Page 1 H3C SR6600/SR6600-X Routers Network Management and Monitoring Command Reference Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software version: SR6600X-CMW520-R3103 SR6602-CMW520-R3103 SR6602X_MCP-CMW520-R3103 SR6600-CMW520-R3103-RPE SR6600-CMW520-R3103-RSE Document version: 20130222-C-1.12...
Page 2 Copyright © 2007-2013, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
Page 3: Table Of Contents
Contents Ping, tracert, and system debugging commands ······································································································· 1 Ping and tracert commands ············································································································································· 1 ping ············································································································································································ 1 ping ipv6 ··································································································································································· 5 tracert ········································································································································································· 7 tracert ipv6 ································································································································································ 9 System debugging commands ······································································································································ 10 ...
Page 4 reaction checked-element probe-duration ··········································································································· 50 reaction checked-element probe-fail (for trap) ···································································································· 51 reaction checked-element probe-fail (for trigger) ······························································································· 52 reaction checked-element rtt ································································································································· 53 reaction trap ·························································································································································· 55 resolve-target ·························································································································································· 55 route-option bypass-route ······································································································································ 56 ...
Page 5 SNMP commands ······················································································································································ 97 display snmp-agent community ···························································································································· 97 display snmp-agent group ···································································································································· 98 display snmp-agent local-engineid ···················································································································· 100 display snmp-agent mib-view ····························································································································· 100 display snmp-agent statistics ······························································································································ 102 display snmp-agent sys-info ································································································································ 104 ...
Page 6 mirroring-group monitor-port ······························································································································ 157 mirroring-group remote-probe vlan ···················································································································· 158 mirroring-port ······················································································································································· 159 monitor-port ·························································································································································· 160 Traffic mirroring configuration commands ············································································································ 162 mirror-to ································································································································································ 162 NetStream configuration commands ····················································································································· 163 display ip netstream cache ································································································································· 163 ...
Page 7 info-center channel name ··································································································································· 212 info-center console channel ································································································································ 213 info-center enable ················································································································································ 213 info-center format unicom ··································································································································· 214 info-center logbuffer ············································································································································ 214 info-center logfile enable ···································································································································· 215 info-center logfile frequency ······························································································································· 215 info-center logfile overwrite-protection ··············································································································...
Page 8 Index ········································································································································································ 254 ...
Page 9: Ping, Tracert, And System Debugging Commands
Ping, tracert, and system debugging commands Ping and tracert commands ping Use ping to verify whether the destination in an IP network is reachable, and to display the related statistics. Syntax ping [ ip ] [ -a source-ip | -c count | -f | -h ttl | -i interface-type interface-number | -m interval | -n | -p pad | -q | -r | -s packet-size | -t timeout | -tos tos | -v | { -mt topology-name | -vpn-instance vpn-instance-name } ] * host Views...
Page 10 -n: Disables domain name resolution for the host argument. When this keyword is not provided, if the host argument represents the host name of the destination, the device translates host into an address. -p pad: Specifies the value of the pad field in an ICMP echo request, in hexadecimal format, 1 to 8 bits, in the range 0 to ffffffff.
Page 11 Reply from 1.1.2.2: bytes=56 Sequence=1 ttl=254 time=205 ms Reply from 1.1.2.2: bytes=56 Sequence=2 ttl=254 time=1 ms Reply from 1.1.2.2: bytes=56 Sequence=3 ttl=254 time=1 ms Reply from 1.1.2.2: bytes=56 Sequence=4 ttl=254 time=1 ms Reply from 1.1.2.2: bytes=56 Sequence=5 ttl=254 time=1 ms --- 1.1.2.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received...
Page 12 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/41/205 ms The output shows the following: The destination in topology voice was reachable. • All ICMP echo requests sent by the source got responses. • The minimum time, average time, and maximum time for the packet’s roundtrip time are 1 ms, 41 •...
Page 13: Ping Ipv6
1.1.2.2 1.1.1.2 1.1.1.1 --- 1.1.2.2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/11/53 ms The output shows the following: The destination was reachable. • The route is 1.1.1.1 <-> {1.1.1.2; 1.1.2.1} <-> 1.1.2.2. •...
Page 14 Views Any view Default command level 0: Visit level Parameters -a source-ipv6: Specifies the source IPv6 address of an ICMP echo request. It must be a legal IPv6 address configured on the device. If this parameter is not provided, the source IPv6 address of an ICMP echo request is the IPv6 address of the outbound interface of the request (The address selection rule is defined by RFC 3484).
Page 15: Tracert
bytes=56 Sequence=2 hop limit=64 time = 26 ms Reply from 2001::1 bytes=56 Sequence=3 hop limit=64 time = 20 ms Reply from 2001::1 bytes=56 Sequence=4 hop limit=64 time = 4 ms Reply from 2001::1 bytes=56 Sequence=5 hop limit=64 time = 16 ms --- 2001::2 ping statistics --- 5 packet(s) transmitted 5 packet(s) received...
Page 16 Parameters -a source-ip: Specifies the source IP address of a tracert packet. It must be a legal IP address configured on the device. If this parameter is not provided, the source IP address of an ICMP echo request is the primary IP address of the outbound interface of the tracert packet.
Page 17: Tracert Ipv6
Table 2 Command output Field Description Display the route that the IP packets traverse from the current device to traceroute to 1.1.2.2(1.1.2.2) the device whose IP address is 1.1.2.2. Maximum number of hops of the probe packets, which can be set hops max through the -m keyword.
Page 18: System Debugging Commands
-vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the destination belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option. -w timeout: Specifies the timeout time of the reply packet of a probe packet, which ranges from 1 to 65535 milliseconds and defaults to 5000 milliseconds.
Page 19: Display Debugging
Parameters all: All debugging functions. timeout time: Specifies the timeout time for the debugging all command. When all debugging is enabled, the system automatically executes the undo debugging all command after the time. The value ranges from 1 to 1440, in minutes. module-name: Module name, such as arp or device.
Page 20 begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display all enabled debugging functions.
Page 21: Nqa Configuration Commands
NQA configuration commands NQA client configuration commands advantage-factor Use advantage-factor to configure the advantage factor that is used to count Mean Opinion Scores (MOS) and Calculated Planning Impairment Factor (ICPIF) values. Use undo advantage-factor to restore the default. Syntax advantage-factor factor undo advantage-factor Default The advantage factor is 0.
Page 22: Data-Fill
Syntax codec-type { g71 1a | g71 1u | g729a } undo codec-type Default The codec type for the voice operation is G.71 1 A-law. Views Voice operation view Default command level 2: System level Parameters g71 1a: Specifies G.71 1 A-law codec type. g71 1u: Specifies G.71 1 μ-law codec type g729a: Specifies G.729 A-law codec type.
Page 23: Data-Size
If the payload length is greater than the string length, the system fills the payload with the string • cyclically until the payload is full. For example, if you configure the string as abcd and the payload size as 6 bytes, abcdab is filled. How the string is filled varies with operation types: For the ICMP echo operation, the string fills the whole payload of ICMP echo requests.
Page 24: Description (Any Nqa Operation View)
Test type Codec type Default value (in bytes) Voice G.711 μ-law Voice G.729 A-law Configure the size of the payload in each probe packet properly. If the traffic amount is large in the network, configure a smaller payload size to reduce network burden. If runt packets are required to be transmitted in the network, configure a bigger payload size to avoid packet loss.
Page 25: Destination Port
Syntax destination ip ip-address undo destination ip Default No destination IP address is configured for the operation. Views DLSw operation view, FTP operation view, DNS operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, UDP jitter operation view, voice operation view Default command level 2: System level...
Page 26: Display Nqa History
Examples # Configure the destination port number of the UDP echo operation as 9000. <Sysname> system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-echo [Sysname-nqa-admin-test-udp-echo] destination port 9000 display nqa history Use display nqa history to display the history records of the specified or all NQA operations. Syntax display nqa history [ admin-name operation-tag ] [ | { begin | exclude | include } regular-expression ] Views...
Page 27: Display Nqa Reaction Counters
Succeeded 2007-04-29 20:54:24.5 Succeeded 2007-04-29 20:54:24.1 Succeeded 2007-04-29 20:54:23.8 Succeeded 2007-04-29 20:54:23.4 Table 4 Command output Field Description Index History record number. Round-trip time if the operation succeeds, timeout time upon timeout, or 0 if the Response operation cannot be completed (in milliseconds). Status value of test results: •...
Page 28 Usage guidelines If the threshold type is average value, or the monitored performance metric is ICPIF or MOS in the voice operation, the monitoring results are invalid. The monitoring results are accumulated after the NQA operation starts and are not cleared after the operation completes.
Page 29: Display Nqa Result
Monitored Threshold performance Collect data in Checked Num Over-threshold Num type metric Number of packets of Number of packets which the round-trip Packets sent after the accumulate sent after the time exceeds the operation starts operation starts threshold after the operation starts average Number of packets of...
Page 30 Examples # Display the result of the UDP jitter operation. <Sysname> display nqa result admin test NQA entry (admin admin, tag test) test results: Destination IP address: 192.168.1.42 Send operation times: 10 Receive response times: 10 Min/Max/Average round trip time: 15/46/26 Square-Sum of round trip time: 8103 Last succeeded probe time: 2008-05-29 10:56:38.7 Extended results:...
Page 31 Extended results: Packet loss in test: 100% Failures due to timeout: 1000 Failures due to disconnect: 0 Failures due to no connection: 0 Failures due to sequence error: 0 Failures due to internal error: 0 Failures due to other errors: 0 Packet(s) arrived late: 0 Voice results: RTT number: 0...
Page 32 Field Description Max positive SD Maximum positive jitter from source to destination. Max positive DS Maximum positive jitter from destination to source. Positive SD number Number of positive jitters from source to destination. Positive DS number Number of positive jitters from destination to source. Positive SD sum Sum of positive jitters from source to destination.
Page 33: Display Nqa Statistics
Field Description Square sum of DS delay Square sum of delays from destination to source. SD lost packet(s) Number of lost packets from the source to the destination. DS lost packet(s) Number of lost packets from the destination to the source. Lost packet(s) for unknown reason Number of lost packets for unknown reasons.
Page 34 NQA entry (admin admin, tag test) test statistics: NO. : 1 Destination IP address: 1.1.1.2 Start time: 2007-01-01 09:33:22.3 Life time: 23 seconds Send operation times: 100 Receive response times: 100 Min/Max/Average round trip time: 1/11/5 Square-Sum of round trip time: 24360 Extended results: Packet loss in test: 0% Failures due to timeout: 0...
Page 35 <Sysname> display nqa statistics admin test NQA entry (admin admin, tag test) test statistics: NO. : 1 Destination IP address: 1.1.1.2 Start time: 2007-01-01 09:33:45.3 Life time: 120 seconds Send operation times: 10 Receive response times: 10 Min/Max/Average round trip time: 1/12/7 Square-Sum of round trip time: 620 Extended results: Packet loss in test: 0%...
Page 36 Table 8 Command output Field Description Statistics group number. Destination IP address IP address of the destination. Start time Time when the operation started. Life time Operation duration in seconds. Number of probe packets sent. Send operation times Number of response packets received. Receive response times Min/Max/Average round trip time Minimum/maximum/average round-trip time in milliseconds.
Page 37 Field Description Maximum absolute value among negative jitters from source to Max negative SD destination. Maximum absolute value among negative jitters from destination to Max negative DS source. Negative SD number Number of negative jitters from source to destination. Negative DS number Number of negative jitters from destination to source.
Page 38 Field Description Threshold Type Threshold type. Checked Num Number of targets that have been monitored for data collection. Over-threshold Num Number of threshold violations. Table 9 Description of the threshold monitoring fields Monitored Threshold Collect data in Checked Num Over-threshold Num performance metric type Number of...
Page 39: Filename
filename Use filename to specify a file to be transferred between the FTP server and the FTP client. Use undo filename to restore the default. Syntax filename filename undo filename Default No file is specified. Views FTP operation view Default command level 2: System level Parameters filename: Specifies the name of a file, a case-sensitive string of 1 to 200 characters.
Page 40: History-Record Enable
Parameters interval: Specifies the interval in milliseconds between two consecutive operations, in the range of 0 to 604800000. An interval of 0 sets the operation to be performed only once, and to not collect any statistics. Examples # Configure the ICMP echo operation to repeat at an interval of 1000 milliseconds. <Sysname>...
Page 41: History-Record Number
Syntax history-record keep-time keep-time undo history-record keep-time Default The history records in an NQA operation are kept for 120 minutes. Views Any NQA operation view Default command level 2: System level Parameters keep-time: Specifies how long the history records can be saved. The time is in the range of 1 to 1440 minutes.
Page 42: Http-Version
Usage guidelines If the number of history records in an NQA operation exceeds the maximum number, the earliest history record is removed. Examples # Configure the maximum number of history records that can be saved in an NQA operation as 10. <Sysname>...
Page 43: Next-Hop
Views FTP operation view Default command level 2: System level Parameters active: Sets the data transmission mode to active for the FTP operation. In this mode, the FTP server initiates a connection request. passive: Sets the data transmission mode to passive for the FTP operation. In this mode, the FTP client initiates a connection request.
Page 44: Nqa
Use nqa to create an NQA operation and enter NQA operation view. Use undo nqa to remove the operation. Syntax nqa entry admin-name operation-tag undo nqa { all | entry admin-name operation-tag } Default No NQA operation is created. Views System view Default command level 2: System level...
Page 45: Nqa Agent Max-Concurrent
Views System view Default command level 2: System level Examples # Enable the NQA client. <Sysname> system-view [Sysname] nqa agent enable Related commands nqa server enable nqa agent max-concurrent Use nqa agent max-concurrent to configure the maximum number of operations that the NQA client can simultaneously perform.
Page 46: Operation (Ftp Operation View)
undo nqa schedule admin-name operation-tag Views System view Default command level 2: System level Parameters admin-name: Specifies the administrator name, a case-insensitive string of 1 to 32 characters. operation-tag: Specifies the operation tag, a case-insensitive string of 1 to 32 characters. start-time: Specifies the start time and date of the NQA operation.
Page 47: Operation (Http Operation View)
Default command level 2: System level Parameters get: Gets a file from the FTP server. put: Transfers a file to the FTP server. Examples # Specify the operation type for the FTP operation as put. <Sysname> system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type ftp [Sysname-nqa-admin-test-ftp] operation put operation (HTTP operation view)
Page 48: Password (Ftp Operation View)
Syntax operation interface interface-type interface-number undo operation interface Default No interface is specified to perform the DHCP operation. Views DHCP operation view Default command level 2: System level Parameters interface-type interface-number: Specifies an interface by its type and number. Usage guidelines The specified interface simulates the DHCP client to acquire an IP address and it does not change its IP address.
Page 49: Probe Count
password: Specifies the password used to log in to the FTP server. This argument is case sensitive. If simple is specified, it must be a plaintext string of 1 to 32 characters. If cipher is specified, it must be a ciphertext string of 1 to 73 characters.
Page 50: Probe Packet-Interval
An SNMP operation sends one SNMPv1 packet, one SNMPv2C packet, and one SNMPv3 packet. • If an operation is to perform multiple probes, the system starts the next probe when it receives responses to packets sent in the first probe, or when the probe timeout time expires. This command is not available for the voice operation.
Page 51: Probe Packet-Timeout
Default An UDP jitter probe sends 10 packets and a voice probe sends 1000 packets. Views UDP jitter operation view, voice operation view Default command level 2: System level Parameters packet-number: Specifies the number of packets to be sent per probe. The value is in the range of 10 to 1000 for the UDP jitter operation, and 10 to 60000 for the voice operation.
Page 52: Probe Timeout
probe timeout Use probe timeout to specify the probe timeout time. If a probe does not complete within the period, the probe is timed out. Use undo probe timeout to restore the default. Syntax probe timeout timeout undo probe timeout Default The timeout time of a probe is 3000 milliseconds.
Page 53: Reaction Checked-Element { Jitter-Ds | Jitter-Sd
Views Voice operation view Default command level 2: System level Parameters item-number: Specifies a reaction entry ID in the range of 1 to 10. threshold-value: Specifies threshold values. upper-threshold: Specifies the upper threshold in the range of 1 to 100. lower-threshold: Specifies the lower threshold in the range of 1 to 100.
Page 54 Default command level 2: System level Parameters item-number: Specifies a reaction entry ID in the range of 1 to 10. jitter-ds: Specifies the destination-to-source jitter of each probe packet as the monitored element (or performance metric). jitter-sd: Specifies source-to-destination jitter of each probe packet as the monitored element. threshold-type: Specifies a threshold type.
Page 55: Reaction Checked-Element Mos
[Sysname-nqa-admin-test] type udp-jitter [Sysname-nqa-admin-test-udp-jitter] reaction 2 checked-element jitter-ds threshold-type accumulate 100 threshold-value 50 5 action-type trap-only reaction checked-element mos Use reaction checked-element mos to configure a reaction entry for monitoring the MOS value in the NQA operation. You cannot edit a reaction entry. To change the attributes in a reaction entry, use undo reaction to delete the entry first and then configure a new one.
Page 56: Reaction Checked-Element { Owd-Ds | Owd-Sd
[Sysname-nqa-admin-test-voice] reaction 1 checked-element mos threshold-value 200 100 action-type trap-only reaction checked-element { owd-ds | owd-sd } Use reaction checked-element { owd-ds | owd-sd } to configure a reaction entry for monitoring the one-way delay. You cannot edit a reaction entry. To change the attributes in a reaction entry, use undo reaction to delete the entry first and then configure a new one.
Page 57: Reaction Checked-Element Packet-Loss
[Sysname-nqa-admin-test-udp-jitter] reaction 1 checked-element owd-ds threshold-value 50 reaction checked-element packet-loss Use reaction checked-element packet-loss to configure a reaction entry for monitoring packet loss in the NQA operation. You cannot edit a reaction entry. To change the attributes in a reaction entry, use undo reaction to delete the entry first and then configure a new one.
Page 58: Reaction Checked-Element Probe-Duration
reaction checked-element probe-duration Use reaction checked-element probe-duration to configure a reaction entry for monitoring the operation duration. You cannot edit a reaction entry. To change the attributes in a reaction entry, use undo reaction to delete the entry first and then configure a new one. Use undo reaction to delete the specified reaction entry.
Page 59: Reaction Checked-Element Probe-Fail (For Trap)
it exceeds the upper threshold, the state is set to over-threshold. If it is below the lower threshold, the state of the reaction entry is set to below-threshold. Once the state of the reaction entry changes, a trap message is generated and sent to the NMS. <Sysname>...
Page 60: Reaction Checked-Element Probe-Fail (For Trigger)
Views DHCP operation view, DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view Default command level 2: System level Parameters item-number: Specifies a reaction entry ID in the range of 1 to 10. threshold-type: Specifies a threshold type.
Page 61: Reaction Checked-Element Rtt
Syntax reaction item-number checked-element probe-fail threshold-type consecutive consecutive-occurrences action-type trigger-only undo reaction item-number Default No reaction entries are configured. Views DHCP operation view, DNS operation view, DLSw operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view Default command level 2: System level Parameters...
Page 62 Default No reaction entry for monitoring packet round-trip time is configured. Views UDP jitter operation view, voice operation view Default command level 2: System level Parameters item-number: Specifies a reaction entry ID in the range of 1 to 10. threshold-type: Specifies a threshold type. accumulate accumulate-occurrences: Specifies the total number of threshold violations.
Page 63: Reaction Trap
[Sysname-nqa-admin-test] type udp-jitter [Sysname-nqa-admin-test-udp-jitter] reaction 1 checked-element rtt threshold-type accumulate 100 threshold-value 50 5 action-type trap-only reaction trap Use reaction trap to configure the sending of traps to the NMS under specified conditions. Use undo reaction trap to restore the default. Syntax reaction trap...
Page 64: Route-Option Bypass-Route
Syntax resolve-target domain-name undo resolve-target Default No domain name is configured. Views DNS operation view Default command level 2: System level Parameters domain-name: Specifies the domain name to be resolved. It is a case-insensitive string separated by dots (.), each part consisting of 1 to 63 characters. The total length must be within 255 characters. Valid characters in a part include letters, digits, hyphens (-), and underscores (_).
Page 65: Source Interface
Examples # Enable the routing table bypass function. <Sysname> system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] route-option bypass-route source interface Use source interface to configure the source interface for ICMP echo request packets. The ICMP echo request packets take the IP address of the source interface as their source IP address when no source IP address is specified.
Page 66: Source Port
Use undo source ip to remove the configured source address. The IP address of the interface that sends a probe packet serves as the source IP address of the probe packet. Syntax source ip ip-address undo source ip Default No source IP address is configured for probe packets. Views DLSw operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, UDP jitter operation view, voice operation...
Page 67: Statistics Hold-Time
Views SNMP operation view, UDP echo operation view, UDP jitter operation view, voice operation view Default command level 2: System level Parameters port-number: Specifies the source port number of probe packets, in the range of 1 to 50000. Examples # Configure port 8000 as the source port of probe packets in the UDP echo operation. <Sysname>...
Page 68: Statistics Max-Group
statistics max-group Use statistics max-group to configure the maximum number of statistics groups that can be saved. Use undo statistics max-group to restore the default. Syntax statistics max-group number undo statistics max-group Default A maximum of two statistics groups can be saved. Views DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, UDP jitter...
Page 69: Tos
Views DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, UDP jitter operation view, voice operation view Default command level 2: System level Parameters interval: Specifies the interval in minutes for collecting statistics for an NQA operation, in the range of 1 to 35791394.
Page 70: Ttl
[Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] tos 1 Use ttl to specify the TTL for probe packets. Use undo ttl to restore the default. Syntax ttl value undo ttl Default The TTL for probe packets is 20. Views DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, UDP jitter operation view, voice operation view Default command level...
Page 71: Url
Parameters dhcp: Specifies the DHCP operation type. dlsw: Specifies the DLSw operation type. dns: Specifies the DNS operation type. ftp: Specifies the FTP operation type. http: Specifies the HTTP operation type. icmp-echo: Specifies the ICMP echo operation type. snmp: Specifies the SNMP operation type. tcp: Specifies the TCP operation type.
Page 72: Username (Ftp Operation View)
[Sysname-nqa-admin-test-http] url /index.htm username (FTP operation view) Use username to configure a username used to log in to the FTP server. Use undo username to remove the username. Syntax username username undo username Default No username is configured for logging in to the FTP server. Views FTP operation view Default command level...
Page 73: Nqa Server Configuration Commands
Default command level 2: System level Parameters vpn-instance-name: Specifies the name of the MPLS L3VPN, a case-sensitive string of 1 to 31 characters. Examples # Specify vpn1 as the MPLS L3VPN. <Sysname> system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] vpn-instance vpn1 NQA server configuration commands NOTE:...
Page 74: Nqa Server Enable
3.3.3.3 3000 inactive Table 10 Command output Field Description tcp-connect TCP connect listening service. udp-echo UDP echo listening service. IP address specified for the TCP/UDP listening service on the NQA IP Address server. Port Port number of the TCP/UDP listening service on the NQA server. Listening service status: •...
Page 75: Nqa Server Udp-Echo
Syntax nqa server tcp-connect ip-address port-number undo nqa server tcp-connect ip-address port-number Views System view Default command level 2: System level Parameters ip-address: Specifies the IP address for the TCP connect listening service. port-number: Specifies the port number for the TCP connect listening service, in the range of 1 to 50000. Usage guidelines Configure the command on the NQA server for the TCP operation only.
Page 76 Usage guidelines Configure the command on the NQA server for the UDP jitter, UDP echo, and voice operations only. The IP address and port number must be consistent with those configured on the NQA client and must be different from those of an existing UDP listening service. The IP address must be that of an interface on the NQA server.
Page 77: Ntp Configuration Commands
NTP configuration commands display ntp-service sessions Use display ntp-service sessions to display information about all NTP sessions. Syntax display ntp-service sessions [ verbose ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters verbose: Displays detailed information about all NTP sessions.
Page 78 Field Description Stratum level of the clock source, which determines the clock precision. The value is in the range of 1 to 16. The clock precision decreases from stratum 1 stra to stratum 16. A stratum 1 clock has the highest precision, and a stratum 16 clock is not synchronized and cannot be used as a reference clock.
Page 79 Total associations : 1 Table 12 Command output Field Description clock source IP address of the clock source. Stratum level of the clock source, which determines the clock precision. The value is in the range of 1 to 16. The clock precision clock stratum decreases from stratum 1 to stratum 16.
Page 80 Field Description Poll interval of the local device, in seconds. The value displayed is a local poll power of 2. For example, if the displayed value is 6, the poll interval of the local device is 2 , or 64 seconds. Operation mode of the peer device: •...
Page 81: Display Ntp-Service Status
Field Description filter disper Dispersion information. Status of the reference clock: • reference clock status working normally. • working abnormally. timecode Time code. Total associations Total number of associations. NOTE: When a device is operating in NTP broadcast/multicast server mode, using the display ntp-service sessions command on the device does not display the NTP session information corresponding to the broadcast/multicast server, but the sessions are counted in the total number of associations.
Page 82: Display Ntp-Service Trace
Peer dispersion: 0.00 ms Reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000) Table 13 Command output Field Description Status of the system clock: • Synchronized—The system clock has been synchronized. Clock status • Unsynchronized—The system clock has not been synchronized. Clock stratum Stratum level of the system clock.
Page 83: Ntp-Service Access
Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Page 84: Ntp-Service Authentication Enable
Default The access-control right for the peer devices to access the NTP services of the local device is set to peer. Views System view Default command level 3: Manage level Parameters peer: Permits full access. This level of right permits the peer devices to perform synchronization and control query to the local device and also permits the local device to synchronize its clock to that of a peer device.
Page 85: Ntp-Service Authentication-Keyid
undo ntp-service authentication enable Default NTP authentication is disabled. Views System view Default command level 3: Manage level Examples # Enable NTP authentication. <Sysname> system-view [Sysname] ntp-service authentication enable Related commands • ntp-service authentication-keyid ntp-service reliable authentication-keyid • ntp-service authentication-keyid Use ntp-service authentication-keyid to set the NTP authentication key.
Page 86: Ntp-Service Broadcast-Client
When the NTP authentication key is configured, configure the key as a trusted key by using the ntp-service reliable authentication-keyid command. The system supports only the MD5 algorithm for key authentication. A maximum of 1024 keys can be set for each device. If an NTP authentication key is specified as a trusted key, the key automatically changes to untrusted after you delete the key.
Page 87: Ntp-Service In-Interface Disable
Use undo ntp-service broadcast-server to remove the configuration. Syntax ntp-service broadcast-server [ authentication-keyid keyid | version number ] * undo ntp-service broadcast-server Default The device does not operate in any NTP operation mode. Views Interface view Default command level 3: Manage level Parameters authentication-keyid keyid: Specifies the key ID to be used for sending broadcast messages to broadcast clients, where keyid is in the range of 1 to 4294967295.
Page 88: Ntp-Service Max-Dynamic-Sessions
[Sysname] interface gigabitethernet 2/0/1 [Sysname-GigabitEthernet2/0/1] ntp-service in-interface disable ntp-service max-dynamic-sessions Use ntp-service max-dynamic-sessions to set the maximum number of dynamic NTP sessions that are allowed to be established locally. Use undo ntp-service max-dynamic-sessions to restore the maximum number of dynamic NTP sessions to the system default.
Page 89: Ntp-Service Multicast-Server
Syntax ntp-service multicast-client [ ip-address ] undo ntp-service multicast-client [ ip-address ] Default The device does not operate in any NTP operation mode. Views Interface view Default command level 3: Manage level Parameters ip-address: Specifies a multicast IP address in the range of 224.0.1.0 to 239.255.255.255. The default is 224.0.1.1.
Page 90: Ntp-Service Refclock-Master
ttl ttl-number: Specifies the TTL of NTP multicast messages, where ttl-number is in the range of 1 to 255. The default is 16. version number: Specifies the NTP version. The value range for the number argument is 1 to 4, and the default is 3.
Page 91: Ntp-Service Source-Interface
Syntax ntp-service reliable authentication-keyid keyid undo ntp-service reliable authentication-keyid keyid Default No authentication key is configured to be trusted. Views System view Default command level 3: Manage level Parameters keyid: Specifies an authentication key number in the range of 1 to 4294967295. Examples # Enable NTP authentication, specify to use MD5 encryption algorithm, with the key ID of 37 and key value of BetterKey.
Page 92: Ntp-Service Unicast-Peer
Examples # Specify the source interface of NTP messages as GigabitEthernet 2/0/1. <Sysname> system-view [Sysname] ntp-service source-interface gigabitethernet 2/0/1 ntp-service unicast-peer Use ntp-service unicast-peer to designate a symmetric-passive peer for the device. Use undo ntp-service unicast-peer to remove the symmetric-passive peer designated for the device. Syntax ntp-service unicast-peer [ vpn-instance vpn-instance-name ] { ip-address | peer-name } [ authentication-keyid keyid | priority | source-interface interface-type interface-number | version...
Page 93: Ntp-Service Unicast-Server
you do not include vpn-instance vpn-instance-name in this command, the command removes the symmetric-passive peer with the IP address of ip-address in the public network. Examples # Designate the device with the IP address of 10.1.1.1 as the symmetric-passive peer of the local device, configure the local device to run NTP version 3, and specify the source interface of NTP messages as GigabitEthernet 2/0/1.
Page 94 Usage guidelines To synchronize the PE to a PE or CE in a VPN, provide vpn-instance vpn-instance-name in your command. If you include vpn-instance vpn-instance-name in the undo ntp-service unicast-server command, the command removes the NTP server with the IP address of ip-address in the specified VPN. If you do not include vpn-instance vpn-instance-name in this command, the command removes the NTP server with the IP address of ip-address in the public network.
Page 95: Ipc Configuration Commands
IPC configuration commands The display commands in this document display only information about active nodes. "Local node" refers to the current device or the active MPU. display ipc channel Use display ipc channel to display channel information for a node. Syntax display ipc channel { node node-id | self-node } [ | { begin | exclude | include } regular-expression ] Views...
Page 96: Display Ipc Link
Prehistorical channel, NO.1 Table 15 Command output Field Description Channel number, which has been predefined and assigned by the ChannelID system. One channel number corresponds to one module. The display ipc channel command displays the numbers of the current active modules. Description information, which is generated by the internal software of the device, is used to describe the functions of a channel.
Page 97: Display Ipc Multicast-Group
------------------------------------------- DOWN DOWN The output shows that the connections of the local node to peer node 1 and peer node 2 are down. Table 16 Command output Field Description Dst-NodeID Number of the peer node. Link status: • LinkStatus UP—The connection has been established. •...
Page 98: Display Ipc Node
GroupID Status ChannelID ---------------------------------- INUSE Table 17 Command output Field Description GroupID Multicast group ID. Link status: • Status INUSE—The multicast group is in use. • DELETE—The multicast group is to be deleted. ChannelID Channel number. display ipc node Use display ipc node to display node information. Syntax display ipc node [ | { begin | exclude | include } regular-expression ] Views...
Page 99: Display Ipc Packet
display ipc packet Use display ipc packet to display the packet statistics for the specified node. Syntax display ipc packet { node node-id | self-node } [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters...
Page 100: Display Ipc Performance
Field Description Sent-fragments Number of fragments sent. Number of packets sent. Whether a packet is fragmented depends on the interface MTU and the packet size in bytes. If the Sent-packets packet size is larger than the MTU, the packet is fragmented.
Page 101: Display Ipc Queue
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines If IPC performance statistics is enabled, the command displays the current IPC performance statistics. If IPC performance statistics is disabled, the command displays the IPC performance statistics collected before IPC performance statistics was disabled.
Page 102 Syntax display ipc queue { node node-id | self-node } [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters node node-id: Specifies a node by its number. The following matrix shows the value ranges for the node-id argument: SR6604-X/SR6608-X/SR6 SR6602...
Page 103: Ipc Performance Enable
Table 21 Command output Field Description Queue type: • UNICAST—Unicast queue. QueueType • MULTICAST—Multicast (including broadcast) queue. • MIXCAST—Mixcast queue, which can accommodate unicast, multicast, and broadcast traffic. QueueID Queue number. Dst-NodeID Peer node number. If no peer node exists, two hyphens (--) are displayed. Length Queue length (number of packets that can be buffered).
Page 104: Reset Ipc Performance
Usage guidelines When IPC performance statistics is disabled, the statistics data does not change. The display ipc performance command displays the statistics collected before IPC performance statistics was disabled. Examples # Enable IPC performance statistics for channel 18 on node 6. <Sysname>...
Page 105: Snmp Commands
SNMP commands The router supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FIPS is not available for Russia. display snmp-agent community Use display snmp-agent community to display SNMPv1 and SNMPv2c community information.
Page 106: Display Snmp-Agent Group
Storage-type: nonVolatile Community name: userv1 Group name: testv1 Storage-type: nonVolatile Table 22 Command output Field Description Displays the community name created by using the snmp-agent Community name community command or the username created by using the snmp-agent usm-user { v1 | v2c } command. SNMP group name: •...
Page 107 Parameters group-name: Specifies an SNMP group name, a case-sensitive string of 1 to 32 characters. You can specify an SNMPv1, SNMPv2c, or SNMPv3 group. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Page 108: Display Snmp-Agent Local-Engineid
Field Description Storage type, including volatile, nonVolatile, permanent, readOnly, Storage-type and other (see Table 22). display snmp-agent local-engineid Use display snmp-agent local-engineid to display the local SNMP engine ID. Syntax display snmp-agent local-engineid [ | { begin | exclude | include } regular-expression ] Views Any view Default command level...
Page 109 Parameters exclude: Displays the subtrees excluded from any MIB view. include: Displays the subtrees included in any MIB view. viewname view-name: Displays information about the specified MIB view. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Page 110: Display Snmp-Agent Statistics
Table 24 Command output Field Description View name MIB view name. MIB Subtree MIB subtree covered by the MIB view. Subtree mask MIB subtree mask. Storage-type Type of the medium where the subtree view is stored. Access privilege for the MIB subtree in the MIB view: •...
Page 111 0 SNMP PDUs which had tooBig error-status (Maximum packet size 1500) 16544 MIB objects retrieved successfully 2 MIB objects altered successfully 7 GetRequest-PDU accepted and processed 7 GetNextRequest-PDU accepted and processed 1653 GetBulkRequest-PDU accepted and processed 1669 GetResponse-PDU accepted and processed 2 SetRequest-PDU accepted and processed 0 Trap PDUs accepted and processed 0 Alternate Response Class PDUs dropped silently...
Page 112: Display Snmp-Agent Sys-Info
If no keyword is specified, all SNMP agent system information is displayed. Examples # Display SNMP agent system information. <Sysname> display snmp-agent sys-info The contact person for this managed node: Hangzhou H3C Technologies Co., Ltd. The physical location of this node: Hangzhou, China SNMP version running in the system: SNMPv3...
Page 113: Display Snmp-Agent Trap Queue
display snmp-agent trap queue Use display snmp-agent trap queue to display basic information about the trap queue, including the trap queue name, queue length, and number of traps in the queue. Syntax display snmp-agent trap queue [ | { begin | exclude | include } regular-expression ] Views Any view Default command level...
Page 114: Display Snmp-Agent Usm-User
Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Page 115 Parameters engineid engineid: Displays SNMPv3 user information for the SNMP engine ID identified by engineid. When an SNMPv3 user is created, the system records the local SNMP entity engine ID. The user becomes invalid when the engine ID changes and becomes valid again when the recorded engine ID is restored.
Page 116: Enable Snmp Trap Updown
Field Description Storage type: • volatile. • nonvolatile. • permanent. Storage-type • readOnly. • other. For more information about these storage types, see Table UserStatus SNMP user status. Related commands snmp-agent usm-user v3 enable snmp trap updown Use enable snmp trap updown to enable link state traps on an interface. Use undo enable snmp trap updown to disable link state traps on an interface.
Page 117: Snmp-Agent
snmp-agent Use snmp-agent to enable the SNMP agent. Use undo snmp-agent to disable the SNMP agent. Syntax snmp-agent undo snmp-agent Default The SNMP agent is disabled. Views System view Default command level 3: Manage level Usage guidelines The snmp-agent command is optional for an SNMP configuration task. The SNMP agent is automatically enabled when you perform any command that begins with snmp-agent except for the snmp-agent calculate-password command.
Page 118: Snmp-Agent Community
mode: Specifies authentication and privacy algorithms. Select a mode option, depending on the authentication and privacy algorithm you are configuring with the snmp-agent usm-user v3 command. The three privacy algorithms Advanced Encryption Standard (AES), Triple Data Encryption Standard (3DES), and Data Encryption Standard (DES) are in descending order of security strength. Higher security means more complex implementation mechanism and lower speed.
Page 119 Syntax snmp-agent community { read | write } [ cipher ] community-name [ mib-view view-name ] [ acl acl-number | acl ipv6 ipv6-acl-number ] * undo snmp-agent community { read | write } [ cipher ] community-name Views System view Default command level 3: Manage level Parameters...
Page 120: Snmp-Agent Group
Examples # Create the read-only community readaccess so an NMS can use the protocol SNMPv1 or SNMPv2c and community name readaccess to read the MIB objects in the default view ViewDefault. <Sysname> system-view [Sysname] snmp-agent sys-info version v1 v2c [Sysname] snmp-agent community read readaccess # Create the read and write community writeaccess so only the host at 1.1.1.1 can use the protocol SNMPv2c and community name writeaccess to read and set the MIB objects in the default view ViewDefault.
Page 121 Views System view Default command level 3: Manage level Parameters v1: Specifies SNMPv1. v2c: Specifies SNMPv2c. v3: Specifies SNMPv3. group-name: Group name, a string of 1 to 32 characters. authentication: Specifies the security model of the SNMPv3 group to be authentication only (without privacy).
Page 122: Snmp-Agent Local-Engineid
snmp-agent local-engineid Use snmp-agent local-engineid to configure the SNMP engine ID of the local SNMP agent. Use undo snmp-agent local-engineid to restore the default local SNMP engine ID. Syntax snmp-agent local-engineid engineid undo snmp-agent local-engineid Default The local engine ID is the combination of the company ID and the device ID. Device ID varies by product and might be an IP address, a MAC address, or a user-defined hexadecimal string.
Page 123: Snmp-Agent Mib-View
Views System view Default command level 3: Manage level Parameters all: Enables logging SNMP GET and SET operations. get-operation: Enables logging SNMP GET operations. set-operation: Enables logging SNMP SET operations. Usage guidelines Use SNMP logging to record the SNMP operations performed on the SNMP agent for auditing NMS behaviors.
Page 124: Snmp-Agent Packet Max-Size
oid-tree: Specifies a MIB subtree by its root node’s OID (for example 1.4.5.3.1) or object name (for example, system). An OID is a dotted numeric string that uniquely identifies an object in the MIB tree. mask mask-value: Sets a MIB subtree mask, a hexadecimal string. Its length must be an even number in the range of 2 to 32.
Page 125: Snmp-Agent Sys-Info
{ contact | location | version { all | { v1 | v2c | v3 }* } } In FIPS mode: snmp-agent sys-info { contact sys-contact | location sys-location | version v3 } undo snmp-agent sys-info { contact | location | version v3 } Default Contact—Hangzhou H3C Technologies Co., Ltd. • Location—Hangzhou China. • Version—SNMPv3.
Page 126: Snmp-Agent Target-Host
v1: Specifies SNMPv1. • • v2c: Specifies SNMPv2c. v3: Specifies SNMPv3. • Usage guidelines Configure the SNMP agent with the same SNMP version as the NMS for successful communications between them. In FIPS mode, only SNMPv3 is supported. Examples # Configure the system contact as Dial System Operator at beeper # 27345. <Sysname>...
Page 127 ip-address: Specifies the IPv4 address or name of the target host. The host name is a string of 1 to 255 characters. ipv6 ipv6-address: Specifies the IPv6 address of the target host. udp-port port-number: Specifies the UDP port for receiving SNMP traps. The default UDP port is 162. vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the target host belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters.
Page 128: Snmp-Agent Trap Enable
snmp-agent trap source • snmp-agent trap enable Use snmp-agent trap enable to enable traps globally. Use undo snmp-agent trap enable to disable traps globally. Syntax snmp-agent trap enable [ acfp [ client | policy | rule | server ] | bfd | bgp | configuration | default-route | flash | fr | mpls | ospf [ process-id ] [ ifauthfail | ifcfgerror | ifrxbadpkt | ifstatechange | iftxretransmit | lsdbapproachoverflow | lsdboverflow | maxagelsa | nbrstatechange | originatelsa | vifcfgerror | virifauthfail | virifrxbadpkt | virifstatechange | viriftxretransmit | virnbrstatechange ] *...
Page 129 process-id: OSPF process ID, in the range 1 to 65535. • • ifauthfail: Interface authentication failure traps. ifcfgerror: Interface configuration error traps. • ifrxbadpkt: Traps for receiving incorrect packets. • • ifstatechange: Interface state change traps. iftxretransmit: Traps for packet receiving and forwarding events on interfaces. •...
Page 130: Snmp-Agent Trap If-Mib Link Extended
To generate linkUp or linkDown traps when the link state of an interface changes, you must enable the linkUp or linkDown trap function globally by using the snmp-agent trap enable [ standard [ linkdown | linkup ] * ] command and on the interface by using the enable snmp trap updown command. The following matrix shows the keyword and router compatibility: SR6604-X/SR6608-X Keyword...
Page 131: Snmp-Agent Trap Life
Trap 1.3.6.1.6.3.1.1.5.4<linkUp>: Interface 983555 is Up, ifAdminStatus is 1, ifOperStatus is 1 An extended linkUp trap is in the following format: • #Apr 24 11:43:09:896 2008 Sysname IFNET/4/INTERFACE UPDOWN: Trap 1.3.6.1.6.3.1.1.5.4<linkUp>: Interface 983555 is Up, ifAdminStatus is 1, ifOperStatus is 1, ifDescr is GigabitEthernet2/0/1, ifType is 6 A standard linkDown trap is in the following format: •...
Page 132: Snmp-Agent Trap Queue-Size
Related commands snmp-agent trap enable • snmp-agent target-host • snmp-agent trap queue-size Use snmp-agent trap queue-size to set the size of the trap sending queue. Use undo snmp-agent trap queue-size to restore the default queue size. Syntax snmp-agent trap queue-size size undo snmp-agent trap queue-size Default Up to 100 traps can be stored in the trap sending queue.
Page 133: Snmp-Agent Usm-User { V1 | V2C
undo snmp-agent trap source Default SNMP chooses the IP address of an interface to be the source IP address of the trap. Views System view Default command level 3: Manage level Parameters interface-type { interface-number | interface-number.subnumber }: Specifies the interface type and interface number.
Page 134 Parameters v1: Specifies SNMPv1. v2c: Specifies SNMPv2c. user-name: User name, a case-sensitive string of 1 to 32 characters. group-name: Group name, a case-sensitive string of 1 to 32 characters. acl acl-number: Specifies a basic ACL to filter NMSs by source IPv4 address. The acl-number argument represents a basic ACL number in the range of 2000 to 2999.
Page 135: Snmp-Agent Usm-User V3
snmp-agent usm-user v3 Use snmp-agent usm-user v3 to add an SNMPv3 user to an SNMP group. Use undo snmp-agent usm-user v3 to delete an SNMPv3 user from an SNMP group. Syntax In non-FIPS mode: snmp-agent usm-user v3 user-name group-name [ cipher ] [ authentication-mode { md5 | sha } auth-password [ privacy-mode { 3des | aes128 | des56 } priv-password ] ] [ acl acl-number | acl ipv6 ipv6-acl-number ] * undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string }...
Page 136 priv-password: Specifies a case-sensitive plaintext or encrypted privacy key. A plaintext key is a string of 1 to 64 characters. If the cipher keyword is specified, the encrypted privacy key length requirements differ by authentication algorithm and key string format, as shown in Table Table 28 Encrypted privacy key length requirements Authentication...
Page 137 Examples # Add the user testUser to the SNMPv3 group testGroup. Configure the security model as authentication without privacy, the authentication algorithm as MD5, the plaintext key as authkey. <Sysname> system-view [Sysname] snmp-agent group v3 testGroup authentication [Sysname] snmp-agent usm-user v3 testUser testGroup authentication-mode md5 authkey To access the SNMP agent, specifically, the default view (ViewDefault) in this example, the NMS can use the protocol SNMPv3, username testUser, authentication algorithm MD5, and authentication key authkey.
Page 138: Mib Configuration Commands
Two MIB styles are available on the device: new and compatible. After obtaining the MIB style, you can select matched H3C network management software based on the MIB style. Examples # Display the current MIB style of the H3C device and the MIB style to use after the next startup. <Sysname> display mib-style Current MIB style: new...
Page 139 H3C enterprise ID 25506, and the private MIB is located under the enterprise ID 201 1. new: Specifies the MIB style of the device as H3C new. In this style, both sysOID and private MIB are located under the H3C enterprise ID 25506.
Page 140: Rmon Configuration Commands
RMON configuration commands display rmon alarm Use display rmon alarm to display RMON alarm entries. Syntax display rmon alarm [ entry-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters entry-number: Specifies the index of an RMON alarm entry, in the range of 1 to 65535.
Page 141: Display Rmon Event
Table 29 Command output Field Description Status of the alarm entry entry-number created by the owner is status. • entry-number—Alarm entry, corresponding to the MIB node alarmIndex. • owner—Entry owner, corresponding to the MIB node alarmOwner. AlarmEntry entry-number owned by owner is •...
Page 142 Default command level 1: Monitor level Parameters entry-number: Specifies the index of an RMON event entry, in the range of 1 to 65535. If no entry is specified, the command displays the configuration of all event entries. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Page 143: Display Rmon Eventlog
Field Description Time when the last event was triggered, corresponding to the MIB last triggered at node eventLastTimeSent. Related commands rmon event display rmon eventlog Use display rmon eventlog to display log information for the specified or all event entries. Syntax display rmon eventlog [ entry-number ] [ | { begin | exclude | include } regular-expression ] Views...
Page 144: Display Rmon History
Table 31 Command output Field Description LogEntry Event entry, corresponding to the MIB node logIndex. owned by Event entry owner, corresponding to the MIB node eventOwner. Entry status: • VALID—The entry is valid. • UNDERCREATION—The entry is invalid. VALID The display rmon command can display invalid entries, but the display current-configuration and display this commands do not display their settings.
Page 145 Examples # Display RMON history control entry and history sampling information for GigabitEthernet 2/0/1. <Sysname> display rmon history gigabitethernet 2/0/1 HistoryControlEntry 1 owned by null is VALID Samples interface : GigabitEthernet2/0/1<ifIndex.1> Sampling interval : 10(sec) with 5 buckets max Sampled values of record 1 : dropevents , octets : 3166...
Page 146 Field Description Entry status: • VALID—The entry is valid. • UNDERCREATION—The entry is invalid. VALID The display rmon command can display invalid entries, but the display current-configuration and display this commands do not display their settings. Status value is stored in the MIB node historyControlStatus. Samples Interface The sampled interface.
Page 147: Display Rmon Prialarm
Field Description Number of colliding packets received during the sampling collisions period, corresponding to the MIB node etherHistoryCollisions. Bandwidth utilization during the sampling period, utilization corresponding to the MIB node etherHistoryUtilization. Related commands rmon history display rmon prialarm Use display rmon prialarm to display the configuration of the specified or all private alarm entries. Syntax display rmon prialarm [ entry-number ] [ | { begin | exclude | include } regular-expression ] Views...
Page 148: Display Rmon Statistics
Table 33 Command output Field Description PrialarmEntry Private alarm table entry. owned by Owner of the entry, user1 in this example. Entry status: • VALID—The entry is valid. • UNDERCREATION—The entry is invalid. VALID The display rmon command can display invalid entries, but the display current-configuration and display this commands do not display their settings.
Page 149 begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines This command displays the interface statistics during the period from the time the statistics entry is created to the time the command is executed.
Page 150: Rmon Alarm
Field Description Number of undersize packets received by the interface during the etherStatsUndersizePkts statistical period, corresponding to the MIB node etherStatsUndersizePkts. Number of oversize packets received by the interface during the etherStatsOversizePkts statistical period, corresponding to the MIB node etherStatsOversizePkts. Number of undersize packets with CRC errors received by the etherStatsFragments interface during the statistical period, corresponding to the MIB node...
Page 151 undo rmon alarm entry-number Views System view Default command level 2: System level Parameters entry-number: Specifies an alarm entry index in the range of 1 to 65535. alarm-variable: Alarm variable, a string of 1 to 256 characters. It can be in dotted object identifier (OID) format (in the format of entry.integer.instance or leaf node name.instance, for example, 1.3.6.1.2.1.2.1.10.1), or a node name like ifInOctets.1.
Page 152: Rmon Event
When the alarm condition in an alarm entry occurs, its associated event is triggered to handle the alarm. The system regularly samples the monitored alarm variables, compares the sampled values with the predefined thresholds, and does the following: If the rising threshold is reached, triggers the event specified by the event-entry1 argument. •...
Page 153: Rmon History
Default command level 2: System level Parameters entry-number: Specifies an event entry index in the range of 1 to 65535. description string: Configures an event description, a string of 1 to 127 characters. log: Logs the event when it occurs. log-trap log-trapcommunity: Log and trap events.
Page 154: Rmon Prialarm
Default command level 2: System level Parameters entry-number: Specifies a history control entry index in the range of 1 to 65535. buckets number: Specifies the history table size for the entry, in the range of 1 to 65535. The device supports up to 10 records of each entry.
Page 155 Default command level 2: System level Parameters entry-number: Specifies the index of a private alarm entry, in the range of 1 to 65535. prialarm-formula: Configures a private alarm variable formula, a string of 1 to 256 characters. The variables in the formula must be represented in OID format that starts with a dot (.), the formula (.1.3.6.1.2.1.2.1.10.1)*8 for example.
Page 156: Rmon Statistics
If the result is equal to or smaller than the falling threshold, triggers the event specified by the event-entry2 argument. Examples # Monitor the ratio of the broadcast packets received on the interface by using the private alarm. Calculate the private alarm variables with the (1.3.6.1.2.1.16.1.1.1.6.1*100/.1.3.6.1.2.1.16.1.1.1.5.1) formula and sample the corresponding variables at 10-second intervals.
Page 157 Views Ethernet interface view Default command level 2: System level Parameters entry-number: Specifies the index of statistics entry, in the range of 1 to 65535. owner text: Specifies the entry owner, a string of case-sensitive 1 to 127 characters that can contain spaces.
Page 158: Sampler Configuration Commands
Sampler configuration commands display sampler Use display sampler to view configuration and running information about a sampler. Syntax display sampler [ sampler-name ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters...
Page 159: Reset Sampler Statistics
Table 35 Command output Field Description Sampler name Name of the sampler. Index Index number identifying a sampler. Mode Sampling mode, including fixed mode and random mode. Packet-interval Sampling rate. Packet counter Counts the number of packets that have been received for one sampling. •...
Page 160 Syntax sampler sampler-name mode { fixed | random } packet-interval rate undo sampler sampler-name Views System view Default command level 2: System level Parameters sampler-name: Assigns the name to the sampler, a case-insensitive string of 1 to 32 characters. fixed: Specifies the fixed sampling mode, in which the first packet is selected per sampling. random: Specifies the random sampling mode, in which a packet is randomly selected out of a group of packets, and which packet is selected for each sampling varies.
Page 161: Port Mirroring Configuration Commands
Port mirroring configuration commands The following matrix shows the commands and router compatibility: SR6604-X/SR6608-X Commands SR6602 SR6602-X SR6604/SR6608/SR6616 /SR6616-X Yes (only when SAP Yes (only on Yes (only when SAP interface Local mirroring interface modules are fixed modules are operating in commands operating in bridge interfaces)
Page 162: Mirroring-Group
Usage guidelines The output varies by mirroring group types and is sorted by mirroring group numbers. Examples # Display information about all mirroring groups. <Sysname> display mirroring-group all mirroring-group 3: type: local status: active mirroring port: GigabitEthernet2/0/1 inbound GigabitEthernet2/0/2 both mirroring-group 6: type: remote-source status: inactive...
Page 163: Mirroring-Group Mirroring-Port
Views System view Default command level 2: System level Parameters group-id: Specifies the number of the mirroring group, in the range of 1 to 4. all: Removes all mirroring groups by using the undo command. local: Creates a local mirroring group or removes all local mirroring groups with the undo command. remote-destination: Creates a remote destination group or removes all remote destination groups with the undo command.
Page 164: Mirroring-Group Monitor-Egress
inbound: Mirrors only inbound packets on the specified ports. outbound: Mirrors only outbound packets on the specified ports. Usage guidelines You cannot configure source ports for a remote destination group. When removing a source port from a mirroring group, make sure the traffic direction you specified in the undo mirroring-group mirroring-port command matches the actual monitored direction specified earlier in the mirroring-group mirroring-port command.
Page 165: Mirroring-Group Monitor-Port
Parameters group-id: Number of a remote source group, in the range of 1 to 4. The mirroring group specified by group-id must already exist. monitor-egress-port: Port to be configured as the egress port. It takes the form of interface-type interface-number, where interface-type specifies the port type and interface-number specifies the port number.
Page 166: Mirroring-Group Remote-Probe Vlan
monitor-port-id: Port to be assigned to the specified mirroring group as the monitor port. The argument takes the form of interface-type interface-number, where interface-type specifies the port type and interface-number specifies the port number. Usage guidelines You cannot configure a monitor port for a remote source group. You cannot assign a source port in an existing mirroring group to another mirroring group as the monitor port.
Page 167: Mirroring-Port
Usage guidelines For a remote source or destination mirroring group, you must configure and can configure only one remote probe VLAN to carry mirrored packets. You cannot configure the remote probe VLAN for a local mirroring group. Only a static VLAN that already exists can be configured as a remote probe VLAN. A VLAN can serve as the remote probe VLAN for only one mirroring group.
Page 168: Monitor-Port
Usage guidelines You cannot configure source ports for a remote destination group. When removing a source port from a mirroring group, make sure the traffic direction you specified in the undo mirroring-group command matches the actual monitored direction of the port specified earlier in the mirroring-port command.
Page 169 <Sysname> system-view [Sysname] mirroring-group 1 local [Sysname] interface gigabitethernet 2/0/1 [Sysname-GigabitEthernet2/0/1] monitor-port # Create remote destination group 2, and configure GigabitEthernet 2/0/2 as its monitor port. <Sysname> system-view [Sysname] mirroring-group 2 remote-destination [Sysname] interface gigabitethernet 2/0/2 [Sysname-GigabitEthernet2/0/2] monitor-port Related commands mirroring-group...
Page 170: Traffic Mirroring Configuration Commands
Traffic mirroring configuration commands mirror-to Use mirror-to to configure traffic mirroring for a traffic behavior. Use undo mirror-to to remove traffic mirroring configuration. Syntax mirror-to { cpu | interface interface-type interface-number } undo mirror-to { cpu | interface interface-type interface-number } Default Traffic mirroring is not configured for a traffic behavior.
Page 171: Netstream Configuration Commands
NetStream configuration commands display ip netstream cache Use display ip netstream cache to display NetStream entry information in the cache. Syntax display ip netstream cache [ verbose ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view...
Page 172 IP stream entry been counted MPLS stream entry been counted Last statistics reset time : Never IP packet size distribution (63 total packets): 1-32 .000 .857 .142 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 Protocol Total...
Page 173 DstMask: SrcMask: Nexthop: 0.0.0.0 DstAS: SrcAS: BgpNexthop: 0.0.0.0 OutVRF: InVRF: SamplerMode: SamplerInt: Active: Bytes/Pkt: 5.5.5.2(1172) 5.5.5.1(179) GE2/0/1(I) TcpFlag: DstMask: SrcMask: Nexthop: 127.0.0.1 DstAS: SrcAS: BgpNexthop: 0.0.0.0 OutVRF: InVRF: SamplerMode: SamplerInt: Active: Bytes/Pkt: 5.5.5.2(1172) 5.5.5.1(179) 192 GE2/0/1(I) TcpFlag: DstMask: SrcMask: Nexthop: 127.0.0.1 DstAS: SrcAS:...
Page 174: Display Ip Netstream Export
Field Description Protocol Total Streams Statistics of packet by protocol type in the following counting criteria: Packets/Sec Stream/Sec protocol type, total number of flows, number of packets per second, Packets/stream Active(sec) /stream number of flows per second, number of packets per flow, active time Idle(sec)/stream of each flow, inactive time of each flow.
Page 175 Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Page 176: Display Ip Netstream Template
Field Description Destination address and port number of NetStream data export Stream destination IP(UDP) (UDP). Version 5 exported stream number Number of flows that are exported in version 5 format. Version 5 exported UDP datagram Number of UDP packets that are sent in version 5 format (number of number (failed) packets not successfully sent).
Page 177 SR6604-X/SR6608-X Option SR6602 SR6602-X SR6604/SR6608/SR6616 /SR6616-X slot slot-number Examples # The NetStream aggregation mode of AS is enabled. Display information about the NetStream flow record template. <Sysname> display ip netstream template Stream template refresh-rate packet : 20 Stream template refresh-rate time(in minute) : 30 Active stream templates Added stream templates as outbound template:...
Page 178: Enable
Output SNMP Direction Sampling algorithm Sampling interval Table 39 Command output Field Description Stream template refresh-rate packet Refresh frequency with which the template is sent. Stream template refresh-rate time(in Refresh interval in minutes at which the template is sent. minute) Active stream templates Number of active NetStream templates.
Page 179: Ip Netstream
undo enable Default No NetStream aggregation is enabled. Views NetStream aggregation view Default command level 3: Manage level Examples # Enable NetStream AS aggregation. <Sysname> system-view [Sysname] ip netstream aggregation as [Sysname-ns-aggregation-as] enable Related commands ip netstream aggregation ip netstream Use ip netstream to enable NetStream on the specified interface.
Page 180: Ip Netstream Aggregation
ip netstream aggregation Use ip netstream aggregation to set a NetStream aggregation mode and to enter the NetStream aggregation view. Syntax ip netstream aggregation { as | destination-prefix | prefix | prefix-port | protocol-port | source-prefix | tos-as | tos-bgp-nexthop | tos-destination-prefix | tos-prefix | tos-protocol-port | tos-source-prefix } Views System view Default command level...
Page 181: Ip Netstream Export Host
Configure source interface, destination IP address, and destination port for export of NetStream • data. Examples # Set the NetStream aggregation mode as AS, and enter the NetStream AS aggregation view. <Sysname> system-view [Sysname] ip netstream aggregation as [Sysname-ns-aggregation-as] Related commands enable •...
Page 182: Ip Netstream Export Rate
Up to four different destination addresses, including addresses in different VPNs, can be configured in one aggregation view. If you have configured the destination addresses with the same IP addresses but different UDP ports, the last configuration takes effect. If you configure different VPN instance names, you can configure destination addresses with the same IP address and UDP port.
Page 183: Ip Netstream Export V9-Template Refresh-Rate Packet
Different source interfaces can be configured in different aggregation views. If no source interface is configured in aggregation view, the source interface configured in system view is used. H3C recommends that you connect the network management interface to the NetStream server and configure it as the source interface. Examples # Configure the source interface for NetStream data export as GigabitEthernet 2/0/0.
Page 184: Ip Netstream Export V9-Template Refresh-Rate Time
Default command level 3: Manage level Parameters packets: Specifies the number of packets that are sent before version 9 templates are sent to the NetStream server for an update. The value is in the range of 1 to 600. Usage guidelines Version 9 is template-based and supports user-defined formats, so the NetStream-enabled device needs to send the new template to the NetStream server for an update.
Page 185: Ip Netstream Export Version
NetStream-enabled device and not updated on the NetStream server, the server is unable to associate the received statistics with its proper fields. To avoid such situation, configure the refresh interval for version 9 templates so that the NetStream server can refresh them on time. The refresh frequency and interval can be both configured, and the template is resent when either of the condition is reached.
Page 186: Ip Netstream Filter
Usage guidelines A NetStream entry for a flow records the source IP address and destination IP address, and two AS numbers for each IP address. You can choose to configure which AS numbers to be exported as the source AS and destination AS. Examples # Configure the device to export NetStream data in version 5 format and to specify the NetStream data to include the source AS and destination AS.
Page 187: Ip Netstream Max-Entry
[Sysname-GigabitEthernet2/0/0] ip netstream filter acl 2003 outbound ip netstream max-entry Use ip netstream max-entry to configure the maximum number of NetStream entries that the cache can accommodate, and configure whether to age out the entries or disable creation of a new entry when the number of entries in the cache reaches the upper limit.
Page 188: Ip Netstream Mpls
ip netstream mpls Use ip netstream mpls to collect and export statistics on MPLS packets. If you do not provide any arguments, the top label and IP fields are also counted. If the no-ip-fields keyword is provided, the command exports data about MPLS packet only. Use undo ip netstream mpls to disable counting and exporting of MPLS packets.
Page 189: Ip Netstream Timeout Active
Views Interface view Default command level 3: Manage level Parameters sampler sampler-name: Specifies a sampler name, a string of up to 32 characters. inbound: Enables NetStream sampling in the inbound direction. outbound: Enables NetStream sampling in the outbound direction. Examples # Enable NetStream sampling in the inbound direction of GigabitEthernet 2/0/0 by referencing sampler abc.
Page 190: Ip Netstream Timeout Inactive
Related commands ip netstream timeout inactive ip netstream timeout inactive Use ip netstream timeout inactive to set the aging timer for inactive flows. This timer applies to NetStream traditional data flows. Use undo ip netstream timeout inactive to restore the default. Syntax ip netstream timeout inactive seconds undo ip netstream timeout inactive...
Page 191 Usage guidelines When you execute the command, messages appear telling you that the process of clearing the cache takes several minutes and the system does not perform NetStream data collection during this process. Examples # Age out and export all NetStream data and clear the cache. <Sysname>...
Page 192: Ipv6 Netstream Configuration Commands
IPv6 NetStream configuration commands display ipv6 netstream cache Use display ipv6 netstream cache to display IPv6 NetStream entry information in the cache. Syntax display ipv6 netstream cache [ verbose ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view...
Page 193 IPv6 stream entry been counted MPLS stream entry been counted Last statistics reset time : Never IPv6 packet size distribution (814306 total packets): 1-32 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 .000 576 1024 1536 2048 2560 3072 3584 4096 4608 >4608 .000 .000 .000 .000 1.00 .000 .000 .000 .000 .000 .000 .000 Protocol Total...
Page 194 IPv6 netstream cache information: Stream active timeout (in minutes) Stream inactive timeout (in seconds): 60 Stream max entry number : 630000 IPv6 active stream entry number MPLS active stream entry number : 1000 IPv6 stream entry been counted MPLS stream entry been counted : 77000 Last statistics reset time : Never...
Page 195 BgpNexthop: ::FFFF:303:303 OutVRF: InVRF: SamplerMode: SamplerInt: Active: Bytes/Pkt: 1490 IP& 30::2(1025) 20::130(1000) RAGG1.1(O) MPLS UNKNOWN(0.0.0.0/0) 1:1028-0-1 TcpFlag: DstMask: SrcMask: DstAS: SrcAS: Nexthop: ::D01:102 BgpNexthop: ::FFFF:303:303 OutVRF: InVRF: SamplerMode: SamplerInt: Active: Bytes/Pkt: 1490 Table 40 Command output Field Description IPv6 netstream cache information Information about IPv6 NetStream entries in the cache.
Page 196: Display Ipv6 Netstream Export
Field Description Protocol Total Streams Packets Statistics of packet by protocol type in the following accounting /Sec criteria: protocol number, total number of flows, number of packets Stream/Sec Packets/stream per second, number of flows per second, number of packets for flow, active time of each flow, inactive time of each flow.
Page 197: Display Ipv6 Netstream Template
Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Page 198 Use display ipv6 netstream template to view configuration and status information about IPv6 NetStream templates. Syntax display ipv6 netstream template [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters slot slot-number: Displays IPv6 NetStream template information about a card.
Page 199 Source AS Destination AS Input SNMP Output SNMP IP protocol version Direction Sampling algorithm Sampling interval as inbound template: Template ID : 3292 Packets Last template export time : Never Field count : 14 Field type Field length (byte) --------------------------------------------------------------------------- Flows In packets In bytes...
Page 200: Enable
Source AS Destination AS L4 source port L4 destination port IP protocol version TCP flags Protocol Source ToS IPv6 source mask IPv6 destination mask Direction Forwarding offset Out VPN ID Sampling algorithm Sampling interval Table 42 Command output Field Description Stream template refresh-rate packet Refresh frequency with which the template is sent.
Page 201: Ipv6 Netstream
Default command level 3: Manage level Examples # Enable IPv6 NetStream AS aggregation. <Sysname> system-view [Sysname] ipv6 netstream aggregation as [Sysname-ns6-aggregation-as] enable Related commands ipv6 netstream aggregation ipv6 netstream Use ipv6 netstream to enable IPv6 NetStream on the specified interface. Use undo ipv6 netstream to disable IPv6 NetStream on the specified interface.
Page 202: Ipv6 Netstream Export Host
Default command level 3: Manage level Parameters as: Specifies the AS aggregation by source AS number, destination AS number, inbound interface index, and outbound interface index. bgp-nexthop: Specifies the BGP nexthop aggregation by BGP next hop IPv6 address, and outbound interface index.
Page 203 No destination address or destination UDP port number is configured in system view or aggregation view. Views System view, NetStream aggregation view Default command level 3: Manage level Parameters ip-address: Specifies the destination IP address for IPv6 NetStream data export. Only IPv4 addresses are supported.
Page 204: Ipv6 Netstream Export Rate
ipv6 netstream export rate Use ipv6 netstream export rate to configure the limit on the IPv6 NetStream data export. Use undo ipv6 netstream export rate to remove the IPv6 NetStream data export limit. Syntax ipv6 netstream export rate rate undo ipv6 netstream export rate Default The export rate of IPv6 NetStream data is not limited.
Page 205: Ipv6 Netstream Export V9-Template Refresh-Rate Packet
Different source interfaces can be configured in different aggregation views. If no source interface is configured in NetStream aggregation view, the source interface configured in system view is used. H3C recommends that you connect the network management interface to the NSC and configure it as the source interface. Examples # Configure the source interface for IPv6 NetStream data export as GigabitEthernet 2/0/0.
Page 206: Ipv6 Netstream Export V9-Template Refresh-Rate Time
Examples # Configure the device to wait until 100 packets are sent before sending NetStream version 9 templates again to the NetStream server. <Sysname> system-view [Sysname] ipv6 netstream export v9-template refresh-rate packet 100 Related commands ipv6 netstream export v9-template refresh-rate time ipv6 netstream export v9-template refresh-rate time Use ipv6 netstream export v9-template refresh-rate time to configure the refresh interval for IPv6 NetStream version 9 templates so that the templates are sent after the specified time period.
Page 207: Ipv6 Netstream Export Version 9
ipv6 netstream export version 9 Use ipv6 netstream export version 9 to export IPv6 NetStream data in version 9 format, and choose whether to record data about AS and BGP next hop information. Use undo ipv6 netstream export version to restore the default. Syntax ipv6 netstream export version 9 [ origin-as | peer-as ] [ bgp-nexthop ] undo ipv6 netstream export version...
Page 208: Ipv6 Netstream Timeout Active
The cache can accommodate a maximum of 620000 NetStream entries, and the device ages out the entries when the upper limit is reached. Views System view Default command level 3: Manage level Parameters max-entries: Specifies the maximum number of entries that the cache can save. The value range is 1000 to 620000.
Page 209: Ipv6 Netstream Timeout Inactive
Default command level 3: Manage level Parameters minutes: Sets the aging timer in minutes for active flows, in the range of 1 to 60. Usage Guidelines You can configure both the aging timer for active flows and the aging timer for inactive flows. When either timer for a flow expires, the flow is aged out.
Page 210: Reset Ipv6 Netstream Statistics
reset ipv6 netstream statistics Use reset ipv6 netstream statistics to age out and export all IPv6 NetStream data and clear the cache. Syntax reset ipv6 netstream statistics Views User view Default command level 2: System level Usage guidelines When you execute the command, messages appear telling you that the process of clearing the cache takes several minutes and the system does not perform NetStream during this process.
Page 211: Information Center Configuration Commands
Information center configuration commands The router supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. FIPS is not available for Russia.
Page 212: Display Info-Center
Usage guidelines If no channel is specified, the command displays information about all channels. Examples # Display information about channel 0. <Sysname> display channel 0 channel number:0, channel name:console MODU_ID NAME ENABLE LOG_LEVEL ENABLE TRAP_LEVEL ENABLE DEBUG_LEVEL ffff0000 default informational debugging debugging The output shows that the system is allowed to output log information with a severity from 0 to 4, trap...
Page 213: Display Logbuffer
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display information center configuration information. <Sysname>...
Page 214 Default command level 1: Monitor level Parameters reverse: Displays log entries chronologically, with the most recent entry at the top. Without this keyword, the command displays log entries chronologically, with the oldest entry at the top. level severity: Displays log information of the specified level in the range of 0 to 7. Table 45 Severity description Corresponding Severity...
Page 215: Display Logbuffer Summary
Actual buffer size : 512 Channel number : 4 , Channel name : logbuffer Dropped messages : 0 Overwritten messages : 718 Current messages : 512 %Jun 17 15:57:09:578 2006 Sysname IC/7/SYS_RESTART: System restarted – … Table 46 Command output Field Description Logging buffer configuration and contents...
Page 216: Display Logfile Buffer
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines The following matrix shows the option and router compatibility: SR6604-X/SR6608-X Option SR6602...
Page 217: Display Logfile Summary
Syntax display logfile buffer [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Page 218: Display Trapbuffer
Examples # Display the log file configuration. <Sysname> display logfile summary Log file is enabled. Channel number : 9 Log file size quota : 10 MB Log file directory : flash:/logfile Writing frequency : 24 hour 0 min 10 sec Table 48 Command output Field Description...
Page 219: Enable Log Updown
Allowed max buffer size : 1024 Actual buffer size : 256 Channel number : 3 , channel name : trapbuffer Dropped messages : 0 Overwritten messages : 0 Current messages : 9 #Aug 7 08:03:27:421 2009 Sysname IFNET/4/INTERFACE UPDOWN: Trap 1.3.6.1.6.3.1.1.5.4<linkUp>: Interface 983041 is Up, ifAdminStatus is 1, ifOperStatus is 1 #Aug 7 08:03:27:439 2009 Sysname IFNET/4/INTERFACE UPDOWN:...
Page 220: Info-Center Channel Name
Use undo enable log updown to disable a port from generating link up/down logs when the port state changes. Syntax enable log updown undo enable log updown Default All the ports are allowed to generate port link up/down logs when the port state changes. Views Interface view Default command level...
Page 221: Info-Center Console Channel
info-center console channel Use info-center console channel to specify the console output channel. The system uses this channel to output information to the console. Use undo info-center console channel to restore the default console output channel. Syntax info-center console channel { channel-number | channel-name } undo info-center console channel Default The console output channel is channel 0.
Page 222: Info-Center Format Unicom
Default command level 2: System level Usage guidelines System information can be sent to a log host in H3C or UNICOM format. For more information, see Network Management and Monitoring Configuration Guide. Examples # Set the UNICOM format for system information sent to a log host.
Page 223: Info-Center Logfile Enable
Views System view Default command level 2: System level Parameters channel-number: Specifies a channel by its number in the range of 0 to 9. channel-name: Specifies a channel by its name, a default name or a self-defined name. For information about configuring a channel name, see info-center channel name.
Page 224: Info-Center Logfile Overwrite-Protection
Syntax info-center logfile frequency freq-sec undo info-center logfile frequency Default The default saving interval is 60 seconds. Views System view Default command level 2: System level Parameters freq-sec: Specifies the saving interval in the range of 1 to 86400 seconds. Examples # Configure the interval for saving system information to the log file as 60000 seconds.
Page 225: Info-Center Logfile Size-Quota
<Sysname> system-view [Sysname] info-center logfile overwrite-protection info-center logfile size-quota Use info-center logfile size-quota to set the maximum storage space reserved for a log file. Use undo info-center logfile size-quota to restore the default maximum storage space reserved for a log file.
Page 226: Info-Center Loghost
The configuration made by this command cannot survive a system restart or an active/standby switchover. Examples # Create a directory with the name test under root directory cfa0. <Sysname> mkdir test %Created dir cfa0:/test. # Set the directory to save the log file to cfa0:/test. <Sysname>...
Page 227: Info-Center Loghost Source
Usage guidelines If you configure this command without specifying a channel, the system specifies channel 2 (loghost) by default. The info-center loghost command takes effect only after the information center has been enabled with the info-center enable command. Enter a correct log host IP address. The system prompts an invalid address if the loopback address 127.0.0.1 is entered.
Page 228: Info-Center Monitor Channel
The info-center loghost source command takes effect only when the information center has been enabled with the info-center enable command. The IP address of the specified egress interface must have been configured. Otherwise, although the info-center loghost source command can be configured successfully, the log host cannot receive any log information.
Page 229: Info-Center Snmp Channel
Examples # Output system information to the monitor through channel 0. <Sysname> system-view [Sysname] info-center monitor channel 0 info-center snmp channel Use info-center snmp channel to configure the SNMP output channel. The system uses this channel to output information to the SNMP module. Use undo info-center snmp channel to restore the default SNMP output channel.
Page 230 Views System view Default command level 2: System level Parameters module-name: Specifies a module. For instance, to output ARP information, specify this argument as ARP. You can use the info-center source ? command to view the modules supported by the device. default: Specifies all the modules, which can be displayed by using the info-center source ? command.
Page 231: Info-Center Synchronous
Table 50 Default output rules Trap Debug Output Source destinatio Enabled/ Enabled/ Enabled/ modules Severity Severity Severity disabled disabled disabled Informatio Console supported Enabled Enabled Debug Enabled Debug modules Monitor Informatio supported Enabled Enabled Debug Enabled Debug terminal modules Informatio supported Log host Enabled...
Page 232: Info-Center Syslog Channel
Default command level 2: System level Usage guidelines If system information is output before you input information at a command line prompt, the system does not display the command line prompt after the system information output. If system information is output when you are inputting some interactive information (non Y/N confirmation information), the system displays your input in a new line after the system information output.
Page 233: Info-Center Timestamp
Default The default Web output channel is channel 6. Views System view Default command level 2: System level Parameters channel-number: Specifies a channel by its number in the range of 0 to 9. channel-name: Specifies a channel by its name, a default name or a self-defined name. For information about configuring a channel name, see info-center channel name.
Page 234: Info-Center Timestamp Loghost
dd: Date, starting with a space if it is less than 10, for example " 7". • • hh:mm:ss:sss: Local time, with hh ranging from 00 to 23, mm and ss ranging from 00 to 59, and sss ranging from 0 to 999. yyyy: Year.
Page 235: Info-Center Trapbuffer
Default command level 2: System level Parameters date: Sets the timestamp format as "Mmm dd hh:mm:ss:ms yyyy", such as Dec 8 10:12:21:708 2007. The actual format depends on the log host. iso: Sets the ISO 8601 timestamp format. For example, 2009-09-21T15:32:55. no-year-date: Sets the timestamp format as the current system date and time without year.
Page 236: Logfile Save
Examples # Output system information to the trap buffer through the default channel, and set the trap buffer size to <Sysname> system-view [Sysname] info-center trapbuffer size 30 logfile save Use logfile save to manually save logs in the log file buffer into the log file. Syntax logfile save Default...
Page 237: Terminal Debugging
Syntax reset trapbuffer Views User view Default command level 3: Manage level Examples # Clear the trap buffer. <Sysname> reset trapbuffer terminal debugging Use terminal debugging to enable the display of debug information on the current terminal. Use undo terminal debugging to disable the display of debug information on the current terminal. Syntax terminal debugging undo terminal debugging...
Page 238: Terminal Monitor
Syntax terminal logging undo terminal logging Default The display of log information on the current terminal is disabled. Views User view Default command level 1: Monitor level Usage guidelines To view log information, execute the terminal monitor and terminal logging commands, and then enable the information center (enabled by default).
Page 239: Terminal Trapping
Examples # Enable the monitoring of system information on the current terminal. <Sysname> terminal monitor Info: Current terminal monitor is on. terminal trapping Use terminal trapping to enable the display of trap information on the current terminal. Use undo terminal trapping to disable the display of trap information on the current terminal. Syntax terminal trapping undo terminal trapping...
Page 240: Flow Logging Configuration Commands
Flow logging configuration commands display userlog export Use display userlog export to view the configuration and statistics for flow logs exported to the log server. Syntax display userlog export slot slot-number [ | { begin | exclude | include } regular-expression ] Views Any view Default command level...
Page 241: Reset Userlog Flow Export
Address of log server : 2.2.4.3 (port: 2000) Total logs/UDP packets exported : 0/0 Logs in buffer Table 51 Command output Field Description flow Configuration and statistics about flow logs. Flow logs are not sent to the log server. It may be because exporting flow logs to the log server is not No userlog export is enabled configured, or flow logs are sent to the information...
Page 242: Reset Userlog Flow Logbuffer
SR6604-X/SR6608-X Option SR6602 SR6602-X SR6604/SR6608/SR6616 /SR6616-X slot slot-number Examples On the SR6602 router: # Clear flow logging statistics. <Sysname> reset userlog flow export On the SR6602-X/SR6604/SR6608/SR6616/SR6604-X/SR6608-X/SR6616-X router: # Clear the flow logging statistics for the card in slot 2. <Sysname> reset userlog flow export slot 2 Related commands display userlog export reset userlog flow logbuffer...
Page 243: Userlog Flow Export Host
On the SR6602-X/SR6604/SR6608/SR6616/SR6604-X/SR6608-X/SR6616-X router: # Clear flow logs in cache of the card in slot 2. <Sysname> reset userlog flow logbuffer slot 2 # Clear flow logs in the cache of all cards. <Sysname> reset userlog flow logbuffer userlog flow export host Use the userlog flow export host command to configure the IPv4 address and UDP port number of the log server.
Page 244: Userlog Flow Export Host Ipv6
server, the IPv4 flow logging server, and the IPv6 flow logging server. If you have already specified two servers for an interface card, you must delete one to specify a new one. If you specify a new server that has the same IP address as but has other information different from the current server, the new configuration overwrites the previous one.
Page 245: Userlog Flow Export Source-Ip
udp-port: Specifies the UDP port number of the flow logging server, in the range of 0 to 65535. slot slot-number: Specifies a card by its slot number. Usage guidelines To output flow logs in UDP packets, you must specify a flow logging server. Otherwise the flow logs cannot be exported.
Page 246: Userlog Flow Export Timestamps Localtime
Use undo userlog flow export source-ip to restore the default. Syntax userlog flow export source-ip ip-address undo userlog flow export source-ip Default The source IP address of flow logging packets is the IP address of the egress interface. Views System view Default command level 2: System level Parameters...
Page 247: Userlog Flow Export Version
[Sysname] userlog flow export timestamps localtime Related commands userlog flow syslog userlog flow export version Use userlog flow export version to configure the flow logging version. Use undo userlog flow export version to restore the default. Syntax userlog flow export version version-number undo userlog flow export version Default Flow logging version is 1.0.
Page 248 Usage guidelines The two export approaches of flow logs are mutually exclusive. If you configure two approaches at the same time, the system automatically exports the flow logs to the information center. Exporting flow logs to the information center occupies device storage space. Use this export approach only if there are a small amount of logs.
Page 249: Sflow Configuration Commands
sFlow configuration commands The sFlow configuration commands are available on only SAP interface modules that are operating in bridge mode. display sflow Use display sflow to display the sFlow configuration and operation information. Syntax display sflow [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level...
Page 250: Sflow Agent
6343 1400 sFlow Port Information: Interface CID Interval(s) FID MaxHLen Rate Mode Status GE4/0/1 1000 Random Active GE4/0/2 1000 Random Active Table 52 Command output Field Description sFlow has the following versions: • sFlow Version 4—sFlow version 4. • 5—sFlow version 5. sFlow Global Information Global sFlow information.
Page 251: Sflow Collector
Specifies an IPv6 address for the sFlow agent. Usage guidelines H3C recommends that you manually configure an IP address for the sFlow agent. Only one IP address can be specified for the sFlow agent on the device. Examples # Specify IP address 10.10.10.1 for the sFlow agent.
Page 252: Sflow Counter Interval
Parameters collector-id: Specifies an ID for the sFlow collector, in the range of 1 to 10. ip ip-address: Specifies an IPv4 address for the sFlow collector. ipv6 ipv6-address: Specifies an IPv6 address for the sFlow collector. description text: Configures a description for the sFlow collector. The default description is "CLI Collector."...
Page 253: Sflow Counter Collector
sflow counter collector Use sflow counter collector to specify an sFlow collector for counter sampling. Use undo sflow counter collector to remove the sFlow collector for counter sampling. Syntax sflow counter collector collector-id undo sflow counter collector Default No sFlow collector is specified for counter sampling. Views Interface view Default command level...
Page 254: Sflow Flow Max-Header
Use undo sflow flow max-header to restore the default. Syntax sflow flow max-header length undo sflow flow max-header Default Flow sampling can copy up to 128 bytes of a packet. H3C recommends that you use the default value. Views Interface view Default command level 2: System level Parameters Length: Specifies the maximum number of bytes that can be copied, in the range of 18 to 512.
Page 255: Sflow Sampling-Rate
random: Specifies the random sampling mode. For example, if the packet sampling rate is set to 4000, the device may sample one packet from the first 4000 packets, two from the next 4000 packets, and none from the third 4000 packets, randomly. But generally the device samples one packet from 4000 packets on the average.
Page 256: Sflow Source
Related commands sflow sampling-mode sflow source Use sflow source to specify the source IP address of sFlow packets. Use undo sflow source to remove the specified source IP address. Syntax sflow source { ip ip-address | ipv6 ipv6-address } * undo sflow source { ip | ipv6 } * Default No source IP address is specified for sFlow packets.
Page 257: Gateway Mode Configuration Commands
Gateway mode configuration commands display gateway-mode forwarding-cache Use display gateway-mode forwarding-cache to display gateway-mode forwarding entries. Syntax display gateway-mode forwarding-cache slot slot-number [ source-ip ip-address [ mask-length ] | source-port port-number ] | destination-ip ip-address [ mask-length ] | destination-port port-number ] | protocol { tcp | udp | protocol-type } ]* display gateway-mode forwarding-cache summary slot slot-number Views...
Page 258 60.0.0.2/1024 UDP XGE0/0/0 XGE0/0/1 3732 217348 ================================================================================ Total found: 2 items # Display the gateway-mode forwarding entries by source IP address 222.222.222.2/24. <H3C> display gateway-mode forwarding-cache source-ip 222.222.222.2 24 Gateway-mode Forwarding-cache: ================================================================================ Source IP/Port Dest IP/Port Pro In_If Out_If Bytes 222.222.222.91/1031...
Page 259: Gateway-Mode
The gateway mode is designed for gateway applications and it does not support all the functions of the normal mode. To get best performance, upgrade the router memory to 2 GB before enabling the gateway mode. Examples # Enabled gateway mode. [H3C] system-view [H3C] gateway-mode Info: Please reboot the device to make the configuration take effect.
Page 260: Reset Gateway-Mode Forwarding-Cache Statistics
• slot-number No when using the MCP Examples # Display the gateway-mode forwarding entries of the router by destination IP address 202.202.202.2/24. <H3C> display gateway-mode forwarding-cache destination-ip 202.202.202.2 24 Gateway-mode Forwarding-cache: ============================================================================ Source IP/Port Dest IP/Port Pro In_If Out_If Bytes 222.222.222.91/1031...
Page 261 <H3C>display gateway-mode forwarding-cache destination-ip 202.202.202.2 24 Gateway-mode Forwarding-cache: ========================================================================== Source IP/Port Dest IP/Port Pro In_If Out_If Bytes 222.222.222.91/1031 202.202.202.2/1025 UDP GE0/0/1 GE0/0/2 222.222.223.100/1094 202.202.202.2/1025 UDP GE0/0/1 GE0/0/2 222.222.225.9/1111 202.202.202.2/1025 UDP GE0/0/1 GE0/0/2 ========================================================================== Total found: 3 items...
Page 262 Index A C D E F G H I L M N O P R S T U V display nqa server status,65 display nqa statistics,25 advantage-factor,13 display ntp-service sessions,69 display ntp-service status,73 display ntp-service trace,74 codec-type,13 display rmon alarm,132 display rmon event,133 data-fill,14...
Page 263 history-record keep-time,32 ipv6 netstream export source,196 history-record number,33 ipv6 netstream export v9-template refresh-rate packet,197 http-version,34 ipv6 netstream export v9-template refresh-rate time,198 info-center channel name,212 ipv6 netstream export version 9,199 info-center console channel,213 ipv6 netstream max-entry,199 info-center enable,213 ipv6 netstream timeout active,200 info-center format unicom,214...
Page 264 ntp-service unicast-peer,84 sampler,151 ntp-service unicast-server,85 sflow agent,242 sflow collector,243 sflow counter collector,245 operation (FTP operation view),38 sflow counter interval,244 operation (HTTP operation view),39 sflow flow collector,245 operation interface,39 sflow flow max-header,246 sflow sampling-mode,246 sflow sampling-rate,247 password (FTP operation view),40 sflow source,248 ping,1 snmp-agent,109...
Page 265 url,63 userlog flow syslog,239 userlog flow export host,235 username (FTP operation view),64 userlog flow export host ipv6,236 userlog flow export source-ip,237 vpn-instance (ICMP echo operation view),64 userlog flow export timestamps localtime,238 userlog flow export version,239...

This manual is also suitable for:

Sr6600-x

H3C SR6600 Command Reference Manual

Quick Links

Need help?

Questions and answers

Related Manuals for H3C SR6600

Summary of Contents for H3C SR6600