2014年3月20日星期四

Configuring the GE/FE Optical/Electrical Interface

Generally, the ME60 sets an Ethernet interface to an optical or electrical interface based on the interface module's type. If the  Huawei ME60  cannot identify an interface module, you need to manually set the interface to the optical or electrical mode.

Run:
system-view
The system view is displayed.
Run:
interface { ethernet | gigabitethernet } interface-number
The Ethernet interface view is displayed.
Run:
port-type { copper | fiber-100 | fiber-1000 }
The interface type is set.

NOTE:
When an SFP module is being replaced, the configurations such as the loopback test, interface speed, auto-negotiation mode, and duplex mode on the interface are all restored to default ones. You need to reconfigure them on the interface.
After the port-type command is run, the configurations such as the loopback test, interface speed, auto-negotiation mode, and duplex mode on the interface are all restored to default ones. You need to reconfigure them on the interface.
The parameter copper can be configured in the port-type command only when an optical/electrical SFP module is installed.

fiber-100 cannot be set for interfaces on the 24-Port 1000Base-X-SFP Flexible Card E(BP51-E) subcard.

2014年3月18日星期二

Confirming the GTL License

The file extension of a GTL license file is .dat, which is different from the file extension of a software license file.
NE40E-X3  &NE40E-X8  600R003C00 supports the GTL license. For details on the features that can be controlled by the GTL license, see "NE40E&80E V600R003C00 License Policy Guide." Before the upgrade, confirm whether a new GTL license is required for both the master MPU and slave MPU. If a new GTL license is required but not obtained, services controlled by the GTL license cannot be used.
After obtaining the GTL license, check whether the electronic serial numbers (ESNs) of MPUs are the same as those in the GTL license file.
<HUAWEI> display esn
ESN of master:030MDB108B000014
ESN of slave:030MDB108B000013
Compare the output of the above command with the ESN field in the GTL license file.

You can open a GTL license file with the notepad application to check whether the ESNs in the GTL license file are the same as those of the MPUs.
To use the license-controlled features in V600R003C00, you need to apply for the corresponding GTL license from Huawei's GTL platform before the upgrade.

After the MPU of the device is replaced, the original GTL license will support the new MPU for 60 days. After this period, if use of the new MPU continues, a new GTL license from Huawei is required.

2014年3月10日星期一

Configuration Example of the RADIUS Authentication

The MA5616  is interconnected with the RADIUS server through the RADIUS protocol to implement authentication.

Configure the authentication scheme.
Configure authentication scheme newscheme (users are authenticated through RADIUS).
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme newscheme
huawei(config-aaa-authen-newscheme)#authentication-mode radius
huawei(config-aaa-authen-newscheme)#quit
huawei(config-aaa)#quit
Configure the RADIUS protocol.
Create RADIUS server template template1. RADIUS server 10.10.66.66 functions as the primary authentication server, and RADIUS server 10.10.66.67 functions as the secondary authentication.
huawei(config)#radius-server template template1
 Note: Create a new server template
huawei(config-radius-template1)#radius-server authentication 10.10.66.66 1812
huawei(config-radius-template1)#radius-server authentication 10.10.66.67 1812 secondary
huawei(config-radius-template1)#quit
Create a domain.
Create domain isp1.
huawei(config)#aaa
huawei(config-aaa)#domain isp1
  Info: Create a new domain
Reference the authentication scheme.
You can reference an authentication scheme in a domain only after the authentication scheme is created.
huawei(config-aaa-domain-isp1)#authentication-scheme newscheme
Reference the RADIUS server template.
You can reference a RADIUS server template in a domain only after the RADIUS server template is created.
huawei(config-aaa-domain-isp1)#radius-server template1
huawei(config-aaa-domain-isp1)#quit

User1 in isp1 can be authenticated and can log in to the MA5620

2014年3月6日星期四

Configuring the NE80E with 5000 W power consumption to Power on LPUF-40s/LPUI-40s

How to configure the NE40E-X3   with 5000 W power consumption to power on LPUF-40s/LPUI-40s.

Run:
system-view
The system view is displayed.
Run:
set board-power-on lower-performance-fan enable
The NE80E with 5000 W power consumption is configured to power on LPUF-40s/LPUI-40s.
Run:
system-view
The system view is displayed.
Run:
set power input-power power-value
The input power of the power module is configured.

NOTE:
This command can only be used on the NE80E with 5000 W power consumption, and does not need to be used on the NE40E-X8   with 8000 W power consumption.

2014年2月28日星期五

Configuration Example of the RADIUS Authentication

The MA5600  is interconnected with the RADIUS server through the RADIUS protocol to implement authentication.

Configure the authentication scheme.
Configure authentication scheme newscheme (users are authenticated through RADIUS).
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme newscheme
huawei(config-aaa-authen-newscheme)#authentication-mode radius
huawei(config-aaa-authen-newscheme)#quit
huawei(config-aaa)#quit
Configure the RADIUS protocol.
Create RADIUS server template template1. RADIUS server 10.10.66.66 functions as the primary authentication server, and RADIUS server 10.10.66.67 functions as the secondary authentication.
huawei(config)#radius-server template template1
 Note: Create a new server template
huawei(config-radius-template1)#radius-server authentication 10.10.66.66 1812
huawei(config-radius-template1)#radius-server authentication 10.10.66.67 1812 secondary
huawei(config-radius-template1)#quit
Create a domain.
Create domain isp1.
huawei(config)#aaa
huawei(config-aaa)#domain isp1
  Info: Create a new domain
Reference the authentication scheme.
You can reference an authentication scheme in a domain only after the authentication scheme is created.
huawei(config-aaa-domain-isp1)#authentication-scheme newscheme
Reference the RADIUS server template.
You can reference a RADIUS server template in a domain only after the RADIUS server template is created.
huawei(config-aaa-domain-isp1)#radius-server template1
huawei(config-aaa-domain-isp1)#quit

User1 in isp1 can be authenticated and can log in to the MA5600.
Configuration Script

aaa
authentication-scheme newscheme
authentication-mode radius
quit
quit
radius-server template radtest
radius-server authentication 10.10.66.66 1812
radius-server authentication 10.10.66.67 1812 secondary
quit
aaa
domain isp1
authentication  MA5600T -scheme newscheme
radius-server radtest
quit

2014年2月26日星期三

Configuring a Load Balancing Mode

Run:
system-view
The system view is displayed.
Run:
interface eth-trunk trunk-id
The Eth-Trunk interface view is displayed.
Run:
load-balance { dst-ip | dst-mac | src-ip | src-mac | src-dst-ip | src-dst-mac }
The load balancing mode of the Eth-Trunk is set.

NOTE:
The S2350, S5328C-SI    and S5300LI use the parameter src-dst-ip in the HASH algorithm for load balance regardless of whether you configure this parameter.
On the S2350, S5300LI, and S5300SI, when the load balancing mode of an Eth-Trunk is modified, the modification takes effect on all Eth-Trunks. The load balancing mode will be set to the default mode when a new Eth-Trunk is created.

Run:
system-view
The system view is displayed.
Run:
load-balance-profile profile-name
A load balancing profile is created and its view is displayed. Only one load balancing profile can be created.
Run:
l2 field [ dmac | l2-protocol | smac | sport | vlan ] *
The load balancing mode of Layer 2 packets is set.
Run:
ipv4 field [ dip | l4-dport | l4-sport | protocol | sip | sport | vlan ] *
The load balancing mode of IPv4 packets is set.
Run:
ipv6 field [ dip | l4-dport | l4-sport | protocol | sip | sport | vlan ] *
The load balancing mode of IPv6 packets is set.
Run:
mpls field [ 2nd-label | dip | sip | sport | top-label | vlan ] *
The load balancing mode of MPLS packets is set.
Run:
quit
Return to the system view.
Run:
interface eth-trunk trunk-id
The Eth-Trunk interface view is displayed.
Run:
load-balance enhanced profile profile-name
The load balancing profile is applied.


NOTE:
The preceding load balancing modes apply only to known unicast traffic. To configure the load balancing mode for unknown unicast traffic, run the unknown-unicast load-balance { dmac | smac | smacxordmac | enhanced }command in the system view. Only the S5300EI, LS-S5328C-EI-24S   , and S5300HI support load balancing configuration for unknown unicast traffic.

2014年2月24日星期一

Configuring the Broadcast Mode NTP

MA5600    uses the local clock as the master NTP clock on stratum 2 and works in the broadcast mode NTP, sends broadcast clock synchronization packets periodically through IP address 10.10.10.10/24 of the L3 interface of VLAN 2; MA5600_C functions as the NTP client, listens to the broadcast packets sent from the server through IP address 10.10.10.20/24 of the L3 interface of VLAN 2, and synchronizes with the clock on the broadcast server. To perform these configurations, do as follows:
On MA5600_S:
huawei(config)#ntp-service refclock-master 2
huawei(config)#vlan 2 standard
huawei(config)#port vlan 2 0/7 0
huawei(config)#interface vlanif 2
huawei(config-if-vlanif2)#ip address 10.10.10.10 24
huawei(config-if-vlanif2)#ntp-service broadcast-server
huawei(config-if-vlanif2)#quit
On MA5600_C:
huawei(config)#vlan 2 standard
huawei(config)#port vlan 2 0/7 0
huawei(config)#interface vlanif 2
huawei(config-if-vlanif2)#ip address 10.10.10.20 24
huawei(config-if-vlanif2)#ntp-service broadcast-client
huawei(config-if  MA5600T -vlanif2)#quit

2014年2月19日星期三

Configure the S5300 as an FTP server.

No FTP server software is installed on the   LS-S5352C-EI  ; therefore, the customer needs to buy FTP server software and install it.

Configure the S5300 as an FTP server.

Start the FTP server on the S5300, and set the FTP user name to ftpuser and password to ftppwd.

<Quidway> system-view

[Quidway] ftp server enable

[Quidway] aaa

[Quidway-aaa] local-user ftpuser password cipher ftppwd

[Quidway-aaa] local-user ftpuser service-type ftp

[Quidway-aaa] local-user ftpuser ftp-directory flash:

[Quidway-aaa] return

Set an IP address for the S5300.

An idle service interface is recommended. This example assumes that GigabitEthernet0/0/1 is used and the IP address is 1.1.1.1/24.

<Quidway> system-view

 [Quidway]interface gigabitethernet0/0/1

[Quidway-GigabitEthernet0/0/1]port link-type access 

[Quidway-GigabitEthernet0/0/1]quit

[Quidway] vlan 10

[Quidway-vlan10] port gigabitethernet0/0/1    

[Quidway-vlan10] quit

[Quidway] interface vlanif 10

[Quidway-Vlanif10] ip address 1.1.1.1 24

[Quidway-Vlanif10] quit

[Quidway]

Log in to the FTP server (the S5300).

Store the file to be uploaded in the specified directory (for example, D:\>directory). Choose Start > Run. Enter cmd and press Enter. Enter FTP 1.1.1.1. Enter the user name at the user prompt and the password at the password prompt, and then press Enter. The following information is displayed:

D:\>ftp 1.1.1.1

Connected to 1.1.1.1.

220 FTP service ready.

User (1.1.1.1:(none)): ftpuser

331 Password required for 1.

Password:

S5328C-SI    User logged in.


ftp> 

2014年2月17日星期一

Configuring a GPON ONT

The MA5680T /MA5603T provides end users with services through the ONT. The MA5600T/MA5603T can manage the ONT and the ONT can work in the normal state only after the channel between the MA5600T/MA5603T and the ONT is available.

To add five ONTs in offline mode with password authentication mode (ONT passwords are 0100000001-0100000005), set the discovery mode of password authentication to always-on, and bind ONT capability profile 10, do as follows:

huawei(config)#interface gpon 0/2

huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000001 always-on profile-id 10 manage-mode omci

huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000002 always-on profile-id 10 manage-mode omci

huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000003 always-on profile-id 10 manage-mode omci

huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000004 always-on profile-id 10 manage-mode omci

huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000005 always-on profile-id 10 manage-mode omci

To add an ONT that is managed by the OLT through the OMCI protocol, confirm this ONT according to the SN 3230313185885B41 automatically reported by the system, and bind the ONT with capability profile 3 that match the ONT, do as follows:

huawei(config)#interface gpon 0/2

huawei(config-if-gpon-0/2)#port 0 ont-auto-find enable

huawei(config-if-gpon-0/2)#ont confirm 0 sn-auth 3230313185885B41 profile-id 3 manage-mode omci

To add an ONU that is managed as an independent NE and whose SN is known as 3230313185885641, bind the ONU with capability profile 4 that matches the ONU, configure the NMS parameters for the ONU, and set the management VLAN to 100, do as follows:

huawei(config)#snmp-profile add profile-id 1 v2c public private 10.10.5.53 161 huawei

huawei(config)#interface gpon 0/2

huawei(config-if-gpon-0/2)#ont add 0 2 sn-auth 3230313185885641 profile-id 4 manage-mode snmp

huawei(config-if-gpon-0/2)#ont ipconfig 0 2 static ip-address 10.20.20.20 mask 255.255.255.0 gateway 10.10.20.1 vlan 100 

huawei(config-if-gpon-0/2)#ont snmp-profile 0 2 profile-id 1


huawei(config-if-gpon-0/2)#ont snmp-route 0 2 ip-address 10.10.20.190 mask 255.255.255.0 next-hop 10.10.20.100

2014年1月2日星期四

Configuring the NTP Peer Mode

Configure the Huawei MA5680T   for clock synchronization in the NTP peer mode. In the peer mode, configure only the active peer, and the passive peer need not be configured. In the peer mode, the active peer and the passive peer can synchronize with each other. The peer with a higher clock stratum is synchronized by the peer with a lower clock stratum.

Run the ntp-service refclock-master command to configure the local clock as the master NTP clock, and specify the stratum of the master NTP clock.
Run the ntp-service unicast-peer command to configure the NTP peer mode, and specify the IP address of the remote server that functions as the local timer server and the interface for transmitting and receiving NTP packets.
 NOTE:
In this command, ip-address is a unicast address, which cannot be a broadcast address, a multicast address, or the IP address of a reference clock.
After the source interface of the NTP packets is specified by source-interface, the source IP address of the NTP packets is configured as the primary IP address of the specified interface.

One MA5616 functions as the NTP active peer (IP address of the L3 interface of VLAN 2: 10.10.10.10/24) and works on clock stratum 4, the other MA5616 (IP address: 10.10.10.20/24) functions as the NTP passive peer, the active peer sends a clock synchronization request packet through the VLAN L3 interface to the passive peer, the passive peer responds to the request packet, and the peer with a higher clock stratum is synchronized by the peer with a lower clock stratum. To perform these configurations, do as follows:
huawei(config)#ntp-service refclock-master 4
huawei(config)#ntp-service unicast-peer
huawei(config)#vlan 2 standard
huawei(config)#port vlan 2 0/0 1
huawei(config)#interface vlanif 2
huawei(config-if-vlanif2)#ip address 10.10.10.10 24

huawei(config  Huawei MA5683T  -if-vlanif2)#quit

2013年12月30日星期一

Configuring a Working Mode for an APS Group

A working mode can be configured for an APS group. The NE40E-X3  ME60    supports APS working modes, including automatic APS switching, and delayed switchback with the wait to restore (WTR) time configured. An APS working mode must be configured on a protect interface.

Run:
system-view
The system view is displayed.
Run:
interface interface-type interface-number
Or, run:
controller cpos cpos-number
The interface view is displayed.
Run:
aps mode { one2one bidirection | one-plus-one { bidirection | unidirection } }
A working mode is configured for the APS group. The configuration of an APS working mode takes effect after the shutdown and undo shutdown commands are run on the protect interface.
Run:
system-view
The system view is displayed.
Run:
interface interface-type interface-number
Or, run:
controller cpos cpos-number
The protect interface view of the APS group is displayed.
Run:
aps revert wtr-time
The WTR time is set for the APS group.

NOTE:
If two different switchback delays are set on two protect interfaces in APS groups on two ends of a link, the effective switchback delay depends on one of the following situations:
If one-plus-one unidirection is configured, the switckback delays of both protect interfaces take effect after the working interfaces recover.

If one2one bidirection or one-plus-one bidirection is configured, the switchback delay of the protect interface on the device with the working interface recovering later than the other working interface takes effect on both protect interfaces.

Configuring a VTY User Interface

Step 1 Configure LS-S5328C-EI-24S   the maximum number of concurrent VTY user interfaces.
<HUAWEI> system-view
[HUAWEI] user-interface maximum-vty 8
Step 2 Configure restrictions on call-in and call-out permissions on the VTY user interface.
[HUAWEI] acl 2000
[HUAWEI-acl-basic-2000] rule deny source 10.1.1.1 0
[HUAWEI-acl-basic-2000] rule permit source any
[HUAWEI-acl-basic-2000] quit
[HUAWEI] user-interface vty 0 7
[HUAWEI-ui-vty0-7] acl 2000 inbound
Step 3 Configure terminal attributes on the VTY user interface.
[HUAWEI-ui-vty0-7] shell
[HUAWEI-ui-vty0-7] idle-timeout 30
[HUAWEI-ui-vty0-7] screen-length 30
[HUAWEI-ui-vty0-7] history-command max-size 20
Step 4 Configure the user level on the VTY user interface.
[HUAWEI-ui-vty0-7] user privilege level 15
Step 5 Configure the authentication mode and password of the VTY user interface.
[HUAWEI-ui-vty0-7] authentication-mode password
[HUAWEI-ui-console0] set authentication password cipher huawei2012
[HUAWEI-ui-vty0-7] quit
After the VTY user interface is configured, users can log in to the device in the password
authentication mode using Telnet to maintain the device locally or remotely. For details on how
to log in to the device see Logging In to the Device Through Telnet.
Step 6 Verify the configuration.
# Run the quit command to disconnect the terminal from the device, connect the terminal to the
device using Telnet, and verify that the new password is valid.
# Use 10.1.1.1 to log in to the device using Telnet. The login fails.
# Run the user-interface vty 0 7 command to enter the VTY interface view, and run the display
this command to check the configurations on the VTY interface.
[HUAWEI] user-interface vty 0 7
[HUAWEI-ui-console0] display this
#
user-interface maximum-vty 8
user-interface vty 0 7
acl 2000 inbound
authentication-mode password
user privilege level 15
set authentication password cipher %%$%$RdF~Z+6N|0d^a3%v5`W~3.%ymjpAD#$u
[T'e#e32hd8G~4+&%$%$
history-command max-size 20
idle-timeout 30 0
screen-length LS-S5352C-EI  30
#


2013年12月26日星期四

Configuring the Association Between BFD Status and Sub-Interface Status

Perform the following procedure on the ME60/NE40E-X3  that needs to rapidly detect the link fault:
Run:
system-view
The system view is displayed.

Run:
bfd cfg-name
The BFD session view is displayed.

Run:
process-interface-status sub-if
The association between the BFD status and the sub-interface status is configured.

Run:
commit
The configuration is committed.

NOTE:
When the process-interface-status command and the commit command are run in succession, the BFD session may not be set up or the BFD session does not go Up through negotiation. Therefore, the BFD session does not notify the interface of the BFD status immediately, avoiding that the BFD session notifies the interface of incorrect status information that results in incorrect interface status change. After the configuration is committed, the BFD sessions can notify the interface of the BFD status change. In this manner, the BFD session status is associated with the interface status.
If the networking requires that the BFD status must be synchronized with the interface status, you can run the shutdown and undo shudown commands to change the status of the BFD session. When the undo shutdown command is run, a timer to test the BFD session status is started. If the BFD session goes Up through negotiation before the timer expires, the BFD session notifies the interface of the Up state. Otherwise, the BFD session regards the link as failed and notifies the interface of the Down state after the timer expires. In this manner, the BFD session status and the interface status are in real-time synchronization.
If the process-interface-status command is saved in the configuration file, the BFD session that is bound to the interface notifies the interface that the BFD session is Down when the NE80E/40E is restarted, in view of the initial status of an interface being Down.

Before BFD status is associated with interface status, the BFD configurations on the two NE80E/40Es must be correct and symmetrical. If the BFD status on the local interface goes Down, check whether the BFD configuration on the peer is correct or whether the BFD session has been shut down.

2013年12月19日星期四

Configuring the GE/FE Optical/Electrical Interface on Huawei NE40E

Generally, the Huawei ME60/Huawei NE40E   sets an Ethernet interface to an optical or electrical interface based on the interface module's type. If the NE80E/40E cannot identify an interface module, you need to manually set the interface to the optical or electrical mode.

Run:
system-view
The system view is displayed.

Run:
interface { ethernet | gigabitethernet } interface-number
The Ethernet interface view is displayed.

Run:
port-type { copper | fiber-100 | fiber-1000 }
The interface type is set.

Once the SFP module is identified, the system can automatically set the interface type according to the type of the SFP module. No configuration is required.

If the SFP module that cannot be identified works well, you need to forcibly set the interface type.

 NOTE:
When an SFP module is being replaced, the configurations such as the loopback test, interface speed, auto-negotiation mode, and duplex mode on the interface are all restored to default ones. You need to reconfigure them on the interface.
After the port-type command is run, the configurations such as the loopback test, interface speed, auto-negotiation mode, and duplex mode on the interface are all restored to default ones. You need to reconfigure them on the interface.

The parameter copper can be configured in the port-type command only when an optical/electrical SFP module is installed.

2013年12月17日星期二

Configuring CAR on a Layer 2 Port

The Huawei ME60 /40E supports configuration of traffic policing in both inbound and outbound directions on Layer 2 interfaces.
You can configure traffic policing for the NE80E/40E only on the physical GE and Ethernet interfaces.
Run:
system-view
The system view is displayed.
Run:
interface { ethernet | gigabitethernet } interface-number
The interface view is displayed.
Run:
portswitch
The Layer 2 interface view is displayed.
Run:
port default vlan vlan-id
A Layer 2 interface is added to a specified VLAN.
NOTE:
Please confirm the specified VLAN has been created before running this command.
Run:
port trunk allow-pass vlan { { vlan-id1 [ to vlan-id2 ] } & <1-10> | all }
The IDs of the VLANs allowed by the current interface are specified.
Run:
qos car { cir cir-value [ pir pir-value] } [ cbs cbs-value pbs pbs-value ] [ green { discard | pass [ service-class class color color ] } | yellow { discard | pass [ service-class class color color ] } | red { discard | pass [ service-class class color color ] } ]* { inbound | outbound } [ vlan { vlan-id1 [ to vlan-id2 ] &<1-10> } ]
 NOTE:

CAR is configured on an interface. The parameter [ vlan { vlan-id1 [ to vlan-id2 ] &<1-10> } ] takes effect only on layer 2 interfaces, and VLAN ID must be configured. When this command is configured  ME60 on a layer 3 interface, however, VLAN ID cannot be configured.

2013年12月16日星期一

Configuration file of ME60 A

 sysname Huawei ME60A
#
 set board-type slot 5 tunnel
#
interface GigabitEthernet2/0/0
 undo shutdown
 ip address 10.1.1.2 255.255.255.0
#
interface Pos1/0/0
 undo shutdown
 link-protocol ppp
 ip address 20.1.1.1 255.255.255.0
#
interface LoopBack1
 ip address 1.1.1.9 255.255.255.255
target-board 5
binding tunnel gre
#
interface Tunnel5/0/1
 tunnel-protocol gre
 ip address 40.1.1.1 255.255.255.0
 source LoopBack1
 destination 2.2.2.9
#
ospf 1
 area 0.0.0.0
  network 20.1.1.0 0.0.0.255
  network 1.1.1.9 0.0.0.0
#
ip route-static 10.2.1.0 255.255.255.0 Tunnel5/0/1
#
return
Configuration file of ME60 B

#
 sysname ME60B
#
interface Pos1/0/0
 undo shutdown
 link-protocol ppp
 ip address 20.1.1.2 255.255.255.0
#
interface Pos2/0/0
 undo shutdown
 link-protocol ppp
 ip address 30.1.1.1 255.255.255.0
#
ospf 1
 area 0.0.0.0
  network 20.1.1.0 0.0.0.255
  network 30.1.1.0 0.0.0.255
#
return
Configuration file of ME60 C

#
 sysname ME60C
#
 set board-type slot 5 tunnel
#
interface GigabitEthernet2/0/0
 undo shutdown
 ip address 10.2.1.2 255.255.255.0
#
interface Pos1/0/0
 undo shutdown
 link-protocol ppp
 ip address 30.1.1.2 255.255.255.0
#
interface LoopBack1
ip address 2.2.2.9 255.255.255.255
target-board 5
binding tunnel gre
#
interface Tunnel5/0/1
 tunnel-protocol gre
 ip address 40.1.1.2 255.255.255.0
 source LoopBack1
 destination 1.1.1.9
#
ospf 1
 area 0.0.0.0
  network 30.1.1.0 0.0.0.255
  network 2.2.2.9 0.0.0.0
#
ip route-static 10.1.1.0 255.255.255.0 Tunnel5/0/1
#

ME60 Return

Configuring a Tunnel Interface on Huawei AR3260

AR3260 Series routers are designed to provide secure unified voice and data communication with exceptional performance and scalability to meet the demands of today’s enterprise requirements.
Run:
system-view
The system view is displayed.
Run:
interface tunnel interface-number
A tunnel interface is created and the tunnel interface view is displayed.
Run:
tunnel-protocol gre
The tunnel encapsulation mode is set to GRE.
Run:
source { source-ip-address | interface-type interface-number }
The source address or source interface is configured for the tunnel interface.
Run:
destination [ vpn-instance vpn-instance-name ] dest-ip-address
The destination address is configured for the tunnel interface.
Run:
mtu mtu
The MTU of the interface is set.
Run:
description text
The description of the current tunnel interface is set.
Run:
ip address ip-address { mask | mask-length } [ sub ]
An IP address is configured for the interface.
Run:
ip address unnumbered interface interface-type interface-number
The tunnel interface is configured as an IP unnumbered interface.

The Huawei AR3260  routers integrate routing, switching, 3G, voice, and security functions. It utilizes a multi-core CPU and non-blocking switching structure providing industry-leading system performance and extensibility, supporting evolving service development requirements.


2013年12月11日星期三

Configuring a Single RRPP Ring the ME60

Create an RRPP domain and its control VLAN.
# Configure the domain of ME60A, the master node of ring 1, to be 1, and the ID of the major control VLAN to be 20.

<ME60A> system-view
[ME60A] rrpp domain 1
[ME60A-rrpp-domain-region1] control-vlan 20
[ME60A-rrpp-domain-region1] quit
# Configure the domain of ME60B, a transit node of ring 1, to be 1, and the ID of the major control VLAN to be 20.

<ME60B> system-view
[ME60B] rrpp domain 1
[ME60B-rrpp-domain-region1] control-vlan 20
[ME60B-rrpp-domain-region1] quit
# Configure the domain of ME60C, a transit node of ring 1, to be 1, and the ID of the major control VLAN to be 20.

<ME60C> system-view
[ME60C] rrpp domain 1
[ME60C-rrpp-domain-region1] control-vlan 20
[ME60C-rrpp-domain-region1] quit

Disable the STP function on the interfaces to be added to the RRPP ring.
# Disable the STP function on the interfaces to be added to the RRPP ring on ME60A.

<ME60A> system-view
[ME60A] interface gigabitethernet 2/0/1
[ME60A-GigabitEthernet2/0/1] undo shutdown
[ME60A-GigabitEthernet2/0/1] portswitch
[ME60A-GigabitEthernet2/0/1] stp disable
[ME60A-GigabitEthernet2/0/1] quit
[ME60A] interface gigabitethernet 2/0/2
[ME60A-GigabitEthernet2/0/2] undo shutdown
[ME60A-GigabitEthernet2/0/2] portswitch
[ME60A-GigabitEthernet2/0/2] stp disable
[ME60A-GigabitEthernet2/0/2] quit
# Disable the STP function on the interfaces to be added to the RRPP ring on ME60B.

<ME60B> system-view
[ME60B] interface gigabitethernet 2/0/1
[ME60B-GigabitEthernet2/0/1] undo shutdown
[ME60B-GigabitEthernet2/0/1] portswitch
[ME60B-GigabitEthernet2/0/1] stp disable
[ME60B-GigabitEthernet2/0/1] quit
[ME60B] interface gigabitethernet 2/0/2
[ME60B-GigabitEthernet2/0/2] undo shutdown
[ME60B-GigabitEthernet2/0/2] portswitch
[ME60B-GigabitEthernet2/0/2] stp disable
[ME60B-GigabitEthernet2/0/2] quit
# Disable the STP function on the interfaces to be added to the RRPP ring on ME60C.

<ME60C> system-view
[ME60C] interface gigabitethernet 2/0/1
[ME60C-GigabitEthernet2/0/1] undo shutdown
[ME60C-GigabitEthernet2/0/1] portswitch
[ME60C-GigabitEthernet2/0/1] stp disable
[ME60C-GigabitEthernet2/0/1] quit
[ME60C] interface gigabitethernet 2/0/2
[ME60C-GigabitEthernet2/0/2] undo shutdown
[ME60C-GigabitEthernet2/0/2] portswitch
[ME60C-GigabitEthernet2/0/2] stp disable

[Huawei ME60C-GigabitEthernet2/0/2] quit

2013年12月4日星期三

Obtaining Upgrade AR3260 Software

The system software of AR3260 V200R002C02SPC200 is AR3260-V200R002C02SPC200.cc.

Run the display version command in the user view to check the current system software version and ensure that it meets the upgrade requirement.
<Huawei>display version                                                         
Huawei Versatile Routing Platform Software                                     
VRP (R) software, Version 5.90 (AR3200 V200R002C02SPC100)                      
Copyright (C) 2011 HUAWEI TECH CO., LTD                                         
Huawei AR3260 Router uptime is 0 week, 0 day, 0 hour, 1 minute                 
BKP 0 version information:                                                     
1. PCB      Version  : AR01BAK3A VER.B                                         
2. If Supporting PoE : No                                                      
3. Board    Type     : AR3260                                                  
4. MPU Slot Quantity : 2                                                       
5. LPU Slot Quantity : 10                                                      
                                                                               
MPU 15(Master) : uptime is 0 week, 0 day, 0 hour, 1 minute                     
SDRAM Memory Size    : 2048    M bytes                                         
Flash Memory Size    : 16      M bytes                                         
NVRAM Memory Size    : 512     K bytes                                         
SD Card0 Memory Size : 1882    M bytes                                          
MPU version information :                                                      
1. PCB      Version  : AR01SRU3A VER.B                                         
2. MAB      Version  : 0                                                        
3. Board    Type     : SRU80                                                   
4. CPLD0    Version  : 104                                                     
5. CPLD1    Version  : 104                                                      
6. FPGA     Version  : 111                                                     
7. BootROM  Version  : 236                                                     
                                                                               
LPU 2 : uptime is 0 week, 0 day, 0 hour, 0 minute                              
SDRAM Memory Size    : 256     M bytes                                         
Flash Memory Size    : 16      M bytes                                         
LPU version information :                                                      
1. PCB      Version  : AR01SDCE2A VER.B                                        
2. MAB      Version  : 0                                                       
3. Board    Type     : 1E1/T1-M                                                
4. CPLD0    Version  : 100                                                     
5. BootROM  Version  : 203                                                     
                                                                                
FAN version information :                                                      
1. PCB      Version  : AR01DF05A VER.A                                         
2. Board    Type     : FAN                                                      
3. Software Version  : 104

In the preceding output, AR3260 V200R002C02SPC100 indicates the system software version currently running on the ME60. If this is the target version, no upgrade is necessary.