Development Section MA5600 Multi-Service Access Module Operation and Maintenance 1.0 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Objectives Grasp the basic knowledge of command line Grasp the basic system configuration Grasp the basic service and function configuration Upon completion of this course, you will be able to: Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal
Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Command Line Basis MA5600 Login via serial port or TELNET Privilege user mode MA5600 # OSPF mode MA5600(config-ospf)# RIP mode MA5600(config-rip)# interface configuration mode MA5600(config-if-)# MA5600(config-test)# enable disable Configure
return ospf rip test quit quit Diagnose mode MA5600(config-diagnose)# interface diagnose MA5600 command line mode Ordinary user mode Global configuration mode TEST mode MA5600(config)# MA5600(config-btv)# BTV BTV mode Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Command Line Basis Command line help By entering ? , you can get list of commands with a brief description under any command mode MA5600#display? Key word matching MA5600#conf<space> ---- MA5600#configure Chinese/English language switching MA5600#Switch language mode Access history commands Access the previous history command: "Ctrl +P" Access the next history command: "Ctrl +N" Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal
Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment MA5600 control console provides two configuration modes: Setting up local configuration environment via the Console Local maintenance Setting up configuration environment via Telnet Local and remote maintenance In-band Telnet: Occupying service channels Out-band Telnet: Occupying no service channel Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600 CON ETH MON SCU A D E F
Setting up Configuration Environment Setting up a local configuration environment via the Console Connect the computer serial port with the MA5300 Console via a standard RS232 serial cable, then configure hyper terminal in Windows or other operation systems. PC RS232 serial port cable Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Open the hyper terminal Open-Program-Accessories- Communications-Hyper terminal: Double click Setting the HyperTerminal parameters Enter the name: MA5600The name can be defined by the user Connection use: Directly connect to Serial port 1 (depending on actual conditions) Port setting: 9600bit/s, 8 data bits, no parity check 1 suspension bit, no flow control Terminal type: VT100 or automatic test Hypertrm. exe Setting up Configuration Environment Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600 CON ETH MON SCU A D E F
Setting up Configuration Environment server Telnet Terminal workstation LAN workstation LAN local Telnet mode Setting up Configuration Environment via Telnet ETH Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600 CON ETH MON SCU A D E F
Setting up Configuration Environment WAN LAN Remote router Local router Telnet terminal LAN workstation workstation WAN remote Telnet configuration mode Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Setting up Configuration Environment User login Via the Console After correctly connecting the hyper terminal, press Enter key according to the prompt to enter the configuration environment Via Telnet According to the prompt, enter correct user name and password to enter the configuration environment Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Out-band NM configuration MA5300(config)#interface meth 0 Enter the external network interface port mode. MA5300(config-if-meth0)#ip address 10.71.53.2 255.255.255.0 Configure the IP address of the external network interface MA5300(config-if-meth0)#undo shutdown Activate the external network interface Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal In-band NM Configuration Example MA5600 SCU A F E D MA5200 S M B HRB Upstream 0 7 FE0/7/0 0 7 HAB Port ethernet 0/7/0 on the MA5600s SCU board is connected to port 0 on the MA5200s HAB board. The IP address of the MA5600 inband NMS is 10.10.20.2/24. The NMS VLAN ID is 1000. The IP address of the NMS is 10.10.21.1/24 The IP address of the MA5200s VT interface is 10.10.20.254/24. The IP address of port 0 of the MA5200 HRB board is 10.10.40.1/30.
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations In-band NM configuration MA5600(config)#vlan 1000 mux Add NM VLAN MA5600(config)#interface vlan-if 1000 Enter the Vlan-interface 1000 configuration mode . MA5600(config-if-vlanif1000)#ip address 10.10.20.2 255.255.255.0 Configure the equipment with a management address, which should be configured on vlan virtual interface 1000 . MA5600(config)#port vlan 1000 0/7 0 Add the upstream port Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations SNMP network management configuration MA5600(config)# snmp-agent community read public MA5600(config)# snmp-agent community write private Set the community name and access authority MA5600(config)# snmp-agent trap enable Enable sending Trap
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600(config)#snmp-agent target-host trap address 10.10.21.1 securityname private Set Trap destination address. MA5600(config)#snmp-agent trap source vlanif 1000 Specify IP address of the inband NMS as the Trap source address. MA5600(config)#route-static 10.10.41.1 30 10.10.20.254 Configure the equipment with a static route. MA5600(config)#save Basic Maintenance Operations Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Operation terminal configuration Adding a User MA5600#terminal user name Deleting a User MA5600#undo terminal user name Modifying user level MA5600#terminal user level Modifying user password MA5600#terminal user password Modifying number re-entries MA5600#terminal user reenter Viewing User Information MA5600#display terminal user Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Board Management Query a Board MA5600#display board 0 MA5600#display board 0/2 Add a board(ADEF) MA5600(config)#board add 0/1 ADE Confirm a Board MA5600(config)#board confirm 0 Delete a board MA5600(config)#board delete 0/2 Reset a Board MA5600(config)#board reset 0/1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Basic Maintenance Operations Equipment management Reset the system MA5600(config)#reboot system Show CPU Occupancy Ratio MA5600>display cpu 0/7 Display the system time MA5600> display time Set the system time MA5600#time HH:MM:SS YYYY/MM/DD Display the system version MA5600(config)#display version 0/7 Setting hostname MA5600(config)#sysname MA5600
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal System Management Configuration Configure File Management Query the initial configuration of the MA5300 intelligent IP integrated access equipment MA5600#display saved-configuration Query the current configuration of the MA5300 intelligent IP integrated access equipment MA5600#display current-configuration query the configuration commands of fault restoration. MA5600#display unresumed-configuration Save the current configuration MA5600#save Erase the configuration files in the Flash MA5600#erase flash data Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration To set the VPI/VCI of a port, run the command service-port. MA5600(config)#service-port vlan 2 adsl 0/2/1 vpi 0 vci 35 rx- cttr 0 tx-cttr 0 To add multiple virtual ports to a VLAN at a time, run the command multi-service-port. MA5600(config)#multi-service-port 3 adsl 0/2 3-10 rx-cttr 0 tx- cttr 0 (vlan-id 3, board 0/2 ,port range 3/10 ) Unblocking Adsl port MA5600(config-if-adsl-0/2)#undo block all Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal
Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration MA5600 CON ETH MON SCU ADEF SPLT PC MODEM Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Entering ADSL board configuration mode MA5600(config)#interface adsl 0/5 Add an ADSL2+ line profile MA5600(config)#adsl line-profile add huawei Activate port 0 on the ADSL board with line-profile above: MA5600(config-if-adsl-0/5)#activate 0 huawei Resetting ADSL Chipset MA5300(config-if-adsl-0/2)#chipset reset 1
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Through the bit allocation information, you can get to know the number of bits carried by every ADSL2+ tone (totally 512 tones), and analyze the performance of the line. MA5600(config-if-adsl-0/2)#display line bit-allocation 61 Upstream bits per frame: 312 Downstream bits per frame: 5616 0 0
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Adding an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile add 3 (Refer to operation manual to see more detail) Bind alarm profile 1 with all ports of the ADSL2+ board residing in slot 10. MA5600(config-if-adsl-0/10)#alarm-config all 1 Deleting an ADSL Line Alarm Profile MA5600(config)#adsl alarm-profile delete 3 Querying ADSL line alarm profile information MA5600(config)#display adsl alarm-profile 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal ADSL Port Configuration Querying ADSL Port Information MA5600(config)#display service-port port 0/10/1 Viewing line parameters of a port MA5600(config-if-adsl-0/2)#display parameter 2 view the statistics collected on an ADSL2+ port within the past 15 minutes or 24 hours, or all available performance statistics. MA5600(config-if-adsl-0/2)#display statistics performance 61 historic-15minutes 1 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MA5600 CON ETH MON SCU SHEA SHDSL Port Configuration MODEM Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration Add an SHDSL line profile, and number it as 3 MA5600(config)#shdsl line-profile add 3 When operating in blocked state, an SHDSL port cannot transmit data, and any operation on the port is prohibited. To operate the port, you need to unblock the port first. MA5600(config-if-shdsl-0/1)#undo block all Activate all ports on the board residing in slot 4 using profile 3. MA5600(config-if-shl-0/3)# activate all 3 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration Adding an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile add 2 Bind alarm profile 2 with all ports of the SHDSL board residing in slot 3. MA5600(config-if-shdsl-0/3)#alarm-config all 2 Deleting an SHDSL Line Alarm Profile MA5600(config)#shdsl alarm-profile delete 2 Querying SHDSL line alarm profile information MA5600(config)#display shdsl alarm-profile 2 Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal SHDSL Port Configuration view the brief information on a port MA5600(config-if-shl-0/3)#display port state 0 -------------------------------------------------------------------- Port Running Control Line Alarm Running Config Bind ID Status Status Profile Profile Operation Operation Status -------------------------------------------------------------------- 0 Activating Active 1 1 Normal None Normal -------------------------------------------------------------------- MA5600(config-if-shl-0/3)#display line state 2 MA5600(config-if-shl-0/3)#display statistics performance 2 current Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Set duplex mode of an Ethernet port MA5600(config-if-scu-0/7)#duplex all full Set the bit rate of an Ethernet port MA5600(config-if-scu-0/7)#speed all 1000m Set an Ethernet ports network cable type MA5600(config-if-scu-0/7)#mdi all auto Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Enable/Disable a Ports Traffic Control Function MA5600(config-if-scu-0/7)#flow-control all Enable/Disable Traffic Suppression MA5600(config-if-scu-0/7)#traffic-suppress all broadcast value 1 Configure a Port's MAC Address Learning Attribute MA5600(config)#mac-address max-mac-count adsl 0/10/1 vpi 0 vci 35 10
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration Enable/Disable Port Aggregation MA5600(config-if-scu-0/7)#link-aggregation 0-1 ingress MA5600(config-if-scu-0/7)#display link-aggregation ----------------------------------------------- Master port Sub-ports Mode ----------------------------------------------- 0 1 ingress ----------------------------------------------- Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Ethernet Port Configuration View the configuration of an Ethernet port MA5600(config-if-scu-0/7)#display port state all -------------------------------------------------------------------- Port Port Optic Native MDI Speed Duplex Flow- Active Link Type Status VLAN (Mbps) Control State -------------------------------------------------------------------- 0 GE absence 1 - 1000 full on active offline 1 GE absence 1 - 1000 full on active offline -------------------------------------------------------------------- Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal VLAN Service Configuration The MA5600 supports diverse VLAN applications, including: Standard VLAN Smart VLAN MUX VLAN Super VLAN QinQ VLAN Stacking VLAN Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal
Contents 1 Introduction to Command Line Operations 2 Basic System Configuration 3 Port Configuration 4 VLAN Service Configuration Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Standard VLAN Configuration Example MA5600-A A F E D SCU MA5600-B A F E D SCU 0/7/0 0/7/1 0/7/0 0/7/1 IP network To establish the above connections, do as follows: Add VLAN 9 Run the command port vlan on MA5600_A to add a port on MA5600_B and a port on MA5600_A to a standard VLAN.
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Standard VLAN Configuration Standard VLAN configuration involves: 1.Creating/Deleting a standard VLAN MA5600(config)#vlan 9 standard 2.Adding/Deleting a port to/from a standard VLAN MA5600(config)#port vlan 9 { frame/slot<S><3,4>|to<K> }:0/7 { portlist<S><1,256> }:0 MA5600(config)#port vlan 9 { frame/slot<S><3,4>|to<K> }:0/7 { portlist<S><1,256> }:1
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Standard VLAN ServiceConfiguration 3.Displaying the information on a standard VLAN MA5600(config)#display vlan 9 VLAN ID: 9 VLAN attribute: standard Standard port number: 2 -------------------------- F/ S/ P State -------------------------- 0/ 7/ 0 down 0/ 7/ 1 down --------------------------
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration The Smart VLAN configuration involves: 1.Adding/Deleting a Smart VLAN 2.Adding/Deleting a port to/from a Smart VLAN 3.Displaying the information on a Smart VLAN ADSL link configuration User User User...User vlan 20 Upper network MA5600 CON ETH MON A D E F
A D E F
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration Create a Smart VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> |attrib<K>}:20 {vlantype<E><mux,standard,smart,super>|to<K> }:smart Add the upstream port MA5600(config)#port vlan 20 0/7 0 Configure multicast PVCs. MA5600(config)#vlan smart 20 { vpi<K> }:vpi 0 vci 35
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal Smart VLAN Service Configuration Add port 1 on the ADSL board residing in slot 0/12 to VLAN 20. MA5600(config)#service-port vlan 20 adsl 0/12/1 vpi 0 vci 35 rx-cttr 2 Add port 0-31on the ADSL board residing in slot 0/0 to VLAN 20 MA5600(config)# multi-service-port vlan 20 adsl 0/0 0-31 rx- cttr 2 tx-cttr 2
After the above configuration, the PCs can visit Internet but can not ping each other. Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration The MUX VLAN configuration involves: 1.Creating/Deleting a MUX VLAN 2.Adding/Deleting a port to/from a MUX VLAN 3.Displaying the information on a MUX VLAN ADSL link configuration
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration Create a MUX VLAN. MA5600(config)#vlan { smart<K>|vlanid<U><1,4000> }:10 { mux<K>|standard<K>|smart<K>|to<K> }:mux Add upstream port MA5600(config)#port vlan 10 0/7 0 Add/Delete a service port to/from a MUX VLAN MA5600(config)# service-port vlan 10 adsl 0/1/0 vpi 0 rx-cttr 0 tx-cttr 0
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal MUX VLAN Configuration Add Multiple Ports to Different MUX VLAN Add all ADSL and SHDSL ports to MUX VLANs, with the first port corresponding to VLAN 2. MA5600(config)#multi-service-port from-vlan 2 board 0-15 vpi 0 vci 35 rx-cttr 2 tx-cttr 2
Confidential Information of Huawei. No Spreading without Permission. Security Level: Internal