Professional Documents
Culture Documents
Fibeair Ip-10: Part Id: Bm-0154-0 Doc Id: Rev A.02 October 2009
Fibeair Ip-10: Part Id: Bm-0154-0 Doc Id: Rev A.02 October 2009
FibeAir IP-10
CLI
(Command Line Interface)
Procedures
Registered TradeMarks
Ceragon Networks® is a registered trademark of Ceragon Networks Ltd.
FibeAir® is a registered trademark of Ceragon Networks Ltd.
CeraView® is a registered trademark of Ceragon Networks Ltd.
Other names mentioned in this publication are owned by their respective holders.
TradeMarks
CeraMapTM, PolyViewTM, EncryptAirTM, ConfigAirTM, CeraMonTM, EtherAirTM, and MicroWave
FiberTM, are trademarks of Ceragon Networks Ltd.
Other names mentioned in this publication are owned by their respective holders.
Statement of Conditions
The information contained in this document is subject to change without notice.
Ceragon Networks Ltd. shall not be liable for errors contained herein or for incidental or
consequential damage in connection with the furnishing, performance, or use of this
document or equipment supplied with it.
Information to User
Any changes or modifications of equipment not expressly approved by the manufacturer
could void the user’s authority to operate the equipment and the warranty for such equipment.
Copyright © 2009 by Ceragon Networks Ltd. All rights reserved.
General .......................................................................................................... 1
Basic Commands.......................................................................................... 1
Management Ports.......................................................................................14
VLAN Configuration.....................................................................................16
Auxiliary Channels.......................................................................................19
NTP................................................................................................................25
SNMP ............................................................................................................26
CFM ...............................................................................................................29
General
This guide provides instructions for specific FibeAir® IP-10 CLI based operations. The document is
updated for software release 6.5CA.
CLI (Command Line Interface) is used to perform IP-10 configuration and obtain system statistical and
performance information.
Using the CLI, you can perform configuration operations for stand-alone IP-10 units or units connected in a
stacked configuration, as well as configure several IP-10 units in a single batch command.
In a stacked configuration, all commands are available both in the main and extension units unless
otherwise stated.
Basic Commands
The following basic commands are available when you first log in, if you belong to the Operator user
group:
ls List entities
get Get parameter
set Set parameter
help Help
cd Change directory
exit Exit CLI
logout Logout from CLI
cli-ver CLI version
cls Clear screen
shell Enter secondary shell
write Write the current switch configuration to the configuration file
show-tree Show entity tree
find Search for a string in the parameter's entity name and information fields
lsp List entity parameters and commands
echo echoing free text to the console
In order to get help on a specific command, add a question mark or the parameter “--help” after the
command.
Note: To perform the operations in this guide, you should log in as follows:
User: admin or operator
Password: admin
1. Log in as follows:
3. Type: get ip-address, and press Enter. This will give you the current IP address.
4. Type: set ip-address <ip> (the new IP address), and press Enter.
Adding Users
To define a new user, do the following:
1. Log in.
3. Type: add-user <name> <group> <password aging days> <expiration date>, and press Enter.
1. Log in.
The prompt will change according to the relevant slot ID. For example, the prompt for a unit located in slot
3 will show:
IP-10-SLOT-3:/>
1. Log in.
1. Log in.
Argument Description:
• Operational/reserved: reserved trails are introduced in the database and the bandwidth won’t be
used for TDM traffic (it may be used for ethernet traffic) but traffic does not flow. For operational
trails, bandwidth is fully allocated and traffic flows.
• Protected/unprotected: unprotected trails map between two interfaces only. Protected trails map
between an end-point interfaces and two other interfaces, the first of which is the primary path and
the second of which is the secondary path (see the SNCP section below).
• Interface slot: slot number of the IDU containing the interface (from 1 to 6).
o For radio, the maximum number depends on the radio script being used
The interface type to write in the CLI is "stm-1", instead of "line". The interface number is the VC-12
slot number. For example, the command:
add-trail t1 d1 high operational unprotected 1 stm-1 3 2 radio 6
will configure a trail between VC-12 number 3 in the STM-1 interface placed in IDU 1, and channel
(VC) 6 in the radio of IDU 2.
CLI interface numbers in the STM-1 are numbered 1-63 for the available VC-12 slots inside the
STM-1.
The numbering of the VC-12 slots is according to the KLM numbering, as defined in ITU-T G.707
clause 7.3, as shown in the following table taken from the standard:
1. Log in.
4. To show a specific trail by its ID, type show-trail-by-id <trail ID>, and press Enter.
5. To show a specific trail by its source interface, type show-trail-by-src <interface 1 slot #> <interface
1 type> <interface 1 number>, and press Enter.
The trails will be shown in a table, as follows (this is an example of a trail from E1#1 in slot 2 to radio
VC#1 in slot 3):
================================================================
Legend: s/i/n/- 's'=slot-id 'i'=if-type 'n'=if-num '-'=Empty
2/l/ 1 3/r/ 1 - - - - - - - -
------------------------------------------------------------------------------
Deleting Trails
There are several ways to delete trails:
1. Log in.
4. To delete a specific trail by its ID, type del-trail-by-id <trail ID>, and press Enter.
Activating/Deactivating Trails
Trails mode can be toggled between active and reserved, as follows:
1. Log in.
4. To activate/reserve a specific trail by its ID, type act-trail-by-id <trail ID>, and press Enter.
1. Log in.
Argument Description:
• Operational/reserved: reserved trails are introduced in the database and the bandwidth won’t be
used for TDM traffic (it may be used for ethernet traffic) but traffic does not flow. For operational
trails, bandwidth is fully allocated and traffic flows.
• Protected/unprotected: unprotected trails map between two interfaces only. Protected trails map
between an end-point interfaces and two other interfaces, the first of which is the primary path and
the second of which is the secondary path.
• Interface slot: slot number of the IDU containing the interface (from 1 to 6)
o For radio, the maximum number depends on the radio script being used
1. Log in.
3. To force all trails to one of their paths, type protected-trail-force-active <Id> <path>, and press
Enter.
4. To force a specific trail by its ID type to one of its paths, type protected-trail-force-active-by-id <Id>
<path>, and press Enter.
where:
<Id> - trail ID
<path> - “primary”, “secondary” or “none”
1. Log in.
4. To show a specific trail’s PMs by its ID, type show-trail-pms-by-id <trail ID> <15 min interval>
<24h interval>, and press Enter.
where: <15min/24h interval> is the interval number to be shown, 0 is the current interval, 1 is the
previous one, and so on. If no interval is selected, the current one will be shown.
1. Log in.
Single Pipe - Ethernet switching is disabled, whereby only a single Ethernet interface is used for traffic and
the unit operates as a point-to-point microwave Ethernet radio.
1. Log in.
3. Type: set ethernet-application <Ethernet application type> (Single pipe, Managed switch, or Metro
switch), and press Enter.
2. Type set type < in-band or out-of-band >, and press Enter.
Port Configuration
2. Type set ethernet-rate <Rate> (10, 100 or 1000 Mbps), and press Enter.
2. Type set duplex < full-duplex / half-duplex > ,and press Enter.
2. At the command prompt, type cd interfaces/ethernet/bridge/eth-port [port no.]/, and press Enter.
3. Type set-allowed-vlans <add, except, remove> <VLAN no.>, and press Enter.
2. Type vlan <VLAN no.> <add, remove, enable, disable>, and press Enter.
2. Type vlan <VLAN no.> name <VLAN name>, and press Enter.
QoS Configuration
Ingress Classifier
Egress Scheduler
Egress Shaper
Policer
2. Type: qos-policer-class <add, remove> <policer class name> <policer name> <matching type: all,
arp, first-queue, second-queue, third-queue, fourth-queue, broadcast, multicast, non-tcp-udp,
tcp-control, tcp-data, udp, unicast, unknown-unicast, unknown-multicast> <rate> <CBS>
<exceed action: drop>, and press Enter.
QoS Tables
1. At the command prompt, type: cd interfaces/ethernet/bridge/eth-port [port no.]/, and press Enter.
2. Type: qos-vlan-to-queue set/remove <VID> <queue ID: 1st-queue, 2nd-queue, 3rd-queue, 4th-
queue >, and press Enter.
2. Type: qos-set-ip-pbit-val <IP_Pbit> <queue ID: 1st-queue, 2nd-queue, 3rd-queue, 4th-queue>, and
press Enter.
User Channel
To set Automatic state Propagation (also called GBE-mute-override) in “Single Pipe application”:
1. Type: set-gbe-mute-override <criteria: none, lof, lof-excber, lof-remote, lof-excber-remote >, and
press Enter.
1. Type: set eth-shutdown-threshold-profile < profile-0 to profile-7 >, and press Enter.
2. At the new prompt, type set ethernet-application metro-switch, and press Enter.
2. At the new prompt, type set type customer-network (or provider-network), and press Enter.
2. At the new prompt, type set vlan <VLAN ID>, and press Enter.
2. At the new prompt, type set provider-port-ethertype <0x88a8, 0x8100, 0x9100, 0x9200>, and press
Enter.
2. At the new prompt, type change-script-cmd < Script's name> < Operational mode> <Maximum
profile> disable-adaptive-power, then press Enter.
Script Name
10Mbps-6.5MHz-4QAM-Grade-1
155Mbps-26MHz-128QAM-Grade-1
181Mbps-26MHz-256QAM-Grade-1
20Mbps-6.5MHz-16QAM-Grade-1
39Mbps-26MHz-4QAM-Grade-1
39Mbps-6.5MHz-256QAM-Grade-1
47Mbps-9MHz-64QAM-Grade-1
ACM_181Mbps-26MHz-256QAM-Grade-1
ACM_367Mbps-52MHz-256QAM-Grade-1
ACM_42Mbps-6.5MHz-256QAM-Grade-1
ACM_87Mbps-12.5MHz-256QAM-Grade-1
Operational Mode
acm-adaptive-mode
acm-fixed-mode
regular-mode (for non ACM scripts)
Maximum Profile
Note: For ,choose a specific profile for “ACM fixed mode” . In “regular mode” only “profile-0” is
available.
profile-0
profile-1
profile-2
profile-3
profile-4
To set RX frequency:
1. Type cd /radio/rfu/ set atpc-ref-rx-level <reference level in dBm>, then press Enter.
To enable ATPC:
To set Link-ID:
1. Type cd /radio/framer/ set radio-excessive-ber-threshold <BER: 1e-3, 1e-4, 1e-5>, then press
Enter.
1. Type cd /radio/framer/ set radio-signal-degrade-threshold <BER: 1e-6, 1e-7, 1e-8, 1e-9>, then
press Enter.
To set Date and Time, whereby the time and date format are day-month-year,hours:mins:secs:
2. Type set version v3 (or “v1” for SNMP version 1), and press Enter.
To set the security mode to authentication, and the authentication algorithm to sha:
To set the security mode to authentication-privacy, and the Authentication algorithm to md5:
To set the security mode to no-security, and the authentication algorithm to no authentication:
The following steps are used to define the web protocol that will work with HTTPS
Step 1: Create the NE certificate based on the NE's public key. The public key receives the public key file
through upload.
You can find your public_key file (such as 192.168.1.18_pub_key) in your host path directory.
Note: Before you download the certificate, copy your NE certificate to your ftp host path directory.
4. Type set security-file-name <MYCERT.crt> (your certificate file name), and press Enter.
4. Type set security-file-name <EssentialSSLCA_2.crt> (your CA-certificate file name), and press
Enter.
Note: Enter the URL in the WEB GUI, such as https://192.168.1.1 to use the https protocol.
Creation:
IP-10:/interfaces/ethernet/bridge/service-oam> domain add <Domain name> <Domain level [1-7]> , and
press Enter.
Deletion:
IP-10:/interfaces/ethernet/bridge/service-oam> domain remove <Domain name> <Domain level [1-7]> ,
and press Enter.
Creation:
IP-10:/interfaces/ethernet/bridge/service-oam> domain add <Domain name> <Domain level [1-7]>
<Association name> <VLAN ID [1-4090]> , and press Enter.
Deletion:
IP-10:/interfaces/ethernet/bridge/service-oam> domain remove <Domain name> <Domain level [1-7]>
<Association name> <VLAN ID [1-4090]> , and press Enter.
Association
Under service-oam level:
Creation
IP-10:/interfaces/ethernet/bridge/service-oam> association add <Association name> <Domain name>
<VLAN ID [1-4090]> , and press Enter.
Deletion
IP-10:/interfaces/ethernet/bridge/service-oam> association remove <Association name> <Domain name>
<VLAN ID [1-4090]> , and press Enter.
CCM
Under service-oam level
On
IP-10:/interfaces/ethernet/bridge/service-oam> ccm-admin enable <Domain level [1-7]> <VLAN ID [1-
4090]> , and press Enter.
Local MEP
Under interfaces level
Creation
1. IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep set < MEP ID [1-8191]> < Domain level [1-7]>
<VLAN ID [1-4090]> < Direction [up/down]> <CCM VLAN Pbit priority [0-7]> , and press Enter.
2. IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep set < MEP ID [1-8191]> < Domain level [1-7]>
<VLAN ID [1-4090]> < Direction [up/down]> , and press Enter.
Deletion
IP-10:/interfaces/ethernet/bridge/eth-port [x]> mep remove < MEP ID [1-8191]> < Domain level [1-7]>
<VLAN ID [1-4090]> < Direction [up/down]> , and press Enter.
Remote MEP
Under service-oam level
Creation
1. IP-10:/interfaces/ethernet/bridge/service-oam> remote-mep set <Remote MEP ID [1-8191]> <Domain
name> <VLAN ID [1-4090]> <MAC address [xx:xx:xx:xx:xx:xx]> , and press Enter.
2. IP-10:/interfaces/ethernet/bridge/service-oam> remote-mep set <Remote MEP ID [1-8191]> <Domain
name> <VLAN ID [1-4090]> , and press Enter.
Deletion
MIP
Under interfaces level
Creation
IP-10:/interfaces/ethernet/bridge/eth-port[x]> mip add <Domain level [1-7]> , and press Enter.
Deletion
IP-10:/interfaces/ethernet/bridge/eth-port[x]> mip remove <Domain level [1-7]> , and press Enter.
Link Trace
Under service-oam level
1. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address <MAC address
[xx:xx:xx:xx:xx:xx]> md-name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> ,
and press Enter.
2. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address <MAC address
[xx:xx:xx:xx:xx:xx]> md-name <Domain name> <VLAN ID[1-4090]> , and press Enter.
3. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address <MAC address
[xx:xx:xx:xx:xx:xx]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]>
, and press Enter.
4. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mac-address <MAC address
[xx:xx:xx:xx:xx:xx]> md-level <Domain level[1-7]> <VLAN ID[1-4090]> , and press Enter.
5. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id <Remote MEP ID[1-8191]> md-
name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> , and press Enter.
6. IP-10:/interfaces/ethernet/bridge/service-oam> linktrace mep-id <Remote MEP ID[1-8191]> md-
name <Domain name> <VLAN ID[1-4090]> , and press Enter.
Creation
1. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add <Remote MEP ID [1-8191]> md-
name <Domain name> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> , and press Enter.
2. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add <Remote MEP ID [1-8191]> md-
name <Domain name> <VLAN ID[1-4090]> , and press Enter.
3. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add <Remote MEP ID [1-8191]> md-
level <Domain level[1-7]> <VLAN ID[1-4090]> <VLAN Pbit priority[0-7]> , and press Enter.
4. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace add <Remote MEP ID [1-8191]> md-
level <Domain level[1-7]> <VLAN ID[1-4090]> , and press Enter.
Deletion
1. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace remove <Remote MEP ID [1-8191]>
md-name <Domain name> <VLAN ID[1-4090]> , and press Enter.
2. IP-10:/interfaces/ethernet/bridge/service-oam> auto-linktrace remove <Remote MEP ID [1-8191]>
md-level <Domain level[1-7]> <VLAN ID[1-4090]> , and press Enter.
CCM Interval
Under service-oam level
Modification
IP-10:/interfaces/ethernet/bridge/service-oam> ccm-interval <interval time: 1-sec, 10-sec, 1-min, 10-min>
<Domain level [1-7]> <VLAN ID [1-4090]> , and press Enter.
Modification
IP-10:/interfaces/ethernet/bridge/service-oam> set auto-linktrace-interval [seconds: range 60-3600] , and
press Enter.
: Ring RSTP
Type cd /interfaces/ethernet/bridge/ set priority <priority no: range 0-61440, steps of 4096>, and press
Enter.
Type cd /interfaces/ethernet/bridge/ethe-port[port no.]/ set path-cost <patch cost>, and press Enter.