profile. To apply/release an ONU profile to/from connected ONUs (ONTs), use the following command.
  • Page 492 UMN:CLI User Manual V5812G Command Mode Description Shows the list of ONUs (ONTs) where an ONU profile show onu-profile onu-list NAME GPON is applied. NAME: ONU profile name...
  • Page 493: Dba Profile

    11.4.2 Configuring DBA Profile If the V5812G bandwidth allocation method for ONU upstream transmission is dynamic (DBA), there are two methods of DBA are defined for GPON: status-reporting (SR) DBA, which is based on ONU reports via the dynamic bandwidth report upstream (DBRu) field, and non-status-reporting (NSR) DBA, which is based on OLT monitoring per T-CONT utilization.
  • Page 494: Saving Dba Profile

    UMN:CLI User Manual V5812G If there are a ―non-assured‖ T-CONT and ―best-effort‖ T-CONT, the ―non-assured‖ T- CONT takes precedence over the other one to be allocated the remained bandwidth by OLT. To delete the configured bandwidth allocation policy of DBA profile, use the following command.
  • Page 495: Traffic Profile

    ANI-side port-IDs. The mapper is equivalent to a MAC bridge with VLAN filters that only operate on the priority bits of the VLAN tags. V5812G is supported by all G.984.4 compliant vender system based on the 1:N, N:M, 1:MP, and N:MP model. Only a single 802.1p mapper is need for 1:N, N:M model deployments.
  • Page 496: Creating A Mapper

    A mapper provides support for upstream flow routing based on 802.1p priority bits. The V5812G supports the DSCP to IEEE802.1p mapping to allow the OLT to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE802.1p mapping table.
  • Page 497: Mac Bridge Service Profile

    User Manual UMN:CLI V5812G 11.5.3 MAC Bridge Service Profile A MAC bridge service profile can be configured per each UNI-side port or it can be configured for the multiple UNI-side ports. The MAC bridge service profile is comprised of ANI-side port for the upstream traffic management and UNI-side port for the downstream traffic management.
  • Page 498: Ani Port Configuration

    UMN:CLI User Manual V5812G To enable/disable the MAC bridge port configuration of MAC bridge service profile for multicast Interworking Termination Point (IW TP), use the following command. Command Mode Description multicast link-mac-bridge Connects the multicast GEM port network CTP ME to a enable MAC bridge service profile ME.
  • Page 499 User Manual UMN:CLI V5812G VLAN Tagging Filtering To enable/disable VLAN tagging filtering function on the UNI-side port, use the following command. Command Mode Description Enables a VLAN tagging filtering function of UNI-side port. allow: forwards the untagged frames to the UNI-side vlan-filter <1-4094>...
  • Page 500 UMN:CLI User Manual V5812G Maximum Frame Size To specify the maximum frame size to be handled by an UNI-side port, use the following command. Command Mode Description max-frame <64-2036> Sets the maximum frame size for an UNI port. Traffic Bridge-UNI no max-frame Deletes the configured maximum frame size.
  • Page 501: Ip-Host Service Link

    User Manual UMN:CLI V5812G 11.5.3.6 IP-host Service Link To link an IP-host service to MAC bridge service profile, use the following command. Command Mode Description Links an IP-host service to MAC bridge service profile. link ip-host-config SERVICE-ID SERVICE-ID: IP-host service ID...
  • Page 502: T-Cont Mode

    Lowest Priority Fig. 11.5 Priority of T-CONT types The V5812G provides the easy and efficient management solution using T-CONT concept with the Traffic profile. A GPON port is connected with multiple ONUs/ONTs via splitter. The GPON encapsulation mode (GEM) frames are transmitted between the OLT and the ONUs (ONTs).
  • Page 503: Gem Port Configuration

    User Manual UMN:CLI V5812G To delete the T-CONT ID, use the following command. Command Mode Description Traffic- no tcont TCONT_ID Deletes the configured T-CONT ID. Profile 11.5.4.1 GEM Port Configuration To specify the GEM ports (priority queue) per T-CONT by mapping between T-CONT and GEM port, use the following command.
  • Page 504: Ip Address

    UMN:CLI User Manual V5812G 11.5.5.1 IP Address To specify the IP address assignment on the host, use the following command. Command Mode Description Traffic- ip address {static | dhcp} Specifies the IP address assignment on the host. IP-host 11.5.5.2 To specify the DNS address assignment on the host, use the following command.
  • Page 505: Vlan Tagging Filtering

    User Manual UMN:CLI V5812G 11.5.5.4 VLAN Tagging Filtering If there are more than one mapper connected to VLAN tagging, you need to configure a VLAN tagging filtering for VLAN ID-based traffic forwarding. To enable/disable VLAN tagging filtering function on ANI interface, use the following command.
  • Page 506: Voip Service Configuration (Pots Uni)

    OMCI might still be used either to communicate the URI (FTP/HTTP server) of a configuration file to VoIP client integrated in the ONT, or to configure the VoIP client itself. Fig. 11.6 VoIP Service Architecture V5812G supports the VoIP service management with two modes based on the managed models above.
  • Page 507: Omci Managed Voip

    Whenever an ONU is deployed with the IP-path managed VoIP service, the OLT should assign the URL of a VoIP configuration file to communicate with the ONU VoIP client. The V5812G provides an authentication method for ONUs to have access to the VoIP configuration server.
  • Page 508: Pots Uni Configuration

    UMN:CLI User Manual V5812G To specify the protocol on the current VoIP service, use the following command. Command Mode Description Specifies the protocol on the current VoIP service. Traffic sip: Session Initiation Protocol protocol { h248 | sip } VoIP-IP-...
  • Page 509: Udp/Tos Configuration

    User Manual UMN:CLI V5812G To specify the on-hook transmission type, use the following command. Command Mode Description Allows setting the POTS UNI either to full-time on-hook transmission-path {full-time transmission or part-time on-hook transmission. Traffic part-time} (default: full-time) VoIP-UNI no transmission-path Deletes the configured on-hook transmission type.
  • Page 510: Tdm Service Configuration (Ces Uni)

    UMN:CLI User Manual V5812G 11.5.7 TDM Service Configuration (CES UNI) This section describes the configuration of CES UNI in the ONT where the physical path terminates and physical level functions are performed. In order to configure CES UNI and TDM service, you need to specify the CES port first.
  • Page 511: Encoding

    User Manual UMN:CLI V5812G 11.5.7.3 Encoding To specify the line coding scheme, use the following command. Command Mode Description Specifies the line coding scheme. (mandatory for DS1 and DS3 interfaces) encoding { b8zs | ami | hdb3 | b8zs: B8ZS...
  • Page 512: Ds1 Mode

    UMN:CLI User Manual V5812G 11.5.7.5 DS1 Mode To specify the mode of DS1, use the following command. Command Mode Description Specifies the mode of DS1. ds1-mode connect ds1-cpe line- ds1-cpe: DS1 CPE (loopback: smart jack) length { short | long }...
  • Page 513: Displaying Tdm Pseudowire Information

    User Manual UMN:CLI V5812G Applying TDM Pseudowire Profile In order to configure the TDM service, you need to connect TDM pseudowire profile. To connect TDM pseudowire profile to the current TDM service, use the following command. Command Mode Description Connects TDM pseudowire profile.
  • Page 514: Saving Traffic Profile

    UMN:CLI User Manual V5812G To display the list information of source MAC addresses for TDM pseudowire of ONU, use the following command. Command Mode Description show onu tdm-pw source-mac Shows the list of source MAC addresses for TDM GPON-OLT ONU-ID pseudowire of the specified ONU.
  • Page 515: Displaying Traffic Profile Information

    User Manual UMN:CLI V5812G 11.5.10 Displaying Traffic Profile Information To display the information of traffic profiles, use the following command. Command Mode Description GPON Shows the currently applied configuration information GPON-OLT show traffic-profile [NAME] of traffic profile. Traffic- NAME: traffic profile name...
  • Page 516: Voip Profile

    ONUs using the VoIP profile. The ONT must be applied by VoIP profile defined in V5812G if the ONT has POTS terminations and if OLT is to be used to remotely manage and provide the VoIP service.
  • Page 517: Voip Media Configuration

    User Manual UMN:CLI V5812G 11.6.1.2 VoIP Media Configuration To specify fax mode, use the following command. Command Mode Description fax-mode {passthru | t-38} VoIP-Profile Specifies fax mode. To configure codec negotiation with codec type, packet period and silence suppression, use the following command.
  • Page 518: Rtp Configuration

    UMN:CLI User Manual V5812G To configure the maximum depth of the jitter buffer, use the following command. Command Mode Description Specifies the maximum depth of the jitter buffer associated with this service. jitter-buffer-max VALUE VALUE: 0-65535, maximum depth of jitter buffer (unit:...
  • Page 519: Signalling Code

    User Manual UMN:CLI V5812G To enable/disable RTP piggyback events, use the following command. Command Mode Description rtp-piggyback-event {enable Enables/disables RTP piggyback events. (default: VoIP-Profile disable} disable) To enable/disable handling of tones via RTP tone events, use the following command. Command...
  • Page 520: Dtmf Digit Configuration

    11.6.2 OMCI-based SIP Configuration If the ONUs are fully provisioned and managed from the V5812G using OMCI, you can configure POTS interface, call features and SIP agents of these ONUs. You need to enter SIP mode to perform the SIP-related detail configuration such as VoIP application service, SIP agent, etc.
  • Page 521: Sip Agent Configuration

    User Manual UMN:CLI V5812G 11.6.2.1 SIP Agent Configuration This defines the configuration necessary to establish communication for signalling between the SIP user agent and SIP servers. To specify an SIP proxy server, use the following command. Command Mode Description Configures IP address or URI of SIP proxy server for proxy-server ADDRESS SIP signalling messages.
  • Page 522 UMN:CLI User Manual V5812G The format of vendor name is four ASCII coded alphabetic characters (A..Z) as defined in ATIS-0322000. A value of four null characters indicates no particular vendor. To configure the SIP registration expiration time, use the following command.
  • Page 523: Voip Application Service

    User Manual UMN:CLI V5812G 11.6.2.2 VoIP Application Service The configuration of VoIP application service defines the attributes of calling features used in conjunction with a VoIP line service, such as CID, call waiting, call transfer, call presentation, direct connect, and etc.
  • Page 524: Voip Feature Access Codes

    UMN:CLI User Manual V5812G To configure the call presentation features, use the following command. Command Mode Description Enables each feature for call presentation. (default: disabled) call-present {splash-ring | dial- splash-ring: message waiting indication splash ring tone | visual-indicate | call-...
  • Page 525: Sip User Data

    User Manual UMN:CLI V5812G To configure VoIP feature access codes, use the following command. Command Mode Description feature cancel-call-wait VALUE feature call-hold VALUE feature call-park VALUE feature caller-id-act VALUE Specifies the access code for each feature. feature caller-id-deact VALUE VALUE: a string of characters from the set (0..9, *, #) with trailing nulls in any unused...
  • Page 526: Network Dial Plan

    UMN:CLI User Manual V5812G To configure a release timer, use the following command. Command Mode Description Configures a release timer. The value 0 specifies that release-timer <0-255> VoIP-SIP the ONT is to use its internal default. (unit: second, default: 10) To configure a ROH timer, use the following command.
  • Page 527: Saving Voip Profile

    User Manual UMN:CLI V5812G To configure the dial plan table, use the following command. Command Mode Description Adds a dial plan with the configured token. TABLE_ID: A unique identifier of a dial plan within the dial-plan table TABLE_ID dial plan table...
  • Page 528: Sample Configuration

    UMN:CLI User Manual V5812G 11.6.5 Sample Configuration For the sample configuration, see ―Configuration Example 1‖ in 11.13 Sample Configuration.
  • Page 529: Tdm Pseudowire Profile

    User Manual UMN:CLI V5812G 11.7 TDM Pseudowire Profile Pseudowire emulation is a method for transmitting any Layer 2 protocol over PSNs (Packet Switched Networks). It allows a seamless connection between two network elements by creating logical links, or virtual tunnels, across the packet network. In TDM...
  • Page 530: Basic Service Type

    UMN:CLI User Manual V5812G 11.7.2 Basic Service Type To specify the basic service type, use the following command. Command Mode Description Specifies the basic service type, either a transparent bit pipe or an encapsulation that recognizes the underlying structure of the payload.
  • Page 531: Payload Encapsulation Delay

    User Manual UMN:CLI V5812G 11.7.5 Payload Encapsulation Delay To configure the payload encapsulation delay (only for structured service), use the following command. Command Mode Description Defines the delay time (which corresponds to number of 125 microsecond frames) to be encapsulated in each pseudowire packet.
  • Page 532: Clock Reference

    UMN:CLI User Manual V5812G 11.7.7.1 Clock Reference To specify the frequency of the common timing reference, use the following command. Command Mode Description Specifies the frequency of the common timing TDM-PW- reference. rtp-clock-reference VALUE Profile VALUE: in multiples of 8 kHz (for example, input 1 means 8 kHz) (default: 1) 11.7.7.2...
  • Page 533: Rtp Synchronization Source

    User Manual UMN:CLI V5812G 11.7.7.4 RTP Synchronization Source To configure the RTP synchronization source, use the following command. Command Mode Description Specifies the RTP synchronization source in the TDM to PSN direction. rtp-sync-source payload VALUE payload VALUE: for the payload channel...
  • Page 534: Displaying Tdm Pseudowire Information

    UMN:CLI User Manual V5812G 11.7.10 Displaying TDM Pseudowire Information To display the information of TDM pseudowire profiles, use the following command. Command Mode Description Global GPON Shows the information of TDM pseudowire profiles. show tdm-pw-profile [NAME] GPON-OLT NAME: TDM pseudowire profile name...
  • Page 535: Pseudowire Maintenance Profile

    User Manual UMN:CLI V5812G 11.8 Pseudowire Maintenance Profile The pseudowire maintenance profile permits the configuration of pseudowire service exception handling. The pseudowire maintenance profile primarily affects the alarms declared by the subscribing pseudowire termination. And also, the settings of a pseudowire maintenance profile affect the pseudowire performance monitoring history.
  • Page 536: Jitter Buffer Desired Depth

    UMN:CLI User Manual V5812G 11.8.3 Jitter Buffer Desired Depth To specify the desired nominal fill depth of the playout buffer in the PSN to TDM direction, use the following command. Command Mode Description Specifies the desired nominal fill depth of the playout jitter-buffer-desired-depth buffer in the PSN to TDM direction.
  • Page 537: Alarm-Related Policy

    V5812G 11.8.5 Alarm-related Policy V5812G supports four pairs of alarm-related policies configuration which causes the corresponding alarm to be declared or cleared. To configure the policy (anomaly rate) that causes the alarm to be declared or cleared, use the following command.
  • Page 538: L-Bit/R-Bit Receive/Transmit Policy

    UMN:CLI User Manual V5812G 11.8.6 L-bit/R-bit Receive/Transmit Policy To configure the L-bit receive policy, use the following command. Command Mode Description Defines the action toward the TDM interface when far end TDM failure is indicated on packets received from the PSN (L-bit set).
  • Page 539: Saving Pseudowire Maintenance Profile

    User Manual UMN:CLI V5812G 11.8.8 Saving Pseudowire Maintenance Profile After configuring a pseudowire maintenance profile, you need to save the profile with the following command. Command Mode Description apply Maintenance- Saves a pseudowire maintenance profile configuration. Profile Whenever you modify a pseudowire maintenance profile, you should apply the changes again using the apply command.
  • Page 540: Performance Monitoring (Pm) Profile

    UMN:CLI User Manual V5812G 11.9 Performance Monitoring (PM) Profile Performance Monitoring (PM) profile is used for the traffic statistics of all ONUs (ONTs) collected by an OLT. The ONT conceptually has only two storage bins: a current accumulator and a history bin. The current accumulator is used to store data collected for the current 15-minute interval.
  • Page 541 User Manual UMN:CLI V5812G To enable/disable the performance monitoring (PM) function to collect the traffic statistics of the configured ANI port, use the following command. Command Mode Description Enables PM function to collect the data of ANI port‘s pm aniport counters that are FCS error and the downstream GEM frame discarded due to buffer overflow or etc.
  • Page 542: Saving Pm Profile

    UMN:CLI User Manual V5812G 11.9.3 Saving PM Profile After configuring a PM profile, you need to save the profile with the following command. Command Mode Description apply PM-Profile Saves a PM profile configuration. If you modify a running PM profile, you also need to use the apply command to apply the changes to ONUs (ONTs).
  • Page 543: Sample Configuration

    User Manual UMN:CLI V5812G To clear the collected traffic statistics, use the following command. Command Mode Description clear onu statistics GPON Clears collected traffic statistics of an ONU. clear statistics OLT-ID [ONU-ID] clear onu statistics [ONU-ID] GPON-OLT Clears collected traffic statistics of an ONU.
  • Page 544: Igmp Configurations

    UMN:CLI User Manual V5812G 11.10.2 IGMP Configurations To configure the multicast profile, use the following command. Command Mode Description Sets an IGMP version on a current interface. igmp version <1-3> 1-3: IGMP version (default: 2) igmp function snooping Enables the IGMP snooping.
  • Page 545: Saving Multicast Profile

    User Manual UMN:CLI V5812G To delete a specified IGMP configuration for multicast profile, use the following command. Command Mode Description igmp immediate-leave disable no igmp robustness-variable no igmp querier address no igmp querier query-interval no igmp querier max-response-time no igmp {access-list | static-access-list} all...
  • Page 546: Displaying Multicast Information

    UMN:CLI User Manual V5812G To apply the configured multicast profile to a specified UNI-side port of a traffic profile, use the following command. Command Mode Description Applies the configured Multicast profile to a specified multicast-profile NAME UNI port. Traffic NAME: Multicast profile name...
  • Page 547: Onu Service Profile

    T-CONT, DBA and VoIP to meet the requirement of data bandwidth, VoIP access and the advanced security issues. The V5812G also provides the service ONU profile for customer convenience. You can apply one of ONU profiles as the default profile to all ONUs or apply an ONU profile to specified ONUs with a given model name.
  • Page 548: Gpon Debug

    UMN:CLI User Manual V5812G 11.12 GPON Debug To enable debugging of all GPON or a specific feature of GPON, use the following command. Command Mode Description Enables GPON debugging. all: all GPON features func: GPON function debug gpon { all | func | db |...
  • Page 549: Sample Configuration

    User Manual UMN:CLI V5812G 11.13 Sample Configuration Configuration Example 1 SWITCH(config)# gpon SWITCH(gpon)# voip-profile voip create SWITCH(config-voip-profile[voip])# codec-nego 1 codec pcma packet-period 10 silence-suppression 1 SWITCH(config-voip-profile[voip])# codec-nego 2 codec pcmu packet-period 10 silence-suppression 1 SWITCH(config-voip-profile[voip])# codec-nego 3 codec g729 packet-period 10...
  • Page 550 UMN:CLI User Manual V5812G SWITCH(gpon)# traffic-profile g-60a create SWITCH(config-traffic-pf[g-60a])# tcont 1 SWITCH(config-traffic-pf[g-60a]-tcont[1])# gemport 1/1-1/4 SWITCH(config-traffic-pf[g-60a]-tcont[1])# dba-profile sr_100m SWITCH(config-traffic-pf[g-60a]-tcont[1])# exit SWITCH(config-traffic-pf[g-60a])# tcont 2 SWITCH(config-traffic-pf[g-60a]-tcont[2])# gemport 2/1-2/4 SWITCH(config-traffic-pf[g-60a]-tcont[2])# dba-profile sr_100m SWITCH(config-traffic-pf[g-60a]-tcont[2])# exit SWITCH(config-traffic-pf[g-60a])# tcont 3 SWITCH(config-traffic-pf[g-60a]-tcont[3])# gemport 4/1-4/4 SWITCH(config-traffic-pf[g-60a]-tcont[3])# dba-profile sr_100m SWITCH(config-traffic-pf[g-60a]-tcont[3])# exit...
  • Page 551 User Manual UMN:CLI V5812G SWITCH(config-traffic-pf[g-60a])# ip-host-config 1 SWITCH(config-traffic-pf[g-60a]-iphost[1])# ip address dhcp SWITCH(config-traffic-pf[g-60a]-iphost[1])# vlan-operation us-oper overwrite 100 0 SWITCH(config-traffic-pf[g-60a]-iphost[1])# vlan-operation ds-oper remove SWITCH(config-traffic-pf[g-60a]-iphost[1])# link voip-service 1 SWITCH(config-traffic-pf[g-60a]-iphost[1])# exit SWITCH(config-traffic-pf[g-60a])# ip-host-config 2 SWITCH(config-traffic-pf[g-60a]-iphost[2])# ip address static SWITCH(config-traffic-pf[g-60a]-iphost[2])# dns primary 168.123.0.1 secondary 168.123.0.2...
  • Page 552 UMN:CLI User Manual V5812G SWTICH(config-pm-profile[PM_PROFILE])# apply SWTICH(config-pm-profile[PM_PROFILE])# exit SWITCH(gpon)# onu-profile ONU_PROFILE create SWITCH(config-onu-profile[ONU_PROFILE])# traffic-profile TRAFFIC_PROFILE SWITCH(config-onu-profile[ONU_PROFILE])# pm-profile PM_PROFILE SWITCH(config-onu-profile[ONU_PROFILE])# apply SWITCH(config-onu-profile[ONU_PROFILE])# exit SWITCH(gpon)# SWITCH(gpon)# gpon-olt 2 SWITCH(config-gpon-olt[2])# show onu statistics ------------------------------------------------------------------------------ OLT : 2 ONU : 1 ------------------------------------------------------------------------------ Enabled PM : gemport aniport...
  • Page 553: 12 System Software Upgrade

    12 System Software Upgrade For the system enhancement and stability, new system software may be released. Using this software, the V5812G can be upgraded without any hardware change. You can simply upgrade your system software with the provided upgrade functionality via the CLI.
  • Page 554: Boot Mode Upgrade

    UMN:CLI User Manual V5812G SWITCH# default-os os1 SWITCH# write memory SWITCH# reload Do you want to save the system configuration? [y/n]y Do you want to reload the system? [y/n]y Broadcast message from admin (ttyp0) (Fri Aug 18 15:15:41 2006 +0000):...
  • Page 555 User Manual UMN:CLI V5812G To configure an IP address, use the following command. Command Mode Description ip A.B.C.D Configures an IP address. Boot Shows a currently configured IP address. To configure a subnet mask, use the following command. Command Mode Description netmask A.B.C.D...
  • Page 556 Using the load command, the system will download the new system software from the server. The following is an example of upgrading the system software stored in os1 in the boot mode. Boot> load os1 10.27.41.82 V5812G 4.80.x TFTP from server 10.27.41.82; our IP address is 10.27.41.83 Filename 'V5812G.4.80.x'. Load address: 0xffffe0...
  • Page 557: Ftp Upgrade

    To upgrade the system software using FTP, perform the following step-by-step instruction: Step 1 Connect to the V5812G with your FTP client software. To login the system, you can use the system user ID and password. Note that you must use the command line-based interface FTP client software when upgrading the V5812G.
  • Page 558 To reflect the downloaded system software, the system must restart using the reload command! For more information, see Section 4.1.8.1. The following is an example of upgrading the system software of the V5812G using the FTP provided by Microsoft Windows XP in the remote place.
  • Page 559: Onu Upgrade

    12.4 ONU Upgrade The V5812G provides the remote ONU (ONT) upgradeability. This feature allows the system administrators not to offer the local service for a single ONU (ONT) at the customer premise. To upgrade an ONU successfully, you need to download a new ONU firmware in the system.
  • Page 560: Auto Upgrade

    [ONU-IDs] 12.4.2 Auto Upgrade For efficient system maintenance, the V5812G provides the auto upgrade functionality for ONU firmware in the operational environment. You can simply upgrade the ONU firmware without an effort for every single ONU. To automatically upgrade the ONU, perform the following step-by-step instruction: Step 1 Download GPON ONU firmware using the following command.
  • Page 561 User Manual UMN:CLI V5812G Step 4 To perform the auto upgrade of OLT firmware when the version of two firmware is different, regardless of the lastest firmware version, use the following command. Command Mode Description auto-upgrade version- Enables/disables the ONU auto upgrade function match all { enable | disable} without verification of the firmware version.
  • Page 562: 13 Abbreviations

    UMN:CLI User Manual V5812G 13 Abbreviations Access Control List Advanced Encryption Standard Address Resolution Protocol Any Source Multicast Border Gateway Protocol Bootstrap Router Communauté Européenne CIDR Classless Inter Domain Routing Command Line Interface CLNS Connectionless Network Service Class of Service...
  • Page 563 User Manual UMN:CLI V5812G Identifier International Electrotechnical Commission IEEE 802 Standards for Local and Metropolitan Area Networks IEEE 802.1 Glossary, Network Management, MAC Bridges, and Internetworking IEEE Institute of Electrical and Electronic Engineers IETF Internet Engineering Task Force IFSM Interface Finite State Machine...
  • Page 564 UMN:CLI User Manual V5812G NBMA Non-Broadcast Multi-Access Network Element Network Entity Title NFSM Neighbor Finite State Machine Network Time Protocol Operation, Administration and Maintenance Outgoing Interface Optical Line Termination Optical Network Terminal Operating System OSPF Open Shortest Path First Personal Computer...
  • Page 565 User Manual UMN:CLI V5812G SNPA Sub-Network Point of Attachment SNTP Simple Network Time Protocol Shortest Path Tree Secure Shell Source-Specific Multicast Spanning Tree Protocol Software Topology Change Notification Transmission Control Protocol Tree Information Base TFTP Trivial FTP Type of Service...

Table of Contents