H3C S12500 Series Configuration Manual
H3C S12500 Series Configuration Manual

H3C S12500 Series Configuration Manual

Routing switches
Hide thumbs Also See for S12500 Series:

Advertisement

Quick Links

H3C S12500 Series Routing Switches
OAA Configuration Guide
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: S12500-CMW520-R1828P04
Document version: 6W182-20140823

Advertisement

Table of Contents
loading

Summary of Contents for H3C S12500 Series

  • Page 1 H3C S12500 Series Routing Switches OAA Configuration Guide Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Software version: S12500-CMW520-R1828P04 Document version: 6W182-20140823...
  • Page 2 Copyright © 2013-2014, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd.
  • Page 3 The H3C S12500 documentation set includes 14 configuration guides, which describe the software features for the H3C S12500 Series Routing Switches and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply software features to different network scenarios.
  • Page 4 Convention Description Asterisk marked square brackets enclose optional syntax choices separated by vertical [ x | y | ... ] * bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can &<1-n>...
  • Page 5 Guide Adjustable Slider Rail Guides you through installing adjustable slider rails Installation Guide to a rack. Describes transceiver modules available for the H3C H3C Transceiver Modules high-end network products, their external views, and User Guide specifications. Describe software features and configuration Configuration guides procedures.
  • Page 6 Solutions]—Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download]—Provides the documentation released with the software version. Technical support service@h3c.com http://www.h3c.com Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
  • Page 7: Table Of Contents

    Contents Configuring the OAP card ·········································································································································· 1   Logging in to the operating system of an OAP card ····································································································· 1   Logging in through the console port of an OAP card ·························································································· 1   Telnetting to an OAP card through the network management port ···································································· 2  ...
  • Page 8: Configuring The Oap Card

    As an open software and hardware system, the Open Application Architecture (OAA) of Hangzhou H3C Technologies Co., Ltd. (referred to as H3C herein after) provides a set of complete standard software and hardware interfaces based on H3C devices. This enables third party vendors to develop products with special functions.
  • Page 9: Telnetting To An Oap Card Through The Network Management Port

    Start the PC and run the terminal emulation program such as the HyperTerminal. Select the connection mode COM and set the terminal parameters as follows: Bits per second—9600 Data bits—8 Parity—none Stop bits—1 Flow control—none After the configuration, you can log in to the operating system of the OAP card through the terminal emulation program on the PC.
  • Page 10: Redirecting To An Oap Card From The Switch

    Using a switch as the SSH client Assign an IP address to the network management port of the OAP card. Enable the SSH server on the OAP card with the ssh server enable command. Connect one end of the cable to the Ethernet port of the switch, and the other end to the network management port of the OAP card.
  • Page 11: Assigning A Management Ip Address To An Oap Card

    IMPORTANT: Before the above configuration, H3C recommends that you configure the same IP address at the OAP card side; otherwise, the NMS cannot access the OAP card by using the configured management IP address Resetting the system of an OAP card...
  • Page 12 IMPORTANT: Resetting the OAP card might cause data loss and service interruption. Before resetting the OAP card, you must save the configurations of the OAP card operating system and shut it down to avoid service interruption and hardware data loss.
  • Page 13: Configuring Acfp

    Configuring ACFP This chapter describes how to configure the Application Control Forwarding Protocol (ACFP). Only the LST1IPS1A1, LST1IPS2A1, and LST1ACG1A1 line cards support ACFP. Overview ACFP is designed based on the OAA architecture and operates in the server/client model (see Figure In this model, an OAP module (the independent service component) operating as the ACFP client to provide value-added services such as traffic monitoring, control, and process for the ACFP server (the...
  • Page 14: Acfp Information

    Restricting the rate of the traffic on the ACFP server. • • Carrying the context ID in a packet to enable the ACFP server and ACFP client to communicate the packet context with each other. The detailed procedure is as follows: The ACFP server maintains a context table that can be queried with context ID.
  • Page 15 ACFP client identifier. It can be assigned by the ACFP server through a collaboration protocol or • specified by the network administrator to make sure that each ACFP client has a unique client ID on the ACFP server. • Description—ACFP client description information. Hw-Info—ACFP client hardware type, version number, and so on.
  • Page 16: Acfp Usage Guidelines

    ClientID—ACFP client identifier. • • Policy index Rule index—rule identifier. • Status—It indicates whether the rule is applied successfully. • • Action—It can be mirror, redirect, deny, permit, or rate. Match all packets—It indicates whether to match all the packets. If yes, the following matching •...
  • Page 17: Acfp Configuration Task List

    ACFP does not support policy-based routing services or NetStream services. • • The handling of the packets redirected by ACFP is mutually exclusive with ordinary ACL rules. No QoS processing is performed on the packets returned after they are redirected to the ACFP client. With ACFP, a stream cannot be mirrored or redirected to multiple ACFP clients.
  • Page 18: Enabling The Acfp Trap Function

    An internal interface is a virtual interface that is used for the data communication between the front and rear cards, as shown in Figure Figure 2 Schematic diagram for the internal interface By default, the internal interfaces of the OAP card are down. Before configuring the internal interfaces, use the undo shutdown command to bring them up.
  • Page 19: Displaying And Maintaining Acfp

    Table 2 ACFP trap message level Trap message Level Context ID type changed notifications ACFP client registration notifications ACFP client deregistration notifications ACSEI detects that ACFP client had no response warnings ACFP server does not support the working mode of the ACFP client errors Expiration period of ACFP collaboration policy changed notifications...
  • Page 20: Acfp Configuration Example

    Task Command Remarks display acfp rule-info { global | in-interface [ interface-type interface-number ] | out-interface Display ACFP rule configuration [ interface-type interface-number ] | policy Available in any view. information. [ client-id policy-index ] } [ | { begin | exclude | include } regular-expression ] Display the configuration display snmp-agent trap-list [ | { begin | exclude...
  • Page 21 [Device-Vlan-interface101] undo shutdown [Device-Vlan-interface101] ip address 192.168.2.254 24 Configure line card LST1ACG1A1: # Log in to the operating system on the LST1ACG1A1 card through the console port on the card, and enter password H3C. Password:H3C # Enter system view. <ACG> system-view # Assign an IP address to the network management port on the card to make the network management ports of the PC and the card reachable to each other.
  • Page 22 Figure 4 Web login interface # Configure the ACFP client: Select System Management > Network Management > ACFP Client Configuration from the navigation tree. Figure 5 Configuring the ACFP client Select Enable ACFP Client. Select the SNMP version SNMPv3. Enter the server security username v3user_no. Enter the server IP address 40.94.1.1.
  • Page 23 Figure 6 Adding security zone inbound Enter the name inbound. Select GigabitEthernet5/0/23 from the list, and click Add to add it into the Interface box. Enter 100 in the field, and click Add to add it into the VLAN ID box. Click Apply.
  • Page 24 Select System Management > Network Management > Segment Configuration from the navigation tree. Figure 8 Adding segment 10 Select 10 from the Segment No. list. Select inbound from the Internal Zone list. Select outbound from the External Zone list. Click Apply. # Configure the collaboration policy and rules: Select System Management >...
  • Page 25 Select the Specified Packets option. Select All from the Protocol list. Enter the source IP address 192.168.1.1. Enter the source mask 32. Click Apply. # Create rule 2: On the Configure Rule tab as shown in Figure 9, click Add. Figure 11 Creating rule 2 Select the Specified Packets option.
  • Page 26 Figure 13 Policy application range Click to bring up the page for adding an IP address group. Figure 14 Adding IP address group 1 Enter the name 192.168.1.1/32, select the protocol IPv4, enter the IPv4 address 192.168.1.1/32, and click <<Add to add the address to the IP address box. Click Apply.
  • Page 27 # Configure ACFP filtering rule 2: Select Bandwidth Management > Bandwidth Policies from the navigation tree, and click Add to enter the page for creating a policy application. Figure 16 Creating a policy application Enter the name user2, select the working mode Group mode, select Block from the Action Set list, and click Add to add a new entry in the policy application list.
  • Page 28 Enter the name 192.168.1.2/32, select IPv4 as the protocol, enter the IPv4 address 192.168.1.2/32, click <<Add to add the address to the IP address box, and click Apply. In the policy application range page, click to bring up the advanced configuration page. Figure 19 Advanced configuration Select 10 from the Segment list, select the Internal Zone option, select IP address 192.168.1.2/32 from the Internal Zone IP Addresses area, and click Apply.
  • Page 29: Configuring Acsei

    Configuring ACSEI This chapter describes how to configure private protocol ACFP Client and Server Exchange Information (ACSEI). Overview ACSEI is a private protocol for exchanging information between ACFP clients and ACFP server. It supports ACFP collaboration, ensuring valid information interaction between the ACFP clients and the ACFP server, so that the ACFP clients and server can cooperate to run a service.
  • Page 30: Acsei Startup And Running

    An ACSEI client starts the registration timer and the monitoring timer: • Registration timer—Used to periodically trigger the ACSEI client to multicast registration requests (with the multicast MAC address being 010F-E200-0021). You cannot set this timer. Monitoring timer—Used to periodically trigger the ACSEI client to send monitoring requests to the •...
  • Page 31: Configuring The Monitoring Timer

    Configuring the monitoring timer Step Command Remarks Enter system view. system-view Enable the ACSEI server acsei server enable function. Enter ACSEI server view. acsei server Configure the monitoring Optional. timer for ACSEI server to acsei timer monitor seconds Five seconds by default. monitor ACSEI client.
  • Page 32: Index

    Index A C D E L O R Displaying and maintaining ACFP,12 ACFP configuration example,13 ACFP configuration task list,10 Enabling the ACFP server,10 Assigning a management IP address to an OAP card,4 Enabling the ACFP trap function,1 1 Configuring the ACSEI server,23 Logging in to the operating system of an OAP card,1...

Table of Contents