Configuration Guide-IPM CLI (V100R017 - 05)

UA5000 Universal Access Unit
V100R017
Configuration Guide-IPM CLI
Issue 05
Date 2009-04-30
Huawei Proprietary and Confidential

Copyright Huawei Technologies Co., Ltd.
Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. For any
assistance, please contact our local office or company headquarters.
Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: http://www.huawei.com
Email: support@huawei.com
Copyright Huawei Technologies Co., Ltd. 2009. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written
consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are the property of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective holders.
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but the statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Huawei Proprietary and Confidential

Configuration Guide-IPM CLI Contents
Contents
About This Document.....................................................................................................................1

1 Managing the License................................................................................................................1-1
1.1 Introduction to the License .............................................................................................................................1-2
1.2 License Principles...........................................................................................................................................1-3
1.3 Configuration Example of the License Application........................................................................................1-3
1.4 Configuring the ESN of the Device................................................................................................................1-6
1.5 Configuring the License Server.......................................................................................................................1-7
2 Configuring the Maintenance Terminal................................................................................2-1

2.1 Introduction to the Maintenance Terminal......................................................................................................2-2
2.2 Configuring the Terminal Through the Local Serial Port...............................................................................2-3
2.3 Configuring the Terminal Through the Remote Serial Port............................................................................2-9
2.4 Configuring the Outband Management Interface..........................................................................................2-16
2.5 Configuring the Inband Management Interface............................................................................................2-20
2.6 Configuring the SSH Mode...........................................................................................................................2-24
3 CLI Operation Basics.................................................................................................................3-1

3.1 Overview.........................................................................................................................................................3-2
3.2 CLI Features....................................................................................................................................................3-2
3.2.1 Introduction to the Command Mode......................................................................................................3-3
3.2.2 Intelligent Matching...............................................................................................................................3-4
3.2.3 Edit Characteristics................................................................................................................................3-4
3.2.4 Interaction Characteristics......................................................................................................................3-5
3.2.5 Parameter Prompt...................................................................................................................................3-6
3.2.6 Display Characteristics...........................................................................................................................3-7
3.2.7 Saving and Showing History Commands...............................................................................................3-7
3.2.8 CLI Error Prompts..................................................................................................................................3-8
3.3 Basic Operation Through CLI.........................................................................................................................3-9
3.3.1 Obtaining Online Help Information.....................................................................................................3-10
3.3.2 Enabling Interactive Command Execution...........................................................................................3-11
3.3.3 Enabling CLI Trap Reporting..............................................................................................................3-12
3.3.4 Switching Terminal Language.............................................................................................................3-13
3.3.5 Configuring the System Time..............................................................................................................3-14
3.3.6 Setting the System Name.....................................................................................................................3-14
Issue 05 (2009-04-30) Huawei Proprietary and Confidential i

Contents Configuration Guide-IPM CLI
3.3.7 Setting the Terminal Type....................................................................................................................3-15

3.3.8 Setting Timeout Exit Time...................................................................................................................3-15
3.3.9 Locking the Terminal...........................................................................................................................3-16
3.3.10 Clearing the Terminal Screen.............................................................................................................3-17
3.3.11 Querying the Version Information.....................................................................................................3-17
3.3.12 Querying Board CPU Usage..............................................................................................................3-17
3.3.13 Testing the Network State..................................................................................................................3-18
4 Configuring the BMS................................................................................................................4-1

4.1 Introduction to the BMS..................................................................................................................................4-2
4.2 Configuration Example of Outband BMS.......................................................................................................4-2
4.3 Configuration Example of an Inband BMS.....................................................................................................4-4
4.4 Configuring the SNMP Agent.........................................................................................................................4-7
4.4.1 Setting a Community Name and its Read and Write Rights..................................................................4-7
4.4.2 Enabling the Sending of Trap Packets...................................................................................................4-8
4.4.3 Setting the IP Address of the Destination Host of Trap Packets............................................................4-9
4.4.4 Setting the Source Interface for Sending Trap Packets........................................................................4-10
4.4.5 Setting the Device Administrator ID....................................................................................................4-10
4.4.6 Setting the System Location Information.............................................................................................4-11
4.5 Configuring the IP Address of the Outband BMS........................................................................................4-12
4.6 Configuring the BMS Route.........................................................................................................................4-13
4.7 Configuring the IP Address of the Inband BMS...........................................................................................4-14
5 Configuring the Log Host.........................................................................................................5-1

5.1 Introduction to the Log Host...........................................................................................................................5-2
5.2 Configuration Example of a Log Host............................................................................................................5-2
5.3 Configuring a Log Host...................................................................................................................................5-3
5.4 Deleting a Log Host........................................................................................................................................5-4
5.5 Deactivating a Log Host..................................................................................................................................5-5
5.6 Querying Logs.................................................................................................................................................5-6
6 User Management...................................................................................................................... 6-1

6.1 Introduction to User Management...................................................................................................................6-2
6.2 Adding a User..................................................................................................................................................6-2
6.3 Modifying the User Attributes........................................................................................................................6-4
6.3.1 Modifying a User Level.........................................................................................................................6-4
6.3.2 Modifying a User Password...................................................................................................................6-5
6.3.3 Modifying the Times of Re-logins.........................................................................................................6-6
6.3.4 Modifying the Supplementary Information About a User.....................................................................6-7
6.4 Disconnect an online user...............................................................................................................................6-8
6.5 Deleting a User................................................................................................................................................6-9
7 Device Management..................................................................................................................7-1
7.1 Introduction to the Device...............................................................................................................................7-2
7.2 Adding the Connection Between Shelves.......................................................................................................7-3
ii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

7.3 Setting the Description of a Shelf...................................................................................................................7-3

7.4 Resetting a Control Board...............................................................................................................................7-4
7.5 Adding a Service Board..................................................................................................................................7-5
7.6 Deleting a Service Board.................................................................................................................................7-6
7.7 Resetting a Service Board...............................................................................................................................7-7
7.8 Prohibiting a Service Board............................................................................................................................7-8
7.9 Managing Subboards.......................................................................................................................................7-9
8 Configuring Remote User Authentication............................................................................8-1

8.1 Introduction to Remote User Authentication..................................................................................................8-2
8.2 Related Concepts of Remote User Authentication..........................................................................................8-2
8.2.1 Introduction to AAA..............................................................................................................................8-2
8.2.2 Introduction to RADIUS........................................................................................................................8-3
8.2.3 Introduction to SSH................................................................................................................................8-3
8.3 Configuration Example of Remote User Authentication................................................................................8-4
8.4 Configuring AAA............................................................................................................................................8-7
8.4.1 Configuring an Authentication Scheme.................................................................................................8-7
8.4.2 Creating a Domain.................................................................................................................................8-8
8.4.3 Referencing an Authentication Scheme.................................................................................................8-9
8.4.4 Referencing a RADIUS Server Template............................................................................................8-10
8.5 Configuring RADIUS...................................................................................................................................8-11
8.5.1 Introduction to RADIUS Configuration...............................................................................................8-12
8.5.2 Creating a RADIUS Server Template..................................................................................................8-13
8.5.3 Configuring the IP Address and the Port Number of a RADIUS Server.............................................8-14
8.5.4 Configuring the Shared Key of a RADIUS Server..............................................................................8-15
8.5.5 Configuring the Response Timeout Interval of a RADIUS Server......................................................8-16
8.5.6 Configuring the Maximum Retransmit Count of RADIUS Request Packets......................................8-17
8.5.7 Configuring the RADIUS Server Type................................................................................................8-18
8.5.8 Configuring an NAS Port and Its ID Format.......................................................................................8-19
8.5.9 Configuring the Format of the User Name Sent to a RADIUS Server................................................8-20
8.6 Configuring SSH...........................................................................................................................................8-21
8.6.1 Creating the Local RSA Key Pair........................................................................................................8-22
8.6.2 Configuring the Public Key of the SSH User......................................................................................8-23
8.6.3 Configuring an SSH User.....................................................................................................................8-24
9 Configuring a VLAN.................................................................................................................9-1
9.1 Introduction to the VLAN...............................................................................................................................9-3
9.2 Configuration Example of a Standard VLAN.................................................................................................9-4
9.3 Configuration Example of a Smart VLAN.....................................................................................................9-4
9.4 Configuration Example of a MUX VLAN......................................................................................................9-6
9.5 Configuration Example of a Super VLAN......................................................................................................9-9
9.6 Adding a VLAN............................................................................................................................................9-12
9.7 Configuring the VLAN Attribute..................................................................................................................9-13
9.8 Adding an Uplink Port to a VLAN...............................................................................................................9-14
Issue 05 (2009-04-30) Huawei Proprietary and Confidential iii

9.9 Configuring the Upstream CAR for a VLAN...............................................................................................9-15

9.10 Adding a Service Port to a VLAN..............................................................................................................9-16
9.11 Configuring the Description Information About a Service Port.................................................................9-18
9.12 Activating a Service Port.............................................................................................................................9-19
10 Configuring DHCP Relay.....................................................................................................10-1

10.1 Introduction to the DHCP Relay.................................................................................................................10-3
10.2 Configuration Example of the DHCP Standard Mode................................................................................10-4
10.3 Configuration Example of the DHCP Option60 Mode...............................................................................10-7
10.4 Configuration Example of the DHCP MAC Address Segment Mode......................................................10-10
10.5 Creating a DHCP Server Group................................................................................................................10-13
10.6 Setting DHCP Relay Mode.......................................................................................................................10-14
10.7 Binding a DHCP Server Group with a VLAN Interface...........................................................................10-14
10.8 Creating a DHCP Option60 Domain.........................................................................................................10-15
10.9 Binding a DHCP Server Group with a DHCP Option60 Domain............................................................10-16
10.10 Configuring the Gateway of a DHCP Option60 Domain.......................................................................10-17
10.11 Creating a DHCP MAC Address Segment.............................................................................................10-18
10.12 Setting the Range of a DHCP MAC Address Segment..........................................................................10-19
10.13 Binding a DHCP Server Group with a DHCP MAC Address Segment.................................................10-20
10.14 Configuring the Gateway of a DHCP MAC Address Segment..............................................................10-21
11 Configuring the ARP/ARP Proxy........................................................................................11-1

11.1 Introduction to the APR..............................................................................................................................11-2
11.2 Configuration Example of ARP Proxy........................................................................................................11-2
11.3 Configuring a Static ARP Entry..................................................................................................................11-5
11.4 Enabling the ARP Proxy.............................................................................................................................11-6
12 Configuring a Routing Protocol..........................................................................................12-1

12.1 Introduction to the Routing Protocol...........................................................................................................12-3
12.2 Configuration Example of a Static Route...................................................................................................12-3
12.3 Configuration Example of RIP....................................................................................................................12-6
12.4 Configuration Example of OSPF..............................................................................................................12-10
12.5 Configuration Example of a Route Policy................................................................................................12-13
12.6 Adding a Static Route...............................................................................................................................12-16
12.7 Configuring RIP........................................................................................................................................12-18
12.7.1 Enabling the RIP Process.................................................................................................................12-19
12.7.2 Configuring the Version of RIP.......................................................................................................12-20
12.7.3 Configuring Zero Field Check for RIP-I Packets.............................................................................12-21
12.7.4 Configuring the Cost of the Default Route......................................................................................12-22
12.7.5 Configuring Route Aggregation.......................................................................................................12-23
12.7.6 Specifying Default Routing Metric..................................................................................................12-24
12.7.7 Importing Routes of Other Protocols...............................................................................................12-25
12.7.8 Disabling Host Routes Receiving....................................................................................................12-26
12.7.9 Configuring the RIP Priority............................................................................................................12-27
iv Huawei Proprietary and Confidential Issue 05 (2009-04-30)

12.7.10 Configuring the Route Filtering Policy..........................................................................................12-28

12.7.11 Verifying the Source IP Address of a RIP Route Update..............................................................12-29
12.7.12 Resetting RIP..................................................................................................................................12-30
12.7.13 Clearing RIP Process Statistics......................................................................................................12-30
12.7.14 Disabling RIP Packet Transmission on a Specified Interface........................................................12-31
12.7.15 Configuring the IP Address of a Peer Router.................................................................................12-32
12.7.16 Configuring the IP Address of a Summary Route..........................................................................12-33
12.7.17 Enabling an Interface to Receive and Transmit RIP Packets.........................................................12-33
12.7.18 Enabling the Split Horizon Function..............................................................................................12-34
12.7.19 Enabling the Poison Reverse Function...........................................................................................12-35
12.7.20 Configuring the RIP-2 Authentication Mode.................................................................................12-36
12.7.21 Configuring the Additional Metric of a Route...............................................................................12-36
12.7.22 Configuring the RIP Timer............................................................................................................12-37
12.8 Configuring OSPF.....................................................................................................................................12-38
12.8.1 Enabling the OSPF Process..............................................................................................................12-39
12.8.2 Entering OSPF Area Configuration Mode.......................................................................................12-40
12.8.3 Configuring Subnets for an Area.....................................................................................................12-41
12.8.4 Configuring DR Priority...................................................................................................................12-42
12.8.5 Configuring the OSPF Stub Area.....................................................................................................12-43
12.8.6 Configuring an NBMA Adjacent Router.........................................................................................12-43
12.8.7 Setting the OSPF Priority.................................................................................................................12-44
12.8.8 Disabling OSPF Packet Transmission on an Interface.....................................................................12-45
12.8.9 Configuring the Maximum Number of OSPF Routes......................................................................12-46
12.8.10 Enabling the OSPF Logging Function...........................................................................................12-46
12.9 Configuring OSPF on a VLAN Interface..................................................................................................12-47
12.9.1 Configuring the Network Type of an OSPF Interface.....................................................................12-47
12.9.2 Configuring OSPF Cost...................................................................................................................12-48
12.9.3 Configuring OSPF Packet Authentication.......................................................................................12-49
12.9.4 Configuring the MTU of a DD Packet.............................................................................................12-50
12.10 Configuring the OSPF Timer..................................................................................................................12-51
12.10.1 Setting the Interval for Sending Hello Packets..............................................................................12-51
12.10.2 Setting the Dead Time Between Adjacent Routers........................................................................12-52
12.10.3 Setting the Poll Interval of Hello Packets......................................................................................12-53
12.10.4 Setting the LSA Transmit Delay....................................................................................................12-53
12.10.5 Setting the LSA Retransmit Interval..............................................................................................12-54
12.10.6 Setting the SPF Calculation Interval for OSPF..............................................................................12-55
12.11 Configuring Route Aggregation..............................................................................................................12-56
12.11.1 Configuring Route Aggregation Between Areas...........................................................................12-56
12.11.2 Configuring the Aggregation of Routes Imported by OSPF..........................................................12-57
12.12 Configuring OSPF Route Import............................................................................................................12-57
12.12.1 Importing Routes from Other Protocols into OSPF.......................................................................12-58
12.12.2 Configuring the Default Parameters of OSPF Imported Routes....................................................12-58
Issue 05 (2009-04-30) Huawei Proprietary and Confidential v

12.13 Configuring the Route Filtering Policy...................................................................................................12-59

12.14 Querying and Debugging OSPF..............................................................................................................12-60
12.15 Configuring an Address Prefix List........................................................................................................12-61
12.16 Configuring a Route Policy.....................................................................................................................12-62
12.16.1 Defining a Route Policy.................................................................................................................12-62
12.16.2 Defining the If-match Clause of a Route Policy............................................................................12-64
12.16.3 Defining the Apply Clause of a Route Policy................................................................................12-65
13 Configuring RSTP..................................................................................................................13-1
13.1 Introduction to the RSTP Protocol..............................................................................................................13-2
13.2 Enabling the RSTP Function.......................................................................................................................13-2
13.3 Setting the RSTP Working Mode................................................................................................................13-3
13.4 Setting the Bridge Diameter........................................................................................................................13-5
13.5 Configuring the Parameters of a Specified Bridge......................................................................................13-6
13.5.1 Setting the Priority of the Specified Bridge.......................................................................................13-6
13.5.2 Configure the Forward Delay of the Specified Bridge.......................................................................13-7
13.5.3 Setting the Hello Time of a Specified Bridge....................................................................................13-8
13.5.4 Setting the MAX Age of a Specified Bridge......................................................................................13-9
13.6 Configuring the Parameters of a Specified Port........................................................................................13-11
13.6.1 Setting the Maximum Transmission Rate of a Specified Port.........................................................13-11
13.6.2 Configuring the Specified Port as an Edge Port...............................................................................13-12
13.6.3 Setting the Path Cost of a Specified Port.........................................................................................13-13
13.6.4 Setting the Priority of a Specified Port.............................................................................................13-14
13.6.5 Configuring the Point-to-Point Link for a Specified Port................................................................13-15
13.7 Configuring the mCheck Variable............................................................................................................13-16
13.8 Clearing the RSTP Statistics.....................................................................................................................13-16
14 Configuring RRPP.................................................................................................................14-1
14.1 Introduction to RRPP..................................................................................................................................14-2
14.2 Configuration Example of the Single RRPP Ring Networking..................................................................14-2
14.3 Enabling RRPP............................................................................................................................................14-9
14.4 Configuring RRPP Domain Parameters....................................................................................................14-10
14.4.1 Configuring an RRPP Domain.........................................................................................................14-10
14.4.2 Configuring the Control VLAN of an RRPP Domain.....................................................................14-11
14.4.3 Configuring the Interval of the Hello Timer of an RRPP Domain..................................................14-12
14.4.4 Configuring the Interval of the Fail Timer of an RRPP Domain.....................................................14-13
14.5 Configuring the Running Mode of RRPP.................................................................................................14-14
14.6 Configuring an RRPP Ring.......................................................................................................................14-15
14.7 Configuring the Working Mode of an RRPP Port....................................................................................14-17
14.8 Configuring the Working Mode of an RRPP Node..................................................................................14-18
15 Configuring NTP....................................................................................................................15-1
15.1 Introduction to NTP....................................................................................................................................15-3
15.2 Configuration Example of the NTP Broadcast Mode.................................................................................15-3
vi Huawei Proprietary and Confidential Issue 05 (2009-04-30)

15.3 Configuration Example of the NTP Multicast Mode..................................................................................15-8

15.4 Configuration Example of the NTP Unicast Server Mode........................................................................15-13
15.5 Configuration Example of the NTP Peer Mode........................................................................................15-17
15.6 Configuring the NTP ID Authentication...................................................................................................15-21
15.7 Configuring the NTP Master Clock..........................................................................................................15-23
15.8 Configuring the NTP Server in Broadcast Mode......................................................................................15-24
15.9 Configuring the NTP Client in Broadcast Mode.......................................................................................15-25
15.10 Configuring the NTP Server in Multicast Mode.....................................................................................15-26
15.11 Configuring the NTP Client in Multicast Mode......................................................................................15-26
15.12 Configuring the NTP Unicast Client.......................................................................................................15-27
15.13 Configuring the NTP Peer.......................................................................................................................15-28
15.14 Configuring the Authority of Access to a Local Device NTP Service...................................................15-29
15.15 Configuring an Interface for Transmitting or Receiving NTP Packets...................................................15-30
16 Managing the MAC Address ..............................................................................................16-1

16.1 Introduction to the MAC Address...............................................................................................................16-2
16.2 Adding a Static MAC Address....................................................................................................................16-2
16.3 Setting the Maximum Number of MAC Addresses Learned by a Service Port..........................................16-3
16.4 Configuring the Aging Time of a Dynamic MAC Address........................................................................16-4
16.5 Configuring the MAC Address Filtering Function.....................................................................................16-5
16.6 Configuring a MAC Address Pool..............................................................................................................16-5
17 Configuring the TCP/IP Connection..................................................................................17-1

17.1 Introduction to the TCP/IP Connection.......................................................................................................17-2
17.2 Related Concepts of TCP/IP Connection....................................................................................................17-2
17.3 Configuring the synwait Timer...................................................................................................................17-2
17.4 Configuring the finwait Timer....................................................................................................................17-3
17.5 Configuring the Socket Buffer....................................................................................................................17-4
17.6 Enabling the TCP Debugging.....................................................................................................................17-4
17.7 Enabling the IP Packet Debugging..............................................................................................................17-5
18 Configuring the ACL.............................................................................................................18-1

18.1 Introduction to the ACL..............................................................................................................................18-3
18.2 Configuration Example of a Basic ACL.....................................................................................................18-5
18.3 Configuration Example of an Advanced ACL............................................................................................18-7
18.4 Configuration Example of a Layer 2 ACL..................................................................................................18-9
18.5 Configuration Example of the Customized ACL......................................................................................18-11
18.6 Creating an ACL.......................................................................................................................................18-12
18.7 Configuring a Time Range........................................................................................................................18-14
18.8 Setting the Step..........................................................................................................................................18-15
18.9 Creating a Basic ACL Rule.......................................................................................................................18-16
18.10 Creating an Advanced ACL Rule............................................................................................................18-17
18.11 Creating a Layer 2 ACL Rule.................................................................................................................18-18
18.12 Creating a Customized ACL Rule...........................................................................................................18-19
Issue 05 (2009-04-30) Huawei Proprietary and Confidential vii

18.13 Activating an ACL..................................................................................................................................18-21
19 Configuring the QoS.............................................................................................................19-1

19.1 Introduction to QoS.....................................................................................................................................19-3
19.2 Configuration Example of Traffic Sorting..................................................................................................19-3
19.3 Traffic Management....................................................................................................................................19-5
19.4 Limiting the Traffic of the Packet That Matches an ACL Rule..................................................................19-8
19.5 Adding a Priority Tag to the Packet That Matches an ACL Rule...............................................................19-9
19.6 Mirroring the Traffic of the Packet That Matches an ACL Rule..............................................................19-10
19.7 Redirecting the Packet That Matches an ACL Rule..................................................................................19-11
19.8 Collecting Traffic Statistics of the Packet That Matches an ACL Rule....................................................19-12
19.9 Modifying the VLAN for the Packet That Matches an ACL Rule...........................................................19-13
19.10 Enabling Line Rate Limitation on a Port................................................................................................19-14
19.11 Configuring the Queue Scheduling Mode...............................................................................................19-15
20 Configuring the User Security.............................................................................................20-1

20.1 Introduction to User Security......................................................................................................................20-3
20.2 Configuring the PITP Function...................................................................................................................20-3
20.3 Setting the RAIO Working Mode...............................................................................................................20-5
20.4 Enabling the DHCP Option82 Function......................................................................................................20-6
20.5 Setting the Maximum Length of a DHCP Packet.......................................................................................20-7
20.6 Binding the IP Address...............................................................................................................................20-7
20.7 Enabling the Anti MAC Spoofing Function...............................................................................................20-9
20.8 Enabling the Anti IP Spoofing Function...................................................................................................20-10
21 Configuring the System Security........................................................................................21-1

21.1 Introduction to System Security..................................................................................................................21-3
21.2 Enabling the Anti DoS Attack Function.....................................................................................................21-3
21.3 Enabling the Anti IP Attack Function.........................................................................................................21-4
21.4 Enabling the Anti ICMP Attack Function...................................................................................................21-4
21.5 Configuring the MAC Address Filtering Function.....................................................................................21-5
21.6 Enabling the Ring Network Detection on the User Side.............................................................................21-6
21.7 Configuring the Firewall Black List Function............................................................................................21-7
21.8 Configuring the Firewall Function..............................................................................................................21-8
21.9 Configuring an Accessible Address Segment...........................................................................................21-10
21.10 Configuring an Inaccessible Address Segment.......................................................................................21-11
22 Configuring the ADSL2+ Service.......................................................................................22-1

22.1 Introduction to the ADSL2+ Service..........................................................................................................22-3
22.2 Configuration Example of the ADSL2+ IPoA Service...............................................................................22-4
22.3 Configuration Example of the ADSL2+ PPPoA Service..........................................................................22-10
22.4 Configuration Example of the ADSL2+ PPPoE/IPoE Service.................................................................22-17
22.5 Adding an ADSL2+ Line Profile..............................................................................................................22-24
22.6 Adding an ADSL2+ Extended Line Profile..............................................................................................22-29
22.7 Adding an ADSL2+ Alarm Profile...........................................................................................................22-31
viii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

22.8 Activating an ADSL2+ Port......................................................................................................................22-35

22.9 Configuring the Port Rate Reachability Thresholds for an ADSL2+ Port................................................22-36
22.10 Configuring the Rate Change Reporting Switch of an ADSL2+ Port....................................................22-38
22.11 Configuring IPoA/IPoE Protocol Conversion.........................................................................................22-39
22.11.1 Enabling IPoA Protocol Conversion..............................................................................................22-39
22.11.2 Setting the Aging Time of IPoA Forwarding Entry.......................................................................22-39
22.11.3 Configuring the Default Gateway of the IPoA User......................................................................22-40
22.11.4 Configuring the Encapsulation Type of the IPoA User.................................................................22-41
22.12 Configuring PPPoA/PPPoE Protocol Conversion...................................................................................22-42
22.12.1 Enabling PPPoA Protocol Conversion...........................................................................................22-42
22.12.2 Configuring the Encapsulation Type of the PPPoA User..............................................................22-43
22.12.3 Enabling PPPoA/PPPoE MRU Negotiation...................................................................................22-44
22.13 Querying an ADSL2+ Port......................................................................................................................22-45
23 Configuring the SHDSL Service.........................................................................................23-1

23.1 Introduction to the SHDSL Service............................................................................................................23-3
23.2 Configuration Example of the SHDSL IPoA Service.................................................................................23-3
23.3 Configuration Example of the SHDSL PPPoA Service..............................................................................23-9
23.4 Configuration Example of the SHDSL IPoE/PPPoE Service...................................................................23-15
23.5 Adding an SHDSL Line Profile................................................................................................................23-21
23.6 Adding an SHDSL Alarm Profile.............................................................................................................23-24
23.7 Binding an SHDSL Alarm Profile............................................................................................................23-27
23.8 Configuring the SHDSL Multi-Pair Binding............................................................................................23-28
23.9 Configuring the SHDSL EFM M-Pair Binding........................................................................................23-29
23.10 Activating an SHDSL Port......................................................................................................................23-31
23.11 Querying an SHDSL Port........................................................................................................................23-32
23.12 Configuring the Channel Mode Switch of SHDSL Chipset...................................................................23-33
23.13 Configuring the Clock Mode...................................................................................................................23-33
24 Configuring the VDSL2 Service..........................................................................................24-1

24.1 Introduction to the VDSL2 Service.............................................................................................................24-3
24.2 Configuration Example of the VDSL2 IPoA Service.................................................................................24-3
24.3 Configuration Example of the VDSL2 PPPoA Service............................................................................24-10
24.4 Configuration Example of the VDSL2 PPPoE/IPoE Service...................................................................24-17
24.5 Adding a VDSL2 Line Profile..................................................................................................................24-25
24.6 Adding a VDSL2 Channel Profile............................................................................................................24-31
24.7 Adding a VDSL2 Line Template..............................................................................................................24-35
24.8 Adding a VDSL2 Line Alarm Profile.......................................................................................................24-37
24.9 Adding a VDSL2 Channel Alarm Profile.................................................................................................24-40
24.10 Adding a VDSL2 Alarm Template.........................................................................................................24-43
24.11 Binding a VDSL2 Alarm Template........................................................................................................24-45
24.12 Activating a VDSL2 Port........................................................................................................................24-46
24.13 Querying a VDSL2 Port..........................................................................................................................24-47
Issue 05 (2009-04-30) Huawei Proprietary and Confidential ix

25 Protection Configuration for an Upstream Link..............................................................25-1

25.1 Introduction to the Upstream Link..............................................................................................................25-2
25.2 Configuration Example for Setting the Port State Detection Mode............................................................25-2
25.3 Configuration Example for Setting the Delay Detection Mode..................................................................25-4
25.4 Configuration Example for Setting the LACP Detection Mode.................................................................25-5
25.5 Configuration Example of the Upstream Link Protection...........................................................................25-7
25.6 Configuring a Protection Group................................................................................................................25-10
26 Configuring the LAN Access ..............................................................................................26-1

26.1 Introduction to the LAN Access..................................................................................................................26-2
26.2 Configuration Example of the LAN Access over EAU..............................................................................26-2
26.3 Configuration Example of the LAN Access over IPMB.............................................................................26-5
27 Configuring the EPON Upstream Transmission.............................................................27-1

27.1 Introduction to the EPON Upstream Transmission.....................................................................................27-2
27.2 Configuration Example of the EPON Upstream Transmission..................................................................27-2
27.3 Clearing the Statistics About the EPON Port..............................................................................................27-6
28 Configuring the GPON Upstream Transmission............................................................28-1

28.1 Overview of the GPON Upstream Transmission........................................................................................28-2
28.2 Configuration Example of the GPON Upstream Transmission..................................................................28-2
28.3 Clearing GPON Port Statistics....................................................................................................................28-7
29 Configuring the Device Subtending..................................................................................29-1

29.1 Introduction to the Device Subtending........................................................................................................29-3
29.2 Configuration Example of Device Subtending...........................................................................................29-4
29.3 Configuring the Physical Attributes of an Ethernet Port.............................................................................29-6
29.3.1 Configuring the Auto-negotiation Mode of an Ethernet Port............................................................29-7
29.3.2 Configuring the Duplex Mode of an Ethernet Port............................................................................29-7
29.3.3 Setting the Rate of an Ethernet Port...................................................................................................29-8
29.3.4 Configuring the Network Cable Type of an Ethernet Port.................................................................29-9
29.4 Enabling the Flow Control on an Ethernet Port........................................................................................29-10
29.5 Enabling the Traffic Suppression..............................................................................................................29-11
29.6 Enabling the Ethernet Port Aggregation...................................................................................................29-12
29.7 Mirroring an Ethernet Port........................................................................................................................29-14
29.8 Adding an Ethernet Port to a VLAN.........................................................................................................29-14
29.9 Setting the Native VLAN of an Ethernet Port...........................................................................................29-15
30 Configuring the VLAN Stacking Wholesale Service......................................................30-1

30.1 Introduction to the VLAN Stacking Wholesale Service.............................................................................30-2
30.2 Configuration Example of VLAN Stacking Multi-ISP Wholesale Access.................................................30-2
30.3 Setting the Inner and Outer Ethernet Protocol Types of a Stacking VLAN...............................................30-5
30.4 Configuring an Inner Label of a Stacking VLAN.......................................................................................30-6
31 Configuring the QinQ VLAN Leased Line Access..........................................................31-1

31.1 Introduction to the QinQ VLAN Leased Line Access................................................................................31-2
x Huawei Proprietary and Confidential Issue 05 (2009-04-30)

31.2 Configuration Example of the QinQ VLAN Leased Line Service.............................................................31-2

31.3 Enabling Transparent Transmission of BPDUs..........................................................................................31-4
32 Configuring the Multicast Service......................................................................................32-1

32.1 Introduction to the Multicast Service..........................................................................................................32-3
32.2 Configuration Example of IGMP Proxy Multicast Service........................................................................32-3
32.3 Configuration Example of the IGMP Snooping Multicast Service.............................................................32-7
32.4 Configuration Example of Multicast Service in Subtending Mode..........................................................32-10
32.5 Configuring the Multicast Service in RSTP Networking..........................................................................32-15
32.6 Setting the IGMP Mode............................................................................................................................32-23
32.7 Configuring an IGMP Uplink Port............................................................................................................32-24
32.8 Specifying a Subtending Port....................................................................................................................32-26
32.9 Adding a Program for a Static Subtending Port........................................................................................32-27
32.10 Configuring IGMP Global Parameters....................................................................................................32-28
32.10.1 Enabling the IGMP Proxy Authorization.......................................................................................32-29
32.10.2 Configuring the Robustness Variable............................................................................................32-30
32.10.3 Configuring the General Query Interval........................................................................................32-32
32.10.4 Configuring the Maximum Response Time to the General Query................................................32-33
32.10.5 Configuring the Group-Specific Query Count...............................................................................32-34
32.10.6 Configuring the Group-Specific Query Interval............................................................................32-36
32.10.7 Configuring the Maximum Response Time to the Group-Specific Query....................................32-37
32.10.8 Configuring the Unsolicited Report Interval..................................................................................32-39
32.10.9 Configuring the TTL of a V1 Router.............................................................................................32-40
32.10.10 Configuring the Default VPI/VCI................................................................................................32-41
32.10.11 Configuring the Preview Recognition Time................................................................................32-42
32.10.12 Enabling the User Action Report Function..................................................................................32-43
32.10.13 Configuring the Priority for the User Rights................................................................................32-45
32.10.14 Enabling the Proxy of the IGMP Report Packet..........................................................................32-45
32.10.15 Enabling the Proxy of the IGMP Leave Packet...........................................................................32-47
32.10.16 Enabling the Dual Sending Function for IGMP Packets..............................................................32-48
32.10.17 Enabling the Querier....................................................................................................................32-49
32.10.18 Configuring the Aging Time of All Users...................................................................................32-51
32.11 Adding a Program...................................................................................................................................32-52
32.12 Managing Multicast Bandwidths............................................................................................................32-54
32.12.1 Enabling Bandwidth Management.................................................................................................32-54
32.12.2 Configuring Uplink Port Bandwidth..............................................................................................32-56
32.12.3 Configuring the User Bandwidth...................................................................................................32-56
32.12.4 Configuring the Multicast Program Bandwidth.............................................................................32-57
32.13 Configuring a Rights Profile...................................................................................................................32-57
32.13.1 Configuring the Rights Mode.........................................................................................................32-57
32.13.2 Modifying the Program Rights of a Rights Profile........................................................................32-59
32.13.3 Renaming a Rights Profile.............................................................................................................32-60
32.14 Configuring Multicast Users...................................................................................................................32-61
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xi

32.14.1 Adding a BTV user........................................................................................................................32-61

32.14.2 Modifying the Attributes of a User................................................................................................32-62
32.14.3 Blocking a BTV User.....................................................................................................................32-63
32.14.4 Binding a User with a Rights Profile.............................................................................................32-64
32.14.5 Granting Program Rights to a User................................................................................................32-65
32.14.6 Enabling the Function of Monitoring BTV Users..........................................................................32-66
32.15 Configuring the Preview Function..........................................................................................................32-67
32.15.1 Enabling the Preview Function......................................................................................................32-67
32.15.2 Configuring the Preview Parameters..............................................................................................32-69
32.15.3 Configuring the Preview Auto Reset Time....................................................................................32-69
32.15.4 Clearing the Preview Records Manually........................................................................................32-71
32.16 Configuring the Logging Function..........................................................................................................32-72
32.16.1 Enabling the Logging Function......................................................................................................32-72
32.16.2 Configuring the Logging Interval..................................................................................................32-73
32.16.3 Configuring Log Reporting............................................................................................................32-75
32.16.4 Collecting Log Statistics................................................................................................................32-76
32.17 Configuring Active CDR Reporting.......................................................................................................32-76
32.18 Configuring Manual CDR Reporting......................................................................................................32-78
33 Configuring the Triple Play Service...................................................................................33-1

33.1 Introduction to the Triple Play Service.......................................................................................................33-2
33.2 Configuration Example of Triple Play - Single PVC for Multiple Services...............................................33-3
33.3 Configuration Example of Triple Play - Multiple PVCs for Multiple Services..........................................33-9
34 Configuring the BFD.............................................................................................................34-1

34.1 Introduction to the BFD..............................................................................................................................34-2
34.2 Configuration Example of the BFD Route..................................................................................................34-2
34.3 Enabling the BFD Function.........................................................................................................................34-5
34.4 Creating a BFD Session..............................................................................................................................34-6
34.5 Configuring the BFD Session Parameters...................................................................................................34-7
35 Configuring the Environment Monitoring.......................................................................35-1

35.1 Introduction to Environment Monitoring....................................................................................................35-3
35.2 Configuration Example of ESC...................................................................................................................35-3
35.3 Configuration Example of FAN Monitoring...............................................................................................35-6
35.4 Configuration Example of Power Monitoring............................................................................................35-8
35.5 Configuration Example of the Universal Power Monitoring....................................................................35-10
35.6 Adding an EMU........................................................................................................................................35-12
35.7 Configuring the ESC Analogue Parameters..............................................................................................35-13
35.8 Configuring the ESC digital Parameters...................................................................................................35-15
35.9 Configuring the FAN Alarm Report ........................................................................................................35-16
35.10 Setting the FAN Speed Adjustment Mode..............................................................................................35-17
35.11 Configuring the FAN Speed....................................................................................................................35-18
35.12 Configuring a POWER4845 EMU..........................................................................................................35-20
xii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

36 Configuration Example of the Integrated Data and Voice Networking..................... 36-1

36.1 Networking..................................................................................................................................................36-2
36.2 Prerequisites................................................................................................................................................36-4
36.3 Data Plan (IPMB)........................................................................................................................................36-4
36.4 Configuration Procedure (IPM)..................................................................................................................36-5
36.5 Verification..................................................................................................................................................36-9
A FAQ.............................................................................................................................................A-1
A.1 How to prevent the system breakdown or the service interruption of the UA5000 caused by the network attacks
through the proper configuration?........................................................................................................................A-2
A.2 How Many PVCs are Supported by Each xDSL Port?.................................................................................A-2
A.3 Does the PVC Have Priority?........................................................................................................................A-2
A.4 How to Configure the Static User?................................................................................................................A-2
A.5 How to Configure the BMS VLAN?.............................................................................................................A-3
A.6 How to Change the BMS VLAN?.................................................................................................................A-3
A.7 How to Change the Service VLAN to Which the xDSL Port Belongs?.......................................................A-3
A.8 How to Delete the VLAN to Which the Uplink Port Is Bound?...................................................................A-4
A.9 How to Transparently Transmit the VLAN on the IPM Board?...................................................................A-4
A.10 Why Is the Actual Rate of the User Lower Than the Rate of the Bound Line Profile?..............................A-4
A.11 How to Query MAC Addresses of Online Users and Query the Ports that Provide the Access for the Users
According to the MAC Addresses?......................................................................................................................A-4
A.12 How to Delete the Service Board?..............................................................................................................A-4
B Acronyms & Abbreviations....................................................................................................B-1
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xiii

Configuration Guide-IPM CLI Figures
Figures
Figure 1-1 Example network for configuring the license application..................................................................1-4

Figure 1-2 Flowchart for configuring the license application..............................................................................1-5
Figure 2-1 Example network for configuring the terminal through the local serial port.....................................2-3
Figure 2-2 Flowchart for configuring the terminal through the local serial port.................................................2-4
Figure 2-3 Setting up a connection.......................................................................................................................2-5
Figure 2-4 Selecting the serial port to be connected............................................................................................2-5
Figure 2-5 Setting parameters of the HyperTerminal...........................................................................................2-6
Figure 2-6 HyperTerminal interface.....................................................................................................................2-7
Figure 2-7 Defining terminal emulation type.......................................................................................................2-8
Figure 2-8 Setting ASCII code.............................................................................................................................2-9
Figure 2-9 Example network for configuring the terminal through the remote serial port................................2-10
Figure 2-10 Flowchart for configuring the terminal through the remote serial port..........................................2-11
Figure 2-11 Setting up a connection...................................................................................................................2-13
Figure 2-12 Selecting the serial port to be connected........................................................................................2-13
Figure 2-13 Setting the parameters of the HyperTerminal.................................................................................2-14
Figure 2-14 HyperTerminal interface.................................................................................................................2-15
Figure 2-15 Example network for the outband management over the LAN in Telnet mode.............................2-17
Figure 2-16 Example network for the outband management over the WAN in Telnet mode...........................2-18
Figure 2-17 Flowchart for configuring the outband management interface to log in to the device in Telnet mode
.............................................................................................................................................................................2-19
Figure 2-18 Running Telnet...............................................................................................................................2-20
Figure 2-19 Example network for the inband management over the local area network (LAN) in the Telnet mode
.............................................................................................................................................................................2-21
Figure 2-20 Example network for the inband management over the WAN in the Telnet mode.......................2-21
Figure 2-21 Flowchart for configuring the device through the inband interface in the Telnet mode................2-22
Figure 2-22 Running Telnet...............................................................................................................................2-23
Figure 2-23 Example network of the outband management over LAN in SSH mode.......................................2-24
Figure 2-24 Example network for the outband management over WAN in SSH mode....................................2-25
Figure 2-25 Example network for the inband management over LAN in SSH mode.......................................2-26
Figure 2-26 Example network for the inband management over WAN in SSH mode......................................2-26
Figure 2-27 Flowchart for configuring the SSH mode.......................................................................................2-28
Figure 2-28 Interface of the key generator.........................................................................................................2-30
Figure 2-29 Interface of the key generator.........................................................................................................2-31
Figure 2-30 Interface of converting the client public key to the RSA public key..............................................2-32
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xv

Figures Configuration Guide-IPM CLI
Figure 2-31 Interface for the SSH client tool.....................................................................................................2-33

Figure 2-32 Interface for the SSH client login...................................................................................................2-34
Figure 2-33 Interface for the SSH client login...................................................................................................2-35
Figure 3-1 Command mode switching.................................................................................................................3-3
Figure 4-1 Example networking for configuring the outband BMS....................................................................4-2
Figure 4-2 Flowchart for configuring the outband BMS.....................................................................................4-3
Figure 4-3 Example network for configuring the inband BMS...........................................................................4-5
Figure 4-4 Flowchart for configuring the inband BMS.......................................................................................4-6
Figure 5-1 Example network for configuring the log host...................................................................................5-2
Figure 8-1 Example network for configuring the remote user authentication.....................................................8-4
Figure 8-2 Flowchart for configuring the remote user authentication.................................................................8-6
Figure 8-3 Flowchart for configuring the public key of the SSH user...............................................................8-23
Figure 9-1 Example network for configuring a smart VLAN..............................................................................9-5
Figure 9-2 Flowchart for configuring a smart VLAN..........................................................................................9-6
Figure 9-3 Example network for configuring a MUX VLAN.............................................................................9-7
Figure 9-4 Flowchart for configuring a MUX VLAN.........................................................................................9-8
Figure 9-5 Example network for configuring a super VLAN..............................................................................9-9
Figure 9-6 Flowchart for configuring a super VLAN........................................................................................9-11
Figure 10-1 UA5000 DHCP Relay.................................................................................................................... 10-3
Figure 10-2 Example network for configuring the DHCP standard mode.........................................................10-4
Figure 10-3 Flowchart for configuring the DHCP standard mode.....................................................................10-6
Figure 10-4 Example network for applying the DHCP option60 mode.............................................................10-7
Figure 10-5 Flowchart for configuring the DHCP option60 mode....................................................................10-9
Figure 10-6 Example network for configuring the MAC address segment mode...........................................10-10
Figure 10-7 Flowchart for configuring the MAC address segment mode........................................................10-12
Figure 11-1 Example network for configuring ARP Proxy...............................................................................11-3
Figure 11-2 Flowchart for configuring ARP proxy............................................................................................11-4
Figure 12-1 Example networking for configuring the static route.....................................................................12-4
Figure 12-2 Flowchart for configuring the static route......................................................................................12-5
Figure 12-3 Example network for configuring RIP........................................................................................... 12-7
Figure 12-4 Flowchart for configuring RIP....................................................................................................... 12-8
Figure 12-5 Example network for configuring OSPF......................................................................................12-10
Figure 12-6 Flowchart for configuring OSPF..................................................................................................12-11
Figure 12-7 Example network for configuring the route policy.......................................................................12-14
Figure 12-8 Flowchart for configuring the route policy...................................................................................12-15
Figure 14-1 Example network for configuring the single RRPP ring topology.................................................14-3
Figure 14-2 Flowchart for configuring the single RRPP ring networking.........................................................14-6
Figure 15-1 Example network for configuring the NTP broadcast mode..........................................................15-4
Figure 15-2 Flowchart for configuring the NTP broadcast mode on the UA5000_A side................................15-5
Figure 15-3 Flowchart for configuring the NTP broadcast mode on the UA5000_B side................................ 15-6
Figure 15-4 Example network for configuring the NTP multicast mode...........................................................15-9
Figure 15-5 Flowchart for configuring the NTP multicast mode on the UA5000_A side...............................15-10
xvi Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Figure 15-6 Flowchart for configuring the NTP multicast mode on the UA5000_B side...............................15-11
Figure 15-7 Example network for configuring the NTP unicast server mode.................................................15-14
Figure 15-8 Flowchart for configuring the NTP unicast server mode on the UA5000_A side.......................15-15
Figure 15-9 Flowchart for configuring the NTP unicast server mode on the UA5000_B side........................15-15
Figure 15-10 Example network for configuring the NTP peer mode..............................................................15-18
Figure 15-11 Flowchart for configuring the NTP peer mode on the UA5000_A side.....................................15-19
Figure 15-12 Flowchart for configuring the NTP peer mode on the UA5000_B side.....................................15-19
Figure 15-13 Flowchart for configuring the NTP ID authentication...............................................................15-22
Figure 18-1 Flowchart for configuring a basic ACL..........................................................................................18-6
Figure 18-2 Flowchart for configuring an advanced ACL.................................................................................18-8
Figure 18-3 Flowchart for configuring a layer 2 ACL.....................................................................................18-10
Figure 18-4 Flowchart for configuring a customized ACL..............................................................................18-12
Figure 18-5 First 64 bytes of a layer 2 frame...................................................................................................18-19
Figure 19-1 Flowchart for configuring traffic management...............................................................................19-4
Figure 21-1 Flowchart for configuring the firewall function.............................................................................21-9
Figure 22-1 Example network for configuring the ADSL2+ IPoA service.......................................................22-5
Figure 22-2 Flowchart for configuring the ADSL2+ IPoA service...................................................................22-7
Figure 22-3 Example network of the ADSL2+ PPPoA service.......................................................................22-11
Figure 22-4 Flowchart for configuring the ADSL2+ PPPoA service..............................................................22-14
Figure 22-5 Example network for configuring the ADSL2+ PPPoE/IPoE service.........................................22-18
Figure 22-6 Flowchart for configuring the ADSL2+ PPPoE/IPoE service......................................................22-21
Figure 22-7 Flowchart for configuring an ADSL2+ line profile-1..................................................................22-25
Figure 22-8 Flowchart for configuring an ADSL2+ line profile-2..................................................................22-26
Figure 22-9 Flowchart for adding an ADSL2+ alarm profile..........................................................................22-32
Figure 22-10 Switchover between ADSL2+ port statuses...............................................................................22-45
Figure 23-1 Example network for configuring the SHDSL IPoA service.........................................................23-4
Figure 23-2 Flowchart for configuring the SHDSL IPoA service.....................................................................23-6
Figure 23-3 Example network for configuring the SHDSL PPPoA service....................................................23-10
Figure 23-4 Flowchart for configuring the SHDSL PPPoA service................................................................23-13
Figure 23-5 Example network of the SHDSL IPoE/PPPoE service................................................................23-16
Figure 23-6 Flowchart for configuring the SHDSL IPoE/PPPoE service........................................................23-19
Figure 23-7 Flowchart for adding an SHDSL line profile...............................................................................23-23
Figure 23-8 Flowchart for adding an SHDSL alarm profile............................................................................23-25
Figure 23-9 Inter-conversion between the SHDSL port states.........................................................................23-32
Figure 24-1 Example network for configuring the VDSL2 IPoA service..........................................................24-4
Figure 24-2 Flowchart for configuring the VDSL2 IPoA service......................................................................24-6
Figure 24-3 Example network for configuring the VDSL2 PPPoA service....................................................24-10
Figure 24-4 Flowchart for configuring the VDSL2 PPPoA service................................................................24-13
Figure 24-5 Example network for configuring the VDSL2 PPPoE/IPoE service............................................24-18
Figure 24-6 Flowchart for configuring the VDSL2 PPPoE/IPoE service........................................................24-21
Figure 24-7 Flowchart 1 for adding a VDSL2 line profile...............................................................................24-26
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xvii

Figures Configuration Guide-IPM CLI

Figure 24-10 Flowchart for adding a VDSL2 channel profile.........................................................................24-32
Figure 24-11 Flowchart for adding a VDSL2 line alarm profile......................................................................24-37
Figure 24-12 Flowchart for adding a VDSL2 channel alarm profile...............................................................24-41
Figure 24-13 Conversion between the VDSL2 port statuses...........................................................................24-48
Figure 25-1 Example network for setting the port state detection mode...........................................................25-3
Figure 25-2 Example network for setting the delay detection mode..................................................................25-4
Figure 25-3 Example network for setting the LACP detection mode................................................................25-6
Figure 25-4 Example network for configuring the upstream link protection.....................................................25-8
Figure 25-5 Flowchart for configuring the upstream link protection.................................................................25-9
Figure 26-1 Example network for the LAN access over EAU...........................................................................26-3
Figure 26-2 Flowchart for configuring the LAN access over EAU...................................................................26-4
Figure 26-3 Example network for the LAN access over IPMB.........................................................................26-6
Figure 26-4 Flowchart for configuring the LAN access over IPMB..................................................................26-6
Figure 27-1 Example network for configuring the EPON upstream transmission............................................27-3
Figure 27-2 Flowchart for configuring the EPON upstream transmission.........................................................27-5
Figure 28-1 Example network for configuring the GPON upstream transmission............................................28-3
Figure 28-2 Flowchart for configuring the GPON upstream transmission........................................................28-5
Figure 29-1 Example network for configuring device subtending.....................................................................29-5
Figure 29-2 Flowchart for configuring device subtending.................................................................................29-6
Figure 30-1 Example network for configuring the VLAN stacking multi-ISP wholesale access......................30-3
Figure 30-2 Flowchart for configuring the VLAN stacking multi-ISP wholesale access..................................30-4
Figure 31-1 Example network for configuring the leased line service..............................................................31-3
Figure 31-2 Flowchart for configuring the leased line service...........................................................................31-4
Figure 32-1 Example network of the IGMP proxy multicast service................................................................32-4
Figure 32-2 Flowchart for configuring IGMP proxy.........................................................................................32-5
Figure 32-3 Example network of the IGMP snooping multicast service...........................................................32-7
Figure 32-4 Flowchart for configuring the IGMP snooping multicast service..................................................32-9
Figure 32-5 Networking for configuring the multicast service in subtending mode.......................................32-11
Figure 32-6 Flowchart for configuring the multicast service in subtending mode on UA5000_A..................32-13
Figure 32-7 Flowchart for configuring the multicast service in subtending mode on UA5000_B..................32-13
Figure 32-8 Example network of the multicast service in RSTP networking..................................................32-16
Figure 32-9 Flowchart for configuring the multicast service in RSTP networking on UA5000_A, UA5000_B and
UA5000_C........................................................................................................................................................32-19
Figure 32-10 Flowchart for configuring the multicast service in RSTP networking on UA5000_D..............32-20
Figure 33-1 Example network for configuring the triple play service...............................................................33-4
Figure 33-2 Flowchart for configuring the triple play service...........................................................................33-6
Figure 33-3 Example network for configuring the triple play service - multiple PVCs for multiple services
...........................................................................................................................................................................33-10
Figure 33-4 Flowchart for configuring the triple play service-multiple PVCs for multiple services..............33-12
Figure 34-1 Example network of the BFD route application.............................................................................34-3
Figure 35-1 Flowchart for configuring the H303ESC/H304ESC......................................................................35-5
Figure 35-2 shows the flowchart for configuring the FAN................................................................................35-7
xviii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Figure 35-3 Flowchart for configuring the POWER4845..................................................................................35-9

Figure 35-4 Flowchart for configuring the universal power monitoring.........................................................35-11
Figure 36-1 Integrated networking of the UA5000............................................................................................36-3
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xix

Configuration Guide-IPM CLI Tables
Tables
Table 1-1 Data plan for configuring the license application................................................................................1-4

Table 1-2 Related operations for configuring the ESN of the device...................................................................1-7
Table 1-3 Related operations for configuring the license server..........................................................................1-8
Table 2-1 Features of the different maintenance modes.......................................................................................2-2
Table 2-2 Data plan for the outband management over LAN in Telnet mode...................................................2-17
Table 2-3 Data plan for the outband management over WAN in Telnet mode..................................................2-18
Table 2-4 Data plan for inband management over LAN in the Telnet mode.....................................................2-21
Table 2-5 Data plan for inband management over WAN in the Telnet mode....................................................2-22
Table 2-6 Data plan for the outband management over LAN in SSH mode......................................................2-24
Table 2-7 Data plan for the outband management over WAN in SSH mode.....................................................2-25
Table 2-8 Data plan for the inband management over LAN in SSH mode........................................................2-26
Table 2-9 Data plan for the inband management over WAN in SSH mode.......................................................2-27
Table 3-1 Edit functions.......................................................................................................................................3-4
Table 3-2 Meaning of the CLI characters.............................................................................................................3-6
Table 3-3 Display Characteristics.........................................................................................................................3-7
Table 3-4 Common CLI error prompts.................................................................................................................3-8
Table 3-5 Related operation for obtaining the online help information.............................................................3-11
Table 3-6 Related operation for disabling the interactive command execution.................................................3-12
Table 3-7 Related operation for disabling the CLI Trap reporting function...................................................... 3-13
Table 3-8 Related operation for switching the terminal language......................................................................3-13
Table 3-9 Related operation for setting the timeout exit time............................................................................3-16
Table 3-10 Related operation for locking the terminal.......................................................................................3-16
Table 4-1 Data plan for configuring the outband BMS........................................................................................4-3
Table 4-2 Data plan for configuring the inband BMS..........................................................................................4-5
Table 4-3 Related operation for setting a community name and its read and write rights...................................4-8
Table 4-4 Related operation for enabling the sending of Trap packets................................................................4-9
Table 4-5 Related operation for setting the IP address of the destination host of Trap packets........................ 4-10
Table 4-6 Related operation for setting the source interface for sending Trap packets.....................................4-10
Table 4-7 Related operation for setting the device administrator ID................................................................. 4-11
Table 4-8 Related operation for setting the system location information.......................................................... 4-12
Table 4-9 Related operation for configuring the IP address of the inband BMS...............................................4-13
Table 4-10 Related operation for configuring the BMS route............................................................................4-13
Table 4-11 Related operation for configuring the IP address of the inband BMS.............................................4-14
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xxi

Tables Configuration Guide-IPM CLI
Table 5-1 Data plan for configuring the log host.................................................................................................5-3

Table 5-2 Related operations for configuring the log host...................................................................................5-4
Table 5-3 Related operations for configuring the log host...................................................................................5-5
Table 5-4 Related operations for configuring a log host......................................................................................5-5
Table 6-1 Rights for users at all levels.................................................................................................................6-2
Table 6-2 User attributes......................................................................................................................................6-3
Table 6-3 Related operation for adding a user......................................................................................................6-4
Table 6-4 Related operations for modifying a user level.....................................................................................6-5
Table 6-5 Related operations for changing a user password................................................................................6-6
Table 6-6 Related operations for modifying the permitted times of re-logins of a user......................................6-7
Table 6-7 Related operations for modifying the supplementary information about a user..................................6-8
Table 6-8 Related operation for disconnecting an online user.............................................................................6-9
Table 6-9 Related operations for deleting a user................................................................................................6-10
Table 7-1 Boards supported by the UA5000........................................................................................................7-2
Table 7-2 Service board status..............................................................................................................................7-2
Table 7-3 Related operation for adding a service board.......................................................................................7-6
Table 7-4 Related operation for deleting a service board.....................................................................................7-7
Table 7-5 Related operation for managing the subboard....................................................................................7-10
Table 8-1 Data plan for configuring the remote user authentication....................................................................8-5
Table 8-2 Related operations for configuring an authentication scheme.............................................................8-8
Table 8-3 Related operations for creating a domain.............................................................................................8-9
Table 8-4 Related operations for referencing an authentication scheme............................................................8-10
Table 8-5 Related operation for referencing a RADIUS server template..........................................................8-11
Table 8-6 Related operation for creating a RADIUS server template................................................................8-13
Table 8-7 Related operation of configuring the IP address and the port number of a RADIUS server.............8-15
Table 8-8 Related operation for configuring the response timeout interval of a RADIUS server.....................8-17
Table 8-9 Related operation for configuring the maximum retransmit count of RADIUS request packets
.............................................................................................................................................................................8-18
Table 8-10 Related operation for creating the local RSA key pair.....................................................................8-23
Table 8-11 Related operations for configuring an SSH user..............................................................................8-25
Table 9-1 VLAN types and applications..............................................................................................................9-3
Table 9-2 VLAN attributes...................................................................................................................................9-4
Table 9-3 Data plan for configuring a smart VLAN............................................................................................9-5
Table 9-4 Data plan for configuring a MUX VLAN............................................................................................9-7
Table 9-5 Data plan for configuring a super VLAN.............................................................................................9-9
Table 9-6 Related operations for adding a VLAN.............................................................................................9-13
Table 9-7 Related operation for configuring the VLAN attribute......................................................................9-14
Table 9-8 Related operation for adding an uplink port to a VLAN....................................................................9-15
Table 9-9 Related operation for configuring an upstream CAR for a VLAN....................................................9-16
Table 9-10 Related operations for adding a service port to a VLAN.................................................................9-18
Table 9-11 Related operation for configuring the description about a service port...........................................9-19
Table 9-12 Related operations for activating or deactivating a service port......................................................9-21
Table 10-1 Data plan for configuring the DHCP standard mode.......................................................................10-5
xxii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Table 10-2 Data plan for configuring the DHCP option60 mode......................................................................10-8
Table 10-3 Data plan for configuring the MAC address segment mode..........................................................10-11
Table 10-4 Related operations for binding a DHCP server group with a VLAN interface..............................10-15
Table 10-5 Related operation for creating the DHCP option60 domain..........................................................10-16
Table 10-6 Related operations for binding a DHCP server group with a DHCP option60 domain.................10-17
Table 10-7 Related operation for configuring the gateway of a DHCP option60 domain...............................10-18
Table 10-8 Related operation for creating a DHCP MAC address segment....................................................10-19
Table 10-9 Related operation for setting the range of a DHCP MAC address segment..................................10-20
Table 10-10 Related operation for binding a DHCP server group with a DHCP MAC address segment.......10-21
Table 10-11 Related operations for setting the gateway of a DHCP MAC address segment..........................10-22
Table 11-1 Data plan for configuring ARP proxy..............................................................................................11-3
Table 11-2 Related operations for configuring a static ARP entry....................................................................11-6
Table 11-3 Related operation for enabling the ARP proxy................................................................................11-7
Table 12-1 Data plan for configuring the static route.........................................................................................12-4
Table 12-2 Data plan for configuring RIP..........................................................................................................12-7
Table 12-3 Data plan for configuring OSPF....................................................................................................12-10
Table 12-4 Data plan for configuring the route policy.....................................................................................12-14
Table 12-5 Related operation for adding a static route.....................................................................................12-18
Table 12-6 Related operation for enabling RIP process...................................................................................12-20
Table 12-7 Related operation for configuring the version of RIP....................................................................12-21
Table 12-8 Related operation for configuring zero field check for RIP-1 packets..........................................12-22
Table 12-9 Related operation for configuring the cost of the default route.....................................................12-23
Table 12-10 Related operation for configuring route aggregation...................................................................12-24
Table 12-11 Related operation for specifying the default routing metric........................................................12-25
Table 12-12 Related operation for importing routes of other protocols...........................................................12-26
Table 12-13 Related operation for disabling host routes receiving..................................................................12-27
Table 12-14 Related operation for configuring the RIP priority......................................................................12-28
Table 12-15 Related operation for configuring the route filtering policy........................................................12-29
Table 12-16 Related operation for verifying the source IP address of a RIP route update..............................12-30
Table 12-17 Related operation for disabling RIP packet transmission on a specified interface......................12-32
Table 12-18 Related operation for configuring the IP address of a peer router...............................................12-32
Table 12-19 Related operation for configuring a summary route IP address...................................................12-33
Table 12-20 Related operations for enabling an interface to receive and transmit RIP packets......................12-34
Table 12-21 Related operation for enabling the split horizon function............................................................12-35
Table 12-22 Related operation for enabling the poison reverse function.........................................................12-35
Table 12-23 Related operation for configuring the RIP-2 authentication mode..............................................12-36
Table 12-24 Related operations for configuring the additional metric of a route............................................12-37
Table 12-25 Related operation for configuring the RIP timer..........................................................................12-38
Table 12-26 Related operation for enabling the OSPF process........................................................................12-40
Table 12-27 Related operation for entering the OSPF area configuration mode.............................................12-41
Table 12-28 Related operation for configuring subnets for an area.................................................................12-42
Table 12-29 Related operations for configuring a stub area.............................................................................12-43
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xxiii

Table 12-30 Related operation for configuring an NBMA adjacent router......................................................12-44

Table 12-31 Related operation for setting the OSPF priority...........................................................................12-45
Table 12-32 Related operation for prohibiting an interface from transmitting OSPF packets.........................12-46
Table 12-33 Related operation for configuring the maximum number of OSPF routes..................................12-46
Table 12-34 Related operation for enabling the OSPF logging function.........................................................12-47
Table 12-35 Description of the network types................................................................................................. 12-48
Table 12-36 Related operation for configuring the network type on an OSPF interface.................................12-48
Table 12-37 Related operation for configuring the cost of the interface on which the OSPF runs..................12-49
Table 12-38 Related operation for configuring OSPF packet authentication...................................................12-50
Table 12-39 Related operation for configuring the MTU of a DD packet.......................................................12-50
Table 12-40 Related operation for setting the interval for sending Hello packets...........................................12-52
Table 12-41 Related operation for setting the dead time between adjacent routers.........................................12-53
Table 12-42 Related operation for setting the poll interval of Hello packets...................................................12-53
Table 12-43 Related operation for setting the LSA transmit delay..................................................................12-54
Table 12-44 Related operation for setting the LSA retransmit interval........................................................... 12-55
Table 12-45 Related operation for setting the SPF calculation interval for OSPF...........................................12-56
Table 12-46 Related operation for configuring route aggregation between areas............................................12-57
Table 12-47 Related operation for configuring the aggregation of routes imported by OSPF........................ 12-57
Table 12-48 Related operation for importing routes from other protocols into OSPF.....................................12-58
Table 12-49 Related operation for configuring the default parameters of OSPF imported routes...................12-59
Table 12-50 Related operation for configuring the route filtering policy........................................................12-60
Table 12-51 Commands for querying and debugging OSPF........................................................................... 12-60
Table 12-52 Related operation for configuring an address prefix list..............................................................12-62
Table 12-53 Parameters for defining a route policy.........................................................................................12-63
Table 12-54 Related operation for configuring a route policy.........................................................................12-64
Table 12-55 Related operation for defining the route policy matching rule.................................................... 12-65
Table 12-56 Related operation for modifying the attributes of the filtered route............................................ 12-66
Table 13-1 Related operations for enabling the RSTP function.........................................................................13-3
Table 13-2 Related operation for setting the RSTP working mode...................................................................13-5
Table 13-3 Related operation for setting the diameter of a switching network..................................................13-6
Table 13-4 Related operation for setting the priority of a specified bridge........................................................13-7
Table 13-5 Related operation to configure the Forward Delay of the specified bridge.....................................13-8
Table 13-6 Related operation for setting the Hello Time of a specified bridge.................................................13-9
Table 13-7 Related operation for setting the Max Age of a specified bridge...................................................13-10
Table 13-8 Related operations for setting the maximum transmission rate..................................................... 13-12
Table 13-9 Related operation for configuring the specified port as an edge port............................................ 13-13
Table 13-10 Related operation for setting the path cost of a specified port.....................................................13-14
Table 13-11 Related operation for setting the priority of a specified port....................................................... 13-15
Table 13-12 Related operation for configuring a point-to-point link for a specified port................................13-16
Table 14-1 Data plan for configuring the single RRPP ring networking...........................................................14-4
Table 14-2 Related operation for enabling RRPP............................................................................................14-10
Table 14-3 Related operation for configuring the interval of the hello timer of an RRPP domain..................14-13
xxiv Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Table 14-4 Related operation for configuring the interval of the fail timer of an RRPP domain....................14-14
Table 14-5 Related operation for configuring an RRPP ring...........................................................................14-16
Table 15-1 Data plan for configuring the NTP broadcast mode........................................................................15-4
Table 15-2 Data plan for configuring the NTP multicast mode.........................................................................15-9
Table 15-3 Data plan for configuring the NTP unicast server mode................................................................15-14
Table 15-4 Data plan for configuring the NTP peer mode...............................................................................15-18
Table 15-5 Related operations for configuring the NTP ID authentication.....................................................15-23
Table 15-6 Related operation for configuring the NTP master clock..............................................................15-24
Table 15-7 Related operations for configuring the NTP server in broadcast mode.........................................15-24
Table 15-8 Related operations for configuring the NTP client in broadcast mode..........................................15-25
Table 15-9 Related operations for configuring the NTP server in multicast mode..........................................15-26
Table 15-10 Related operations for configuring the NTP client in multicast mode.........................................15-27
Table 15-11 Related operations for configuring the NTP unicast server.........................................................15-28
Table 15-12 Related operation for configuring the NTP peer..........................................................................15-29
Table 15-13 Related operations for configuring the authority of access to a local device NTP service..........15-30
Table 15-14 Related operations for configuring an interface for transmitting or receiving NTP packets.......15-31
Table 16-1 Related operation for adding a static MAC address.........................................................................16-3
Table 16-2 Related operation for configuring the MAC address filtering function...........................................16-5
Table 17-1 Related operation for configuring the synwait timer.......................................................................17-3
Table 17-2 Related operation for configuring the finwait timer.........................................................................17-4
Table 17-3 Related operation for configuring the socket buffer........................................................................17-4
Table 17-4 Related operations for enabling the TCP debugging.......................................................................17-5
Table 17-5 Related operations for enabling the IP packet debugging................................................................17-6
Table 18-1 ACL types........................................................................................................................................18-3
Table 18-2 Data plan for configuring a basic ACL............................................................................................18-6
Table 18-3 Data plan for configuring an advanced ACL...................................................................................18-7
Table 18-4 Data plan for configuring a layer 2 ACL.........................................................................................18-9
Table 18-5 Data plan for configuring the customized ACL.............................................................................18-11
Table 18-6 ACL number range.........................................................................................................................18-13
Table 18-7 Related operations for creating an ACL.........................................................................................18-13
Table 18-8 Related operation for setting the step.............................................................................................18-16
Table 18-9 Related operation for creating a basic ACL rule............................................................................18-17
Table 18-10 Related operation for creating an advanced ACL rule.................................................................18-18
Table 18-11 Related operation for creating a layer 2 ACL rule.......................................................................18-19
Table 18-12 Description of letters and their offset values................................................................................18-19
Table 18-13 Description of letters and their offset values................................................................................18-20
Table 18-14 Related operation for creating a used defined ACL rule..............................................................18-21
Table 18-15 Related operation for activating an ACL.....................................................................................18-22
Table 19-1 Related operation for configuring a traffic entry.............................................................................19-8
Table 19-2 Related operation for configuring traffic limitation.........................................................................19-9
Table 19-3 Related operation for adding priority tags to packets....................................................................19-10
Table 19-4 Related operation for mirroring the traffic of the packet that matches an ACL rule.....................19-11
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xxv

Table 19-5 Related operation for redirecting packets.......................................................................................19-12

Table 19-6 Related operations for enabling traffic statistics............................................................................19-13
Table 19-7 Related operation for modifying the VLAN of the packet that matches an ACL rule.................. 19-14
Table 19-8 Related operation for enabling the line rate limitation on a port................................................... 19-15
Table 19-9 Related operation for configuring queue scheduling..................................................................... 19-16
Table 20-1 Related operations for configuring the PITP function.....................................................................20-5
Table 20-2 Related operations for enabling the DHCP option82 function........................................................20-7
Table 20-3 Related operation for binding an IP address....................................................................................20-8
Table 20-4 Related operations for enabling the anti MAC spoofing function...................................................20-9
Table 20-5 Related operations for enabling the anti IP spoofing function.......................................................20-10
Table 21-1 Related operations for enabling the anti DoS attack function..........................................................21-4
Table 21-2 Related operation for enabling the anti IP attack function...............................................................21-4
Table 21-3 Related operation for enabling the anti ICMP attack function.........................................................21-5
Table 21-4 Related operation for configuring the MAC address filtering function...........................................21-6
Table 21-5 Related operation for enabling the ring network detection on the user side....................................21-7
Table 21-6 Related operations for configuring the firewall black list function.................................................21-8
Table 21-7 Related operation for configuring the outband firewall function...................................................21-10
Table 21-8 Related operations for configuring an accessible address segment............................................... 21-11
Table 21-9 Related operations for configuring an inaccessible address segment............................................21-12
Table 22-1 Maximum number of ADSL2+ subscribers supported by each UA5000 shelf...............................22-3
Table 22-2 Encapsulation mode mapping between the UA5000 and the modem..............................................22-3
Table 22-3 Data plan for configuring the ADSL2+ IPoA service......................................................................22-5
Table 22-4 Data plan for configuring the ADSL2+ PPPoA service.................................................................22-11
Table 22-5 Data plan for configuring the ADSL2+ PPPoE/IPoE service........................................................22-18
Table 22-6 Related operations for adding an ADSL2+ line profile.................................................................22-29
Table 22-7 Related operations for adding an ADSL2+ extended line profile..................................................22-31
Table 22-8 Related operations for adding an ADSL2+ alarm profile..............................................................22-34
Table 22-9 Related operations for activating an ADSL2+ port........................................................................22-36
Table 22-10 Related operation for enabling IPoA protocol conversion...........................................................22-39
Table 22-11 Related operation for configuring the default gateway of the IPoA user.....................................22-41
Table 22-12 Related operation for enabling PPPoA protocol conversion........................................................22-43
Table 22-13 Related operation for enabling PPPoA/PPPoE MRU negotiation...............................................22-45
Table 22-14 Related operations for querying an ADSL2+ port.......................................................................22-46
Table 23-1 Encapsulation type mapping between the UA5000 and the modem................................................23-3
Table 23-2 Data plan for configuring the SHDSL IPoA service........................................................................23-5
Table 23-3 Data plan for configuring the SHDSL PPPoA service...................................................................23-10
Table 23-4 Data plan for configuring the SHDSL IPoE/PPPoE service..........................................................23-16
Table 23-5 Parameters of an SHDSL alarm profile......................................................................................... 23-26
Table 23-6 Related operations for adding an SHDSL alarm profile................................................................23-27
Table 23-7 Related operations for configuring the SHDSL M-pair binding....................................................23-29
Table 23-8 Related operations for configuring the SHDSL EFM M-pair binding.......................................... 23-31
Table 23-9 Related operations for activating an SHDSL port..........................................................................23-32
xxvi Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Table 24-1 Data plan for configuring the VDSL2 IPoA service........................................................................24-4
Table 24-2 Data plan for configuring the VDSL2 PPPoA service...................................................................24-11
Table 24-3 Data plan for configuring the VDSL2 PPPoE/IPoE service..........................................................24-18
Table 24-4 Related operations for adding a VDSL2 line profile......................................................................24-31
Table 24-5 Parameters of a VDSL2 channel profile........................................................................................24-33
Table 24-6 Related operations for adding a VDSL2 channel profile...............................................................24-34
Table 24-7 Parameters of a VDSL2 line template............................................................................................24-36
Table 24-8 Related operations for adding a VDSL2 line template..................................................................24-36
Table 24-9 Parameters of a VDSL2 line alarm profile.....................................................................................24-39
Table 24-10 Related operations for adding a VDSL line alarm profile...........................................................24-40
Table 24-11 Parameters of a VDSL2 channel alarm profile............................................................................24-42
Table 24-12 Related operations for adding a VDSL2 channel alarm profile...................................................24-43
Table 24-13 Parameters of a VDSL2 alarm template.......................................................................................24-44
Table 24-14 Related operations for adding a VDSL2 alarm template.............................................................24-45
Table 24-15 Related operation for activating a VDSL2 port...........................................................................24-47
Table 24-16 Related operations for querying a VDSL2 port...........................................................................24-48
Table 25-1 Data plan for configuring the upstream link protection...................................................................25-9
Table 25-2 Related operation for configuring a protection group....................................................................25-11
Table 26-1 Data plan for configuring the LAN access over EAU.....................................................................26-3
Table 26-2 Data plan for configuring the LAN access over IPMB....................................................................26-7
Table 27-1 Data plan for the configuring the EPON upstream transmission.....................................................27-3
Table 28-1 Data plan for the configuring the GPON upstream transmission.....................................................28-4
Table 29-1 Ethernet ports of the UA5000..........................................................................................................29-3
Table 29-2 Related operation for enabling the flow control of an Ethernet port.............................................29-10
Table 29-3 Related operations for enabling traffic suppression.......................................................................29-12
Table 29-4 Related operation for enabling the Ethernet port aggregation.......................................................29-13
Table 29-5 Related operation for adding an Ethernet port to a VLAN............................................................29-15
Table 30-1 Data plan for configuring the VLAN stacking multi-ISP wholesale access....................................30-3
Table 31-1 Data plan for configuring the leased line service.............................................................................31-3
Table 31-2 Related operation for enabling the transparent transmission of BPDUs..........................................31-5
Table 32-1 Data plan for configuring IGMP proxy............................................................................................32-4
Table 32-2 Data plan for configuring the IGMP snooping multicast service.....................................................32-8
Table 32-3 Data plan for configuring the multicast service in subtending mode.............................................32-11
Table 32-4 Data plan for the multicast service in RSTP networking...............................................................32-17
Table 32-5 Related operations for configuring an IGMP uplink port..............................................................32-26
Table 32-6 Related operation for specifying an IGMP subtending port..........................................................32-27
Table 32-7 Related operation for adding a program for a static subtending port.............................................32-28
Table 32-8 Related operation for enabling the IGMP proxy authorization......................................................32-30
Table 32-9 Related operation for configuring the robustness variable.............................................................32-32
Table 32-10 Related operation for configuring the general query interval......................................................32-33
Table 32-11 Related operation for configuring the maximum response time to the general query.................32-34
Table 32-12 Related operation for configuring the group-specific query count..............................................32-36
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xxvii

Table 32-13 Related operation for configuring the group-specific query interval...........................................32-37
Table 32-14 Related operation for configuring the maximum response time to the group-specific query
...........................................................................................................................................................................32-38
Table 32-15 Related operation for configuring the unsolicited report interval................................................32-40
Table 32-16 Related operation for configuring the TTL of a V1 router..........................................................32-41
Table 32-17 Related operation for configuring the preview recognition time.................................................32-43
Table 32-18 Related operation for enabling the user action report function....................................................32-45
Table 32-19 Related operation for enabling the proxy of the IGMP report packet..........................................32-47
Table 32-20 Related operation for enabling the proxy of the IGMP leave packet...........................................32-48
Table 32-21 Related operation for enabling the dual sending function for IGMP packets..............................32-49
Table 32-22 Related operation for enabling the querier...................................................................................32-51
Table 32-23 Related operations for adding a program.....................................................................................32-53
Table 32-24 Related operation for enabling bandwidth management..............................................................32-56
Table 32-25 Related operations for modifying a rights profile........................................................................32-60
Table 32-26 Related operations for adding a BTV user...................................................................................32-62
Table 32-27 Related operations for modifying the attributes of a user............................................................32-63
Table 32-28 Related operation for blocking a BTV user.................................................................................32-64
Table 32-29 Related operation for binding a user with a rights profile............................................................32-65
Table 32-30 Related operation for enabling the function of monitoring BTV users........................................32-67
Table 32-31 Related operation for enabling the preview function...................................................................32-68
Table 32-32 Related operations for configuring the preview auto reset time..................................................32-71
Table 32-33 Related operation for clearing the preview records.....................................................................32-72
Table 32-34 Related operations for enabling the logging function..................................................................32-73
Table 32-35 Related operation for configuring the logging interval................................................................32-75
Table 32-36 Related operations for configuring log reporting.........................................................................32-75
Table 32-37 Related operations for configuring active CDR reporting...........................................................32-77
Table 32-38 Related operations for configuring manual CDR reporting.........................................................32-78
Table 33-1 Modes to provide the triple play service..........................................................................................33-2
Table 33-2 Modes to provide the triple play service..........................................................................................33-3
Table 33-3 Data plan for configuring the triple play service by the single PVC for multiple services (based on
VLANs)...............................................................................................................................................................33-4
Table 33-4 Data plan for configuring the triple play service - multiple PVCs for multiple services...............33-10
Table 34-1 Data plan for configuring the BFD route.........................................................................................34-3
Table 34-2 Related operation for enabling the BFD function............................................................................34-6
Table 34-3 Related operation for creating a BFD session..................................................................................34-7
Table 34-4 Related operation for configuring the BFD session parameters......................................................34-8
Table 35-1 Data plan for configuring the H303ESC/H304ESC.........................................................................35-4
Table 35-2 Data plan for configuring the FAN..................................................................................................35-6
Table 35-3 Data plan for configuring the POWER4845....................................................................................35-8
Table 35-4 Data plan for configuring the universal power monitoring............................................................35-10
Table 35-5 Related operation for adding an EMU...........................................................................................35-13
Table 35-6 Related operation for configuring H303ESC,H304ESC analogue parameters..............................35-14
Table 35-7 Related operations for configuring H303ESC or the H304ESC digital parameters......................35-16
xxviii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Table 35-8 Related operations for configuring the FAN alarm report.............................................................35-17
Table 35-9 Related operations for setting the fan speed adjustment mode......................................................35-18
Table 35-10 Related operations for setting the FAN speed..............................................................................35-19
Table 35-11 Commands for configuring a POWER4845 EMU.......................................................................35-20
Table 35-12 Related operations for configuring a POWER4845 EMU...........................................................35-23
Table 36-1 Data plan for configuring the integrated data and voice networking...............................................36-4
Issue 05 (2009-04-30) Huawei Proprietary and Confidential xxix

Configuration Guide-IPM CLI About This Document
About This Document
Purpose
This document describes the configuration of various services supported by the UA5000. The
description covers the following topics:
l Purpose
l Networking
l Data plan
l Prerequisite(s)
l Note
l Configuration flowchart
l Configuration procedure
l Result
This document helps users to know the configuration of various services on the UA5000.
Related Versions
The following table lists the product versions related to this document.
Product Name Version
UA5000 V100R017
N2000 BMS V200R011
NOTE
The UA5000 supports IPMB and IPMD control boards. The control board mentioned in this document refers
to the IPMB board unless otherwise stated.
By default, the IPMB control board provides upstream transmission of the upstream port.
The difference between the IPMD board and the IPMB board is the upstream port.
l The IPMB board provides four FE electrical interfaces and two 2 GE/FE optical interfaces.
l The IPMD board provides four GE optical interfaces and two GE electrical interfaces.
Issue 05 (2009-04-30) Huawei Proprietary and Confidential 1

About This Document Configuration Guide-IPM CLI
Intended Audience
The intended audience of this document are:
l Installation and commissioning engineers

l System maintenance engineers
l Data configuration engineers
Organization
This document consists of the following chapters and is organized as follows.
Chapter Describes...
1 Managing the License How to configure the license features
2 Configuring the How to configure the maintenance terminal

Maintenance Terminal
3 CLI Operation Basics The CLI features of the UA5000 and how to operate the
UA5000 through CLI
4 Configuring the BMS The connection between the BMS and the UA5000, and the
configuration process in the UA5000
5 Configuring the Log Host How to configure the log host
6 User Management The classification of users and how to add, modify, delete
and disconnect a user
7 Device Management How to manage and maintain the shelf, boards, and
subboards of the UA5000
8 Configuring Remote User How to configure remote user authentication

Authentication
9 Configuring a VLAN Classifications of VLANs and the related configuration
10 Configuring DHCP Principles of DHCP Relay and the related configuration

Relay
11 Configuring the ARP/ Principles of ARP and ARP Proxy and the related
ARP Proxy configuration
12 Configuring a Routing The routing protocols supported by the UA5000 and the
Protocol related configuration
13 Configuring RSTP The RSTP protocol and how to configure RSTP
15 Configuring NTP The NTP protocol and how to configure NTP
16 Managing the MAC How to configure a MAC address and a MAC address pool
Address
2 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

17 Configuring the TCP/IP How to configure the TCP&IP connection

Connection
18 Configuring the ACL The concept of ACL and how to configure an ACL rule
19 Configuring the QoS The concept of QoS and how to configure QoS
20 Configuring the User User security configuration supported by the UA5000

Security
21 Configuring the System System security configuration supported by the UA5000

Security
22 Configuring the ADSL2+ The ADSL2+ technology and how to configure the ADSL2
Service + access service in the UA5000
23 Configuring the SHDSL The SHDSL technology and how to configure the SHDSL
Service access service in the UA5000
24 Configuring the VDSL2 The VDSL2 technology and how to configure the VDSL2
Service access service in the UA5000
25 Protection Configuration Service protection for upstream ports in the UA5000

for an Upstream Link
26 Configuring the LAN How to configure LAN access service in the UA5000
Access
29 Configuring the Device The Ethernet technology and how to configure device
Subtending subtending in the UA5000
30 Configuring the VLAN The VLAN stacking wholesale service and how to configure
Stacking Wholesale Service the service in the UA5000
31 Configuring the QinQ The QinQ VLAN leased line access service and how to
VLAN Leased Line Access configure the service in the UA5000
32 Configuring the The multicast service and how to configure the service in the
Multicast Service UA5000
33 Configuring the Triple The triple play service and how to configure the service in
Play Service the UA5000
34 Configuring the BFD The BFD service and how to configure the service in the
UA5000
35 Configuring the The environment monitoring module supported by the

Environment Monitoring UA5000 and how to configure the module
36 Configuration Example How to configure the integrated data and voice networking
of the Integrated Data and in the UA5000
Voice Networking
A FAQ FAQ

B Acronyms & The acronyms and abbreviations listed in this document

Abbreviations
Conventions
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol Description
Indicates a hazard with a high level of risk which, if not

avoided, will result in death or serious injury.
DANGER
Indicates a hazard with a medium or low level of risk which,

if not avoided, could result in minor or moderate injury.
WARNING
Indicates a potentially hazardous situation that, if not avoided,

could cause equipment damage, data loss, and performance
CAUTION
degradation, or unexpected results.
NOTE Provides additional information to emphasize or supplement

important points of the main text.
TIP Indicates a tip that may help you solve a problem or save time.
General Conventions
Convention Description
Times New Roman Normal paragraphs are in Times New Roman.
Boldface Names of files, directories, folders, and users are in boldface.

For example, log in as user root.
Italic Book titles are in italics.

Courier New Terminal display is in Courier New.

Command Conventions
Boldface The keywords of a command line are in boldface.
Italic Command arguments are in italic.
[] Items (keywords or arguments) in square brackets [ ] are

optional.
{ x | y | ... } Alternative items are grouped in braces and separated by

vertical bars. One is selected.
[ x | y | ... ] Optional alternative items are grouped in square brackets and

separated by vertical bars. One or none is selected.
{ x | y | ... } * Alternative items are grouped in braces and separated by

vertical bars. A minimum of one or a maximum of all can be
selected.
GUI Conventions
Boldface Buttons, menus, parameters, tabs, window, and dialog titles are
in Boldface. For example, click OK.
> Multi-level menus are in boldface and separated by the ">"

signs. For example, choose File > Create > Folder.
Keyboard Operation
Format Description
Key Press the key. For example, press Enter and press Tab.
Key 1+Key 2 Press the keys concurrently. For example, pressing Ctrl+Alt
+A means that the three keys should be pressed concurrently.
Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means that
the two keys should be pressed in turn.
Mouse Operation
Action Description
Click Select and release the primary mouse button without moving
the pointer.

Action Description
Double-click Press the primary mouse button twice continuously and quickly
without moving the pointer.
Drag Press and hold the primary mouse button and move the pointer
to a certain position.
Update History
Updates between document versions are cumulative. Therefore, the latest document version
contains all the updates made to previous versions.
Issue 05 (2009-04-30)
Based on issue 04 (2008-11-20), the document is updated as follows:
The following information is modified:
l 8.4 Configuring AAA
l 8.5 Configuring RADIUS
l 22 Configuring the ADSL2+ Service
l 23 Configuring the SHDSL Service
l 24 Configuring the VDSL2 Service
Issue 04 (2008-11-20)
The following information is added:
l 21.6 Enabling the Ring Network Detection on the User Side
l 32.10.16 Enabling the Dual Sending Function for IGMP Packets

l 20.7 Enabling the Anti MAC Spoofing Function
l 21.8 Configuring the Firewall Function
l 21.9 Configuring an Accessible Address Segment
Issue 03 (2008-08-20)
The following information is added:
l 28 Configuring the GPON Upstream Transmission
l 14 Configuring RRPP
l 35.5 Configuration Example of the Universal Power Monitoring

l 22.9 Configuring the Port Rate Reachability Thresholds for an ADSL2+ Port
l 35 Configuring the Environment Monitoring
l 9.10 Adding a Service Port to a VLAN
l 35.12 Configuring a POWER4845 EMU
l 35.4 Configuration Example of Power Monitoring
Issue 02 (2008-05-20)
l 1.1 Introduction to the License
Issue 01 (2008-03-25)
This is the first release.

Configuration Guide-IPM CLI 1 Managing the License
1 Managing the License
About This Chapter
This topic describes the license feature and how to configure the license feature.
1.1 Introduction to the License

This topic describe the license function and its service specifications on the UA5000(IPMB).
1.2 License Principles
This topic describes the function principle and implementation principle of the license.
1.3 Configuration Example of the License Application
This topic describes how to configure the license application.
1.4 Configuring the ESN of the Device
This topic describes how to configure the equipment serial number (ESN) of the device. The
ESN uniquely identifies the device on the license server.
1.5 Configuring the License Server
This topic describes how to configure the IP address of the license server and configure the
number of the TCP port used for the communication between the UA5000 and the license server.
Issue 05 (2009-04-30) Huawei Proprietary and Confidential 1-1

1 Managing the License Configuration Guide-IPM CLI
1.1 Introduction to the License

This topic describe the license function and its service specifications on the UA5000(IPMB).
Service Description
When the license function is enabled, the license server performs license control on the function
entries and resources entries supported by the UA5000 and provides individualized services for
customers.
Service Specifications
The control entries of the license function include function entries and resources entries.
A function entry refers to the entry whose license is controlled based on the function. The
controllable function entries supported by the UA5000 include:
l The ETH OAM function
l The single ended loop test (SELT)
l The G.SHDSL.bis function
l The G.SHDSL binding function
l The illegal access control function of the broadband metropolitan area network (MAN)
l The MPLS function
l The port rate measurement function
l The single-PVC for multiple services function
A resources entry refers to the entry whose license is controlled based on the count. The
controllable resources entries supported by the UA5000 include:
l Count of multicast users
l Count of multicast programs
l Count of conversion from xPOA to xPOE
l The ADSL/VDSL ports auto-sensing function
l Count of ADSL2+/SHDSL/VDSL2 ports
l Count of ADSL2+ ports that use the Annex L feature
l Count of ADSL2+ ports that use the Annex M feature
l Count of ADSL2+ ports that use the INP+ feature
l DHCP Option82
l PPPoE immediate relay agent
l VLAN Stacking
NOTE
l If you need to use the license function supported by the UA5000, consider the deployment of the license
server in the network planning.
l It is recommended that you install the license server on the same computer with the network
management (NM) server. If no NM server exists, you need to deploy one license server in the network.
1-2 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

1.2 License Principles

This topic describes the function principle and implementation principle of the license.
License Function Principle

l The UA5000 uses the network license solution. That is, the license server is deployed in
the network. The license server can be installed on the same computer with the NM server,
but the two servers are different software. The license server can be also installed on a
separate server. Each multi-service access node (MSAN) functions as a license client. The
license server manages the licenses of all the clients in a centralized manner.
l In each management range of the license server, each product has only one license file. In
general, a management range can be a district or a city. The license file is stored on the
license server. The license file defines the resources entries of the product. Multiple license
files can be stored on one license server because one licenser server can manage multiple
products.
License Implementation Principle

l In the system initialization process of the UA5000, each service module must register their
controlled resources entries or function entries. After the system runs in the normal state,
the management module of a license client obtains the authorization information about the
license controlling entries of the license client from the license server according to the
registration information.
l When you configure a service module through the command line or BMS, the device checks
whether the resources entries of the service module are overloaded or whether the function
entries of the service module are authorized.
For license-controlled resources entries, if the resources entries are overloaded, the
system terminates the service configuration and prompts that the license resources are
insufficient.
For license-controlled function entries, if the function entries are not authorized, the
system prompts that the functions are not authorized.
If the resources entries are not overloaded or the function entries are authorized, the
system allows you to continue the service configuration.
For the license-controlled resources entries, the license resources applied for the service
module are released when you delete the service configuration.
1.3 Configuration Example of the License Application

This topic describes how to configure the license application.
Prerequisite
l The network devices and lines are in the normal state.
l All the boards of the UA5000 are in the normal state.
l The license function is enabled.

Networking
Figure 1-1 shows an example network for configuring the license application.
The license control function is enabled on the UA5000. The license server is installed on the
same computer as the NM server (N2000 BMS). The license management tool is installed on
the N2000 client for configuring or managing the license file.UA5000_A communicates with
the license server through port 0/3/0. The TCP port number is 10010.
Figure 1-1 Example network for configuring the license application

N2000 BMS&license server
100.100.100.1/24
N2000 client
Router
60.60.60.2/24
60.60.60.1/24
......
UA5000_A UA5000_B UA5000_N
Data Plan
Table 1-1 provides the data plan for configuring the license application.
Table 1-1 Data plan for configuring the license application
Item Data
License server IP address: 100.100.100.1/24
TCP port number: 10010
UA5000_A Uplink port: 0/3/0
VLAN ID: 10
IP address of the layer 3 interface: 60.60.60.1/24
Router IP address of the port connecting to UA5000_A: 60.60.60.2/24

NOTE
l The configurations on the UA5000 side are the same. This section considers the configuration of
UA5000_A as an example.
l This topic describes only the configuration on the device side. For how to configure the license server,
see the related configuration manual of the license server.
Configuration Flowchart
Figure 1-2 shows the flowchart for configuring the license application.
Figure 1-2 Flowchart for configuring the license application
Start
Configure the interface that

communicates with the license server
Configure the ESN of the device
Specify the license server
Save the data
End
Procedure
Step 1 Configure the interface that communicates with the license server.
1. Create a VLAN.
huawei(config)#vlan 10 smart
2. Configure an uplink port.

huawei(config)#port vlan 10 0/3 0
huawei(config)#interface ipm 0/3
huawei(config-if-ipm-0/3)#native-vlan 0 vlan 10
3. Configure the layer 3 interface.

huawei(config-if-ipm-0/3)#quit
huawei(config)#interface vlanif 10
huawei(config-if-vlanif10)#ip address 60.60.60.1 24
Step 2 Configure the equipment serial number (ESN) of the device.

huawei(config-if-vlanif10)#quit
huawei(config)#license esn 60.60.60.1
Step 3 Specify the license server.

huawei(config)#license server ipaddress 100.100.100.1 tcpport 10010
Step 4 Save the data.

huawei(config)#save
----End
Result
After the configuration, run the display license info command to check whether the
communication between the device and the license server is normal. After UA5000_A is
initialized, each service module can register the controlled resources entries or function entries
in the normal state.
1.4 Configuring the ESN of the Device

This topic describes how to configure the equipment serial number (ESN) of the device. The
ESN uniquely identifies the device on the license server.
Context
The ESN must be the IP address of the port connecting to the license server. When the IP address
of the port connecting to the license server changes, you need to configure the ESN of the device
again.
Procedure
Step 1 Run the license esn command to configure the ESN of the device.
Step 2 Run the display license info command to query the basic information about the license.
----End
Example
Assume that the device connects to the license server through the maintenance network port and
the IP address of the maintenance network port is 60.60.60.1. To configure the ESN of the device,
do as follows:
NOTE
Run the interface meth command to enter the MEth mode. Then run the ip address command to configure the
IP address of the maintenance network port.
huawei(config)#license esn 60.60.60.1
huawei(config)#display license info
License switch: enable
ESN: 60.60.60.1
IP address of the first server: 100.100.100.1
IP address of the second server: 200.200.200.1
Communication status: abnormal
License status: unregistered

NOTE
l When the upper layer device is not connected, the communication status of the license client is abnormal
and the license status of the license client is not registered. In this case, new controlled resources cannot be
configured and controlled functions cannot be enabled.
l When the related configuration is complete in the network, the communication status of the license client
is normal and the license status of the license client is registered. In this case, new controlled resources can
be configured and controlled functions can be enabled within the management range of the license.
Related Operation
Table 1-2 lists the related operations for configuring the ESN of the device.
Table 1-2 Related operations for configuring the ESN of the device
To... Run the Command...
Configure the license server license server
Query the features controlled display license feature

by the license and the
information about the
features
1.5 Configuring the License Server

This topic describes how to configure the IP address of the license server and configure the
number of the TCP port used for the communication between the UA5000 and the license server.
Context
l The IP address of the license server and the number of the TCP port must be consistent
with the data in the actual networking plan.
l When the IP address of the license server and the number of the TCP port are changed, you
need to configure the device again.
l You can configure two IP addresses for the license server on the device side. The two IP
addresses must be different from each other. You can, however, configure only one TCP
port number on the device side.
Procedure
Step 1 Run the license server command to configure the license server.
Step 2 Run the display license info command to query the basic information about the license.
----End
Example
To configure the IP address of license server 1 to 10.10.10.1, the IP address of license server 2
to 20.20.20.1, and the TCP port number to 1024, do as follows:
huawei(config)#license server ipaddress 10.10.10.1 20.20.20.1 tcpport 1024
huawei(config)#display license info

License switch: enable

ESN: 10.71.55.192
IP address of the first server: 10.10.10.1
IP address of the second server: 20.20.20.1
Communication status: abnormal
License status: unregistered
NOTE
l When the upper layer device is not connected, the communication status of the license client is abnormal
and the license status of the license client is not registered. In this case, new controlled resources cannot be
configured and controlled functions cannot be enabled.
l When the related configuration is complete in the network, the communication status of the license client
is normal and the license status of the license client is registered. In this case, new controlled resources can
be configured and controlled functions can be enabled within the management range of the license.
Related Operation
Table 1-3 lists the related operations for configuring the license server.
Table 1-3 Related operations for configuring the license server

Configuring the ESN of the license esn

device
Query the features controlled display license feature

by the license and the
information about the
features

Configuration Guide-IPM CLI 2 Configuring the Maintenance Terminal
2 Configuring the Maintenance Terminal
About This Chapter
This topic describes the different maintenance modes of theUA5000 through the maintenance
terminal.
2.1 Introduction to the Maintenance Terminal

This topic describes the different maintenance modes of the UA5000 and the features of the
different maintenance modes through a maintenance terminal.
2.2 Configuring the Terminal Through the Local Serial Port
This topic describes how to log in and configure the UA5000 by connecting the maintenance
terminal to the UA5000 through the local serial port.
2.3 Configuring the Terminal Through the Remote Serial Port
This topic describes how to log in to and configure the UA5000 through the remote serial port.
2.4 Configuring the Outband Management Interface
This topic describes how to connect the maintenance terminal to the UA5000 through the
outband management interface of the UA5000 for maintenance and management.
2.5 Configuring the Inband Management Interface
This topic describes how to connect the maintenance terminal to the UA5000 through the inband
management interface of the UA5000 for maintenance and management.
2.6 Configuring the SSH Mode
This topic describes how to connect the maintenance terminal to the UA5000 in the secure shell
(SSH) mode. Then, you can log in to the UA5000 through the maintenance terminal to manage
and maintain the device. This operation protects the UA5000 from attacks.

2 Configuring the Maintenance Terminal Configuration Guide-IPM CLI
2.1 Introduction to the Maintenance Terminal

This topic describes the different maintenance modes of the UA5000 and the features of the
different maintenance modes through a maintenance terminal.
You can maintain the UA5000 Universal Access Unit (the UA5000 for short) through the
maintenance terminal in the command line interface (CLI) mode. The configuration of the
maintenance terminal involves the following five modes:
l 2.2 Configuring the Terminal Through the Local Serial Port
l 2.3 Configuring the Terminal Through the Remote Serial Port
l 2.4 Configuring the Outband Management Interface
l 2.5 Configuring the Inband Management Interface
l 2.6 Configuring the SSH Mode
Table 2-1 lists the features of the different maintenance modes.
Table 2-1 Features of the different maintenance modes

Maintenance Description Feature
Mode
Local serial port Uses the HyperTerminal No network management software is needed.
of the operating system
for configuration.
Remote serial Uses the HyperTerminal It connects modems at the UA5000 side and the
port of the operating system maintenance terminal side. You can maintain
for configuration. the UA5000 through modem dial-up from the
maintenance terminal.
Inband Uses the service channel l Advantages: It uses flexible networking,

management of the UA5000 to without an extra networking device, thus
channel manage the network saving networking cost.
device. l Disadvantages: The maintenance work
cannot be performed if the service channel
fails.
Outband Uses the maintenance l Advantages: It provides reliable device

management network port (ETH) of management channel. The fault can be
channel the control board of the located in time even if the managed device
UA5000 to manage the fails.
system. l Disadvantage: An extra network device is
required to set up the maintenance channel.

Maintenance Description Feature

Mode
SSH mode Uses the service channel Secure Shell (SSH) ensures network security
of the UA5000, or the by using the authentication, encryption and
ETH port of the control identification functions. When a user telnets to
board to manage the the UA5000 from an insecure network, SSH
system. protects the UA5000 from certain attacks such
as IP address spoofing and clear text password
interception.
2.2 Configuring the Terminal Through the Local Serial Port

This topic describes how to log in and configure the UA5000 by connecting the maintenance
terminal to the UA5000 through the local serial port.
Networking
Figure 2-1 shows an example network for configuring the terminal through the local serial port.
Figure 2-1 Example network for configuring the terminal through the local serial port
RS-232 serial port cable

COM
ETH
IPMB UA5000
Serial port
Figure 2-2 shows the flowchart for configuring the terminal through the local serial port.

Figure 2-2 Flowchart for configuring the terminal through the local serial port
Start
Connect the serial port cable
Run the HyperTerminal
Set the parameters of the terminal
Define the terminal emulation type
Set ASCII code
Log in to the system
End
Procedure
Step 1 Connect the serial port cable.
Use a RS-232 serial port cable to connect the serial port of the PC to the maintenance port of
the control board of the UA5000, as shown in Figure 2-1.
Step 2 Start the HyperTerminal.
1. Set up a connection.
Choose Start > Programs > Accessories > Communication > HyperTerminal to start
the HyperTerminal and set up a serial port connection. Input the connection name, as shown
in Figure 2-3. Click OK.

Figure 2-3 Setting up a connection
2. Configure the serial port.
Select the standard character terminal or PC terminal serial port that is actually connected
to the UA5000. Assume it to be serial COM2, as shown in Figure 2-4. Click OK.
Figure 2-4 Selecting the serial port to be connected
Step 3 Set the parameters of the terminal.
In the dialog box as shown in Figure 2-5, set the parameters. The parameters are set as follows:
l Baud rate: 9600 bit/s

l Data bits: 8
l Parity: None
l Stop bits: 1
l Flow control: None
NOTE
l Ensure that the baud rate of the HyperTerminal is consistent with the baud rate of the serial port in the
system. By default, the baud rate of the serial port is 9600 bit/s.
l There may be illegible characters in the input information after you log in to the system. This is usually
due to baud rate inconsistency between the HyperTerminal and the system. In this case, use a different
baud rate to log in to the system. The system supports the baud rates of 9600 bit/s, 19200 bit/s, 38400
bit/s, 57600 bit/s, and 115200 bit/s.
Figure 2-5 Setting parameters of the HyperTerminal
Click OK to display the HyperTerminal interface as shown in Figure 2-6.

Figure 2-6 HyperTerminal interface

Step 4 Define the terminal emulation type.

Choose File > Properties in the HyperTerminal interface. Click the Settings tab in the displayed
UA5000Properties dialog box. Select VT100 or Auto Detection as the type of terminal
emulation as shown in Figure 2-7.
Figure 2-7 Defining terminal emulation type
Step 5 Set the ASCII code.

Click ASCII Setup. Set the line delay and character delay as 200 ms as shown in Figure 2-8.
NOTE
When you paste text to the HyperTerminal, character delay controls the character transmit speed, and line
delay controls the interval of sending every line. If a delay is very short, it leads to the loss of characters.
When the pasted text is displayed abnormally, you can modify the setting.

Figure 2-8 Setting ASCII code
----End
Result
In the HyperTerminal interface, press Enter. The system displays a message, prompting you to
input the user name. Input the user name and password for user registration (by default, the super
user name is root and password is admin). Wait for sometime until the command line prompt
(such as UA5000>) is displayed.
If the login fails, first click the Hang-up icon and then the Dial icon. If you are still unable to
log in, repeat the previous steps to check the parameter settings and physical connections, and
then try again.
2.3 Configuring the Terminal Through the Remote Serial

Port
This topic describes how to log in to and configure the UA5000 through the remote serial port.
Prerequisite
Before using a serial port for remote maintenance, connect modems at the UA5000 and the PC
sides. In this manner, you can set up a remote connection between the PC and the UA5000
through modem dial-up.
The modem at the UA5000 side is referred to as the called modem. The modem at the PC side
is referred to as the calling modem. The modems must meet the following requirements:
l The calling and called modems should comply with the related standards, and should
support AT command set.

l The called modem must be an external modem.

l The calling modem can either be a built-in modem or an external modem. To ensure better
compatibility and to facilitate status monitoring, it is recommended that you use an external
modem made by the vendor of the called modem.
l The following configuration is based on modems of the same type. In actual applications,
you can configure the modems by referring to the related AT command set.
Notes
l Do not press any key on the keyboard after dial-up and before the connection is set up.
Pressing any key aborts the call.
l Stop the connection after the remote maintenance. Do not close the HyperTerminal.
Otherwsie, certain types of remote modems are always online and the next dial-up fails.
Networking
Figure 2-9 shows an example network for configuring the terminal through the remote serial
port.
Figure 2-9 Example network for configuring the terminal through the remote serial port
Serial port
cable
COM
Telephone line ETH
Modem
IPMB UA5000
Telephone line
Serial port
cable
Modem PC
Figure 2-10 shows the flowchart for configuring the terminal through the remote serial port.

Figure 2-10 Flowchart for configuring the terminal through the remote serial port
Start
Set the called modem parameters
Set the calling modem parameters
Set up the configuration environment
Start the HyperTerminal
Set the HyperTerminal parameter
Dial up on the HyperTerminal
End
Procedure
Step 1 Set the parameters of the called modem.
Only three signal lines, namely SD, RD and SG, are used for connecting the UA5000 and the
modem. Therefore, before connecting the modem with the terminal, shield the handshake signals
and flow control signals of the modem.
The configuration of a modem requires an intelligent terminal. The following modem

configuration is based on the HyperTerminal on Windows platform.
1. Connect the serial port of the modem with the serial port of the maintenance terminal by
using the dedicated cable for the modem, and power on the system. Installing a driver is
not required at this step.
2. Assume that the modem is connected to COM2 port. Start the HyperTerminal. Select Direct
to COM2 in the column of Connect using in the displayed dialog box. Set the parameters
of the serial port as follows: 9600 bit/s for baud rate, 8 for data bits, 1 for stop bits, none
for parity, and none for flow control.
NOTE
After the connection, you may find that the terminal cannot display anything. This is because the
display function of the modem is disabled at the previous configuration operation. To enable the
terminal to display input and output information, run the AT&F command to restore the default
settings and press Enter.

3. Check the modem.
In the HyperTerminal, run the AT&F command to restore the default settings of the modem.
Check whether the screen displays "OK". If yes, the modem is normal. If not, the modem
has defects and must be replaced by a new modem.
4. In the HyperTerminal, run the following commands:
ATS0=1 //Enable the auto replay function (ringing sound).
AT&D //Ignore DTR signals.
AT&K0 //Disable the flow control function.
AT&R1 //Ignore the RTS signals.
AT&S0 //Set DSR as high level.

ATEQ1&W //Disable the modems response to the command while executing
the command and saving the configurations.
NOTE
After the last command is executed, run the AT command to disable the echo function of the terminal
and prohibit it from displaying the execution results. Due to the rate limitation of the modem, you
can set the baud rate of the maintenance port of the UA5000 to 9600 bit/s or 19200 bit/s. If necessary,
you can run the baudrate command to modify the baud rate of the maintenance port of the
UA5000. To prevent an extremely high bit rate on the line between the two modems, you can set
AT$MB=9600 (or another value) before running the ATEQ1&W command.
Step 2 Set the parameters of the calling modem.
After power-on, the calling modem can function in the normal state without any configuration.
If a non-standard cable, however, is used to connect the maintenance terminal with the modem,
shield the handshake signals and flow control signals of the modem before the connection. For
details on this shield operation, see the settings of the called modem parameters.
Step 3 Set up the configuration environment.
Figure 2-9 shows the configuration environment.
1. Connect the called modem.
Plug the telephone line into the LINE port of the called modem. Connect the serial port of
the called modem to the maintenance port COM of IPMB board by using the dedicated
serial port cable for the UA5000. Power on the modem.
2. Connect the calling modem.
For an external modem, plug the telephone line into the LINE port of the calling modem.
Connect the serial port of the calling modem with the serial port of the maintenance terminal
by using dedicated cable for the modem. Power on the modem.
For a built-in modem, you only need to plug the telephone line into the LINE port of the
calling modem.
Step 4 Start the HyperTerminal.

1. Set up a connection.
Choose Start > Programs > Accessories > Communication > HyperTerminal to start
the HyperTerminal and set up a serial port connection. Input the connection name, as shown
in Figure 2-11. Click OK.

Figure 2-11 Setting up a connection
2. Configure the serial port.
Select the standard character terminal or PC terminal serial port that is actually connected
to the UA5000. Assume it to be serial COM2, as shown in Figure 2-12. Click OK.
Figure 2-12 Selecting the serial port to be connected
Step 5 Set the parameters of the terminal.
In the displayed dialog box as shown in Figure 2-13, set the parameters. The parameters are set
as follows:

l Baud rate: 9600 bit/s

l Data bits: 8
l Parity: None
l Stop bits: 1
l Flow control: None
NOTE
l When setting the baud rate, ensure that the baud rate of the HyperTerminal is consistent with the baud
rate of the serial port in the system. By default, the baud rate of the serial port is 9600 bit/s.
l There may be illegible characters in the input information after you log in to the system. This is usually
due to baud rate inconsistency between the HyperTerminal and the system. In this case, use a different
baud rate to log in to the system. The system supports the baud rates of 9600 bit/s, 19200 bit/s, 38400
bit/s, 57600 bit/s and 115200 bit/s.
Figure 2-13 Setting the parameters of the HyperTerminal
Click OK to display the HyperTerminal interface, as shown in Figure 2-14.

Figure 2-14 HyperTerminal interface

Step 6 Dial up on the HyperTerminal.

1. External modem:
To set up a connection with an external modem, select a serial port, rather than a modem,
from the Connect Using drop-down list in the HyperTerminal.
In the HyperTerminal interface, run the AT command for dial-up, for example,
ATDTXXXXXXXX. Press Enter. XXXXXXXX represents the telephone number of the
line connected with the remote modem.
For details on the dial-up commands, see the AT command set. For example, ATDT0 W
020XXXXXXXX means to dial "0" for connection with the external line. Wait for the
dialing tone from the exchange, and then dial the telephone number of 020XXXXXXXX.
2. Built-in modem:
Run the HyperTerminal. Set the called number. Select the modem from the Connect
using drop-down list. Click Configure in the properties setting interface to set the modem
properties. Select Bring up terminal window after dialing in the Options tab of the
properties setting interface. Click OK to confirm the setting. You need not use any ATDT
commands for dialing.
----End
Result
After dial-up, the "OH" and "RI" LEDs on the modem connecting to the PC are on. The modem
generates a sound, which indicates the progress of the connection. After the connection is set
up, the "CD" LEDs (for carrier detection) on the two modem are on, and the HyperTerminal
interface displays "CONNECT9600 (or 19200)". This indicates that the inter-modem connection
is set up successfully.
If "NO CARRIER" is displayed, the connection fails. Check the hardware connections and the
telephone line. Press Enter to display the command line interface for login.
After the remote operation on the terminal, run the hang-up command of the HyperTerminal to
break the connection.
2.4 Configuring the Outband Management Interface

This topic describes how to connect the maintenance terminal to the UA5000 through the
outband management interface of the UA5000 for maintenance and management.
Networking - LAN
Figure 2-15 shows an example network for the outband management over the local area network
(LAN) in Telnet mode.

Figure 2-15 Example network for the outband management over the LAN in Telnet mode
COM
ETH
IPMB UA5000
LAN
PC PC PC
On this network, the UA5000 is connected to the LAN through the straight through cable. The
IP address of the maintenance network port on the UA5000 must be in the same network segment
as the IP address of the maintenance terminal.
NOTE
You can directly connect the network port on the maintenance terminal to the maintenance network port
on the control board of the UA5000 to perform the outband management.
Data Plan - LAN

Table 2-2 provides the data plan for the outband management over LAN in Telnet mode.
Table 2-2 Data plan for the outband management over LAN in Telnet mode
Item Data
Maintenance network port on the IP address: 10.10.20.2/24

UA5000
Maintenance terminal IP address: 10.10.20.1/24
NOTE
You can also use a crossover cable to connect the network port on the maintenance terminal to the maintenance
network port on the control board of the UA5000 to perform the outband management.
Networking - WAN
Figure 2-16 shows an example network for the outband management over the wide area network
(WAN) in Telnet mode.

Figure 2-16 Example network for the outband management over the WAN in Telnet mode
PC
LAN COM
WAN ETH
Router
IPMB PVMB UA5000
PC PC
Data Plan - WAN

Table 2-3 provides the data plan for the outband management over WAN in Telnet mode.
Table 2-3 Data plan for the outband management over WAN in Telnet mode
Item Data
Maintenance network port on the IP address: 10.10.20.1/24

UA5000
Port on the router connected to the IP address: 10.10.20.254/24

UA5000
Figure 2-17 shows the flowchart for configuring the outband management interface to log in to
the device in Telnet mode.

Figure 2-17 Flowchart for configuring the outband management interface to log in to the device
in Telnet mode
Start
Set up the configuration

environment
Configure the IP address of

the maintenance network port
Add the BMS route
Run the telnet application
End
Procedure
Step 1 Set up the configuration environment.
Set up the configuration environment based on actual conditions or requirements, as shown in
Figure 2-15 or Figure 2-16.
Step 2 Configure the IP address of the maintenance network port.
huawei(config)#interface meth 0
huawei(config-if-meth0)#ip address 10.10.20.1 24
Step 3 Add the BMS route.

l In the case of the environment shown in Figure 2-15, you need not add any BMS route.
l In the case of the environment shown in Figure 2-16, you need to add a route of next hop.
huawei(config)#ip route-static 10.10.21.0 24 10.10.20.254
Step 4 Run the Telnet program.

Choose Start > Run on the PC. Enter the IP address of the maintenance network port on the
UA5000 in the Open field. Click OK to run Telnet (consider the Windows XP OS as an
example), as shown in Figure 2-18.

Figure 2-18 Running Telnet
Step 5 Log in to the system.

Users log in to the system. The default user name and password of the super user are root and
admin. After the user name and password of the super user are entered, the system displays the
following prompt:
>>User name:root
>>User password:
huawei HONET UA5000 Universal Access Unit.
Copyright(C) 1998-2008 by Huawei Technologies Co.,Ltd.
----End
Result
After logging in to the system, the user should be able to perform the related operations.
2.5 Configuring the Inband Management Interface

This topic describes how to connect the maintenance terminal to the UA5000 through the inband
management interface of the UA5000 for maintenance and management.
NetworkingLAN
Figure 2-19 shows an example network for the inband management over the local area network
(LAN) in the Telnet mode.

Figure 2-19 Example network for the inband management over the local area network (LAN)
in the Telnet mode
LAN
PC1
PC2
0/3/0
COM
ETH
PC3
IPMB PVMB UA5000
Data PlanLAN
Table 2-4 provides the data plan for the inband management over LAN in the Telnet mode.
Table 2-4 Data plan for inband management over LAN in the Telnet mode
Item Data
Inband management interface of the UA5000 IP address: 10.10.20.1/24
NetworkingWAN
Figure 2-20 shows an example network for the inband management over the wide area network
(WAN) in the Telnet mode.
Figure 2-20 Example network for the inband management over the WAN in the Telnet mode
Router
PC
0/3/0
COM
ETH
IPMB PVMB UA5000

Data PlanWAN
Table 2-5 provides the data plan for the inband management over WAN in the Telnet mode.
Table 2-5 Data plan for inband management over WAN in the Telnet mode
Item Data
Inband management interface of IP address: 10.10.20.1/24

the UA5000
Port of the router connecting to the IP address: 10.10.20.254/24

UA5000
Figure 2-21 shows the flowchart for configuring the device through the inband interface in the
Telnet mode.
Figure 2-21 Flowchart for configuring the device through the inband interface in the Telnet
mode
Start
Set up the configuration

environment
Create a BMS VLAN and

add the uplink port to it
Set the IP address of the

VLAN layer 3 interface
Set inband BMS route
Run the telnet application
End

Procedure
Step 1 Construct the networking.
Set up the configuration environment based on actual conditions, as shown in Figure 2-19 or
Figure 2-20.
Step 2 Create a BMS VLAN and add its uplink port.
Run the vlan command to create a BMS VLAN.

huawei(config)#vlan 30 standard huawei(config)#port vlan 30 0/3 0
Step 3 To set the IP address of the layer 3 interface of VLAN, do as follows:
Run the ip address command to set the IP address and mask of the layer 3 interface of VLAN
on the UA5000.
huawei(config)#interface vlanif 30 huawei(config-if-vlanif30)#ip address
10.10.20.1 255.255.255.0
Step 4 Set a route for the inband BMS.
In the case of the environment shown in Figure 2-19, you need not add any route for BMS.
In the case of the environment shown in Figure 2-20, you need add a route of next hop.
Step 5 Run the Telnet program.
Choose Start > Run on the PC. Enter the command telnet, followed by the IP address of the
maintenance port on the UA5000 in the Open field. Click OK to run Telnet (consider the
Windows XP OS as an example) as shown in Figure 2-22.
Figure 2-22 Running Telnet
Users log in to the system. By default, the super user uses root and admin as the user name and
password. In this case, the system displays the following prompt:
>>User name:root
>>User password:

huawei HONET UA5000 Universal Access Unit.

Copyright(C) 1998-2008 by Huawei Technologies Co.,Ltd.
----End
Result
After logging in to the system, the user can perform related operation.
2.6 Configuring the SSH Mode

This topic describes how to connect the maintenance terminal to the UA5000 in the secure shell
(SSH) mode. Then, you can log in to the UA5000 through the maintenance terminal to manage
and maintain the device. This operation protects the UA5000 from attacks.
Networking Outband Management over LAN

Figure 2-23 shows an example network for the outband management over LAN in SSH mode.
Figure 2-23 Example network of the outband management over LAN in SSH mode
COM
ETH
IPMB UA5000
LAN
PC PC PC
Data Plan Outband Management over LAN

Table 2-6 provides the data plan for the outband management over LAN in SSH mode.
Table 2-6 Data plan for the outband management over LAN in SSH mode
Item Data
UA5000 IP address of the maintenance port: 10.10.20.2/24

User name: huawei
User authentication mode: RSA public key authentication

Item Data

Client software: PuTTY.exe, PuTTYGen.exe, and
sshkey.exe
Networking Outband Management over WAN

Figure 2-24 shows an example network for the outband management over WAN in SSH mode.
Figure 2-24 Example network for the outband management over WAN in SSH mode
PC
LAN COM
WAN ETH
Router
IPMB PVMB UA5000
PC PC
Data Plan Outband Management over WAN

Table 2-7 provides the data plan for the outband management over WAN in SSH mode.
Table 2-7 Data plan for the outband management over WAN in SSH mode
Item Data
UA5000 IP address of the maintenance port: 10.10.20.2/24

User name: huawei
Maintenance IP address: 10.10.21.1/24

terminal Client software: PuTTY.exe
Password conversion tool: PuTTY.exe, PuTTYGen.exe, and
sshkey.exe
Router IP address of the router connecting to the UA5000: 10.10.20.254/24
Networking Inband Management over LAN

Figure 2-25 shows an example network for the inband management over LAN in SSH mode.

Figure 2-25 Example network for the inband management over LAN in SSH mode
LAN
PC1
PC2
0/3/0
COM
ETH
PC3
IPMB PVMB UA5000
Data Plan Inband Management over LAN

Table 2-8 provides the data plan for the inband management over LAN in SSH mode.
Table 2-8 Data plan for the inband management over LAN in SSH mode
Item Data
UA5000 IP address of the layer 3 interface of the VLAN: 10.10.20.2/24

User name: huawei

Client software: PuTTY.exe, PuTTYGen.exe, and sshkey.exe
Networking Inband Management over WAN

Figure 2-26 shows an example network for the inband management over WAN in SSH mode.
Figure 2-26 Example network for the inband management over WAN in SSH mode
Router
PC
0/3/0
COM
ETH
IPMB PVMB UA5000

Data Plan Inband Management over WAN

Table 2-9 provides the data plan for the inband management over WAN in SSH mode.
Table 2-9 Data plan for the inband management over WAN in SSH mode
Item Data
UA5000 IP address of the layer 3 interface of the VLAN: 10.10.20.2/24

User name: huawei
Maintenance IP address: 10.10.21.1/24

terminal Client software: PuTTY.exe
Password conversion tool: PuTTY.exe, PuTTYGen.exe, and
sshkey.exe
Router IP address of the router connecting to the UA5000: 10.10.20.254/24
Figure 2-27 shows the flowchart for configuring the SSH mode. For configuration details, see
"8.6 Configuring SSH."

Figure 2-27 Flowchart for configuring the SSH mode
Start
Set the IP address of the maintenance

network port/VLAN layer 3 interface
No
WAN environment or not?
Yes
Add a route for the NMS
Create a user
Create the local key pair for the SSH

server
Password
Set the authentication mode for
the SSH user
rsa, all, Password-publickey
Generate the RSA public key
Generate the public key for the SSH

user
Authorize the public key to the SSH

user
End
Procedure
Step 1 Construct the networking.
Set up the configuration environment based on actual conditions, as shown in Figure 2-23,
Figure 2-24, Figure 2-25 or Figure 2-26.
Step 2 Set the IP address of the maintenance port or the IP address of the layer 3 interface of the VLAN.

l Set the IP address of the maintenance port.

huawei(config-if-meth0)#ip address 10.10.20.2 255.255.255.0
l Set the IP address of the layer 3 interface of the VLAN.

huawei(config-if-vlanif30)#ip address 10.10.20.2 255.255.255.0
Step 3 Add a route for BMS.

In the case of the environment as shown in Figure 2-23 or Figure 2-25, you need not add any
route for BMS.
In the case of the environment as shown in Figure 2-24 or Figure 2-26, you need to add a route
of next hop.
Step 4 Create a user.

Add a user whose information is as follows:
l Profile: operator
l User name and password: huawei1
l Authority level: operator
l Permitted reenter number: 4
huawei(config)#terminal user name
User profile name(<=15 chars)[root]:operator
User Name(<=15 chars):huawei1
User Password(<=15 chars):
Confirm Password(<=15 chars):
User's Level:
1. Common User 2. Operator 3. Administrator:2
Permitted Reenter Number(0--4):4
User's Appended Info(<=30 chars):
This user has been added
Repeat this operation? (y/n)[n]:n
Step 5 Create the local key pair.
CAUTION
To succeed in logging in to the SSH, configure and create the local RSA key pair first. Configure
the rsa local-key-pair create before other SSH configurations, thus generating the local key pair.
huawei(config)#rsa local-key-pair create

The key name will be: huawei_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:
Generating keys...
.++++++++++++
..++++++++++++
............++++++++
...............................++++++++
Step 6 Set the SSH user authentication mode.

Select the RSA authentication mode.

huawei(config)#ssh user huawei authentication-type rsa
Step 7 Generate the RSA public key.

1. Run the key generator, such as PuTTY.
Run the key generator PuTTYGen.exe, as shown in Figure 2-28.
Figure 2-28 Interface of the key generator
2. Generate the client key.

After selecting SSH-2 RSA as the key type from Parameters. Click Generate. Move the
mouse over the blank area to generate the client key. Figure 2-29 shows the interface of
the key generator.

Figure 2-29 Interface of the key generator
Save the public key and private key separately after they are generated.
3. Generate the RSA public key.
Run the password conversion tool sshkey.exe and convert the client public key to the RSA
public key, as shown in Figure 2-30.

Figure 2-30 Interface of converting the client public key to the RSA public key
Step 8 Generate the SSH user public key.

In the config-rsa-key-code CLI mode, copy the RSA public key to the server.
huawei(config)#rsa peer-public-key key
huawei(config-rsa-public-key)#public-key-code begin
Enter "RSA key code" view, return last view with "public-key-code end".
huawei(config-rsa-key-code)#30818602 81805A01 625279EF 5E4CD503 916C9DB5 0233CF58
huawei(config-rsa-key-code)#C901D4CA 207C77D3 4EF25B04 9897BD24 997BF61B DFB9A73C
huawei(config-rsa-key-code)#F82B6F06 55ACCDB9 F7DC1474 9E6518EE B1A543FF 9147150B
huawei(config-rsa-key-code)#111BD11C 683A023B A4295550 DA13F6BE 3190A2A8 3BFCB158
huawei(config-rsa-key-code)#4FBAA365 F6E796A0 B02CB6F9 8491A373 9B4A0876 4B3189B4
huawei(config-rsa-key-code)#BBA2C7BA E1974104 AD165E98 18CF0201 25
huawei(config-rsa-key-code)#public-key-code end
huawei(config-rsa-public-key)#peer-public-key end
Step 9 Grant the public key to the SSH user.

In global config mode, grant the public key to the user huawei.
huawei(config)#ssh user huawei assign rsa-key key

1. Run the client tool.
Run the SSH client software PuTTY.exe. Click Auth in the directory tree and assign a file
for the RSA private key, as shown in Figure 2-31. Click Browse to display a dialog ox.
Select the file for the private key and click OK.

Figure 2-31 Interface for the SSH client tool
2. Log in to the system.

Click Session in the directory tree. Input the IP address of the UA5000 in the Host Name
(or IP address) text box. Click Open to log in to the system.

Figure 2-32 Interface for the SSH client login
Because the user authentication mode is set as RSA, the system displays a prompt, as shown
in Figure 2-33.

Figure 2-33 Interface for the SSH client login
Input the correct user name to log in to the system.
----End
Result
After logging in to the system, the user should be able to perform the related operations.

Configuration Guide-IPM CLI 3 CLI Operation Basics
3 CLI Operation Basics
About This Chapter
This topic describes the different maintenance modes of theUA5000 through the maintenance
terminal.
3.1 Overview
This topic describes the maintenance modes of the UA5000 and the features of the maintenance
modes.
3.2 CLI Features
This topic describes the features of the UA5000 CLI mode.
3.3 Basic Operation Through CLI
This topic describes how to maintain and manage the UA5000 through CLI.

3 CLI Operation Basics Configuration Guide-IPM CLI
3.1 Overview
This topic describes the maintenance modes of the UA5000 and the features of the maintenance
modes.
Service Description
You can maintain the UA5000 through modes:
l The BMS provides a graphical user interface (GUI) and the CLI provides the command
line interface to facilitate operations.
l You can maintain the UA5000 through the CLI easily. For this purpose, you can run the
HyperTerminal or the telnet program of the Windows operating system to log in to the
UA5000 to maintain it through the CLI.
This topic describes certain basic CLI operations. After reading this chapter, you can perform
the basic configurations for the UA5000 through the CLI.
3.2 CLI Features

This topic describes the features of the UA5000 CLI mode.
3.2.1 Introduction to the Command Mode
This topic describes the CLI mode classification, features and the conversion between the
command modes.
3.2.2 Intelligent Matching
This topic describes the intelligent matching of the CLI.
3.2.3 Edit Characteristics
This topic describes the edit characteristics of the CLI.
3.2.4 Interaction Characteristics
This topic describes the interaction function of the CLI. This means that the CLI system prompts
the subsequent keywords that can be input and the parameter type of the keyword.
3.2.5 Parameter Prompt
This topic describes the parameter prompt function of the CLI.
3.2.6 Display Characteristics
This topic describes the display characteristics of the CLI. This means that the CLI system
supports the function of pausing the displayed information when there is a lot of information.
3.2.7 Saving and Showing History Commands
The CLI provides a function to automatically save history commands. By using this function,
you can obtain the history commands saved in the CLI and execute them repeatedly.
3.2.8 CLI Error Prompts
This topic describes the CLI error prompts.

3.2.1 Introduction to the Command Mode

This topic describes the CLI mode classification, features and the conversion between the
command modes.
Command Mode Classification

The UA5000 supports multiple command modes to implement the hierarchical protection and
to prevent the invasion of unauthorized users.
The UA5000 supports the following command modes:
l User mode
l Privilege mode
l Global config mode
Command Mode Features

l Downward compatibility:
All the commands that work in the user mode are available in the privilege mode. The
commands that work in the user mode and the privilege mode are all available in global
config mode.
l Hierarchical protection:
Prevents the invasion of unauthorized users. Users at different levels can enter different
command modes. Even if users at different levels enter the same command mode, the
commands that can be executed can vary.
Command mode switching

Figure 3-1 shows how to switch the command modes.
Figure 3-1 Command mode switching
ospf OSPF mode

quit huawei (config-ospf-...)#
rip RIP mode

quit huawei (config-rip-...)#
Login User mode enable Privilege config Global config mode

huawei> huawei# huawei (config)#
quit disable quit
interface Interface config mode

quit huawei (config-if-...)#
btv BTV mode

quit huawei (config-btv)#
-

3.2.2 Intelligent Matching

This topic describes the intelligent matching of the CLI.
Function
To facilitate operations, the UA5000 supports the function of inputting an incomplete keyword,
and pressing the space bar to display the matching keyword. For example, for the command
enable, input en or ena (in common user mode) and press the space bar.
Notes
On pressing the space bar, if the system does not return the commands, it indicates the following:
l A wrong command is input. In this case, check the command and input the correct
command.
For example, when you input dis for display in privilege mode, the system cannot find
a matched keyword for it.
huawei#dip
l The input keyword conflicts with others.
For example, when you input dis in privilege mode, the system cannot find a matched
keyword for it. This is because there are two commands that start with dis: disable and
display.
3.2.3 Edit Characteristics

This topic describes the edit characteristics of the CLI.
Function
The CLI provides basic command edit functions. It allows multi-line editing, with up to 255
bytes for each command.
Specifications
Table 3-1 lists the edit functions.
Table 3-1 Edit functions
Key Function
Common key If the edit buffer is not full, pressing such a key moves the cursor
to the right from its current position.
BackSpace Pressing this key deletes the character before the cursor and
moves the cursor to the left. When reaching the beginning of the
command, the cursor stops.

Key Function
Left arrow key or Ctrl Pressing the key(s) moves the cursor to the left (back) one
+A character.
Right arrow key or Pressing the key(s) moves the cursor to the right (forward) one
Ctrl + D character.
Up/Down arrow keys / Pressing one of the keys displays history commands. For certain
terminals that do not support the up/down arrow keys, you can
use Ctrl+Pto select the previous history command.
Ctrl + U Pressing the keys deletes the characters before the cursor and
moves the cursor to the beginning of the line.
Ctrl + K Pressing the keys deletes the characters after the cursor and
moves the cursor to the end of the line.
Ctrl + F Pressing the keys searches a string.
Ctrl + B Pressing the keys moves the cursor to the end of the line.
ESC Pressing this key twice deletes the current input information.
NOTE
Common keys see letter keys, number keys and punctuation keys.
3.2.4 Interaction Characteristics

This topic describes the interaction function of the CLI. This means that the CLI system prompts
the subsequent keywords that can be input and the parameter type of the keyword.
Function
The UA5000 provides the interaction function of the CLI. In interactive mode, if you input an
incomplete command and press Enter, the system prompts the subsequent keyword that can be
input and the parameter type of the keyword. When you input ?, the system prompts the help
information of the command.
Example
To use the CLI interaction mode to run the load program command, do as follows:
huawei#load program
{ xmodem<K>|tftp<K>|ftp<K> }:tftp
To run the command load program after the interaction mode is disabled, do as follows:
huawei#undo smart
huawei#load program tftp
^
% Incomplete command, and error detected at '^'
After the interaction mode is disabled, input the command and press Enter. Then, the system
directly executes the command. If the input command is incomplete, the system prompts the
error.

For example, input the keyword switch and press ? to display the help information provided by
the command.
huawei#switch ?
---------------------------------------------
Command of user Mode:
---------------------------------------------
language-mode Set language parameter
3.2.5 Parameter Prompt

This topic describes the parameter prompt function of the CLI.
Function
In interactive mode, the CLI characters such as <K> and are used to express the parameter
type of a keyword.
Specifications
Table 3-2 lists the meaning of the CLI characters supported by the UA5000.
Table 3-2 Meaning of the CLI characters
Character Meaning
<K> Keyword
<E> Enumeration. Items following it are the available options.
 ULONG. Information following it is the range of the value to be

entered.
<L> LONG. Information following it is the range of the value to be

entered.
<S> Character string. Information following it is the length of the

character string to be entered.
 IP address
<M> MASK, such as the mask of an IP address.
<PA> MAC address
<H> Hexadecimal number. The system supports the input of "0x". By

default, the system supports decimal numbers.
<D><yyyy-mm-dd> Date
<T><hh:mm:ss> Time
NOTE
The CLI supports the hexadecimal numbers. However, if you do not input "0x" when inputing a
hexadecimal number, the system considers the input number as a decimal number.

3.2.6 Display Characteristics

This topic describes the display characteristics of the CLI. This means that the CLI system
supports the function of pausing the displayed information when there is a lot of information.
Function
When you query the information, the CLI sometimes fails to display the information on one
screen because the there is a lot of information. In this case, you can use the pause function to
view the information displayed on multiple screens.
NOTE
l One screen refers to one screen displayed by the HyperTerminal software of a PC. One screen contains 24
lines.
l The system supports that the screen scrolls upward automatically, that is, the displayed information cannot
be paused. Run the scroll command to enable the auto-scroll function, and run the undo scrollcommand to
disable the auto-scroll function. By default, the auto-scroll function is disabled.
Specifications
Table 3-3 lists the options for viewing the information displayed on multiple screens.
Table 3-3 Display Characteristics

Key Function
Press Q or Ctrl+C when the Suspends the display and execution of the commands.
display is paused.
Press the space bar when the Continues to display the information on the next screen.
display is paused.
Press Enter when the display is Continues to display the information on the next line.
paused.
3.2.7 Saving and Showing History Commands

The CLI provides a function to automatically save history commands. By using this function,
you can obtain the history commands saved in the CLI and execute them repeatedly.
Context
By default, up to 10 history commands can be saved for every user in the CLI, and up to 10
history commands can be queried.
The queried history commands are valid only for the current user. After the user re-logs in, the
history commands are cleared.

Procedure
Step 1 Run the history-command max-size command to set the number of history commands that can
be saved in the command buffer.
Step 2 Run the display history-command command to query the history commands.
----End
Example
To set the number of history commands that can be saved in the command buffer to 20, do as
follows:
huawei(config)#history-command max-size 20
huawei(config)#display history-command
--------------------------------------------------
No. Command
--------------------------------------------------
10 interface ?
9 history-command max-size
8 mac-pool ?
7 display current-configuration
6 ?
5 quit
4 quit
3 radius-server ?
2 ?
1 ?
--------------------------------------------------
3.2.8 CLI Error Prompts

This topic describes the CLI error prompts.
Function
The system checks the syntax of each command that is input, and executes the command if it
passes the check. If the command fails to pass the check, the system prompts an error.
Specifications
Table 3-4 lists the common CLI error prompts.
Table 3-4 Common CLI error prompts
Error Prompt Cause
Unknown command This command cannot be found. Such a keyword cannot be found.
The parameter type is not correct. The parameter value exceeds
the threshold.
Incomplete command The command input is incomplete.
Too many parameters A lot of parameters are input.
Ambiguous command The command input is ambiguous.

Error Prompt Cause
Parameter error The parameter is wrong and the cursor location indicates where
the error exists.
3.3 Basic Operation Through CLI

This topic describes how to maintain and manage the UA5000 through CLI.
3.3.1 Obtaining Online Help Information
This topic describes how to obtain the online help information. When you want to query the
current command or the help information of the command in current mode, perform this task.
If the help information is not found, it indicates that the help list is empty.
3.3.2 Enabling Interactive Command Execution
This topic describes how to enable interactive command execution.
3.3.3 Enabling CLI Trap Reporting
This operation allows you to enable CLI trap reporting when the alarm or progress information
needs to be displayed during the execution of a command.
3.3.4 Switching Terminal Language
This topic describes how to select a preferred language as the terminal display language.
3.3.5 Configuring the System Time
This topic describes how to configure the system time.
3.3.6 Setting the System Name
This topic describes how to enable an administrator to set the system name to differentiate various
UA5000s.
3.3.7 Setting the Terminal Type
This topic describes how to set the terminal type of the CLI system according to the type of the
in-service terminal,to ensure correct command line editing.
3.3.8 Setting Timeout Exit Time
This topic describes how to set the timeout exit time. After the timeout exit time is set, if no
information is input on the terminal, the system allows the user to exit from the system
automatically.
3.3.9 Locking the Terminal
This topic describes how to lock the terminal to prevent other users from accessing the terminal
by using the current user name.
3.3.10 Clearing the Terminal Screen
This topic describes how to clear the terminal screen. With this operation, the screen output is
cleared and the command prompt is displayed on the upper left corner of the screen.
3.3.11 Querying the Version Information
This topic describes how to query the information about the system version or the board version.
3.3.12 Querying Board CPU Usage
This topic describes how to query the CPU usage of a board.
3.3.13 Testing the Network State

This topic describes how to check the network connectivity and to check whether the host is
reachable. This operation also checks all the gateways passed by data packets sent from a host
to the destination, and locates network faults.
3.3.1 Obtaining Online Help Information

This topic describes how to obtain the online help information. When you want to query the
current command or the help information of the command in current mode, perform this task.
If the help information is not found, it indicates that the help list is empty.
Context
The CLI offers two ways to obtain online help:
l Full help
When you input ? following the prompt, you can obtain the help information about the
current available commands.
When you input ? following a complete keyword, you can obtain the help information
about all the commands matching the keyword and the parameters used by the
commands.
l Partial help
When you input ? following an incomplete keyword, you can obtain the help
information about the commands matching the incomplete keyword.
Example
To display the help information about all the available commands in global config mode, do as
follows:
huawei(config)#?
---------------------------------------------
Command of config Mode:
---------------------------------------------
aaa AAA(Authentication,Authorization,Accounting) view
acl Specify ACL configuration information
adsl <Group> adsl command group
arp <Group> ARP command group
bind Bind IP/MAC
board <Group> board command group
---- More ( Press 'Q' to break ) ----
To display the help information about the commands matching the display keyword, do as
follows:
huawei(config)#display ?
---------------------------------------------
Command of privilege Mode:
---------------------------------------------
aaa AAA(Authentication,Authorization,Accounting)
acl ACL status and configuration information
adsl <Group> adsl command group
alarm Display alarm related information
arp <Group> arp command group
authentication-scheme Authentication scheme
To display the help information about the commands matching the d keyword, do as follows:
huawei(config)#d?
---------------------------------------------

Command of config Mode:

---------------------------------------------
debugging Enable system debugging functions
default Configure default MAC pool
defaultvlan Configure default VLAN type
device-template Device template command
dhcp <Group> dhcp command group
dhcp-server Add DHCP server IP addresses
---------------------------------------------
Command of privilege Mode:
---------------------------------------------
debugging <Group> debugging command group
diagnose Change into diagnose mode
disable Turn off privileged mode commands
display Display information
duplicate <Group> duplicate command group
---------------------------------------------
Command of user Mode:
---------------------------------------------
display Display information
Related Operation
Table 3-5 lists the related operation for obtaining the online help information.
Table 3-5 Related operation for obtaining the online help information
Obtain the system help information help
3.3.2 Enabling Interactive Command Execution

This topic describes how to enable interactive command execution.
Context

l With interactive command execution enabled, if you input a complete command and press
Enter, the system displays a prompt to prevent wrong operations.
For example, if you input the reboot system command and press Enter, the system prompts
the following information: Please check whether data has saved, the unsaved data may lose
if reboot active board, are you sure to reboot active board? (y/n)[n]:
l With interactive command execution disabled, if you input a command and press Enter,
the system runs the command directly.
l By default, the interactive command execution is enabled.
Procedure
Step 1 Run the interactive command to enable the interactive command execution.
Step 2 Run the display interactive command and you can find that the interactive command execution
is enabled.
----End

Example
To enable the interactive command execution, do as follows:
huawei>interactive
Interactive function is enabled
huawei>display interactive
Command confirmed function is enabled
Related Operation
Table 3-6 lists the related operation for disabling the interactive command execution.
Table 3-6 Related operation for disabling the interactive command execution
Disable the interactive command execution undo interactive
3.3.3 Enabling CLI Trap Reporting

This operation allows you to enable CLI trap reporting when the alarm or progress information
needs to be displayed during the execution of a command.
Context
By default, CLI Trap reporting is enabled.
Procedure
Step 1 Run the info-center enable command to enable the CLI Trap reporting function.
Step 2 Run the display info-center command and you can find that the CLI Trap reporting function is
enabled.
----End
Example
To enable the CLI Trap reporting function, do as follows:
huawei(config)#info-center enable
Information center is enabled
huawei(config)#display info-center
Information Center:enabled
Log host:
Console:
channel number : 0, channel name : console
Monitor:
channel number : 1, channel name : monitor
SNMP Agent:
channel number : 5, channel name : snmpagent
Log buffer:
enabled,max buffer size 1024, current buffer size 512,
current messages 36, channel number : 4, channel name : logbuffer
dropped messages 0, overwrote messages 0
Trap buffer:
enabled,max buffer size 1024, current buffer size 256,

current messages 0, channel number:3, channel name:trapbuffer

dropped messages 0, overwrote messages 0
Information timestamp setting:
log - date, trap - date, debug - boot
Sent messages = 37, Received messages = 37
IO Reg messages = 0 IO Sent messages = 0
Related Operation
Table 3-7 lists the related operation for disabling the CLI Trap reporting function.
Table 3-7 Related operation for disabling the CLI Trap reporting function.
Disable the CLI Trap reporting function undo info-center enable
3.3.4 Switching Terminal Language

This topic describes how to select a preferred language as the terminal display language.
Context
The UA5000 supports the general language and the local language, including English and
Chinese. English is the default language.
Procedure
Run the switch language-mode command to switch from one language to another.
----End
Example
To run the switch language-mode command to switch from one language to another, do as
follows:
huawei(config)#switch language-mode
Related Operation
Table 3-8 lists the related operation for switching the terminal language.
Table 3-8 Related operation for switching the terminal language
To... Run the Command... Remarks
Display the terminal language display language This command is

not available for
common users.

3.3.5 Configuring the System Time

This topic describes how to configure the system time.
Context
l The format of the system time is yyyy-mm-dd hh:mm:ss GMT hh:mm, namely, year-
month-date hour:minute:second offset from GMT (+ indicates that the local time is earlier
than the GMT; - indicates that the local time is later than the GMT) hour:minute.
l The system time immediately takes effect after the configuration.
l During the configuration of the system time, the system strictly checks the time for its
validity. Invalid configurations are forbidden. Pay attention to configure the leap year and
leap month.
Procedure
Step 1 Run the time command to configure the system time.
Step 2 Run the display time command to query the system time.
----End
Example
To query the current system time, do as follows:
huawei#time 09:00:00 2007-02-28
huawei#display time
{ <cr>|dst<K>|time-stamp<K> }:
command:
display time
2007-02-28 09:00:06+08:00
3.3.6 Setting the System Name

This topic describes how to enable an administrator to set the system name to differentiate various
UA5000s.
Context
l By default, the device name is UA5000.
l The new system name takes effect immediately after it is set.
l After the system name is changed, the command line prompt changes to the new name
accordingly.
Procedure
Run the sysname command to set the system name.
----End
Example
To name the first UA5000 in the New York office in the USA, do as follows:

huawei(config)#sysname NY_UA5000_A
3.3.7 Setting the Terminal Type

This topic describes how to set the terminal type of the CLI system according to the type of the
in-service terminal,to ensure correct command line editing.
Context
l Different terminals feature different edit characteristics. To make terminals mutually
compatible, the system divides the terminals into two types, namely, standard terminals
(ANSI) and VT series terminals.
l The default terminal type is ANSI.
l Certain terminal tools, such as HyperTerminal, telnet and neterm, allow you to set the
terminal types. You can use the associated menu to set the terminal emulation type so that
the type of the terminal tool is consistent with the type of the terminal tool in the system.
Procedure
Step 1 Run the terminal type command to set the terminal type.
Step 2 Run the display terminal type command to query the terminal type that you set.
----End
Example
To set the terminal type as VT100, do as follows:
huawei#terminal type vt100
huawei#display terminal type
The terminal type: VT100
3.3.8 Setting Timeout Exit Time

This topic describes how to set the timeout exit time. After the timeout exit time is set, if no
information is input on the terminal, the system allows the user to exit from the system
automatically.
Context
By default, the system allows users to exit from the system if no information is input on the
terminal for five minutes.
Procedure
Step 1 Run the idle-timeout command to set the timeout exit time.
Step 2 Run the display idle-timeout commad to query the preset timeout exit time.
----End
Example
To set the timeout exit time to 23 minutes, do as follows:

huawei>idle-timeout 23
huawei>display idle-timeout
The timeout value is set to 23 minutes currently. If there is no input from
terminal during this time, the user will be disconnected
Related Operation
Table 3-9 lists the related operation for setting the timeout exit time.
Table 3-9 Related operation for setting the timeout exit time
Set the timeout exit time to the undo idle-timeout

default 120 minutes
3.3.9 Locking the Terminal

This topic describes how to lock the terminal to prevent other users from accessing the terminal
by using the current user name.
Context
When a terminal is locked, if you press any button on the terminal, the system prompts you to
enter the password. After entering the correct password, you can operate the terminal.
Procedure
Run the terminal hold command to lock the terminal.
----End
Example
To lock the current CLI terminal and then unlock it, do as follows:
huawei(config)#terminal hold Hold Password(<=15 chars): Confirm Password(<=15
chars): The user terminal has been held Hold Password(<=15 chars)://Press any key
and the system prompts you to enter the unlocking password.
huawei(config)# //Input the correct password and the system unlocks the
terminal.
Related Operation
Table 3-10 lists the related operation for locking the terminal.
Table 3-10 Related operation for locking the terminal

Lock the terminal undo terminal hold

3.3.10 Clearing the Terminal Screen

This topic describes how to clear the terminal screen. With this operation, the screen output is
cleared and the command prompt is displayed on the upper left corner of the screen.
Context
This command clears only the output that is displayed on the screen and does not clear the output
in the buffer.
Procedure
Run the cls command to clear the terminal screen.
----End
Example
To clear the screen output, do as follows:
huawei>cls
3.3.11 Querying the Version Information

This topic describes how to query the information about the system version or the board version.
Context
By running the command, you can obtain the version of normal boards only. The command
cannot obtain the version of a faulty board.
Procedure
Run the display version to query the version information.
----End
Example
To query the system version, do as follows:
huawei(config)#display version
UA5000IPMBV100R017 RELEASE SOFTWARE

Copyright (C) 1998-2008 by Huawei Technologies Co., Ltd.
Uptime is 0 day(s), 7 hour(s), 24 minute(s), 5 second(s)
3.3.12 Querying Board CPU Usage

This topic describes how to query the CPU usage of a board.
Procedure
Run the display cpu command to query the CPU usage of a board.
----End

Example
To query the CPU usage of the control board, do as follows:
huawei>display cpu 0/3
CPU occupancy: 28%
3.3.13 Testing the Network State

This topic describes how to check the network connectivity and to check whether the host is
reachable. This operation also checks all the gateways passed by data packets sent from a host
to the destination, and locates network faults.
Context
The commands used to test the network state include ping and tracert.
l ping
ping is used to check the network connectivity and the host reachability.
l tracert
tracert is used to test the gateways passed by data packets sent from a host to the
destination. It can be also used to check the connectivity of a network and locate faults
in the network.
The tracert command is run as follows:
The host sends a packet with the Time to Live (TTL) of 1 to the destination.
During the first hop, the system returns an Internet Control Message Protocol (ICMP)
packet to indicate the failure in sending the packet due to TTL timeout.
The host sends a packet with the TTL of 2.
The system also returns a packet indicating TTL timeout in the second hop.
The process continues in this manner until the packet reaches the destination.
In this process, the system records the source address of each ICMP TTL timeout message,
and provides a path along which an IP packet passes all the way to the destination.
Procedure
Step 1 Run the ping command to test the network state.
Step 2 Run the tracert command to test the network state.
----End
Example
To test the network state by running the ping command, do as follows:
huawei(config)#ping 10.11.52.240
PING 10.11.52.240: 56 data bytes, press CTRL_C to break
Reply from 10.11.52.240: bytes=56 Sequence=0 ttl=64 time = 10 ms
--- 10.11.52.240 Ping statistics ---

5 packets transmitted
5 packets received
0.00% packet loss
round-trip min/avg/max = 10/10/13 ms
To test the network state by running the tracert command, do as follows:

huawei#tracert 10.11.106.133
traceroute to 10.11.106.133 max hops 30 ,packet 40 bytes
press CTRL_C to break
1 253 ms 476 ms 508 ms 10.11.120.62
2 * * * Request timed out.
3 * * * Request timed out.
4 4 ms 4 ms 5 ms 10.11.106.133

Configuration Guide-IPM CLI 4 Configuring the BMS
4 Configuring the BMS
About This Chapter
This topic describes how to manage the UA5000 through the N2000 BMS.
4.1 Introduction to the BMS
This topic describes the network management protocols, and the BMS that the UA5000 supports.
4.2 Configuration Example of Outband BMS
This topic describes how to connect the UA5000 to a BMS. Then, you can maintain the device
through an outband management channel.
4.3 Configuration Example of an Inband BMS
This topic describes how to maintain and manage the UA5000 by using a BMS through an inband
management channel.
4.4 Configuring the SNMP Agent
This topic describes how to configure the parameters of the SNMP Agent. To maintain the
UA5000 through NMW, see this operation.
4.5 Configuring the IP Address of the Outband BMS
This topic describes how to configure the IP address of the outband BMS, namely, the IP address
of the maintenance port.
4.6 Configuring the BMS Route
This topic describes how to set up the static route from the UA5000 to the network management
workstation (NMW).
4.7 Configuring the IP Address of the Inband BMS
When you manage the UA5000 through inband BMS, firstly you must configure BMS VLAN,
that is management VLAN. And then configure three-layer interface IP address for the BMS
VLAN, that is the IP address of the inband BMS interface.

4 Configuring the BMS Configuration Guide-IPM CLI
4.1 Introduction to the BMS

This topic describes the network management protocols, and the BMS that the UA5000 supports.
Service Description
The UA5000 provides the BMS interface, and applies the Simple Network Management Protocol
(SNMP) to communicate with BMS. The UA5000 supports the iManager N2000 Broadband
Management System, namely, the iManager N2000 BMS (N2000 BMS).
The N2000 BMS manages the UA5000 through the BMS interface of the managed device. The
UA5000 provides the status information for the N2000 BMS by sending the Trap packet, thus
reporting certain emergency events.
This topic describes the network configuration performed on the UA5000 to realize normal
communication between the UA5000 and the N2000, including outband BMS configuration and
inband BMS configuration.
NOTE
To realize normal communication between the UA5000 and the N2000, you must also perform
configurations on the N2000. For details, see "IPM Commissioning."
4.2 Configuration Example of Outband BMS

This topic describes how to connect the UA5000 to a BMS. Then, you can maintain the device
through an outband management channel.
Networking
Figure 4-1 shows an example network for configuring the outband BMS.
Figure 4-1 Example networking for configuring the outband BMS

IPM
Router
COM
ETH
IP address: UA5000
10.10.20.254/24
Data Plan
Table 4-1 provides the data plan for configuring the outband BMS.

Table 4-1 Data plan for configuring the outband BMS
Item Data
UA5000 ETH IP address: 10.10.20.1/24
BMS IP address: 10.10.21.1/24
The port connecting the router and the IP address: 10.10.20.254/24

UA5000
Figure 4-2 shows the flowchart for configuring the outband BMS.
Figure 4-2 Flowchart for configuring the outband BMS
Start
Set the IP address of the

maintenance network port
Add a route for the outband BMS
Set the SNMP parameters
Enable trap sending
Set the IP address of

the target host for traps
Set the source address

for traps sending
Save the data
End
Procedure
Step 1 Set the IP address of the ETH port.

Step 2 Add a route for the outband BMS.

huawei(config-if-meth0)#quit
Step 3 Set the Simple Network Management Protocol (SNMP) parameters.

l Setting the community name.
huawei(config)#snmp-agent community read public
huawei(config)#snmp-agent community write private
l Setting the administrator ID and contact method.

huawei(config)#snmp-agent sys-info contact HW-075528780808
l Setting the device location.

huawei(config)#snmp-agent sys-info location Shenzhen China
l Setting the SNMP version information.

NOTE
The version information must be consistent with the version information of the BMS. Assume that the
BNS adopts SNMP V1.
huawei(config)#snmp-agent sys-info version v1
Step 4 Enable the transmission of Trap packets.

huawei(config)#snmp-agent trap enable standard
Step 5 Set the IP address of the target host for Trap packets.
huawei(config)#snmp-agent target-host trap address 10.10.21.1 securityname private
Step 6 Set the IP address of the ETH port as the source address for sending Trap packets.
huawei(config)#snmp-agent trap source meth 0

huawei(config)#save
NOTE
l This topic describes only the data plan of the UA5000. To communicate with the network, configure the
related data on the router.
l If the environment configuration of Telnet is complete according to the description in 2.4 Configuring the
Outband Management Interface, steps 1 and 2 can be omitted here.
----End
Result
After the configuration, you can manage the UA5000 through the N2000 BMS.
4.3 Configuration Example of an Inband BMS

This topic describes how to maintain and manage the UA5000 by using a BMS through an inband
management channel.
Networking
Figure 4-3 shows an example network for configuring the inband BMS.

Figure 4-3 Example network for configuring the inband BMS

IPM
10.10.1.10/24 10.50.1.10/24
10.10.1.1/24 COM
ETH
10.50.1.1/24 UA5000
Data Plan
Table 4-2 provides the data plan for configuring the inband BMS.
Table 4-2 Data plan for configuring the inband BMS

Item Data
BMS IP address: 10.10.1.1/24
Default gateway: 10.10.1.10
Inband BMS port of the UA5000 Port ID: 0/3/0

BMS VLAN ID: 1000
IP address: 10.50.1.1/24
Default gateway: 10.50.1.10
Figure 4-4 shows the flowchart for configuring the inband BMS.

Figure 4-4 Flowchart for configuring the inband BMS
Start
Configure the BMS

VLAN and uplink port
Configure the IP address

of the BMS VLAN port
Configure the route

of the inband BMS
Configure the parameters

related to SNMP
Enable the transmission

of Trap packets
Configure the IP address of the

target host for Trap packets
Configure the source

address of the Trap packets
Save the data
End
Procedure
Step 1 Configure the BMS VLAN and uplink port.
huawei(config)#vlan 1000 standard
Step 2 Configure the IP address of the BMS VLAN port.

Step 3 Configure the route of the inband BMS.

huawei(config)#ip route-static 10.10.1.0 255.255.255.0 10.50.1.10
Step 4 Set the community name and the access rights.

Step 5 Enable the transmission of Trap packets.

Step 6 Configure the IP address of the target host for Trap packets.

Step 7 Configure the source address of the Trap packets.

huawei(config)#snmp-agent trap source vlanif 1000

huawei(config)#save
NOTE
l This topic describes only the data configuration on the UA5000. To communicate with the network,
configure the related data on the router.
l If the environment configuration of Telnet is complete according to the description in "2.4 Configuring the
Outband Management Interface", steps 1 and 2 can be omitted here.
----End
Result
The N2000 BMS should be able to manage the UA5000 in the normal state.
4.4 Configuring the SNMP Agent

This topic describes how to configure the parameters of the SNMP Agent. To maintain the
UA5000 through NMW, see this operation.
4.4.1 Setting a Community Name and its Read and Write Rights
This topic describes how to add a community name and set its read and write rights.
4.4.2 Enabling the Sending of Trap Packets
This topic describes how to enable the device to send Trap packets to the BMS.
4.4.3 Setting the IP Address of the Destination Host of Trap Packets
This topic describes how to set the IP address of the destination host of Trap packets.
4.4.4 Setting the Source Interface for Sending Trap Packets
This topic describes how to set the source interface for sending Trap packets.
4.4.5 Setting the Device Administrator ID
This topic describes how to set the device administrator ID.
4.4.6 Setting the System Location Information
This topic describes how to set the system location information.
4.4.1 Setting a Community Name and its Read and Write Rights
This topic describes how to add a community name and set its read and write rights.
Context
l By default, the read-only community name in the N2000 BMS is public, and the read-write
community name in the N2000 BMS is private.
l The UA5000 supports up to 10 community names.
l The read-write community names set in the host system must be consistent with the
community names in the BMS manager.

Procedure
Step 1 Run the snmp-agent community command to add a community name and set its read and write
rights.
Step 2 Run the display snmp-agent community command to query a community name.
----End
Example
To add a read-only community named public, do as follows:
huawei(config)#display snmp-agent community read
Community name:public
Storage type: nonVolatile
View name:ViewDefault
Total number is 1
Related Operation
Table 4-3 lists the related operation for setting a community name and its read and write rights.
Table 4-3 Related operation for setting a community name and its read and write rights
Delete a community name undo snmp-agent community
4.4.2 Enabling the Sending of Trap Packets

This topic describes how to enable the device to send Trap packets to the BMS.
Context
By default, the device is prohibited from sending Trap packets to the BMS.
Procedure
Step 1 Run the snmp-agent trap enable standard command to enable the sending of Trap packets.
Step 2 Run the display snmp-agent trap enable command to query whether the sending of Trap
packtes is enabled.
----End
Example
To enable the device to send Trap packets to the BMS, do as follows:
huawei(config)#display snmp-agent trap enable
Trap is enabled

Related Operation
Table 4-4 lists the related operation for enabling the sending of Trap packets.
Table 4-4 Related operation for enabling the sending of Trap packets
Prohibit the device from sending undo snmp-agent trap enable standard
Trap packets
4.4.3 Setting the IP Address of the Destination Host of Trap Packets

This topic describes how to set the IP address of the destination host of Trap packets.
Context
The BMS host can receive Trap packets only when the IP address of the destination host of Trap
packets is set correctly. The system supports up to 20 destination hosts.
Procedure
Step 1 Run the snmp-agent target-host trap command to set the IP address of the destination host of
Trap packets.
Step 2 Run the display snmp-agent target-host command to query the information of the destination
host of Trap packets.
----End
Example
To set the IP address of the destination host of Trap packets as 10.71.53.108 and use the
community name "private", the protocol for sending the trap message is SNMP V3, the trap
message is authenticated and not encrypted do as follows:
huawei(config)#snmp-agent target-host trap address 10.71.53.108 securityname
private v3 authentication
huawei(config)#display snmp-agent target-host
Traphost list:
Traphost address: 10.71.53.108
Traphost portnumber: 162
Traphost securityname: private
Traphost trapversion: v3
Traphost securityLevel: authentication
Total number is 1
Related Operation
Table 4-5 lists the related operation for setting the IP address of the destination host of Trap
packets.

Table 4-5 Related operation for setting the IP address of the destination host of Trap packets
Delete the IP address of the destination undo snmp-agent target-host

host of Trap packets
4.4.4 Setting the Source Interface for Sending Trap Packets

This topic describes how to set the source interface for sending Trap packets.
Prerequisite
The layer 3 interface that functions as the source interface already exists.
Context
The IP address of the interface for sending Trap packets is the source IP address of the Trap
packets.
Procedure
Step 1 Run the snmp-agent trap source command to set the source interface for sending Trap packets.
Step 2 Run the display snmp-agent trap-source command to query the source interface for sending
Trap packets.
----End
Example
To set the source interface for sending Trap packets as the layer 3 interface of VLAN 1000, do
as follows:
huawei(config)#display snmp-agent trap-source
Trap source interface name: vlanif1000
Related Operation
Table 4-6 lists the related operation for setting the source interface for sending Trap packets.
Table 4-6 Related operation for setting the source interface for sending Trap packets
Delete the source address for undo snmp-agent trap source

sending Trap packets
4.4.5 Setting the Device Administrator ID

This topic describes how to set the device administrator ID.

Context
By default, the device administrator ID is "R&D Shenzhen, Huawei Technologies Co., Ltd."
Procedure
Step 1 Run the snmp-agent sys-info contact command to set the device administrator ID.
Step 2 Run the display snmp-agent sys-info contact command to query the device administrator ID.
----End
Example
To set the device administrator ID as HW-075528780808, do as follows:
huawei(config)#snmp-agent sys-info contact HW-075528780808
huawei(config)#display snmp-agent sys-info contact
{ <cr>|location<K>|version<K> }:
Command:
display snmp-agent sys-info contact
The contact person for this managed node:
HW-075528780808
Related Operation
Table 4-7 lists the related operation for setting the device administrator ID.
Table 4-7 Related operation for setting the device administrator ID
Restore the default settings of the device undo snmp-agent sys-info contact
administrator ID
4.4.6 Setting the System Location Information

This topic describes how to set the system location information.
Context
By default, the system location information is "Shenzhen China".
Procedure
Step 1 Run the snmp-agent sys-info location command to set the system location information.
Step 2 Run the display snmp-agent sys-info location command to query the system location
information.
----End

Example
To set the system location information as "Shanghai China", do as follows:
huawei(config)#snmp-agent sys-info location Shanghai China
huawei(config)#display snmp-agent sys-info location
{ <cr>|contact<K>|version<K> }:
Command:
display snmp-agent sys-info location
The physical location of this node:
Shanghai China
Related Operation
Table 4-8 lists the related operation for setting the system location information.
Table 4-8 Related operation for setting the system location information
Restore the default system undo snmp-agent sys-info location

location information
4.5 Configuring the IP Address of the Outband BMS

This topic describes how to configure the IP address of the outband BMS, namely, the IP address
of the maintenance port.
Context
l By default, the IP address of the maintenance port (the ETH port on the control board) is
10.11.104.1 and the subnet mask is 255.255.0.0.
l The IP address of the maintenance port must share the network segment with the IP address
of the maintenance terminal or of the gateway.
l After configuring the IP address, it is recommended that users save the records, thus
facilitating the query.
Procedure
Step 1 Run the interface meth command to enter the meth mode.
Step 2 Run the ip address command to configure the IP address of the ETH port.
Step 3 Run the display interface meth command to query the IP address of the maintenance port.
----End
Example
To configure the IP address of the maintenance port as 10.10.10.1 and mask as 255.255.255.0,
do as follows:

Related Operation
Table 4-9 lists the related operation for configuring the IP address of the inband BMS.
Table 4-9 Related operation for configuring the IP address of the inband BMS
Delete the configured IP undo ip address Run this command in the meth
address of the outband mode.
BMS
4.6 Configuring the BMS Route

This topic describes how to set up the static route from the UA5000 to the network management
workstation (NMW).
Context
l If the IP addresses of the UA5000 and the NMW are in different subnets, but the two require
communication, set up the BMS route between them. In this case, the IP packet can be
forwarded through the gateway.
l The system supports up to 200 static routes.
Procedure
Step 1 Run the ip route-static command to configure a static route.
Step 2 Run the display ip routing-table command to query the configuration of current routes.
----End
Example
To create a route to subnet 10.71.8.0 (where the manager is located), and the gateway as
10.71.53.1, do as follows:
Related Operation
Table 4-10 lists the related operation for configuring the BMS route.
Table 4-10 Related operation for configuring the BMS route
Delete the existing route undo ip route-static

4.7 Configuring the IP Address of the Inband BMS

When you manage the UA5000 through inband BMS, firstly you must configure BMS VLAN,
that is management VLAN. And then configure three-layer interface IP address for the BMS
VLAN, that is the IP address of the inband BMS interface.
Context
l The UA5000 realizes inband BMS.
l To prevent login and access to the UA5000 from the user end, it is recommended that the
standard VLAN be used as the BMS VLAN.
Procedure
Step 1 Run the vlan command to create a BMS VLAN.
Step 2 Run the interface vlanif command to enter the VLANIF mode.
Step 3 Run the ip address command to configure the IP address of the VLAN interface.
Step 4 Run the display interface vlanif command to query the IP address of the VLAN interface.
----End
Example
To configure the IP address of the inband BMS interface as 10.10.10.2 and mask as
255.255.255.0, do as follows:
Related Operation
Table 4-11 lists the related operation for configuring the IP address of the inband BMS.
Table 4-11 Related operation for configuring the IP address of the inband BMS
To... Run the Command... Mode
Delete the configured IP undo ip address Run this command in VLANIF

address of the inband mode.
BMS

Configuration Guide-IPM CLI 5 Configuring the Log Host
5 Configuring the Log Host
About This Chapter
This topic describes the functions of a log host of the UA5000 and how to configure the log host.
5.1 Introduction to the Log Host

This topic describes the functions of logs.
5.2 Configuration Example of a Log Host
This topic describes how to query the logs reported by the device on the log host. The inband
BMS is considered as an example in this section.
5.3 Configuring a Log Host
This topic describes how to add and activate a log host.
5.4 Deleting a Log Host
This topic describes how to delete a log host.
5.5 Deactivating a Log Host
This topic describes how to deactivate a log host.
5.6 Querying Logs
This topic describes how to query logs.

5 Configuring the Log Host Configuration Guide-IPM CLI
5.1 Introduction to the Log Host

This topic describes the functions of logs.
Function
Logs are used as important references for maintaining the UA5000 and locating faults.
You can query history commands through the logs on the UA5000. You can also record certain
important information in the logs.
5.2 Configuration Example of a Log Host

This topic describes how to query the logs reported by the device on the log host. The inband
BMS is considered as an example in this section.
Prerequisite
l The related inband BMS configuration is complete. You can telnet to the UA5000 to
manage and maintain it through PC 1 and PC 2.
l PC 3 is installed with File Transfer Protocol (FTP) or Trivial File Transfer Protocol (TFTP)
software, and can receive and save the logs reported by the UA5000.
Networking
PCs 1, 2 and 3 connect to the inband network port of the UA5000 over a local area network
(LAN). PC 3 functions as the log host of the UA5000. Figure 5-1 shows an example network
for configuring the log host.
Figure 5-1 Example network for configuring the log host
LAN PC1
PC2
IPM
0/3/0
PC3
COM
ETH
UA5000
Data Plan
Table 5-1 provides the data plan for configuring the log host.

Table 5-1 Data plan for configuring the log host
Item Data
UA5000 inband management IP address: 10.10.10.2/24

interface
PC 3 IP address: 10.10.10.1/24
Procedure
Step 1 Add a log host.
huawei(config)#loghost add 10.10.10.1 huawei
Step 2 Activate the log host.

huawei(config)#loghost activate name huawei
Step 3 Check the connectivity between the UA5000 and the log host to ensure that the UA5000 can
communicate with the log host in the normal state.
Step 4 Configure the TFTP software of the log host.

1. Enable the Syslog Server function.
2. Set the path for saving the reported logs.
----End
Result
l You can obtain the log files in the path preset for saving the reported logs.
l The operation commands executed on PCs 1 and 2 to the system are recorded in logs. They
are the same as the operation commands queried on the UA5000.
5.3 Configuring a Log Host

This topic describes how to add and activate a log host.
Context
l The UA5000 can record important information in the log server of the internal network
through the syslog mechanism. The log server can be a UNIX server or a Windows server.
l After configuring the log host, you need to enable the log host service of the log server,
and configure the path for saving logs and the log file name to enable real-time reporting
of logs. Set the path and the file name for saving log files to facilitate the real-time log files
report.
Procedure
Step 1 Run the loghost add command to add a log host.
Step 2 Run the loghost activate command to activate the log host.

Step 3 Run the display loghost list command to query the log host information.
----End
Example
To add a log host named huawei with the IP address of 10.10.10.1, do as follows:
huawei(config)#loghost add 10.10.10.1 huawei
huawei(config)#loghost activate name huawei
huawei(config)#display loghost list name huawei
Log server configuration:
IP address : 10.10.10.1
Host name : huawei
Terminal state : Normal
Related Operation
Table 5-2 lists the related operations for configuring the log host.
Table 5-2 Related operations for configuring the log host
Deactivate the log host loghost deactivate
Delete the log host loghost delete
Set the source interface for sending logs syslog source
5.4 Deleting a Log Host

This topic describes how to delete a log host.
Procedure
Step 1 Run the loghost delete command to delete a log host.
----End
Example
To delete the log host with the IP address of 10.10.10.1, do as follows:
huawei(config)#loghost delete ip 10.10.10.1
huawei(config)#display loghost list ip 10.10.10.1
Failure: The log server not exist
Related Operation
Table 5-3 lists the related operations for configuring the log host.

Table 5-3 Related operations for configuring the log host
Add a log host loghost add
Activate a log host loghost activate
Deactivate a log host loghost deactivate
5.5 Deactivating a Log Host

This topic describes how to deactivate a log host.
Context
The system sends log information only to the activated log host.
Procedure
Step 1 Run the loghost deactivate command to deactivate a log host.
----End
Example
To deactivate the log host with the IP address of 10.10.10.1, do as follows:
huawei#loghost deactivate ip 10.10.10.1
huawei#display loghost list ip 10.10.10.1
Log server configuration:
IP address : 10.10.10.1
Host name : huawei
Terminal state : Deactivate
Related Operation
Table 5-4 lists the related operations for configuring a log host.
Table 5-4 Related operations for configuring a log host
Activate a log host loghost activate
Add a log host loghost add
Delete a log host loghost delete

5.6 Querying Logs

This topic describes how to query logs.
Context
l The UA5000 can record logs of the latest 512 operations. The system administrator can
query the latest executed operation commands through logs. The executed query commands
cannot be recorded in the logs.
l The system can store up to 512 logs. When there are more than 512 records, the old records
are overwritten.
l Query and record the system logs immediately in the case of a system failure, to prevent
loss of logs that are used for locating faults.
l To record the operation correctly, ensure that the system time is correct before service
configuration.
Procedure
Run the display log command to query logs.
----End
Example
To query the logs of operations performed by user root on May 28, 2007, do as follows:
huawei(config)#display log name root 2007-05-28
Command:
display log name root 2007-05-28
---------------------------------------------------------------------------
No. UserName Domain IP-Address
448 root -- 10.144.78.32
Time: 2007-05-28 23:05:30
Cmd: log on fail
---------------------------------------------------------------------------
441 root -- 10.144.78.32
Time: 2007-05-28 23:02:43
Cmd: log on fail
---------------------------------------------------------------------------
437 root -- 10.144.78.32
Time: 2007-05-28 22:53:38
Cmd: log on fail
---------------------------------------------------------------------------
430 root -- 10.144.76.74

Configuration Guide-IPM CLI 6 User Management
6 User Management
About This Chapter
This topic describes the classification of users supported by the UA5000 and how to add, modify,
delete, or disconnect a user.
6.1 Introduction to User Management

This topic describes the definition of users and user levels and rights supported by the
UA5000.
6.2 Adding a User
This topic describes how to add a user who can log in to the device and maintain it.
6.3 Modifying the User Attributes
You can modify the attributes of existing users, such as authority, password, times of re-logins,
and appended information.
6.4 Disconnect an online user
This topic describes how to disconnect an online user to prevent the user from logging in to the
device.
6.5 Deleting a User
This topic describes how to delete a user who is not allowed to log in to the device.

6 User Management Configuration Guide-IPM CLI
6.1 Introduction to User Management

This topic describes the definition of users and user levels and rights supported by the
UA5000.
Service Description
Users hereafter see personnel who configure and maintain the device through CLI.
In terms of rights, UA5000 users are divided into four levels: common user, operator,
administrator and super user. Users at all levels can add a user only with a level lower than their
levels. Table 6-1 lists the rights for users at all levels.
Table 6-1 Rights for users at all levels
Level Rights
Common user Common users perform basic system operations and simple query
operations.
Operator Operators can configure the device and services.
Administrator and The common points are as follows:

super user l Perform all operations.
l Maintain the device, user accounts and user rights.
The differences are as follows:
l Only one super user exists in the system. The super user is of the
highest level in the system. Multiple administrators can exist in the
system.
l The super user can create the administrator level account, although
the administrator has no rights to add a super user.
6.2 Adding a User

This topic describes how to add a user who can log in to the device and maintain it.
Context
l The super user and administrators can add a user at a level lower than their levels. That is:
The super user can add administrators, operators, and common users.
The administrator can add only operators and common users.
l A user name must be unique. It cannot be all or online.
l The super user or administrator can add multiple users to the system at a time. Up to 127
users can be added in the system. If the user root is included, up to 128 users can be added.

When adding a user, you need to configure the user attributes, including the user account,
password, profile name, authority, permitted reenter number, and appended information.
Table 6-2 lists the user attributes.
Table 6-2 User attributes

User Attributes Description
User account A user account (or a user name) consists of 6 to 15 printable characters.
A user name is unique, case insensitive, and cannot contain any space.
User password A user password consists of 8 to 15 characters. It is case sensitive.
User profile name The name of a user profile consists of 1 to 15 printable characters. By
default, the system has four profiles: root, admin, operator, and common
user.
User authority The operating user is divided into three levels: common user level,
operator level, and administrator level. The super user can add the user
of any level, and the administrator can add only the common user and
the operator.
Permitted reenter Whether a user name can be used to log in to the UA5000 from several
number terminals at the same time depends on the permitted reenter number. It
is in the range 0 to 4, and is generally set to 1.
Append The append information is a type of supplementary information. It

information consists of a string of no more than 30 characters. It can be null or can
be the telephone number or address of a user.
Procedure
Step 1 Run the terminal user name command to add a user.
Step 2 Run the display terminal user command to query the user information.
----End
Example
To add a user named huawei with the password huawei123, level of Administrator, bound to
the default root user profile, times of re-logins 3 and the supplementary information of user, do
as follows:
huawei(config)#terminal user name
User Name(length<6,15>):huawei
User Password(length<8,15>):huawei123 //This is not displayed on the
console.
Confirm Password(length<8,15>):huawei123 //This is not displayed on the
console.
User profile name(<=15 chars)[root]:
User's Level:
1. Common User 2. Operator 3. Administrator:3
Permitted Reenter Number(0--4):3
User's Appended Info(<=30 chars):user
Adding user succeeds

huawei(config)#display terminal user all

----------------------------------------------------------------------------
Name Level Status Reenter Profile Append
Num Info
----------------------------------------------------------------------------
root Super Online 1 root -----
huawei Admin Offline 3 root user
----------------------------------------------------------------------------
Total record(s) number: 2
Related Operation
Table 6-3 lists the related operation for adding a user.
Table 6-3 Related operation for adding a user

Delete a user undo terminal user name l Only the super user and administrators can
delete users at lower levels.
l Users cannot delete themselves.
l The user root cannot be deleted.
l An online user cannot be deleted. To delete
the online user, you need to first
disconnect the user.
l Multiple users can be deleted at a time.
6.3 Modifying the User Attributes

You can modify the attributes of existing users, such as authority, password, times of re-logins,
and appended information.
6.3.1 Modifying a User Level

This topic describes how to modify the authority of a user.
6.3.2 Modifying a User Password
This topic describes how to change a user password to ensure device security.
6.3.3 Modifying the Times of Re-logins
This topic describes how to modify the permitted times of re-logins of a user to ensure the user
authority.
6.3.4 Modifying the Supplementary Information About a User
This topic describes how to modify the supplementary information about a user to update the
user information in time.
6.3.1 Modifying a User Level

This topic describes how to modify the authority of a user.
Context
Only the super user and administrators can perform the operation for users at lower levels.

l The super user can modify the level of a user to that of a common user, an operator, or an
administrator.
l Administrators can modify the level of a user to that of a common user, or an operator.
Procedure
Step 1 Run the terminal user level command to modify a user level.
Step 2 Run the display terminal user command to query a user level.
----End
Example
To change a common user huawei to an operator, do as follows:
huawei(config)#terminal user level
User Name(<=15 chars):huawei
1. Common User 2. Operator 3.Administrator:2
User's Level:2
Confirm Level: 2
Information will take effect when this user logs on next time
---------------------------------------------------------------------------
Name Level Status ReenterNum AppendInfo
---------------------------------------------------------------------------
root Super Online 1 none
huawei Operator Offline 3 user
---------------------------------------------------------------------------
Related Operation
Table 6-4 lists the related operations for modifying a user level.
Table 6-4 Related operations for modifying a user level
Change the user terminal user password

password
Modify the times of re- terminal user reenter

logins
Modify the terminal user apdinfo

supplementary
information
6.3.2 Modifying a User Password

This topic describes how to change a user password to ensure device security.

Context
l The super user and the administrator can change the passwords of users at lower levels
(including their levels). When changing the passwords of users at lower levels, the super
user and the administrator do not need to input the old passwords.
l The common user and the operator can change only their own passwords, and need to input
the old passwords.
Procedure
Step 1 Run the terminal user password command to change a user password.
Step 2 Log in to the device with the old user name and the new password.
----End
Example
To change the password of a common user huawei, do as follows:
huawei(config)#terminal user password
User name (<=15 chars):huawei
New password(<=15 chars):huawei123 //This is not displayed.
Confirm Password(<=15 chars):huawei123 //This is not displayed.
Information takes effect

Related Operation
Table 6-5 lists the related operations for changing a user password.
Table 6-5 Related operations for changing a user password
Modify a user level terminal user level
Modify the times of re-logins terminal user reenter
Modify the supplementary information terminal user apdinfo
6.3.3 Modifying the Times of Re-logins

This topic describes how to modify the permitted times of re-logins of a user to ensure the user
authority.
Context
l The super user and administrators can modify the permitted times of re-logins of users at
lower levels.
l It is not allowed to modify the permitted times of re-logins of the super user.

Procedure
Step 1 Run the terminal user reenter command to modify the permitted times of re-logins of a user.
Step 2 Run the display terminal user command to query the permitted times of re-logins of a user.
----End
Example
To modify the permitted times of re-logins of the common user huawei to 1, do as follows:
huawei(config)#terminal user reenter
Permitted reenter number(0--4):1
Confirm Reenter Number(0--4):1
---------------------------------------------------------------------------
---------------------------------------------------------------------------
huawei Operator Offline 1 user
---------------------------------------------------------------------------
Related Operation
Table 6-6 lists the related operations for modifying the permitted times of re-logins of a user.
Table 6-6 Related operations for modifying the permitted times of re-logins of a user
Modify a user password terminal user password
Modify the supplementary information terminal user apdinfo
6.3.4 Modifying the Supplementary Information About a User

This topic describes how to modify the supplementary information about a user to update the
user information in time.
Context
l The super user and administrators can modify their supplementary information and the
supplementary information of users at lower levels.
l Common users and operators can modify their supplementary information.

Procedure
Step 1 Run the terminal user apdinfo command to modify the supplementary information about a
user.
Step 2 Run the display terminal user command to query the supplementary information about a user.
----End
Example
To modify the supplementary information about the common user huawei, do as follows:
huawei(config)#terminal user apdinfo
User's Appended Info(<=30 chars):support@huawei.com
---------------------------------------------------------------------------
---------------------------------------------------------------------------
huawei Operator Offline 1 support@huawei.com
---------------------------------------------------------------------------
Related Operation
Table 6-7 lists the related operations for modifying the supplementary information about a user.
Table 6-7 Related operations for modifying the supplementary information about a user
Modify a user password terminal user password
Modify the times of re-logins terminal user reenter
6.4 Disconnect an online user

This topic describes how to disconnect an online user to prevent the user from logging in to the
device.
Context
Only the super user and administrators can disconnect an online user at lower levels.
Procedure
Step 1 Run the client kickoff command to disconnect an online user.
Step 2 Run the display client command to query an online user.
----End

Example
To disconnect user 2 and to check whether the user is offline, do as follows:
huawei#client kickoff 2
Are you sure to kick the user off?(y/n)[n]: y
huawei#display client
-----------------------------------------------------------------------------
ID Client name Domain name IP Address Login Time
-----------------------------------------------------------------------------
1 root -- 10.71.60.100 2006-02-08 12:26:53
-----------------------------------------------------------------------------
Related Operation
Table 6-8 lists the related operation for disconnecting an online user.
Table 6-8 Related operation for disconnecting an online user

Delete a user undo terminal user name
6.5 Deleting a User

This topic describes how to delete a user who is not allowed to log in to the device.
Context
l Only the super user and administrators can delete the users at lower levels than themselves.
l Users cannot delete themselves.
l User root cannot be deleted.
l An online user cannot be deleted. To delete an online user, you need to first disconnect the
user.
l Multiple users can be deleted at a time.
Procedure
Step 1 Run the undo terminal user name command to delete a user.
Step 2 Run the display terminal user command to verify that a user is deleted successfully.
----End
Example
To delete user huawei, do as follows:
huawei(config)#undo terminal user name
User Name(<=15 chars):huawei
Are you sure to delete the user?(y/n)[n]:y
This user has been deleted
---------------------------------------------------------------------------


---------------------------------------------------------------------------
---------------------------------------------------------------------------
Related Operation
Table 6-9 lists the related operations for deleting a user
Table 6-9 Related operations for deleting a user

Disconnect an online user client kickoff
Add a user terminal user name

Configuration Guide-IPM CLI 7 Device Management
7 Device Management
About This Chapter
This topic describes how to manage the UA5000. Device management includes shelf
management and board management.
7.1 Introduction to the Device

This topic describes the management of the UA5000 and the types and status of the boards.
7.2 Adding the Connection Between Shelves
This topic describes how to add a shelf and the connections between shelves.
7.3 Setting the Description of a Shelf
This topic describes how to set the number of a test group or the description of a shelf.
7.4 Resetting a Control Board
This topic describes how to reset a control board.
7.5 Adding a Service Board
This topic describes how to add a service board offline and confirm the service board to ensure
that the required service board can be used.
7.6 Deleting a Service Board
This topic describes how to delete a service board that is not required.
7.7 Resetting a Service Board
This topic describes how to reset a service board when it is unstable.
7.8 Prohibiting a Service Board
This topic describes how to prohibit a service board.
7.9 Managing Subboards
This topic describes the purpose of subboard management, the specification of subboards, and
the principles for combining and replacing subboards.

7 Device Management Configuration Guide-IPM CLI
7.1 Introduction to the Device

This topic describes the management of the UA5000 and the types and status of the boards.
Service Description
l Shelf management: adding a shelf, adding a connection between shelves, deleting a shelf,
deleting a connection between shelves, configuring the attributes of a shelf, querying shelf
information, and querying a connection between shelves.
l Control board management: resetting a control board and querying the information about
the control board.
l Service board management: adding a service board offline, confirming a service board,
deleting a service board, resetting a service board, prohibiting a service board, and query
the information about a service board.
Introduction to Board Types

Table 7-1 lists the boards supported by the UA5000.
Table 7-1 Boards supported by the UA5000
Board Type Board Name
Control board IPMB and IPMD
Service board ADRB, ADMB, SDLB, and CSRB
Uplink board EP1A and GP1A
Monitoring board ESC, FCBB/FCBA, PWMA, and FCBD
Power board PWX
Rear access transfer E1TB, EFTB, HWCB, HWTB, RATB, and SAPB
board
Front access E1TF, EFTF, HLAF, HLEF, HWCF, HWTF, PSTF, RATF, SLTF,
transfer board SAPF, and WATF
Introduction to Board Status

The service board has different status during running. Table 7-2 lists the service board status.
Table 7-2 Service board status
Status Remarks
Normal It indicates that the board is in the normal state.
Failed It indicates that the board is faulty.

Status Remarks
Config It indicates that the board is being configured.
Auto_find It indicates that the board is just inserted, but not confirmed yet.
Prohibited It indicates that the board is prohibited.
7.2 Adding the Connection Between Shelves

This topic describes how to add a shelf and the connections between shelves.
Context
l The master shelf and the IPM control board are in the normal state after the master shelf is
added.
l The slave shelf is in the faulty state after it is added. The slave shelf will be in the normal
state after a connection is added between shelves.
l The connection between shelves is not required when only the master shelf exists.
Procedure
Step 1 Run the frame add command to add a shelf.
Step 2 Run the display frame info command to query the connection between shelves.
----End
Example
To add a connection between the master shelf and the slave shelf, do as follows:
huawei(config)#frame add 1 8
{ local<K> }:local
Command:
frame add 1 8 local
huawei(config)#display frame info
{ <cr>|frameid<0,5> }:
Command:
display frame info
--------------------------------------------------------
FrameID FrameType FrameState
--------------------------------------------------------
0 H612HABD Normal
1 H612HABE(APSB) Normal
--------------------------------------------------------
Total: 2
7.3 Setting the Description of a Shelf

This topic describes how to set the number of a test group or the description of a shelf.

Precaution
l Set the information of the test group of a shelf before setting the number of the test group.
l You cannot modify the number of the test group and the description of the shelf at the same
time.
Procedure
Step 1 Run the frame set command to set the description of a shelf.
Step 2 Run the display frame infoframeid command to query the description of a shelf.
----End
Example
To set the description of shelf 0 to huawei, do as follows:
huawei(config)#frame set 0 desc huawei
huawei(config)#display frame info 0
----------------------------------------------------------------------------
Type : MAIN_F(H612HABD)
State: Normal
Desc : huawei
TestGroup: 0
EMU 0 ID: 5 Subnode:12 State:Communications failed
EMU 2 ID: 2 Subnode:1 State:Communications normal
----------------------------------------------------------------------------
7.4 Resetting a Control Board

This topic describes how to reset a control board.
Specifications
The control boards include the active control board and standby control board.
Resetting an active control board results in the following:
l In the case of an active/standby configuration, the operation does not have an adverse
impact on the services that are in progress.
l If there is no standby control board, the operation disconnects the control board from all
the service boards, that is, all the service boards in the system are reset.
Precaution
l The resetting may lead to the loss of unsaved data. Therefore, before the operation, run the
save command to save the system data.
l Reset the system only when necessary. Otherwise, the services may be affected. In general,
the system is reset after a new application or database is loaded.
l The board reset command cannot be used to reset a control board.

Procedure
Run the reboot command to reset the control board.
----End
Example
To reset the active control board, do as follows:
huawei#reboot active
Please check whether data has saved, the unsaved data may lose if reboot active
board, are you sure to reboot active board? (y/n)[n]:y
Reboot active will cause system forced switchover, are you sure to rebootactive
board? (y/n)[n]:y
To reset the standby control board, do as follows:

huawei#reboot standby
Please check whether data has saved, are you sure to reboot standby board? (y/n)
[n]:y
7.5 Adding a Service Board

This topic describes how to add a service board offline and confirm the service board to ensure
that the required service board can be used.
Context
l After a service board is added offline, the service board is in failed state. Only when a
service board of the same type as the service board added offline is inserted into the slot,
the status of the service board changes to config and then to normal. If a service board of
different type is inserted, the service board cannot be started because the types of the service
boards do not match.
l You can add a service board only in an idle slot.
l The service boards that are inserted properly into a shelf can be found automatically.
CAUTION
The service shelves of HABA and HABF with H601IPMD control board can not support
broadband service board in slots 18-35.
Procedure
Step 1 Run the board add command to add a service board offline.
Step 2 Manually add a service board of the same type into the service shelf.
Step 3 Run the board confirm command to confirm the service board.
Step 4 Run the display board command to query the status of the service board.
----End
To insert an ADR board into slot 0/10, do as follows:

huawei(config)#board add 0/10 h603ADR

huawei(config)#board confirm 0/10
huawei(config)#display board 0/10
-------------------------------------
Board Name : H603ADR
Board Status : Failed
Online state : Online
-----------------------------------------------------------------------------
Port Port Type Port Status Line Profile Alarm Profile Ext Profile
-----------------------------------------------------------------------------
0 ADSL Activating 1002 1 --
-----------------------------------------------------------------------------
Total number of activated port : 0
Total number of unactivated port: 32
Related Operation
Table 7-3 lists the related operation for adding a service board.
Table 7-3 Related operation for adding a service board

Delete a service board delete Before deleting a service board, delete

board the data on the service board. Otherwise,
deleting the service board fails.
7.6 Deleting a Service Board

This topic describes how to delete a service board that is not required.

Precaution
l Before deleting a service board, delete the data on the service board. Otherwise, deleting
the service board fails.
l The service board in auto-find state cannot be deleted. The faulty service board can be
deleted.
Procedure
Step 1 Run the board delete command to delete a service board that is not required.
Step 2 Run the display board command to query the status of a service board.
----End
To delete the faulty service board in slot 0/12, do as follows:

huawei(config)#board delete 0/12
Are you sure to delete this board? (y/n)[n]: y
0 frame 12 slot board delete successfully
Failure: Board does not exist
Related Operation
Table 7-4 lists the related operation for deleting a service board.
Table 7-4 Related operation for deleting a service board
Add a service board board add
7.7 Resetting a Service Board

This topic describes how to reset a service board when it is unstable.
Precaution
l The system generates a fault alarm after the reset operation. The system generates a
recovery alarm after the board recovers.
l When the service board starts successfully after resetting, it reports the registration
information to the control board. The control board configures the data of the service board
to restore the services.
l Do not reset the power board.
Procedure
Run the board reset command to reset a service board.
----End

Example
To reset the service board in slot 0/12, do as follows:
huawei(config)#board reset 0/12
Are you sure to reset board? (y/n)[n]:y
0 frame 2 slot reset board message sent successfully...
7.8 Prohibiting a Service Board

This topic describes how to prohibit a service board.
Prerequisite
In the following cases, you need to prohibit service boards:
l The services of a board are suspended but not deleted.
l The dynamic resources are released.
Precaution
l The control board cannot be prohibited.
l The service board that is in the auto-find state and is unconfirmed cannot be prohibited.
l Prohibiting a service board interrupts the services of the board.
l Do not prohibit the power board.
Procedure
Step 1 Run the board prohibit command to delete a service board.
Step 2 Run the display board command to query the status of a service board.
----End
Example
To prohibit the service board in slot 0/12, do as follows:
huawei(config)#board prohibit 0/12
Prohibiting board will interrupt all services on this board, are you sure to
prohibit board? (y/n)[n]:y
Prohibited board successfully
--------------------------------------------------------
Board Name : ASL
Board state : Prohibited
Online state : Online
Board has ports : 16
0 port type : PSTN_PORT


A/u Law : A law
Port Impedance : Bureau machine in China(200+680|| 100
Port Current : 25mA steady current
Work Environment : -
Work Mode : -
Ring Voltage : -
--------------------------------------------------------
7.9 Managing Subboards

This topic describes the purpose of subboard management, the specification of subboards, and
the principles for combining and replacing subboards.
Specification
The IPMB board of the UA5000 provides various types of ports through the subboards attached
hereon.
Principles for Combining and Replacing the Subboards

When attaching the subboards to the IPMB board of the UA5000, comply with the following
principles:
l Replacement principles
The FE optical subboard can be upgraded to the GE optical subboard, but the GE optical
subboard cannot be degraded to the FE optical subboard.
The FE electrical subboard can be upgraded to the GE electrical subboard, but the GE
electrical subboard cannot be degraded to the FE electrical subboard.
The GE optical subboard can be degraded to the FE electrical subboard.
Only the GE electrical port and the GE optical port are interchangeable. Other electrical
ports and optical ports are not interchangeable. That is, interchangeability is not
supported between the FE electrical port and the FE optical port, between the FE
electrical port and the GE optical port, and between the GE electrical port and the FE
optical port.
l Capacity expansion principle
In the case of the capacity expansion, the subboards must comply with the preceding
replacement principles.
Capacity reduction principles
Ensure that no service data exists on the reduced subscriber ports.
In the case of the capacity reduction, the subboards must comply with the preceding
replacement principles.
NOTE
If any subboard combination does not comply with the preceding principles, the system reports an alarm,
which indicates that the subboard replacement fails. When you query the boards through the CLI, the system
displays the information about original subboards and the faulty status of the subboards.

Related Operation
Table 7-5 lists the related operation for managing the subboard.
Table 7-5 Related operation for managing the subboard

Query the board display board You can run this command to query the
information information about the subboards attached
to the board.

Configuration Guide-IPM CLI 8 Configuring Remote User Authentication
8 Configuring Remote User Authentication
About This Chapter
This topic describes the remote user management supported by the UA5000, including the
authentication, authorization, and accounting.
8.1 Introduction to Remote User Authentication
This topic describes the remote user authentication and the ways of authenticating remote users
of the UA5000.
8.2 Related Concepts of Remote User Authentication
This topic describes the concepts related to remote user authentication, including AAA, RADIUS
and SSH.
8.3 Configuration Example of Remote User Authentication
This topic describes how to configure the remote user authentication to prevent illegal access to
the device.
8.4 Configuring AAA
This topic describes the process of configuring the AAA, including configuring an authentication
scheme, creating a domain, referencing a authentication scheme and referencing a RADIUS
server template.
8.5 Configuring RADIUS
This topic describes the process of configuring the RADIUS, including creating a RADIUS
server template, setting the IP address and port number of a RADIUS server, setting the shared
key of the RADIUS server, setting the response timeout interval of a RADIUS server, setting
the maximum retransmit count of RADIUS request packets, setting the RADIUS server type,
configuring an NAS port and its ID format, and setting the format of the user name sent to a
RADIUS server.
8.6 Configuring SSH
This topic describes the SSH configuration, including creating the local RSA key pair,
configuring the SSH user public key and configuring an SSH user.

8 Configuring Remote User Authentication Configuration Guide-IPM CLI
8.1 Introduction to Remote User Authentication

This topic describes the remote user authentication and the ways of authenticating remote users
of the UA5000.
Service Description
Remote user authentication refers to the process of examining the remote users who need to log
in to the UA5000. Only authenticated users can log in to, maintain, and manage the device.
The UA5000 provides the functions of remote user authentication.
8.2 Related Concepts of Remote User Authentication

This topic describes the concepts related to remote user authentication, including AAA, RADIUS
and SSH.
8.2.1 Introduction to AAA

This topic describes the AAA and its advantages.
8.2.2 Introduction to RADIUS
This topic describes the Remote Authentication Dial-In User Service (RADIUS) and its
principles.
8.2.3 Introduction to SSH
This topic describes the SSH and the advantages of the SSH protocol.
8.2.1 Introduction to AAA

This topic describes the AAA and its advantages.
What Is AAA
Authentication, authorization and accounting (AAA) is the network security mechanism which
provides a framework for unified authentication, authorization, and accounting configurations.
Advantages of AAA
The AAA works in the server-client structure. That is, the AAA server stores the user information
in a centralized manner. The AAA client runs on the managed resources side.
The AAA framework has the following advantages:
l Excellent expansibility
l Standard authentication schemes
l Centralized and easy user management
l Multi-system based security mechanism

8.2.2 Introduction to RADIUS

This topic describes the Remote Authentication Dial-In User Service (RADIUS) and its
principles.
What Is RADIUS
As a management framework, AAA can be implemented by a number of protocols. Among
them, RADIUS is widely used.
RADIUS is an information exchange protocol with the distributed server-client model. It is used
to manage a large number of distributed dial-up users.
A RADIUS server manages a simple user database to provide AAA functions for users and to
modify the service information of users according to the service types and authority.
The users forward their AAA requests to the RADIUS server through a network access server
(NAS).
Principles of RADIUS
l When a user wants to access other networks (or use certain network resources), the NAS
forwards the authentication and accounting information of the user to the RADIUS server.
The RADIUS protocol defines how to transmit user and accounting information between
the NAS and the RADIUS server.
l The RADIUS server receives the user connection request, authenticates the user name and
password contained in the user data, and returns the required data to the NAS.
NOTE
l The NAS and the RADIUS server also use a key to encrypt the data exchanged between them.
In this case, the data such as the password can be prevented from being intercepted or stolen.
l The RADIUS configuration only defines the parameters related to the connections between the
NAS and the RADIUS server. To validate these parameters, you must first enter the domain
mode, specify a RADIUS scheme, and then select the RADIUS AAA mode.
8.2.3 Introduction to SSH

This topic describes the SSH and the advantages of the SSH protocol.
What Is SSH
Secure Shell (SSH) provides authentication, encryption, and identification to guarantee network
communication security. When users telnet to the router through an insecure network, SSH offers
security guarantee and powerful authentication to protect the UA5000 against attacks such as
IP address spoofing and interception of plain text password.
SSH RFC
Internet Engineering Task Force (IETF) defines the SSH RFC document. The SSH protocol has
two versions:
l SSHv1.5: SSHv1.5 was issued earlier than SSHv2. At present, a majority of SSHs support
it.

l SSHv2: SSHv2 is more standard and precise than SSHv1.5. It enhances security and
includes the file transfer function.
Advantages of SSH
The SSH protocol is based on a client/server mode. It uses TCP for interconnections to realize
secure remote access through insecure networks. Compared with telnet, SSH has the following
advantages:
l SSH supports the methods of using the password and RSA public key to authenticate clients.
l SSH supports Data Encryption Standard (DES), 3DES, and AES to encrypt session data.
l When the SSH server communicates with the SSH client, the user name and the password
are encrypted to prevent the password from being intercepted.
l SSH encrypts the data to guarantee the security and reliability during the transmission.
l SSH supports authentication of a server.
l SSH supports the MD5 and SHA algorithms to identify the integrity of the session data.
This guarantees authenticity of the session data and prevents the data from being altered
maliciously during the transfer process. SSH supports the RSA authentication mode. In this
mode, SSH implements secure key exchange and authentication of the server by generating
public and private keys. These keys are generated according to the encryption principle of
the asymmetric encryption system. This guarantees the entire secure process of sessions.
8.3 Configuration Example of Remote User Authentication

This topic describes how to configure the remote user authentication to prevent illegal access to
the device.
Networking
Figure 8-1 shows an example network for configuring the remote user authentication.
Figure 8-1 Example network for configuring the remote user authentication
10.10.10.1 Radius
server
Radius
10.10.10.2 server
UA5000
LAN
PC PC PC

Data Plan
Table 8-1 provides the data plan for configuring the remote user authentication.
Table 8-1 Data plan for configuring the remote user authentication
Item Data
IP address of the primary RADIUS server 10.10.10.1
IP address of the secondary RADIUS 10.10.10.2

server
Authentication port number of the 1812

RADIUS server
NOTE
This topic describes configuration of only the UA5000. For details of the configuration of the RADIUS
server, see the related documents. The RADIUS configuration profile contains only the IP address and port
number of the RADIUS server. Configure other parameters such as RADIUS shared key and RADIUS
server type according to the actual requirements.
Figure 8-2 shows the flowchart for configuring the remote user authentication.

Figure 8-2 Flowchart for configuring the remote user authentication
Start
Create a virtual profile of

the RADIUS server
Bind the virtual profile to the server
Create the authentication scheme
Select an authentication mode
Create a domain
Bind the domain to the

authentication scheme
Bind the domain to the the virtual

profile of the RADIUS server
Save the data
End
Procedure
Step 1 Create a virtual profile of the RADIUS server.
huawei(config)#radius-server template radius2005
Step 2 Bind the virtual profile of the RADIUS server to the authentication server.
huawei(config-radius-radius2005)#radius-server authentication 10.10.10.1 1812
huawei(config-radius-radius2005)#radius-server authentication 10.10.10.2 1812 se
condary
Step 3 Create the authentication scheme.

huawei(config-radius-radius2005)#quit
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme huawei
Step 4 Select an authentication mode.

huawei(config-aaa-authen-huawei)#authentication-mode radius
Step 5 Create a domain.

huawei(config-aaa-authen-huawei)#quit
huawei(config-aaa)#domain radius1
Step 6 Bind the domain to the authentication scheme.

huawei(config-aaa-domain-radius1)#authentication-scheme huawei
Step 7 Bind the domain to the virtual profile of the RADIUS server.
huawei(config-aaa-domain-radius1)#radius-server radius2005

huawei(config-aaa-domain-radius1)#quit
huawei(config-aaa)#quit
huawei(config)#save
----End
Result
After the configuration on the RADIUS server is complete, log in to the UA5000 and enter the
user name in the format of "userid@domain-name". If the RADIUS server contains the user
name and domain configuration, the user can log in to the device and manage it.
8.4 Configuring AAA

This topic describes the process of configuring the AAA, including configuring an authentication
scheme, creating a domain, referencing a authentication scheme and referencing a RADIUS
server template.
8.4.1 Configuring an Authentication Scheme
This topic describes how to configure an authentication scheme to define the policy for
authenticating users who request for login.
8.4.2 Creating a Domain
This topic describes how to create a domain.
8.4.3 Referencing an Authentication Scheme
This topic describes how to reference an authentication scheme for all the users of an Internet
service provider (ISP).
8.4.4 Referencing a RADIUS Server Template
This topic describes how to reference a RADIUS server template for a domain.
8.4.1 Configuring an Authentication Scheme

This topic describes how to configure an authentication scheme to define the policy for
authenticating users who request for login.
Context
l The UA5000 supports the authentication through the RADIUS server.
l After configuring an authentication scheme, you need to reference the authentication
scheme when setting a user domain (only a certain type of users are supported) so that the
authentication scheme validates.

l Before referencing the radius authentication scheme, you must configure the RADIUS
protocol (for details, see "8.5 Configuring RADIUS") and configure the related user
information on the remote RADIUS server.
Procedure
Step 1 Run the aaa command to enter the AAA mode.
Step 2 Run the authentication-scheme command to add an authentication scheme.
Step 3 Run the display authentication-scheme command to query an authentication scheme.
----End
Example
To add the authentication scheme named huawei, with the authentication mode of radius, do as
follows:
huawei(config)#aaa
huawei(config-aaa)#authentication-scheme huawei
huawei(config-aaa-authen-huawei)#authentication-mode radius
Related Operation
Table 8-2 lists the related operations for configuring an authentication scheme.
Table 8-2 Related operations for configuring an authentication scheme
Delete an undo authentication-scheme The default authentication

authentication scheme scheme of the system cannot
be deleted.
View the AAA display aaa configuration You can query the usage of
configuration the resources configured on
information the authentication scheme
table.
8.4.2 Creating a Domain

This topic describes how to create a domain.
Context
l A domain is a group of users with the same attributes.
l In general, if a user name is in the form of "userid@domain-name", for example,
huawei20041028@huawei.net, the "huawei.net" following "@" is the domain name, and
the "userid" is used as the user name for identity authentication.

Procedure
Step 2 Run the domain command to create a domain.
Step 3 Run the quit command to quit the domain mode.
Step 4 Run the quit command to quit the AAA mode.
Step 5 Run the display domain command to query a domain.
----End
Example
To create a domain named huawei.net, do as follows:
huawei(config)#aaa
huawei(config-aaa)#domain huawei.net
huawei(config-aaa-domain-huawei.net)#quit
Related Operation
Table 8-3 lists the related operations for creating a domain.
Table 8-3 Related operations for creating a domain
To... Run the Remarks

Command...
Delete a domain undo domain The default domain cannot be deleted.
View the AAA display aaa You can query the usage of resources
configuration configuration configured on the domain.
information
8.4.3 Referencing an Authentication Scheme

This topic describes how to reference an authentication scheme for all the users of an Internet
service provider (ISP).
Context
l An authentication scheme defines the policy for authenticating all the users of an ISP.
l Before referencing a scheme, you need to create the scheme.
Procedure
Step 2 Run the domain command to specify huawei as the current domain and access domain mode.
Step 3 Run the authentication-scheme command to reference an authentication scheme.

Step 4 Run the quit command to quit the domain mode and the AAA mode.
Step 5 Run the display authentication-scheme command to query the detailed information about a
domain.
----End
Example
To specify "huawei" as the authentication scheme of domain "huawei.net", do as follows:
huawei(config)#aaa
huawei(config-aaa-domain-huawei.net)#authentication-scheme huawei
huawei(config)#display authentication-scheme
---------------------------------------------------------------------------
Authentication-scheme-name Authentication-method
---------------------------------------------------------------------------
default local
huawei radius
---------------------------------------------------------------------------
Total 2,2 printed
Related Operation
Table 8-4 lists the related operations for referencing an authentication scheme.
Table 8-4 Related operations for referencing an authentication scheme
Delete the undo authentication-scheme Run the command in domain

referencing of an mode to delete the referencing of
authentication the authentication scheme.
scheme
View the display aaa configuration You can query the usage of the
configuration resources configured in the
information about authentication scheme table.
AAA
8.4.4 Referencing a RADIUS Server Template

This topic describes how to reference a RADIUS server template for a domain.
Context
Before referencing a RADIUS server template, you need to configure the RADIUS server
template. For details, see "8.5 Configuring RADIUS."
Procedure

Step 2 Run the domain command to specify "huawei.net" as the current domain.
Step 3 Run the quit command to quit the domain mode and the AAA mode.
Step 4 Run the radius-server template command to bind a RADIUS server template to the AAA
domain.
Step 5 Run the quit command to quit the RADIUS mode.
Step 6 Run the display domain command to query the detailed information about a domain.
----End
Example
To specify "radius1" as the RADIUS server template of domain "huawei.net" for authentication
and accounting, do as follows:
huawei(config)#aaa
huawei(config)#display domain huawei.net
-------------------------------------------------------------------
Domain-name : huawei.net
Domain-state : Active
Authentication-scheme-name : huawei
Accounting-scheme-name : default
Authorization-scheme-name : default
Primary-DNS-IP-address : -
Second-DNS-IP-address : -
Primary-NBNS-IP-address : -
Second-NBNS-IP-address : -
Idle-data-attribute (time,flow) : 0, 60
User-access-limit : 384
Online-number : 0
RADIUS-server-template : radius1
-------------------------------------------------------------------
Related Operation
Table 8-5 lists the related operation for referencing a RADIUS server template.
Table 8-5 Related operation for referencing a RADIUS server template
Delete the referencing undo radius-server Run the command in domain mode
of a RADIUS server template to delete the referencing of the
template RADIUS server template.
8.5 Configuring RADIUS

This topic describes the process of configuring the RADIUS, including creating a RADIUS
server template, setting the IP address and port number of a RADIUS server, setting the shared
key of the RADIUS server, setting the response timeout interval of a RADIUS server, setting

the maximum retransmit count of RADIUS request packets, setting the RADIUS server type,
configuring an NAS port and its ID format, and setting the format of the user name sent to a
RADIUS server.
8.5.1 Introduction to RADIUS Configuration
This topic describes the RADIUS specifications and the precautions for configuring RADIUS.
8.5.2 Creating a RADIUS Server Template
This topic describes how to create a RADIUS server template and enter its configuration mode.
8.5.3 Configuring the IP Address and the Port Number of a RADIUS Server
This topic describes how to configure the IP address and the UDP port number of a new RADIUS
server after a RADIUS server template is created.
8.5.4 Configuring the Shared Key of a RADIUS Server
This topic describes how to configure the shared key of a RADIUS server.
8.5.5 Configuring the Response Timeout Interval of a RADIUS Server
This topic describes how to configure the response timeout interval of a RADIUS server.
8.5.6 Configuring the Maximum Retransmit Count of RADIUS Request Packets
This topic describes how to configure the maximum retransmit count of RADIUS request
packets.
8.5.7 Configuring the RADIUS Server Type
This topic describes how to configure the RADIUS server type.
8.5.8 Configuring an NAS Port and Its ID Format
This topic describes how to configure the NAS port provided by the UA5000 for the RADIUS
server and configure the ID format of the NAS port.
8.5.9 Configuring the Format of the User Name Sent to a RADIUS Server
This topic describes how to configure the format of the user name sent to a RADIUS server. The
format specifies whether the user name should include the domain name.
8.5.1 Introduction to RADIUS Configuration

This topic describes the RADIUS specifications and the precautions for configuring RADIUS.
Specifications
For the UA5000, the RADIUS is configured on each RADIUS server group.
In actual networking, a RADIUS server group can be an independent RADIUS server, or a pair
of active/standby RADIUS servers that have the same configuration but different IP addresses.
The attributes of each RADIUS server template include the following:
l IP address of the active server
l IP address of the standby server
l Shared key and RADIUS server type
Precautions
The RADIUS configuration defines only the parameters used for data exchange between the
UA5000 and the RADIUS server. To validate these parameters, you must reference the RADIUS
server group in a domain. For details, see "8.4 Configuring AAA."

8.5.2 Creating a RADIUS Server Template

This topic describes how to create a RADIUS server template and enter its configuration mode.
Context
l Before configuring RADIUS, you must create a RADIUS server template and enter its
configuration mode.
l One RADIUS server template can be used by multiple domains.
Procedure
Step 1 Run the radius-server template command to create a RADIUS server template and enter the
corresponding configuration mode.
Step 3 Run the display radius-server configuration command to query the created RADIUS server
template.
----End
Example
To create the RADIUS server template named radius1, do as follows:
huawei(config)#display radius-server configuration template radius1
-------------------------------------------------------------------
Server-template-name : radius1
Protocol-version : standard
Traffic-unit : B
Shared-secret-key : huawei
Timeout-interval(in second) : 5
Primary-authentication-server : 0.0.0.0:0:LoopBack0
Primary-accounting-server : 0.0.0.0:0:LoopBack0
Secondary-authentication-server : 0.0.0.0:0:LoopBack0
Secondary-accounting-server : 0.0.0.0:0:LoopBack0
Retransmission : 3
Domain-included : YES
-------------------------------------------------------------------
Related Operation
Table 8-6 lists the related operation for creating a RADIUS server template.
Table 8-6 Related operation for creating a RADIUS server template
Delete a RADIUS server template undo radius-server template

8.5.3 Configuring the IP Address and the Port Number of a RADIUS

Server
This topic describes how to configure the IP address and the UDP port number of a new RADIUS
server after a RADIUS server template is created.
Context
l The servers may include the primary and secondary servers. By default, the IP addresses
of the primary and the secondary servers are 0.0.0.0.
l To ensure normal communication between the UA5000 and the RADIUS server, before
configuring the IP address and UDP port number of the server, ensure that the route between
the UA5000 and the RADIUS server is in the normal state.
l Ensure that the port configurations between the UA5000 and the server are consistent.
Procedure
corresponding RADIUS mode.
Step 2 Run the radius-server authentication command to configure the primary RADIUS server.
Step 3 Run the radius-server authentication secondary command to configure the secondary
RADIUS server.
Step 5 Run the display radius-server configuration command to query the IP address and port number
of a RADIUS server.
----End
Example
To configure the IP address and port number of the primary server to 10.10.10.1 and 1812, and
the IP address and port number of the secondary server to 10.10.10.2 and 1812, do as follows:
secondary
-------------------------------------------------------------------
Traffic-unit : B
Shared-secret-key : huawei
Primary-authentication-server : 10.10.10.1:1812:LoopBack-1
Secondary-authentication-server : 10.10.10.2:1812:LoopBack-1
Retransmission : 3
-------------------------------------------------------------------

Related Operation
Table 8-7 lists the related operation for configuring the IP address and the port number of a
RADIUS server.
Table 8-7 Related operation of configuring the IP address and the port number of a RADIUS
server
Delete the configured RADIUS undo radius-server authentication

server
8.5.4 Configuring the Shared Key of a RADIUS Server

This topic describes how to configure the shared key of a RADIUS server.
Context
l By default, the shared key of the RADIUS server is "huawei".
l The RADIUS client (namely the UA5000) and the RADIUS server use the MD5 algorithm
to encrypt the packets exchanged between them. They respond to the received packets only
when the keys at both ends are identical.
Procedure
Step 2 Run the radius-server shared-key command to configure the shared key of the RADIUS server.
Step 4 Run the display radius-server configuration command to query the shared key of the RADIUS
server.
----End
Example
To configure the shared key of the RADIUS server to "radius2004", do as follows:
huawei(config-radius-radius1)#radius-server shared-key radius2004
-------------------------------------------------------------------
Traffic-unit : B
Shared-secret-key : radius2004

Retransmission : 3
-------------------------------------------------------------------
8.5.5 Configuring the Response Timeout Interval of a RADIUS

Server
This topic describes how to configure the response timeout interval of a RADIUS server.
Context
l After RADIUS request packets are sent, if the UA5000 does not receive the response from
the RADIUS server, the RADIUS request packets are sent again to ensure that the users
can use the RADIUS service.
l By default, the timeout interval of the RADIUS server is five seconds.
Procedure
Step 2 Run the radius-server timeout command to configure the response timeout interval of the
RADIUS server.
Step 4 Run the display radius-server configuration command to query the response timeout interval
of the RADIUS server.
----End
Example
To confiigure the timeout interval of a RADIUS server as 10s, do as follows:
huawei(config-radius-radius1)#radius-server timeout 10
-------------------------------------------------------------------
Traffic-unit : Byte
Retransmission : 3
Domain-included : yes
Primary-authentication-server : 10.10.10.1:1812
Primary-accounting-server : 0.0.0.0:0
Secondary-authentication-server : 10.10.10.2:1812
Secondary-accounting-server : 0.0.0.0:0
-------------------------------------------------------------------
-------------------------------------------------------------------
Traffic-unit : B

Retransmission : 3
-------------------------------------------------------------------
Related Operation
Table 8-8 lists the related operation for configuring the response timeout interval of a RADIUS
server.
Table 8-8 Related operation for configuring the response timeout interval of a RADIUS server
Restore the default response timeout interval undo radius-server timeout

of a RADIUS server
8.5.6 Configuring the Maximum Retransmit Count of RADIUS

Request Packets
This topic describes how to configure the maximum retransmit count of RADIUS request
packets.
Context
l If the UA5000 does not receive the response from the RADIUS server within the timeout
time specified by the timeout timer, the UA5000 resends the RADIUS request packets to
the RADIUS server. When the retransmit count exceeds the specified maximum value, the
UA5000 considers its connection with the RADIUS server as interrupted, and sends the
RADIUS request packets to another RADIUS server.
l By default, the maximum retransmit count of RADIUS request packets is 3.
l You can modify the configuration of a RADIUS server template only when the template
is not referenced.
Procedure
Step 2 Run the radius-server retransmit command to configure the retransmit time of the RADIUS
server.
Step 4 Run the display radius-server configuration command to query the maximum retransmit count
of RADIUS request packets.
----End
Example
To configure the maximum retransmit count of RADIUS request packets to 5, do as follows:

huawei(config-radius-radius1)#radius-server retransmit 5
-------------------------------------------------------------------
Traffic-unit : Byte
Retransmission : 5
-------------------------------------------------------------------
-------------------------------------------------------------------
Traffic-unit : B
Retransmission : 5
-------------------------------------------------------------------
Related Operation
Table 8-9 lists the related operation for configuring the maximum retransmit count of RADIUS
request packets.
Table 8-9 Related operation for configuring the maximum retransmit count of RADIUS request
packets
Restore the maximum retransmit undo radius-server retransmit

count of RADIUS request packets to
the default value
8.5.7 Configuring the RADIUS Server Type

This topic describes how to configure the RADIUS server type.
Context
The UA5000 supports the standard RADIUS protocol and the portal service platform developed
by Huawei Technologies Co., Ltd. (Huawei for short). By default, the standard RADIUS
protocol is used.
Procedure

Step 2 Run the radius-server type command to configure the RADIUS server type.
Step 4 Run the display radius-server configuration command to query the RADIUS server type.
----End
Example
To configure the RADIUS server type to portal, do as follows:
huawei(config-radius-radius1)#radius-server type portal
-------------------------------------------------------------------
Protocol-version : portal
Traffic-unit : B
Retransmission : 5
-------------------------------------------------------------------
8.5.8 Configuring an NAS Port and Its ID Format

This topic describes how to configure the NAS port provided by the UA5000 for the RADIUS
server and configure the ID format of the NAS port.
Context
The NAS port and its ID format are internal extended attributes of Huawei. They are used for
interconnections and server cooperation among Huawei devices.
Procedure
Step 2 Run the radius-server nas-port-format command to configure a NAS port of the RADIUS
server.
Step 3 Run the radius-server nas-port-id-format command to configure the ID format of the NAS
port of the RADIUS server.
----End
Example
To configure the format of the NAS port as "new", and configure the ID of the NAS port as
"new" for the RADIUS server template "radius1", do as follows:
huawei(config-radius-radius1)#radius-server nas-port-format new
huawei(config-radius-radius1)#radius-server nas-port-id-format new

8.5.9 Configuring the Format of the User Name Sent to a RADIUS

Server
This topic describes how to configure the format of the user name sent to a RADIUS server. The
format specifies whether the user name should include the domain name.
Context
l By default, the user name of a RADIUS server includes the domain name.
l The access users are generally named in the format of "userid@domain-name". The part
following "@" is the domain name. The UA5000 assigns users to different ISP domains
based on their respective domain names.
l Certain RADIUS servers that were used earlier reject the user names that include domain
names. In this case, you can run the undo radius-server user-name domain-included
command to specify that the user name to be sent to a RADIUS server does not include a
domain name.
l If a RADIUS server group does not allow user names to include domain names, the
RADIUS server group cannot be used at the same time in two or more domains. Otherwise,
when receiving the same user names, the RADIUS server considers the users in different
domains as the same user.
l You can modify the configuration of a RADIUS server template only when the template
is not referenced.
Procedure
Step 2 Run the (undo)radius-server user-name domain-included command to set whether the user
name sent to the RADIUS server includes the domain name.
Step 4 Run the display radius-server configuration command to query the format of the user name
that is sent to the RADIUS server.
----End
Example
To specify that a user name to be sent to the RADIUS server does not include the domain name,
do as follows:
huawei(config-radius-radius1)#undo radius-server user-name domain-included
-------------------------------------------------------------------
Traffic-unit : Byte
Retransmission : 5
Domain-included : no

-------------------------------------------------------------------
-------------------------------------------------------------------
Traffic-unit : B
Retransmission : 5
Domain-included : NO
-------------------------------------------------------------------
To specify that a user name to be sent to the RADIUS server includes the domain name, do as
follows:
huawei(config-radius-radius1)#radius-server user-name domain-included
-------------------------------------------------------------------
Traffic-unit : Byte
Retransmission : 5
-------------------------------------------------------------------
-------------------------------------------------------------------
Traffic-unit : B
Retransmission : 5
-------------------------------------------------------------------
8.6 Configuring SSH

This topic describes the SSH configuration, including creating the local RSA key pair,
configuring the SSH user public key and configuring an SSH user.
8.6.1 Creating the Local RSA Key Pair
This topic describes how to create the local RSA key pair.
8.6.2 Configuring the Public Key of the SSH User
This topic describes how to configure the public key of the SSH user.
8.6.3 Configuring an SSH User
This topic describes how to configure an SSH user.

8.6.1 Creating the Local RSA Key Pair

This topic describes how to create the local RSA key pair.
Context
l The key size ranges from 512 bits to 2048 bits. You can change it to 512, 1024, or 2048
bits according to the actual requirements. By default, it is 512 bits.
l Before using the SSH service for the first time, you must run the rsa local-key-pair
create command.
l If the host key pair and service key pair of the SSH server are destroyed, you must create
a new host key pair and service key pair of the SSH server.
Procedure
Step 1 Run the rsa local-key-pair create command to create the local RSA key pair.
Step 2 Run the display rsa local-key-pair public command to query the local RSA key pair.
----End
Example
To create the local RSA key pair, do as follows:
huawei(config)#rsa local-key-pair create
The key name will be: Host
% RSA keys defined for Host already exist.
Confirm to replace them? [y/n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:1024
Generating keys...
...........++++++
....++++++
............................++++++++
.............................++++++++
huawei(config)#display rsa local-key-pair public
=====================================================
Time of Key pair created: 16:17:59 2009/3/5
Key name: Host
Key type: RSA encryption Key
=====================================================
Key code:
308188
028180
ED7690C6 5995B7F4 EFD5A54C 5A9602B7 F6EAD406
B2F506AA 1B99BE43 201FE369 2204E833 5EC1D5A4
8B1EDCA5 C3E61ACE 8A5D4721 67D4BC30 00478292
41B9E1B4 040C760C BB652AFD 28A97D9F 955F0674
CE08C7DD EE5FA2C0 AA3BD8B7 DC5C8DAD E0C48469
D99D6F4F E0A3EC04 01C0E698 AE94B289 F57E1AD0
E8645C44 5268FC61
0203
010001
=====================================================
Time of Key pair created: 16:18:09 2009/3/5
Key name: Server
Key type: RSA encryption Key
=====================================================

Key code:
3067
0260
ECD284B8 818CE5D8 F5AF1DAA 5786D956 88BE396F
A4C8030C 39FDCC6A D6202531 9A75F7F1 DF323176
6F89B14B C90C6A5F F8929316 451212D6 22E2D62A
75B00DBD 61C04BFE B20839AB 4510A9B3 6E809105
4EC76E35 CCEB2577 8471B6FA C1B69D39
0203
010001
Related Operation
Table 8-10 lists the related operation for creating the local RSA key pair.
Table 8-10 Related operation for creating the local RSA key pair
Destroy the local RSA key rsa local-key-pair destroy

pair
8.6.2 Configuring the Public Key of the SSH User

This topic describes how to configure the public key of the SSH user.
Figure 8-3 shows the flowchart for configuring the public key of the SSH user.
Figure 8-3 Flowchart for configuring the public key of the SSH user
Start
Enter config-rsa-public-key
mode
Enter public key eidt mode
Input the user public key
Quit public key edit mode
End

Procedure
Step 1 Run the rsa peer-public-key command to enter the rsa-public-key mode.
Step 2 Run the public-key-code begin command to enter the edit mode of the public key.
Step 3 Enter the public key of the user in key edit mode.
NOTE
For how to configure the key, see "2.6 Configuring the SSH Mode."
Step 4 Run the public-key-code end command to quit the edit mode of the public key.
Step 5 Run the peer-public-key end command to return to global config mode.
Step 6 Run the display rsa peer-public-key command to query the public key of the SSH user.
----End
Example
To display the converted public key of the user in the current system, do as follows:
huawei(config)#rsa peer-public-key key
huawei(config-rsa-public-key)#public-key-code begin
huawei(config-rsa-key-code)#30818702 818100D6 167E5066 88F6105A 0194029A EDC3454
9
huawei(config-rsa-key-code)#FA68A0A6 2101625B 10DFB8C5 48C46E67 5A7CB3AA 6A2AC9E

0
huawei(config-rsa-key-code)#2ECB7E94 DD69E8E0 9DC943AC D9D2CDE7 CA280EF7 05EB661

5
huawei(config-rsa-key-code)#CA47432F D81095BF E2D99BC4 8734E713 57520D21 33B7A7A

4
huawei(config-rsa-key-code)#D41AB63D 3DBD6663 BCBD63CC E4B4F28F 15471DB9 38428D8

C
huawei(config-rsa-key-code)#C176C803 DA55957A 73F1ED70 BE1B6502 0125

huawei(config-rsa-key-code)#public-key-code end
huawei(config-rsa-public-key)#peer-public-key end
huawei(config)#display rsa peer-public-key
=====================================
Key name: key
=====================================
Key Code:
308186
028180
D6167E50 6688F610 5A019402 9AEDC345 49FA68A0 A6210162 5B10DFB8 C548C46E
675A7CB3 AA6A2AC9 E02ECB7E 94DD69E8 E09DC943 ACD9D2CD E7CA280E F705EB66
15CA4743 2FD81095 BFE2D99B C48734E7 1357520D 2133B7A7 A4D41AB6 3D3DBD66
63BCBD63 CCE4B4F2 8F15471D B938428D 8CC176C8 03DA5595 7A73F1ED 70BE1B65
0201
25
8.6.3 Configuring an SSH User

This topic describes how to configure an SSH user.
Context
SSH user authentication is divided into the following types:

l password: indicates the common password authentication mode. It is the default

authentication type.
l rsa: indicates the RSA public key authentication.
l all: indicates the password or RSA authentication mode. That is, you can log in to the
UA5000 through password authentication or RSA authentication.
l password-publickey: indicates the password and public key authentication. That is, you can
log in to the UA5000 only after you pass the password authentication and RSA
authentication. This is applicable to SSHv2.0 only.
Procedure
Step 1 Run the ssh user assign rsa-key command to set the RSA public key of an SSH user.
Step 2 Run the ssh user authentication-type rsa command to set the RSA authentication mode of the
SSH user.
Step 3 Run the display ssh user-information command to query the authentication mode of the SSH
user.
----End
Example
To set key as the RSA public key of SSH user huawei, and RSA as the authentication mode, do
as follows:
huawei(config)#ssh user huawei assign rsa-key key
huawei(config)#ssh user huawei authentication-type rsa
huawei(config)#display ssh user-information
{ <cr>|string<S><1,16> }:
Command:
display ssh user-information
Username Authentication-type User-public-key-name Service-type
huawei rsa key stelnet
Related Operation
Table 8-11 lists the related operations for configuring an SSH user.
Table 8-11 Related operations for configuring an SSH user

Delete the RSA public key of an undo ssh user assign rsa-key
SSH user
Set the SSH user authentication ssh user authentication-type

mode

Configuration Guide-IPM CLI 9 Configuring a VLAN
9 Configuring a VLAN
About This Chapter
This topic describes the classification of VLANs supported by the UA5000 and how to configure
a VLAN.
9.1 Introduction to the VLAN

This topic describes the VLAN technology, and the count, types, and attributes of VLANs
supported by the UA5000.
9.2 Configuration Example of a Standard VLAN
This topic describes how to subtend two UA5000s through a standard VLAN. For details, see
"***."
9.3 Configuration Example of a Smart VLAN
This topic describes how to configure a smart VLAN to realize ADSL2+ access.
9.4 Configuration Example of a MUX VLAN
This topic describes how to configure a MUX VLAN to implement the ADSL2+ service.
9.5 Configuration Example of a Super VLAN
This topic describes how to configure the super VLAN to enable users whose services are isolated
at layer 2 to communicate with each other at layer 3.
9.6 Adding a VLAN
This topic describes how to add a VLAN or add VLANs of the same type in batches.
9.7 Configuring the VLAN Attribute
This topic describes how to configure the VLAN attribute to QinQ, stacking, or common.
9.8 Adding an Uplink Port to a VLAN
This topic describes how to add an uplink port to a VLAN.
9.9 Configuring the Upstream CAR for a VLAN
This topic describes how to add an upstream CAR for a VLAN.
9.10 Adding a Service Port to a VLAN
This topic describes how to add a service port to a VLAN. The service port refers to the service
virtual port. The service port is used for the access of the customer premises equipment (CPE)

9 Configuring a VLAN Configuration Guide-IPM CLI
and transmitting the traffic stream between the CPE and the access device to implement the
service access of the subscriber.
9.11 Configuring the Description Information About a Service Port
This topic describes how to configure the description information about a service port.
9.12 Activating a Service Port
This topic describes how to activate or deactivate a service port for a VLAN. In this manner,
you can determine whether to make the service configuration take effect on a specified service
port.

9.1 Introduction to the VLAN

This topic describes the VLAN technology, and the count, types, and attributes of VLANs
Service Description
Virtual local area network (VLAN) is a technology used to implement virtual workgroups by
logically grouping the devices in a LAN. The Institute of Electrical and Electronics Engineers
(IEEE) issued draft IEEE 802.1q in 1999, intended to standardize VLAN implementations.
For details about the VLAN feature, see "VLAN" in the UA5000 Universal Access Unit Feature
Description.
The UA5000 supports the following types of VLANs:
l Standard VLAN
l Smart VLAN
l MUX VLAN
l Super VLAN
The UA5000 supports configuring up to 4000 standard VLANs, smart VLANs, and MUX
VLANs. The UA5000 supports configuring up to 16 super VLANs.
Table 9-1 lists the VLAN types and applications.
Table 9-1 VLAN types and applications

Type Description Application
Standard It is a standard VLAN. Ethernet ports in a The standard VLAN is

VLAN standard VLAN can communicate with each only used for Ethernet
other. An Ethernet port in a standard VLAN ports for network
is isolated from an Ethernet port in another management and
standard VLAN. subtending.
Smart VLAN A smart VLAN can contain multiple xDSL The smart VLAN is used
service ports and traffic streams of these ports for xDSL access services,
in a smart VLAN are isolated from each such as providing access to
other. Traffic streams of different VLANs are the Internet for the users in
also isolated from each other. A smart VLAN residential areas.
can serve multiple users, thus saving VLAN
resources.
MUX VLAN A MUX VLAN contains only one service The MUX VLAN is used
port and traffic streams of different VLANs for xDSL access services,
are isolated from each other. One-to-one such as distinguishing
mapping can be set up between a MUX users by VLANs.
VLAN and an access user. Therefore, a MUX
VLAN can uniquely identify an access user.

Type Description Application
Super VLAN A super VLAN is a VLAN based on layer 3. The super VLAN is used to
It consists of multiple sub VLANs. The ARP save IP address resources
proxy is used for layer 3 interconnections and improve the usage
among sub VLANs. A sub VLAN can be a efficiency of IP address
smart VLAN or a MUX VLAN. resources.
The VLAN supports the following attributes:
l Common
l QinQ
l Stacking
Table 9-2 lists the attributes of VLANs.
Table 9-2 VLAN attributes
Attribute Application
Common A VLAN with this attribute can be used as a layer 2 VLAN. You can create a
layer 3 virtual interface for the VLAN if necessary.
QinQ When a packet is added with the tag of a VLAN with QinQ attribute, the packet
contains two VLAN tags: inner VLAN tag from the private network and outer
VLAN tag allocated by the UA5000. Through the outer VLAN tag, a layer 2
VPN tunnel can be set up to transparently transmit service data among private
networks. For details about the QinQ VLAN, see "31 Configuring the QinQ
VLAN Leased Line Access."
Stacking When a packet is added with the tag of a VLAN with stacking attribute, the
packet contains two VLAN tags: inner VLAN tag and outer VLAN tag
allocated by the UA5000. By using this attribute, the upper layer BRAS can
authenticate users based on the double VLAN tags, thus increasing the number
of access users. The upper layer network working in layer 2 mode can forward
packets based on the outer "VLAN + MAC" to provide the multi-ISP wholesale
service. For details about the stacking VLAN, see "30 Configuring the VLAN
Stacking Wholesale Service."
9.2 Configuration Example of a Standard VLAN

This topic describes how to subtend two UA5000s through a standard VLAN. For details, see
"29 Configuring the Device Subtending."
9.3 Configuration Example of a Smart VLAN

This topic describes how to configure a smart VLAN to realize ADSL2+ access.

Networking
Figure 9-1 shows an example network for configuring a smart VLAN.
Figure 9-1 Example network for configuring a smart VLAN
0/3/0 UA5000
I C
C C
P S
S S
M R R
B R
B B
0/7/0 0/7/1
Modem
PC1 PC2
Data Plan
Table 9-3 provides the data plan for configuring a smart VLAN.
Table 9-3 Data plan for configuring a smart VLAN
Item Data
ADSL2+ board ADSL2+ port: 0/7/0

VPI/VCI: 0/35

VPI/VCI: 0/35
Smart VLAN VLAN ID: 10
Uplink port 0/3/0
Prerequisite
l The network devices and lines are normal.
l All boards of the UA5000 are normal.
l The VPI/VCI of the modem is 0/35.

Figure 9-2 shows the flowchart for configuring a smart VLAN.
Figure 9-2 Flowchart for configuring a smart VLAN
Start
Create a smart VLAN
Add an uplink port
Add the service ports to the

VLAN
Save the data
End
Procedure
Step 1 Create a smart VLAN.
Step 2 Add an uplink port to the VLAN.

Step 3 Add a service port to the VLAN.

The service port uses the default traffic template 5.
huawei(config)#service-port vlan 10 adsl 0/7/0 vpi 0 vci 35 rx-cttr 5 tx-cttr 5

huawei#save
----End
Result
After configuration, PC 1 and PC 2 can access the Internet, but they cannot ping each other.
9.4 Configuration Example of a MUX VLAN

This topic describes how to configure a MUX VLAN to implement the ADSL2+ service.

Networking
Figure 9-3 shows an example network for configuring a MUX VLAN.
Figure 9-3 Example network for configuring a MUX VLAN
0/3/0 UA5000
I C
C C
P S
S S
M R
R R
B B B
0/7/0 0/7/1
Modem Modem
PC1 PC2
Data Plan
Table 9-4 provides the data plan for configuring a MUX VLAN.
Table 9-4 Data plan for configuring a MUX VLAN
Item Data

VPI/VCI: 0/35
VLAN ID: 20

VPI/VCI: 0/35
VLAN ID: 21
Uplink port 0/3/0
Prerequisite
l All the boards of the UA5000 are normal.

Figure 9-4 shows the flowchart for configuring a MUX VLAN.
Figure 9-4 Flowchart for configuring a MUX VLAN
Start
Create a MUX VLAN
Add an uplink port
Add a service port to the

VLAN
Save the data
End
Procedure
Step 1 Create a MUX VLAN.
huawei(config)#vlan 20 mux


The service port uses default traffic profile 5.

huawei#save
----End
Result
After configuration, PC 1 and PC 2 should be able to access the Internet, but they cannot ping
each other.

9.5 Configuration Example of a Super VLAN

This topic describes how to configure the super VLAN to enable users whose services are isolated
at layer 2 to communicate with each other at layer 3.
Networking
Figure 9-5 shows an example network for configuring a super VLAN.
Figure 9-5 Example network for configuring a super VLAN
0/3/0 UA5000
I C C
C
P S S
S
M R R
B R
B B
0/7/0 0/9/0
Modem Modem
PC1 PC3
Data Plan
Table 9-5 provides the data plan for configuring a super VLAN.
Table 9-5 Data plan for configuring a super VLAN

Item Data

VPI/VCI: 0/35
Sub VLAN ID: 20

VPI/VCI: 0/35
Sub VLAN ID: 21

Item Data
Super VLAN VLAN ID: 100

IP address of layer 3 interface: 10.0.0.254/24
Uplink port: 0/3/0
Prerequisite
l The network devices and lines must be in the normal state.
l The service boards must be in the normal state.
l The IP address of the layer 3 interface must be in the same network segment as the IP
address of the PC connecting to the interface. They cannot conflict with each other.
l If the control board is H601IPMB, H612IPMB, or H612IPMD, the system supports up to
32 layer 3 interfaces. If the control board is H601IPMD, the system supports only one layer
3 interface.
l A super VLAN contains up to 480 sub VLANS. These sub VLANs share one layer 3
interface to communicate with each other, thus saving IP network segments.
l The system supports up to 16 super VLANs.
NOTE
If the control board is H601IPMD, the system does not support the super VLAN.
Figure 9-6 shows the flowchart for configuring a super VLAN.

Figure 9-6 Flowchart for configuring a super VLAN
Start
Create a super VLAN
Create a sub VLAN and add it

to the super VLAN
Configure the service port of

the sub VLAN
Enable the global ARP Proxy
Configure the layer 3 interface

of the super VLAN
Enable ARP Proxy for the layer

3 interface of the super VLAN
End
Procedure
Step 1 Create a super VLAN.
huawei(config)#vlan 100 super
Step 2 Create a sub VLAN and add it to the super VLAN.

huawei(config)#supervlan 100 subvlan 20
Step 3 Configure the service port of the sub VLAN.

The service port uses the default traffic profile 5.

Step 4 Enable the global ARP proxy.

huawei(config)#arp proxy enable
Step 5 Configure the layer 3 interface of the super VLAN.

NOTE
The IP address of the layer 3 interface of the super VLAN and the IP address obtained by the PC must be
in the same network segment.
Step 6 Enable ARP proxy for the layer 3 interface of the super VLAN.
huawei(config-if-vlanif100)#arp proxy enable
huawei(config-if-vlanif100)#arp proxy enable subvlan 20

huawei(config)#save
----End
Result
After the configuration, PC 1 and PC 3 should be able to communicate with each other and
access the Internet.
9.6 Adding a VLAN

This topic describes how to add a VLAN or add VLANs of the same type in batches.
Prerequisite
The ID of the VLAN to be added does not exist in the system.
Context
There are up to 4000 configurable VLANs supported by the UA5000.
Procedure
Step 1 Run the vlan command to add a VLAN.
Step 2 Run the display vlan command to query VLAN information.
----End
Example
To add a standard VLAN with the VLAN ID of 2, do as follows:
huawei(config)#display vlan 2
{ <cr>|to<K> }:
VLAN ID: 2
VLAN type: standard

VLAN attribute: common

VLAN MAC learning ability : enable
VLAN max MAC learning number : -
VLAN up direction CAR ID : -
VLAN down direction CAR ID : -
Standard port number: 0
To add 10 standard VLANs whose VLAN IDs ranging from 1000 to 1009, do as follows:
huawei(config)#vlan 1000 to 1009 standard
It will take several minutes, and console may be timeout, please use command
idle-timeout to set time limit
Are you sure to add VLANs? (y/n)[n]:y
huawei#display vlan all
----------------------------------------------------------------------------
VLAN Type Attribute STND-Port SERV-Port MAC-Learn Max-MAC Up Down
Num Num ability Num CAR ID CAR ID
----------------------------------------------------------------------------
1 MUX common 8 0 enable - off -
1000 standard common 0 0 enable - - -
----------------------------------------------------------------------------
Total: 11
Note : STND-Port--standard port, SERV-Port--service virtual port
*--the vlan contain PVC connection
Related Operation
Table 9-6 lists the related operations for adding a VLAN.
Table 9-6 Related operations for adding a VLAN

Command...
Delete a VLAN undo vlan To delete a VLAN, ensure that the following
requirements are met:
l There is no uplink port.
l No layer 3 interface is configured.
l No service port is added.
Query VLAN display vlan -

information
Query VLAN traffic display statistics The traffic of VLAN service ports is
statistics vlan measured.
9.7 Configuring the VLAN Attribute

This topic describes how to configure the VLAN attribute to QinQ, stacking, or common.

Prerequisite
The VLAN whose attribute needs to be configured must exist and the VLAN must not contain
the configured service port.
Context
l The attribute of the default VLAN 1 cannot be configured to QinQ or stacking.
l The default attribute of a VLAN is common.
l When the attribute of a smart VLAN or a MUX VLAN is common, you can configure the
attribute of the VLAN to QinQ or stacking. The attribute of a super VLAN and a standard
VLAN cannot be configured to QinQ or stacking.
l The attribute of a VLAN cannot be directly changed from QinQ to stacking or from stacking
to QinQ.
Procedure
Step 1 Run the vlan attrib command to configure the VLAN attribute.
Step 2 Run the display vlan command to query the VLAN attribute.
----End
Example
To set the attribute of smart VLAN 10 to QinQ, do as follows:
huawei(config)#vlan attrib 10 q-in-q
VLAN ID: 10
VLAN type: smart
VLAN attribute: QinQ
VLAN up direction CAR ID : -
Related Operation
Table 9-7 lists the related operation for configuring the VLAN attribute.
Table 9-7 Related operation for configuring the VLAN attribute

Set the label value of the service port in a stacking label

stacking VLAN
9.8 Adding an Uplink Port to a VLAN

This topic describes how to add an uplink port to a VLAN.

Prerequisite
The VLAN to which an uplink port needs to be added must exist.
Context
The uplink port of a VLAN must be an Ethernet port.
Procedure
Step 1 Run the port vlan command to add an uplink port.
Step 2 Run the display vlan command to query VLAN information.
----End
Example
To add an uplink port 0/3/0 to VLAN 10, do as follows:
{<cr>|to<K>}:
Command:
display vlan 10
VLAN ID: 10
VLAN type: smart
VLAN description:
VLAN up direction CAR ID : CAR off
------------------------------
F/ S/ P Native VLAN State
------------------------------
0/3/0 1 down
------------------------------
Service virtual port number: 0
Related Operation
Table 9-8 lists the related operation for adding an uplink port to a VLAN.
Table 9-8 Related operation for adding an uplink port to a VLAN
Delete the uplink port of a undo port vlan

VLAN
9.9 Configuring the Upstream CAR for a VLAN

This topic describes how to add an upstream CAR for a VLAN.

Context
The standard VLAN and super VLAN do not support configuring the upstream CAR.
Procedure
Step 1 Run the vlan command to create a VLAN.
Step 2 Run the cartable command to create a CAR entry.
Step 3 Run the vlan car command to add an upstream CAR entry for a VLAN.
Step 4 Run the display vlan car command to query the VLAN that uses the configured CAR entry.
----End
Example
To configure an upstream CAR with ID 1 for MUX VLAN 2, do as follows:
huawei(config)#cartable up-direct carid 1 car-name car1 car-value 128
huawei(config)#vlan car 2 up-direct carid 1
huawei(config)#display vlan car up-direct carid 1
huawei(config)#display vlan car up-direct carid 1
VLAN list:
---------------------------------------
2
---------------------------------------
Total: 1
Related Operation
Table 9-9 lists the related operation for configuring an upstream CAR for a VLAN.
Table 9-9 Related operation for configuring an upstream CAR for a VLAN
Query the VLAN that uses a display vlan car

CAR entry
9.10 Adding a Service Port to a VLAN

This topic describes how to add a service port to a VLAN. The service port refers to the service
virtual port. The service port is used for the access of the customer premises equipment (CPE)
and transmitting the traffic stream between the CPE and the access device to implement the
service access of the subscriber.
Prerequisite
l The VLAN to which the service port needs to be added must exist.
l The VPI/VCI of the modem connecting to the port must be set.
l A proper traffic profile must exist.

Context
l The UA5000 supports single PVC for multiple services based on user VLANs and service
encapsulation types of the user.
l In the case of the service port that supports single PVC for single service on the IPMB
board, the SHDSL port supports up to five service ports. The ADSL port on the master
shelf supports up to six service ports. The ADSL port on the slave shelf supports up to five
service ports.
l In the case of the service port that supports single PVC for single service on the IPMD
board, the ADSL port and the VDSL2 port support up to eight service ports respectively.
The SHDSL port supports up to seven ports.
l In the case of the service port that supports single PVC for multiple services, the ADSL
port and the SHDSL port support eight service ports respectively.
l The UA5000 supports single PVC for multiple services based on the user-side 802.1p
priority.
l The UA5000 supports up to 8192 service ports.
l When configuring the upstream and downstream traffic, ensure that the service types of
the upstream and downstream traffic entries are the same.
Procedure
Step 1 Run the service-port vlan command to add a service port.
Step 2 Run the display service-port vlan command to query a service port.
----End
Example
To add service port 0/7/0 with VPI/VCI 0/35 and traffic profile 5 to VLAN 10, do as follows:
huawei(config)#display service-port port 0/7/0
------------------------------------------------------------------------------
VLAN VLANATTR PORT F/ S/ P VPI VCI FLOW FLOW RX TX STATE LABEL CHN
ID TYPE PARA
------------------------------------------------------------------------------
10 common adl 0/7/0 0 35 - - 5 5 act/up - -
------------------------------------------------------------------------------
Total : 1 (Up/Down : 1/0)
Note : F--Frame, S--Slot, P--Port(or Virtual Port, such as IMA GROUP,
VLAN ID etc.), the VPI is access-end VLAN ID in EAU/GAU port
or PON ID in EPON port
Related Operation
Table 9-10 lists the related operations for adding a service port to a VLAN.

Table 9-10 Related operations for adding a service port to a VLAN
Delete a service port undo service-port The service port cannot be deleted in the
following cases:
l The port is bound to an IP address or
a MAC address.
l Multicast users exist or the port is
encapsulated.
l The port is configured with a static
MAC address.
Query the VLAN display vlan -

information
9.11 Configuring the Description Information About a

Service Port
This topic describes how to configure the description information about a service port.
Procedure
Step 1 Run the service-port desc command to configure the description information about a service
port.
Step 2 Run the display service-port desc command to query the description information about the
service port.
----End
Example
To configure the description information about service port 0/7/0 with VPI/VCI 0/35, do as
follows:
huawei(config)#service-port desc 0/7/0 vpi 0 vci 35 user0/7/0
huawei(config)#display service-port desc 0/7/0 vpi 0 vci 35
-----------------------------------------------------------------------------
F/ S/ P VPI VCI FLOWTYPE FLOWPARA CHANNEL
-----------------------------------------------------------------------------
0/ 7/ 0 0 35 - - -
DESCRIPTION:user0/7/0
-----------------------------------------------------------------------------
Related Operation
Table 9-11 lists the related operation for configuring the description information about a service
port.

Table 9-11 Related operation for configuring the description about a service port
Delete the description information about a undo service-port desc

service port
NOTE
The length of the description information about a service port is up to 64 bytes.

Modifying the description information about a service port is re-configuring the description information about
the service port.
9.12 Activating a Service Port

This topic describes how to activate or deactivate a service port for a VLAN. In this manner,
you can determine whether to make the service configuration take effect on a specified service
port.
Prerequisite
l The VLAN to which a service port needs to be added must be added by running the vlan
command.
l A proper traffic profile must exist.
l The service port to be activated must be in deact state, that is, the service port must be in
deactivated state.
NOTE
The newly created service port is in activated state by default and you cannot directly activate this
port. You must deactivate the port before activating it.
Context
l One xDSL port supports up to eight service ports.
Procedure
Step 1 Run the service-port vlan command to add a corresponding service port.
Step 2 Run the deactivate service-port command to deactivate a service port.
Step 3 Run the display service-port command to query a service port.
Step 4 Run the activate service-port command to activate a service port.
Step 5 Run the display service-port command to query a service port.
----End
Example
To add service port 0/7/0 to VLAN 10, set VPI/VCI to 0/35, set traffic entry 6 to be used in the
receive and transmit directions, and deactivate the service port, do as follows:


huawei(config)#deactivate service-port port 0/7/0 vpi 0 vci 35
Deactivate Service virtual port successfully
------------------------------------------------------------------------------
ID TYPE PARA
------------------------------------------------------------------------------
10 common adl 0/7/0 0 35 - - 6 6 deact/up - -
------------------------------------------------------------------------------
To activate service port 0/7/0, do as follows:

huawei(config)#activate service-port port 0/7/0 vpi 0 vci 35
------------------------------------------------------------------------------
ID TYPE PARA
------------------------------------------------------------------------------
10 common adl 0/7/0 0 35 - - 6 6 act/up - -
------------------------------------------------------------------------------
To deactivate all the configured service ports, do as follows:

huawei(config)#deactivate service-port all
Are you sure to deactivate service virtual port(s)? (y/n)[n]:y
Deactivating start...
Deactivating end.
The number of total service virtual port which need be deactivated: 3
The number of total service virtual port which have been deactivated: 3
huawei(config)#display service-port all
------------------------------------------------------------------------------
ID TYPE PARA
------------------------------------------------------------------------------
10 common adl 0/ 7/ 0 0 35 - - 6 6 deact/dn - -
------------------------------------------------------------------------------
To activate all the service ports, do as follows:

huawei(config)#activate service-port all
Are you sure to activate service virtual port(s)? (y/n)[n]:y
Activating start...
Activating end.
The number of total service virtual port which need be activated: 3
The number of total service virtual port which have been activated: 0
huawei(config)#display service-port all
------------------------------------------------------------------------------
ID TYPE PARA

------------------------------------------------------------------------------
10 common adl 0/ 7/ 0 0 35 - - 6 6 act/up - -
10 common adl 0/ 7/ 1 0 35 - - 6 6 act/up - -
10 common adl 0/ 7/ 2 0 35 - - 6 6 act/up - -
------------------------------------------------------------------------------
Related Operation
Table 9-12 lists the related operations for activating or deactivating a service port.
Table 9-12 Related operations for activating or deactivating a service port

Delete a service port undo service-port The service port cannot be deleted in
the following cases:
l BTV users access the service port.
l The service port is bound to an IP
address or a MAC address.
l The port is configured with a static
MAC address.
Query the VLAN display vlan -

information

Configuration Guide-IPM CLI 10 Configuring DHCP Relay
10 Configuring DHCP Relay
About This Chapter
This topic describes the principles of the DHCP relay function supported by the UA5000 and
how to configure the DHCP relay function.
10.1 Introduction to the DHCP Relay

This topic describes the DHCP relay function and its application to the UA5000.
10.2 Configuration Example of the DHCP Standard Mode
This topic describes how to configure the DHCP standard mode so that a PC can obtain the IP
address automatically.
10.3 Configuration Example of the DHCP Option60 Mode
This topic describes how to enable PCs to obtain IP addresses automatically in DHCP option60
mode.
10.4 Configuration Example of the DHCP MAC Address Segment Mode
This topic describes how to enable a PC to obtain the IP address automatically in DHCP MAC
address segment mode.
10.5 Creating a DHCP Server Group
This topic describes how to create a DHCP server group.
10.6 Setting DHCP Relay Mode
This topic describes how to set the DHCP relay mode.
10.7 Binding a DHCP Server Group with a VLAN Interface
This topic describes how to bind a DHCP server group with a VLAN interface.
10.8 Creating a DHCP Option60 Domain
This topic describes how to create the DHCP option60 domain.
10.9 Binding a DHCP Server Group with a DHCP Option60 Domain
This topic describes how to bind a DHCP server group with a DHCP option60 domain.
10.10 Configuring the Gateway of a DHCP Option60 Domain
This topic describes how to configure the gateway of a DHCP Option60 domain.
10.11 Creating a DHCP MAC Address Segment
This topic describes how to create a DHCP MAC address segment.

10 Configuring DHCP Relay Configuration Guide-IPM CLI
10.12 Setting the Range of a DHCP MAC Address Segment

This topic describes how to set the range of a DHCP MAC address segment.
10.13 Binding a DHCP Server Group with a DHCP MAC Address Segment
This topic describes how to bind a DHCP server group with a DHCP MAC address segment.
10.14 Configuring the Gateway of a DHCP MAC Address Segment
This topic describes how to configure the gateway of a DHCP MAC address segment.

10.1 Introduction to the DHCP Relay

This topic describes the DHCP relay function and its application to the UA5000.
Service Description
The Dynamic Host Configuration Protocol (DHCP) works in the server/client mode. The DHCP
client dynamically requests configuration data from the DHCP server and the DHCP server
provides the data for the client conveniently.
Initially, the DHCP protocol was suitable only for applications where the DHCP client and the
DHCP server were located in the same subnet. The DHCP client and the DHCP server could
not work across subnets. In this manner, each subnet must be equipped with a DHCP server.
This is very uneconomical. The introduction of DHCP relay solves this problem.
The UA5000 implements the DHCP relay function. The DHCP relay serves as relay between
the DHCP client and the server located in different subnets. As shown in Figure 10-1, the DHCP
packets can be relayed to the destination DHCP server (or client) across network segments. In
this manner, the DHCP clients on different networks can use the same DHCP server. This is
economical and facilitates centralized management.
Figure 10-1 UA5000 DHCP Relay
LAN
DHCP client
DHCP server
LAN switch
DHCP client
UA5000
DHCP server
DHCP client
For details on the DHCP, see "DHCP Relay" in the UA5000 Universal Access Unit Feature
Description.
The UA5000 supports layer 2 and layer 3 DHCP relay, and DHCP Option82. This ensures DHCP
security.
NOTE
For the configuration of the DHCP Option82, see "20.4 Enabling the DHCP Option82 Function" and
"20.5 Setting the Maximum Length of a DHCP Packet."
The UA5000 supports the following DHCP relay working modes:

l Standard mode

l Option60 mode
l MAC address segment mode
10.2 Configuration Example of the DHCP Standard Mode

This topic describes how to configure the DHCP standard mode so that a PC can obtain the IP
address automatically.
Prerequisite
Configure DHCP relay in standard mode to realize the dynamic allocation of IP addresses.
The standard mode refers to selecting a DHCP server from the DHCP server group bound with
a VLAN port. One VLAN port can be bound with one DHCP server group. All the DHCP packets
transmitted through the uplink of the VLAN port are relayed to the DHCP server group bound
with the VLAN port.
Networking
Figure 10-2 shows an example network for configuring the DHCP standard mode.
Figure 10-2 Example network for configuring the DHCP standard mode
10.1.1.1
DHCP Server 1
10.1.1.2
10.2.1.1
UA5000 LSW
DHCP Server 2
Modem Modem Modem Modem 10.2.1.2
VLAN 2 VLAN 3
Networking Description
l The two PCs in VLAN 2 obtain the IP addresses from DHCP server group 1 through the
DHCP standard mode.
l The two PCs in VLAN3 obtain the IP addresses from DHCP server group 2 through the
DHCP standard mode.

Data Plan
Table 10-1 provides the data plan for configuring the DHCP standard mode.
Table 10-1 Data plan for configuring the DHCP standard mode
Item Data Remarks
DHCP server group 1 Primary IP address: 10.1.1.1/24 -
Standby IP address: 10.1.1.2/24 -
DHCP server group 2 Primary IP address: 10.2.1.1/24 -
Standby IP address: 10.2.1.2/24 -
VLAN 2 Layer 3 IP address: 2.2.2.1/24 VLAN 2 binds with

DHCP server
group 1.
VLAN 3 Layer 3 IP address: 2.2.2.2/24 VLAN 3 binds with

DHCP server
group 2.
Uplink port 0/3/0 -
Service port 0/7/0,0/7/1 -
Requirements for the LAN switch: For the

upperlayer device l The LAN switch must transparently configuration of
transmit the service packets of the the LAN switch,
MA5600. refer to the
corresponding
l Configure the VLAN for the configuration
MA5600. The VLAN ID must be guide.
consistent with the upstream VLAN
of the MA5600.
NOTE
The configuration on VLAN 3 and VLAN 2 are the same. This topic describes how to configure PCs of
VLAN 2 to obtain the IP addresses.
Figure 10-3 shows the flowchart for configuring the DHCP standard mode.

Figure 10-3 Flowchart for configuring the DHCP standard mode
Start
Select the DHCP relay mode
Create a DHCP server group
Set the working mode of the DHCP

server group (optional)
Configure the VLAN uplink

port and the service port

layer 3 interface
Bind the interface with the DHCP

server group
Save the data
End
Procedure
Step 1 Select the DHCP relay mode.
huawei(config)#dhcp mode layer-3 standard
Step 2 Create a DHCP server group.

huawei(config)#dhcp-server 1 ip 10.1.1.1 10.1.1.2
Step 3 Configure the VLAN uplink port and the service port.
Step 4 Configure the IP address of the layer 3 interface.

Step 5 Bind the interface with the DHCP server group.

huawei(config-if-vlanif2)#dhcp-server 1


huawei(config)#save
----End
Result
The PCs can obtain the IP addresses dynamically, and access the Internet.
10.3 Configuration Example of the DHCP Option60 Mode

This topic describes how to enable PCs to obtain IP addresses automatically in DHCP option60
mode.
Prerequisite
Network devices and lines are normal. The IP address of the layer 3 interface of a VLAN and
the IP address of the upper layer router are in the same network segment. A routing exists between
the UA5000 and a DHCP server.
Networking
Figure 10-4 shows an example network for configuring the DHCP option60 mode.
Figure 10-4 Example network for applying the DHCP option60 mode
1.1.1.10
UA5000 DHCP Server 2

Hub
LSW
1.1.1.11
Modem
Hub
VLAN 2
Data Plan
Table 10-2 provides the data plan for configuring the DHCP option60 mode.

Table 10-2 Data plan for configuring the DHCP option60 mode
Item Data
DHCP server group 2 Primary IP address: 10.10.10.10/24
Standby IP address: 10.10.10.11/24
VLAN 2 IP address of layer 3 interface: 10.1.2.1/24
Uplink port 0/3/0
Service port 0/7/0
Domain Domain name: msft
DHCP server group: DHCP server group 2
Gateway IP address: 10.1.2.1/24 (the same as that of the layer 3

interface)
Requirements for the LAN switch:

upperlayer device l The LAN switch must transparently transmit the service packets
of the MA5600.
l Configure the VLAN for the MA5600. The VLAN ID must be
consistent with the upstream VLAN of the MA5600.
Context
l The name of the option60 domain should be configured according to the type of the
connected terminal devices.
l If the DHCP client is of the Windows 98/2000/XP/NT series, the domain name must be
msft.
l The system uses the longest match principle to match the configured domain according to
the option60 field of the packet. If a proper matching does not exist, the system processes
the domain according to the default domain.
Figure 10-5 shows the flowchart for configuring the DHCP option60 mode.

Figure 10-5 Flowchart for configuring the DHCP option60 mode
Start
Set the working mode of the

DHCP server group (optional)
Define an option60 domain
Bind the domain with the DHCP

server group
Configure the VLAN uplink

port and the service port

Configure the domain gateway
Save the data
End
Procedure
huawei(config)#dhcp mode layer-3 option60

Step 3 Define an Option60 domain.

huawei(config)#dhcp domain msft
Step 4 Bind the domain with the DHCP server group.

huawei(config-dhcp-domain-msft)#dhcp-server 2

huawei(config-dhcp-domain-msft)#quit
Step 6 Configure the IP address of VLAN layer 3 interface.

Step 7 Set the related gateway address for the domain.

huawei(config-if-vlanif2)#dhcp domain msft gateway 10.1.2.1

huawei(config)#save
----End
Result
10.4 Configuration Example of the DHCP MAC Address

Segment Mode
This topic describes how to enable a PC to obtain the IP address automatically in DHCP MAC
address segment mode.
Prerequisite
The IP address of VLAN layer 3 interface and the IP address of the upper router are in the same
network segment. A routing exists between the UA5000 and a DHCP server.
Networking
Figure 10-6 shows an example network for configuring the MAC address segment mode.
Figure 10-6 Example network for configuring the MAC address segment mode
1.1.1.10
DHCP Server 2
Hub
LSW
1.1.1.11
UA5000
Modem
PC

Data Plan
Table 10-3 provides the data plan for configuring the MAC address segment mode.
Table 10-3 Data plan for configuring the MAC address segment mode
Item Data
DHCP server group 2 Active IP address: 10.10.10.10/24
Standby IP address: 10.10.10.11/24
VLAN 2 IP address of layer 3 interface: 10.1.2.1/24
Uplink port 0/3/0
Service port 0/7/0
MAC address segment MAC address segment name: huawei
Start from: 0000-0000-0001

End at: 0000-0000-0100
Gateway IP address: 10.1.2.1 (the same as the IP address of layer

3 interface)
DHCP server group: DHCP server group 2
MAC address of the user 0000-0000-0010

PC
Requirements for the LAN switch:

upperlayer device l The LAN switch must transparently transmit the service
packets of the MA5600.
l Configure the VLAN for the MA5600. The VLAN ID must
be consistent with the upstream VLAN of the MA5600.
Figure 10-7 shows the flowchart for configuring the MAC address segment mode.

Figure 10-7 Flowchart for configuring the MAC address segment mode
Start
Set working mode of the DHCP

server group (optional)
Define the MAC address segment
Bind the MAC address segment with

the DHCP server group
Configure the uplink port and the

service port to the VLAN

Configure the gateway address of

the MAC address segment
Save the data
End
Procedure
huawei(config)#dhcp mode layer-3 mac-range

Step 3 Define the MAC address segment.

huawei(config)#dhcp mac-range huawei
huawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100

Step 4 Bind the MAC address segment with the DHCP server group.
huawei(config-mac-range-huawei)#dhcp-server 2
huawei(config-mac-range-huawei)#quit
Step 6 Configure the IP address of VLAN layer 3 interface.

Step 7 Set the gateway address for the MAC address segment.
huawei(config-if-vlanif2)#dhcp mac-range huawei gateway 10.1.2.1

huawei(config)#save
----End
Result
10.5 Creating a DHCP Server Group

This topic describes how to create a DHCP server group.
Context
l To improve the reliability of a network, you can specify a primary DHCP server and a
secondary DHCP server in a server group to form a DHCP server group.
l Up to 20 DHCP server groups (019) can be configured in the system.
l The primary server or the secondary server is identified by its IP address. The secondary
server cannot be added independently. Instead, it has to be added with the primary server.
Procedure
Step 1 Run the dhcp-server command to create a DHCP server group.
Step 2 Run the display dhcp-server command to query the information about a DHCP server group.
----End
Example
To create DHCP server group 1, in which the IP addresses of primary and secondary DHCP
servers are 10.1.1.1 and 10.1.1.2, do as follows:
huawei(config)#display dhcp-server 1
The primary IP address of DHCP server group 1: 10.1.1.1
The secondary IP address of DHCP server group 1: 10.1.1.2
Messages from this server group: 0
Messages to this server group: 0

Messages from clients to this server group: 0

Messages from this server group to clients: 0
DHCP OFFER messages: 0
DHCP ACK messages: 0
DHCP NAK messages: 0
DHCP DECLINE messages: 0
DHCP DISCOVER messages: 0
DHCP REQUEST messages: 0
DHCP INFORM messages: 0
DHCP RELEASE messages: 0
To delete DHCP server group 1, do as follows:

huawei(config)#undo dhcp-server 1
10.6 Setting DHCP Relay Mode

This topic describes how to set the DHCP relay mode.
Context
The UA5000 supports layer 2 and layer 3 DHCP relay. Layer 3 DHCP relay includes the
following:
l DHCP standard mode: Select the DHCP server according to the IP address of the VLAN
layer 3 interface for forwarding DHCP packets.
l DHCP option60 mode: Select the DHCP server according to the DHCP option60 domain.
Option60 is an option in DHCP packets. It can be used to identify a terminal type. DHCP
Option60 means that you can select the DHCP server according to different terminal types.
l DHCP MAC address segment mode: Select the DHCP server group according to the source
MAC address segment of DHCP packets.
Procedure
Step 1 Run the dhcp mode command to set the DHCP working mode.
Step 2 Run the display dhcp config command to query the DHCP working mode.
----End
Example
To set the DHCP relay mode as layer 2, do as follows:
huawei(config)#dhcp mode layer-2
huawei(config)#display dhcp config
DHCP relay mode: layer-2
To set the DHCP relay mode as layer 3 DHCP Option60, do as follows:

huawei(config)#dhcp mode layer-3 option60
huawei(config)#display dhcp config
DHCP relay mode: layer-3
DHCP server select mode: option60
10.7 Binding a DHCP Server Group with a VLAN Interface

This topic describes how to bind a DHCP server group with a VLAN interface.

Prerequisite
The DHCP server group is created
Context
l A VLAN layer 3 interface can be bound with only one DHCP server group. Therefore, all
the DHCP packets transmitted through the VLAN layer 3 interface are forwarded to the
DHCP server group bound with the VLAN interface.
l By default, a VLAN interface is not bound with any DHCP server.
l If a layer 3 interface is bound with a DHCP server group, the new setting overwrites the
old setting.
Procedure
Step 1 Run the interface vlanif command to access VLANIF mode.
Step 2 Run the dhcp-server command to bind a DHCP server group.
Step 3 Run the display dhcp-server interface vlanif command to query the DHCP server group that
is bound with a VLAN interface.
----End
Example
To bind DHCP server group 1 to VLAN interface 2, do as follows:
huawei(config)#display dhcp-server interface vlanif 2
The DHCP server group of this interface is 1
Related Operation
Table 10-4 lists the related operations for binding a DHCP server group with a VLAN interface.
Table 10-4 Related operations for binding a DHCP server group with a VLAN interface
Unbind a VLAN interface from a undo dhcp-server VLANIF mode

DHCP server
Query the configuration information display dhcp config -

of the DHCP working mode
10.8 Creating a DHCP Option60 Domain

This topic describes how to create the DHCP option60 domain.

Context
l The system supports up to 128 DHCP option60 domains.
l If the DHCP domain that needs to be created exists, enter the domain configuration mode
directly. By default, the system has a DHCP option60 domain named default.
Procedure
Step 1 Run the dhcp domain command to create a domain.
NOTE
Running the dhcp domain command can also enter a created domain.
Step 2 Run the quit command to exit from domain mode.
Step 3 Run the display dhcp domain command to query a domain.
----End
Example
To create a domain named msft, do as follows:
huawei(config)#display dhcp domain
{ <cr>|string<s><1,32> }:
Command:
display dhcp domain
--------------------------------------------------------------------
Index Name Server VLANIF Gateway
-group
--------------------------------------------------------------------
0 default none none none
1 msft none none none
--------------------------------------------------------------------
Total: 2
Related Operation
Table 10-5 lists the related operation for creating a DHCP option60 domain.
Table 10-5 Related operation for creating the DHCP option60 domain
Delete a DHCP Option60 domain undo dhcp domain The domain named default
cannot be deleted.
10.9 Binding a DHCP Server Group with a DHCP Option60

Domain
This topic describes how to bind a DHCP server group with a DHCP option60 domain.

Context
One DHCP domain can be bound to only one DHCP Server group.
Procedure
Step 1 Run the dhcp domain command to enter the domain mode.
Step 3 Run the display dhcp domain command to query a DHCP server group.
----End
Example
To bind DHCP server group 1 with DHCP domain msft, do as follows:
huawei(config-dhcp-domain-msft)#dhcp-server 1
huawei(config)#display dhcp domain msft
--------------------------------------------------------------------
-group
--------------------------------------------------------------------
1 msft 1 none none
--------------------------------------------------------------------
Related Operation
Table 10-6 lists the related operations for binding a DHCP server group with a DHCP option60
domain.
Table 10-6 Related operations for binding a DHCP server group with a DHCP option60 domain
Delete a DHCP domain undo dhcp domain -
Unbind the DHCP server undo dhcp-server Option60 domain mode

group from a DHCP domain
10.10 Configuring the Gateway of a DHCP Option60

Domain
This topic describes how to configure the gateway of a DHCP Option60 domain.
Context
l A DHCP Option60 domain can be configured with only one gateway address.
l By default, the gateway address of a domain is the IP address of the VLAN layer 3 interface.

Procedure
Step 2 Run the dhcp domain gateway command to set the gateway address.
Step 3 Run the quit command to exit from the VLANIF mode.
Step 4 Run the display dhcp domain command to query a DHCP server group.
----End
Example
To set the gateway address of domain msft as 10.1.2.1, do as follows:
huawei(config-if-vlanif2)#dhcp domain msft gateway 10.1.2.1
huawei(config)#display dhcp domain msft
--------------------------------------------------------------------
-group
--------------------------------------------------------------------
1 msft 1 2 10.1.2.1
--------------------------------------------------------------------
Related Operation
Table 10-7 lists the related operation for configuring the gateway of a DHCP Option60 domain.
Table 10-7 Related operation for configuring the gateway of a DHCP option60 domain
Delete the gateway of a DHCP undo dhcp domain gateway VLANIF mode
option60 domain
10.11 Creating a DHCP MAC Address Segment

This topic describes how to create a DHCP MAC address segment.
Prerequisite
l The DHCP server group must be created.
l The IP address of the VLAN interface must be configured.
l By default, a MAC address segment named default must exist in the system.
Context
The system supports up to 128 MAC address segments.

Procedure
Step 1 Run the dhcp mac-range command to create a DHCP MAC address segment and enter the
MAC address segment mode.
Step 2 Run the display dhcp mac-range command to query a MAC address segment.
----End
Example
To create a MAC address segment named huawei, do as follows:
huawei(config)#display dhcp mac-range
------------------------------------------------------------------------------
Index Name MAC-start MAC-end Server VLAN Gateway
-group -IF
------------------------------------------------------------------------------
0 default none none none none none
1 huawei none none none none none
------------------------------------------------------------------------------
Total: 2
Related Operation
Table 10-8 lists the related operation for creating a DHCP MAC address segment.
Table 10-8 Related operation for creating a DHCP MAC address segment
Delete a DHCP MAC undo dhcp mac-range The MAC address segment
address segment named default cannot be
deleted.
10.12 Setting the Range of a DHCP MAC Address Segment

This topic describes how to set the range of a DHCP MAC address segment.
Context
l A MAC address segment is a consecutive MAC address array specified by a start MAC
address and an end MAC address.
l The MAC address adopts the format of "H-H-H" ("H" is a four-bit hexadecimal number).
Procedure
Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC address
segment mode.
Step 2 Run the mac-range command to set the range of a MAC address segment.
Step 3 Run the quit command to exit from the MAC address segment mode.

Step 4 Run the display dhcp mac-range command to query the range of a MAC address segment.
----End
Example
To set the range of MAC address segment huawei from 0000-0000-0001 to 0000-0000-0100,
do as follows:
huawei(config-mac-range-huawei)#mac-range 0000-0000-0001 to 0000-0000-0100
huawei(config)#display dhcp mac-range
{ <cr>|string<S><1,32> }:
Command:
display dhcp mac-range
------------------------------------------------------------------------------
-group -IF
------------------------------------------------------------------------------
1 huawei 0000-0000-0001 0000-0000-0100 none none none
------------------------------------------------------------------------------
Total: 2
Related Operation
Table 10-9 lists the related operation for setting the range of a DHCP MAC address segment
Table 10-9 Related operation for setting the range of a DHCP MAC address segment
Cancel the range of a MAC undo mac-range The MAC address

address segment segment named
default cannot be
deleted.
10.13 Binding a DHCP Server Group with a DHCP MAC

Address Segment
This topic describes how to bind a DHCP server group with a DHCP MAC address segment.
Context
A MAC address segment can be bound with only one DHCP server group.
Procedure
Step 1 Run the dhcp mac-range command to create a MAC address segment and enter MAC address
segment mode.

Step 3 Run the quit command to quit from MAC address segment mode.
Step 4 Run the display dhcp mac-range command to query the information about a MAC address
segment.
----End
Example
To bind MAC address segment huawei with server group 10, do as follows:
huawei(config-mac-range-huawei)#dhcp-server 10
hauwei(config)#display dhcp mac-range
{ <cr>|string<S><1,32> }:
Command:
display dhcp mac-range
------------------------------------------------------------------------------
-group -IF
------------------------------------------------------------------------------
1 huawei none none 10 none none
------------------------------------------------------------------------------
Total: 2
Related Operation
Table 10-10 lists the related operation for binding a DHCP server group with a DHCP MAC
address segment.
Table 10-10 Related operation for binding a DHCP server group with a DHCP MAC address
segment
Unbind the DHCP server group from undo dhcp-server

a DHCP MAC address segment
10.14 Configuring the Gateway of a DHCP MAC Address

Segment
This topic describes how to configure the gateway of a DHCP MAC address segment.
Context
A DHCP MAC address segment can be configured with only one gateway address.
Procedure
Step 2 Run the dhcp mac-range gateway command to configure the gateway address.

Step 3 Run the quit command to exit from the VLANIF mode.
Step 4 Run the display dhcp mac-range command to query the information about the gateway address.
----End
Example
To set the gateway address of MAC address segment huawei to 10.1.2.1, do as follows:
huawei(config-if-vlanif2)#dhcp mac-range huawei gateway 10.1.2.1
huawei(config)#display dhcp mac-range huawei
------------------------------------------------------------------------------
-group -IF
------------------------------------------------------------------------------
0 huawei none none none 2 10.1.2.1
------------------------------------------------------------------------------
Related Operation
Table 10-11 lists the related operations for setting the gateway of a DHCP MAC address
segment.
Table 10-11 Related operations for setting the gateway of a DHCP MAC address segment
Cancel the gateway of the MAC undo dhcp mac-range -

address segment on a VLAN gateway
interface
Unbind the DHCP server group undo dhcp-server MAC address segment
from a MAC address segment mode

Configuration Guide-IPM CLI 11 Configuring the ARP/ARP Proxy
11 Configuring the ARP/ARP Proxy
About This Chapter
This topic describes the principles of ARP and ARP proxy supported by the UA5000 and how
to configure the ARP and ARP proxy.
11.1 Introduction to the APR

This topic describes the ARP proxy service and the service specifications.
11.2 Configuration Example of ARP Proxy
This topic describes how to configure ARP proxy and allow the users in different VLANs to
communicate with each other.
11.3 Configuring a Static ARP Entry
This topic describes how to configure the static mapping between the specified IP address and
the MAC address, that is, adding a static ARP entry. After the configuration, the data forwarding
across VLANs can be realized.
11.4 Enabling the ARP Proxy
This topic describes how to enable the ARP proxy. The ARP proxy needs to be enabled to
implement layer 3 communication among users who are isolated on layer 2.

11 Configuring the ARP/ARP Proxy Configuration Guide-IPM CLI
11.1 Introduction to the APR

This topic describes the ARP proxy service and the service specifications.
Service Description
Before two hosts in a network communicate with each other, they must know the physical
addresses of each host, that is, the MAC addresses. The IP address represents only the address
of a host at the network layer. To send the data at the network layer to a destination host, the
source host must know the physical address of the destination host. Therefore, the IP address
must be translated into a MAC address.
Address Resolution Protocol (ARP) is used to translate an IP address into a MAC address.
For details on the ARP Proxy feature, see "ARP Proxy" in the UA5000 Universal Access Unit
Feature Description.
The UA5000 supports the ARP protocol and maintains an ARP table for the mapping between
the MAC addresses and the IP addresses. The UA5000 enables you to configure the static ARP
entries. The system supports up to 500 static ARP entries and 2048 dynamic ARP entries.
11.2 Configuration Example of ARP Proxy

This topic describes how to configure ARP proxy and allow the users in different VLANs to
Prerequisite
l The service boards are in the normal state.
Networking
Figure 11-1 shows an example network for configuring ARP proxy.

Figure 11-1 Example network for configuring ARP Proxy
Router
UA5000
PC1 PC2 PC3
Data Plan
Table 11-1 provides the data plan for configuring ARP proxy.
Table 11-1 Data plan for configuring ARP proxy
Item Data
Super VLAN VLAN ID: 100
Sub VLAN: VLAN 10 and VLAN 20
IP address: 10.0.0.254/24
Sub VLAN VLAN ID: 10
VLAN type: smart VLAN
Users:
PC1 (0/7/0)
PC2 (0/7/1)
Sub VLAN VLAN ID: 20
VLAN type: MUX VLAN
User: PC3 (0/8/0)
Uplink port Port:0/3/0
VLAN: standard VLAN 30
IP address: 10.0.1.254/24

Figure 11-2 shows the flowchart for configuring ARP proxy.
Figure 11-2 Flowchart for configuring ARP proxy
Start
Create a super VLAN
Create sub VLANs and add them

to the super VLAN
Configure the service ports of the

sub VLANs
Configure the uplink port
Configure the layer 3 interface of

the super VLAN
Enable the ARP proxy function
Save the data
End
Procedure
Step 1 Create a super VLAN.
huawei(config)#vlan 100 super
Step 2 Create a sub VLAN and add it to the super VLAN.

Step 3 Configure the service port of the sub VLAN.

Step 4 Configure the uplink port.

Step 5 Configure the layer 3 interface of the super VLAN.

NOTE
The IP address of the layer 3 interface of the super VLAN must be in the same network segment as the IP
address obtained by the PC.
Step 6 Enable ARP Proxy.

1. Enable global ARP Proxy.
huawei(config)#arp proxy enable
2. Enable ARP Proxy for the layer 3 interface of the super VLAN.
3. Enable ARP Proxy for the sub VLAN interface.

NOTE
Skip substep 3 in step 6 if you only want PCs in different VLANs to communicate with each other.

huawei#save
----End
Result
After the global ARP proxy function and the ARP proxy function of the super VLAN interface
are enabled, PC 1 and PC 3 in different VLANs can communicate with each other.
After the global ARP proxy function, the ARP proxy function of the super VLAN interface, and
that of the sub VLAN interface are enabled, PC 1 and PC 2 in the same sub VLAN can
11.3 Configuring a Static ARP Entry

This topic describes how to configure the static mapping between the specified IP address and
the MAC address, that is, adding a static ARP entry. After the configuration, the data forwarding
across VLANs can be realized.
Context
l The ARP mapping table is used for address resolution only in a LAN.
l The system supports the configuration of up to 500 static ARP entries.
Procedure
Step 1 Run the arp command to configure a static ARP entry.

Step 2 Run the display arp static command to query the configured static ARP entry.
----End
Example
To add a static ARP entry to set up the mapping between the IP address 129.102.0.1 and the
MAC address 00e0-fc01-0000, passing through port 0/7/0 of VLAN 10, do as follows:
huawei(config)#arp 129.102.0.1 00e0-fc01-0000 10 0/7/0
huawei(config)#display arp static
IP Address MAC Address VLAN ID Port Type
129.102.0.1 00e0-fc01-0000 10 0/7/0 Static
--- 1 entry found ---
Related Operation
Table 11-2 lists the related operations for configuring a static ARP entry.
Table 11-2 Related operations for configuring a static ARP entry

Command...
Delete an ARP undo arp The system can delete static and dynamic ARP entries.
entry
Clear an ARP reset arp You can clear a static ARP entry, a dynamic ARP entry,
entry or ARP entries related to a port. By entering the
parameter all, you can clear all the ARP entries.
11.4 Enabling the ARP Proxy

This topic describes how to enable the ARP proxy. The ARP proxy needs to be enabled to
implement layer 3 communication among users who are isolated on layer 2.
Context
l By default, the ARP proxy is disabled. If the hosts connected to a VLAN interface need to
communicate with each other, you should enable the global ARP proxy and the ARP proxy
on this VLAN interface.
l On a super VLAN interface, enable the ARP proxy, thus enabling the proxy between the
sub VLANs of the super VLAN interface. To enable the ARP proxy between hosts in a sub
VLAN, enable the ARP proxy for the specified sub VLAN.
Procedure
Step 1 Run the arp proxy command to enable the ARP proxy.
Step 2 Run the display arp proxy command to query the configuration of ARP proxy.
----End

Example
To enable the global ARP proxy, do as follows:
huawei(config)arp proxy enable
huawei(config)#display arp proxy
Global arp proxy is enabled
To enable ARP proxy for layer 3 interface, do as follows:

huawei(config-if-vlanif100)#display arp proxy
VLANIF 100 : Arp proxy is enabled
To enable ARP proxy for a sub VLAN, do as follows:

huawei(config-if-vlanif100)#display arp proxy
VLANIF 100 : Arp proxy is enabled
ARP proxy enable subvlan 10
Related Operation
Table 11-3 lists the related operation for enabling the ARP proxy.
Table 11-3 Related operation for enabling the ARP proxy

Disable the ARP proxy arp proxy disable

Configuration Guide-IPM CLI 12 Configuring a Routing Protocol
12 Configuring a Routing Protocol
About This Chapter
This topic describes the routing protocols supported by the UA5000 and how to configure the
routing protocols.
12.1 Introduction to the Routing Protocol

This topic describes the routing protocols and the application on the UA5000.
12.2 Configuration Example of a Static Route
This topic describes how to enable the users connected to different UA5000s to communicate
with each other when the users are located on different network segments.
12.3 Configuration Example of RIP
This topic describes how to configure the RIP to realize the layer 3 interconnection among
devices in different network segments.
12.4 Configuration Example of OSPF
This topic describes how to configure OSPF and allow it to run normally on the device.
12.5 Configuration Example of a Route Policy
This topic describes how to configure a route policy for imported routes.
12.6 Adding a Static Route
This topic describes how to add a static route to the destination address. This helps to realize the
layer 3 interconnection among network devices in different network segments.
12.7 Configuring RIP
This topic describes how to configure RIP.
12.8 Configuring OSPF
This topic describes how to configure Open Shortest Path First (OSPF).
12.9 Configuring OSPF on a VLAN Interface
This topic describes how to configure OSPF on a VLAN interface.
12.10 Configuring the OSPF Timer
This topic describes how to configure the OSPF timer.
12.11 Configuring Route Aggregation
This topic describes how to configure route aggregation.

12 Configuring a Routing Protocol Configuration Guide-IPM CLI
12.12 Configuring OSPF Route Import

This topic describes how to configure OSPF route import.
12.13 Configuring the Route Filtering Policy
This topic describes how to configure the route filtering policy. You can perform this operation
when you want to filter unnecessary routes.
12.14 Querying and Debugging OSPF
This topic describes how to query the OSPF running status after it is configured, to verify the
configuration effect.
12.15 Configuring an Address Prefix List
This topic describes how to configure an address prefix list.
12.16 Configuring a Route Policy
This topic describes how to configure a route policy.

12.1 Introduction to the Routing Protocol

This topic describes the routing protocols and the application on the UA5000.
Service Description
The routing protocols described in this topic are as follows:
l Static route: a special type of route that is manually configured by a network administrator.
Static routes are used on small networks with a simple topology that does not change
frequently.
l Routing Information Protocol (RIP): a routing protocol that is based on the Vector-Distance
(V-D) algorithm.
l Open Shortest Path First (OSPF): a dynamic routing protocol running inside an autonomous
system (AS). OSPF detects and forwards the routing information by collecting and
forwarding the link status of an AS.
For detailed information about the routing protocol, see "Routing" in the UA5000 Universal
Access Unit Feature Description.
When a routing protocol is running on the UA5000, the UA5000 can work as a router. The
UA5000 supports the following routing protocols:
l Static routing protocols
l Dynamic routing protocols such as RIP and OSPF
The UA5000 manages static and dynamic routes in a centralized manner to share the routing
information. The system supports manual configuration of up to 1024 static routing entries.
12.2 Configuration Example of a Static Route

This topic describes how to enable the users connected to different UA5000s to communicate
with each other when the users are located on different network segments.
Networking
Figure 12-1 shows an example networking for configuring the static route.

Figure 12-1 Example networking for configuring the static route
PC_C
1.1.5.1
1.1.5.2/24
1.1.2.2/24 1.1.3.1/24
1.1.2.1/24 1.1.3.2/24
UA5000_C
1.1.1.2/24 1.1.4.2/24
UA5000_A UA5000_B
PC_A PC_B
1.1.1.1 1.1.4.1
UA5000_A, UA5000_B and UA5000_C have the routing function. After the configuration, any
two PCs should be able to communicate with each other.
Data Plan
Table 12-1 provides the data plan for configuring the static route.
Table 12-1 Data plan for configuring the static route
Item Data
UA5000_A Active IP address of the layer 3 interface: 1.1.2.1/24
Standby IP address of the layer 3 interface: 1.1.1.2/24
VLAN ID: 2
Uplink port0/3/0
PC_A IP address: 1.1.1.1/24
UA5000_B Active IP address of the layer 3 interface: 1.1.3.2/24
Standby IP address of the layer 3 interface IP address: 1.1.4.2/24
VLAN ID: 2
Uplink port0/3/0

Item Data
PC_B IP address: 1.1.4.1/24
UA5000_C Active IP address of the layer 3 interface: 1.1.3.1/24
VLAN ID: 2
Uplink port: 0/3/0 (connecting UA5000_A) and 0/3/1 (connecting

UA5000_B)
PC_C IP address: 1.1.5.1/24
Context
Configure a native VLAN of the layer 3 interface of each UA5000 to ensure normal
communication.
Figure 12-2 shows the flowchart for configuring the static route.
Figure 12-2 Flowchart for configuring the static route
Start

of the layer 3 interface
Configure static routes
Configure the host

gateways
Save the data
End
NOTE
To configure static routes on one device, follow the procedure shown in the preceding flowchart. To
configure static routes on multiple devices, repeat the procedure according to the actual network.

Procedure
Step 1 Configure the IP address of the layer 3 interface. The configurations for the three devices are
the same. In this case, UA5000_A is considered as an example.
huawei(config-if-vlanif2)#ip address 1.1.1.2 24 sub
Step 2 Configure the static route.

1. Configure a static route for UA5000_A.
2. Configure a static route for UA5000_B.

3. Configure a static route for UA5000_C.

Step 3 Configure the host gateways.

1. Configure the default gateway of PC_A as 1.1.1.2.
2. Configure the default gateway of PC_B as 1.1.4.2.
3. Configure the default gateway of PC_C as 1.1.5.2.
huawei(config)#save
----End
Result
After the configuration, an interconnection can be set up between all the hosts and UA5000s.
12.3 Configuration Example of RIP

This topic describes how to configure the RIP to realize the layer 3 interconnection among
devices in different network segments.
Networking
Figure 12-3 shows an example network for configuring RIP.

Figure 12-3 Example network for configuring RIP
UA5000_C
Ethernet0/3/0
Loopback0 192.0.3.2/24
192.0.2.1/24 Ethernet0/3/0
192.0.3.1/24
UA5000_A
UA5000_B
Ethernet0/3/0
192.0.1.1/24 Ethernet0/3/1
192.0.1.2/24
Ethernet
Data Plan
The RIP runs on UA5000_A, UA5000_B and UA5000_C. The convergence time must be within
30s.
Table 12-2 provides the data plan for configuring RIP.
Table 12-2 Data plan for configuring RIP

Item Data
UA5000_A Uplink port: 0/3/0

VLAN ID: 2
Loopback interface address: 192.0.2.1/24
UA5000_B l On UA5000_C side

Uplink port: 0/3/0
l On Ethernet side
Uplink port: 0/3/1
VLAN ID: 2
UA5000_C Uplink port: 0/3/0

VLAN ID: 2

Context
All the interfaces of the UA5000 are in the same VLAN. If the interfaces of each UA5000 are
in different VLANs, configure a native VLAN of the layer 3 interface of each device to ensure
normal communication.
NOTE
The following configuration flowchart shows the operations on one device. You can repeat the operations
on multiple devices that are to be configured with the RIP function according to the actual network.
Figure 12-4 shows the flowchart for configuring RIP.
Figure 12-4 Flowchart for configuring RIP
Satrt

the layer 3 interface

of the loopback interface
Enable RIP
Set the RIP clock
Save the data
End
Procedure
Step 1 Configure UA5000_A.
1. Configure the IP address of the layer 3 interface of UA5000_A.
2. Configure the IP address of the loopback interface of UA5000_A.

huawei(config)#interface loopBack 0
huawei(config-if-loopback0)#ip address 192.0.2.1 24
3. Enable RIP for UA5000_A.

Enable RIP for UA5000_A Ethernet0/3/0 and LoopBack0.

huawei(config-if-loopback0)#quit
huawei(config)#rip
huawei(config-rip-1)#network 192.0.1.0
4. Set the RIP clock of UA5000_A. Set the update time as 10s, age time as 30s, suppress time
as 0s, and Garbage-collect time as 40s.
huawei(config-rip-1)#timers rip 10 30 0 40
5. Save the data.

huawei(config-rip-1)#quit
huawei(config)#save
Step 2 Configure UA5000_B.

1. Configure the IP address of the layer 3 interface of UA5000_B.
huawei(config)#port vlan 2 0/3 0-1
2. Enable RIP for UA5000_B.

Enable RIP for UA5000_B Ethernet0/3/0 and Ethernet0/3/1.
huawei(config)#rip
3. Set the RIP clock of UA5000_B. Set the update time as 10s, age time as 30s, suppress time
4. Save the data.

huawei(config)#save
Step 3 Configure UA5000_C.

1. Configure the IP address of the layer 3 interface of UA5000_C.
huawei(config-if-vlanif2#ip address 192.0.3.2 24
huawei(config-if-vlanif2#quit
2. Enable RIP for UA5000_C.

Enable RIP for UA5000_C Ethernet0/3/0.
huawei(config)#rip
3. Set the RIP clock of UA5000_C. Set the update time as 10s, age time as 30s, suppress time
4. Save the data.

huawei(config)#save
----End
Result
l On UA5000_B and UA5000_C, run the display ip routing-table protocol rip command
and you can find the route 192.0.2.0/24.

l Before adjusting the timer, shut down Ethernet port 0/3/0 of UA5000_A. and you can find
that route 192.0.2.0/24 of UA5000_B and UA5000_C becomes unreachable in 30s.
l After adjusting the timer, do not shut down Ethernet port 0/3/0 of UA5000_A and you can
find that the route recovers within 30s. That is, the convergence time of the RIP network
decreases.
12.4 Configuration Example of OSPF

This topic describes how to configure OSPF and allow it to run normally on the device.
Networking
Figure 12-5 shows an example network for configuring OSPF.
Figure 12-5 Example network for configuring OSPF
UA5000_A 1.1.1.1 UA5000_D 4.4.4.4
DR
192.1.1.1/24 192.1.1.4/24
192.1.1.2/24 192.1.1.3/24
BDR
UA5000_B 2.2.2.2 UA5000_C 3.3.3.3
Data Plan
Table 12-3 provides the data plan for configuring OSPF.
Table 12-3 Data plan for configuring OSPF
Item Data
UA5000_A IP address of the layer 3 interface: 192.1.1.1/24
Priority: 100
VLAN ID: 2
Router ID: 1.1.1.1
UA5000_B IP address of the layer 3 interface: 192.1.1.2/24
Priority: 0

Item Data
VLAN ID: 2
Router ID: 2.2.2.2
UA5000_C IP address of the layer 3 interface: 192.1.1.3/24
Priority: 2
VLAN ID: 2
Router ID: 3.3.3.3
UA5000_D IP address of the layer 3 interface: 192.1.1.4/24
Priority: not configured

Default: 1
VLAN ID: 2
Router ID: 4.4.4.4
Context
l Configure a native VLAN on the layer 3 interface of each UA5000 to ensure normal
communication.
l The OSPF area IDs of the UA5000s must be consistent.
Figure 12-6 shows the flowchart for configuring OSPF.
Figure 12-6 Flowchart for configuring OSPF
Start

of the layer 3 interface
Configure the OSPF

router ID
Enable OSPF
Configure the OSPF priority
Save the data
End

NOTE
Follow the procedure shown in the preceding flowchart to configure OSPF on one device. You can repeat
the procedure to configure OSPF on multiple devices according to the actual network.
Procedure
2. Configure the OSPF Router ID of UA5000_A.

huawei(config)#router id 1.1.1.1
3. Enable OSPF for UA5000_A.

huawei(config)#ospf
huawei(config-ospf-1)#area 0
huawei(config-ospf-1-area-0.0.0.0)#network 192.1.1.0 0.0.0.255
huawei(config-ospf-1-area-0.0.0.0)#quit
huawei(config-ospf-1)#quit
4. Configure the OSPF priority of UA5000_A.

huawei(config-if-vlanif2)#ospf dr-priority 100
5. Save the data.

huawei(config)#save

2. Configure the OSPF Router ID of UA5000_B.

3. Enable OSPF for UA5000_B.

huawei(config)#ospf
4. Configure the OSPF priority of UA5000_B.

5. Save the data.

huawei(config)#save
Step 3 Configure UA5000_C.

1. Configure the IP address of the layer 3 interface of UA5000_C.

2. Configure the OSPF Router ID of UA5000_C.

3. Enable OSPF for UA5000_C.

huawei(config)#ospf
4. Configure the OSPF priority of UA5000_C.

5. Save the data.

huawei(config)#save
Step 4 Configure UA5000_D.

1. Configure the IP address of the layer 3 interface of UA5000_D.
2. Configure the OSPF Router ID of UA5000_D.

3. Enable OSPF for UA5000_D.

huawei(config)#ospf
4. Save the data.

huawei(config)#save
----End
Result
Run the display ip routing-table command and you can find the routing table that is learnt. The
hosts can communicate with each other.
12.5 Configuration Example of a Route Policy

This topic describes how to configure a route policy for imported routes.
Networking
Figure 12-7 shows an example network for configuring the route policy. UA5000_A and
UA5000_B have the routing function.

Figure 12-7 Example network for configuring the route policy
Static:20.0.0.1
30.0.0.1
40.0.0.1
Vlanif2 Vlanif2
10.0.0.1/24 10.0.0.2/24
UA5000_A Area 0 UA5000_B

1.1.1.1 2.2.2.2
Data Plan
Table 12-4 provides the data plan for configuring the route policy.
Table 12-4 Data plan for configuring the route policy

Item Data
UA5000_A IP address of the layer 3 interface: 10.0.0.1/24
VLAN ID: 2
Router ID: 1.1.1.1
OSPF area: 0
Static routes: 20.0.0.1, 30.0.0.1, and 40.0.0.1
UA5000_B IP address of the layer 3 interface: 10.0.0.2/24
VLAN ID: 2
Router ID: 2.2.2.2
OSPF area: 0
Figure 12-8 shows the flowchart for configuring the route policy.

Figure 12-8 Flowchart for configuring the route policy

Device A Device B
Start Start
Configure the IP address Configure the IP address

of layer 3 interface of layer 3 interface
Enable route function Configure the ACL
Configure the OSPF

Enable route function
router ID
Configure the OSPF

Configure the static routes
router ID
Import static routes Filter imported routes
Save the data Save the data
End End
NOTE
Follow the procedure shown in the preceding flowchart to configure the route policy on one device. You
can repeat the operations on multiple devices that are to be configured with the route policy according to
the actual network.
Procedure
2. Enable OSPF for UA5000_A and specify the ID of the area to which the interface belongs.
huawei(config)#ospf
3. Configure the OSPF router ID of UA5000_A.

4. Configure three static routes.

huawei(config)#ip route-static 20.0.0.1 32 vlanif 2
5. Import the static routes in OSPF to improve the capability of obtaining routes.

huawei(config)#ospf
hawei(config-ospf-1)#import-route static
hawei(config-ospf-1)#quit
6. Save the data.

huawei(config)#save

2. Configure the access control list (ACL).

huawei(config)#acl 2000
huawei(config-acl-basic-2000)#rule deny source 30.0.0.0 0.0.0.255
huawei(config-acl-basic-2000)#rule permit source any
huawei(config-acl-basic-2000)#quit
3. Enable OSPF for UA5000_B and specify the ID of the area to which the interface belongs.
huawei(config)#ospf
4. Configure the OSPF router ID of UA5000_B.

5. Configure filtering rules for imported routes.

huawei(config)#ospf
uawei(config-ospf-1)#filter-policy 2000 import
6. Save the data.

huawei(config)#save
----End
Result
1. OSPF should be able to run on UA5000_A and UA5000_B in the normal state, and
UA5000_A and UA5000_B should be able to communicate with each other.
2. After the route filtering rules are configured on UA5000_B, two of the three imported static
routes are available, but one of them is screened. Routes from segments 20.0.0.0 and
40.0.0.0 are available, but the route from segment 30.0.0.0 is screened.
12.6 Adding a Static Route

This topic describes how to add a static route to the destination address. This helps to realize the
layer 3 interconnection among network devices in different network segments.
Prerequisite
The IP address is configured for the layer 3 interface.
Context
l A static route includes the following items:

Destination IP address: It is used to identify the destination address or destination

network of an IP packet.
Subnet mask: The subnet mask is used with the destination IP address to identify the
subnet address of the destination network. The subnet mask must be successive. It is
expressed in either the dotted decimal format or the count of consecutive "1"s.
Transmit interface: It specifies the interface for IP packet forwarding.
IP address of the next hop: It indicates the IP address of the next router through which
an IP packet passes.
Route priority: When there are multiple routes with different priorities to the same
destination, the route with the highest priority is the currently valid route. The default
priority of a static route is 60.
l When configuring a static route, specify the transmit interface or the next hop IP address
if necessary. In the case a port supporting ARP or a port connecting to a point-to-point
network, the destination IP address is in the network that connects to the port directly. In
this case, you need to specify the transmit interface.
l A route with the destination IP address and network mask as 0.0.0.0 is the default route. If
a matching route is not found in the routing table for an IP packet, the packet is forwarded
through the default route.
Procedure
Step 1 Run the ip route-static command to add a static route.
Step 2 Run the display ip routing-table command to query a static route.
----End
Example
To set up a static route to subnet 10.71.8.0 through gateway 10.71.53.1, do as follows:
huawei(config)#display ip routing-table protocol static
{ <cr>|inactive<K>|verbose<K> }:
Command:
display ip routing-table protocol static
Total static routes configed in Public routing table: 3
Public routing table : Static

Destinations : 3 Routes : 3
Static routing table status : <Active>

Static routing table status : <Inactive>

Destination/Mask Proto Pre Cost NextHop Interface
10.71.8.0/24 Static 60 0 10.71.53.1

10.71.53.0/24 Static 60 0 10.71.8.0
10.71.54.0/24 Static 60 0 10.71.8.0
To configure such a route with the destination IP address and network mask of 0.0.0.0 and the
next ho IP address of 129.102.0.2, do as follows:


huawei(config)#display ip routing-table
{ <cr>|verbose<K>|statistics<K>|protocol<K>|acl<K>|ip-prefix<K>|ip_addr<X.X.X
.X> }:protocol
{ direct<K>|static<K>|ospf<K>|rip<K> }:static
{ <cr>|inactive<K>|verbose<K> }:
Command:
display ip routing-table protocol static
Public routing table : Static
Static routing table status : <Active>

0.0.0.0/0 Static 60 0 10.144.78.1 meth0
Static routing table status : <Inactive>

0.0.0.0/0 Static 60 0 129.102.0.2

10.71.8.0/24 Static 60 0 10.71.53.1
Related Operation
Table 12-5 lists the related operation for adding a static route.
Table 12-5 Related operation for adding a static route

Delete a static route undo ip route-static
12.7 Configuring RIP

This topic describes how to configure RIP.
12.7.1 Enabling the RIP Process

This topic describes how to enable the RIP process.
12.7.2 Configuring the Version of RIP
This topic describes how to configure the version of RIP.
12.7.3 Configuring Zero Field Check for RIP-I Packets
This topic describes how to configure zero field check for RIP-1 packets.
12.7.4 Configuring the Cost of the Default Route
This topic describes how to configure the cost of the default route.
12.7.5 Configuring Route Aggregation
This topic describes how to enable route aggregation.
12.7.6 Specifying Default Routing Metric
This topic describes how to specify the default routing metric.
12.7.7 Importing Routes of Other Protocols

This topic describes how to import routes of other protocols.

12.7.8 Disabling Host Routes Receiving
This operation prohibits the router from receiving host routes. In certain cases, the router can
receive a number of host routes from the same subnet, and these routes cannot be used for route
addressing, but occupy a lot of network resources. In this case, the host routes receiving function
must be disabled.
12.7.9 Configuring the RIP Priority
This topic describes how to configure the RIP priority.
12.7.10 Configuring the Route Filtering Policy
This topic describes how to configure the route filtering policy to filter unnecessary routes.
12.7.11 Verifying the Source IP Address of a RIP Route Update
This topic describes how to verify the source IP address of a RIP route update.
12.7.12 Resetting RIP
This topic describes how to restore the default settings of RIP.
12.7.13 Clearing RIP Process Statistics
This topic describes how to clear RIP process statistics.
12.7.14 Disabling RIP Packet Transmission on a Specified Interface
This topic describes how to disable RIP packet transmission on a specified interface.
12.7.15 Configuring the IP Address of a Peer Router
This topic describes how to configure the IP address of a peer router. In general, RIP packets
are forwarded in broadcast mode. If you want an interface to exchange routing information with
a peer router in unicast mode, enable this function to specify the IP address of the peer router.
12.7.16 Configuring the IP Address of a Summary Route
This topic describes how to configure the IP address of a summary route.
12.7.17 Enabling an Interface to Receive and Transmit RIP Packets
This topic describes how to enable an interface to receive and transmit RIP packets.
12.7.18 Enabling the Split Horizon Function
This topic describes how to enable the split horizon function. After the function is enabled, RIP
does not send the routing information learned from a neighbor router to the neighbor router
again. This avoids creating routing loops.
12.7.19 Enabling the Poison Reverse Function
This topic describes how to enable the poison reverse function.
12.7.20 Configuring the RIP-2 Authentication Mode
This topic describes how to configure the RIP-2 authentication mode.
12.7.21 Configuring the Additional Metric of a Route
This topic describes how to configure the additional metric of a route.
12.7.22 Configuring the RIP Timer
This topic describes how to configure the RIP timer, to improve the RIP performance.
12.7.1 Enabling the RIP Process

This topic describes how to enable the RIP process.

Context
To configure the global parameters of RIP, you need to enable RIP. You do not have to comply
with this, however, when configuring the interface related parameters.
Procedure
Step 1 Run the rip command to start the RIP process.
Step 2 Run the quit command to quit the RIP mode.
Step 3 Run the display rip command to query a RIP route.
----End
Example
To enable RIP process 1, do as follows:
huawei(config)#rip 1
huawei(config)#display rip 1
Public VPN-instance name :
RIP process : 1
RIP version : RIP-1 compatibility
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Hostroutes : Enabled
Maximum number of balanced paths : 1
Update time : 35 sec Age time : 170 sec
Suppress time : 0 sec Garbage-collect time : 240 sec
Silent interfaces : None
Default routes : Disabled
Verify-source : Enabled
Networks : None
Configured peers : None
Triggered updates sent : 0
Number of route changes : 0
Number of replies to queries : 0
Related Operation
Table 12-6 lists the related operation for enabling RIP process.
Table 12-6 Related operation for enabling RIP process
Disable RIP process undo rip
12.7.2 Configuring the Version of RIP

This topic describes how to configure the version of RIP.

Context
l The UA5000 supports packets in two formats: RIP-1 and RIP-2.
l By default, the system transmits and sends packets in the RIP-1 format.
Procedure
Step 1 Run the rip command to enable the RIP process.
Step 2 Run the version command to configure the version of RIP.
Step 4 Run the display rip command to query the version information of RIP.
----End
Example
To set the format of packets to RIP-2, do as follows:
huawei(config-rip-1)#version 2
RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Networks : None
Related Operation
Table 12-7 lists the related operation for configuring the version of RIP.
Table 12-7 Related operation for configuring the version of RIP

Restore the default format of RIP packets in the undo version

system
12.7.3 Configuring Zero Field Check for RIP-I Packets

This topic describes how to configure zero field check for RIP-1 packets.

Context
If the field is not zero, RIP does not process the packet.
Procedure
Step 1 Run the rip command to enable RIP process.
Step 2 Run the checkzero command to configure zero field check for RIP-1 packets.
Step 4 Run the display rip command to query the configuration information about zero field check.
----End
Example
To configure zero field check for RIP-1 packets, do as follows:
huawei(config-rip-1)#checkzero
RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Networks : None
Related Operation
Table 12-8 lists the related operation for configuring zero field check for RIP-1 packets.
Table 12-8 Related operation for configuring zero field check for RIP-1 packets
Disable zero field check for RIP-1 packets undo checkzero
12.7.4 Configuring the Cost of the Default Route

This topic describes how to configure the cost of the default route.

Procedure
Step 1 Run the rip command to enable the RIP process.
Step 2 Run the default-route originate command to create a default route and configure its cost.
Step 4 Run the display rip command to query the configured cost of the default route.
----End
Example
To create a default route and configure its cost to 5, do as follows:
huawei(config-rip-1)#default-route originate cost 5
RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Default routes : Enabled Default route cost : 5
Networks : None
Related Operation
Table 12-9 lists the related operation for configuring the cost of the default route.
Table 12-9 Related operation for configuring the cost of the default route
Delete the default route undo default-route originate
12.7.5 Configuring Route Aggregation

This topic describes how to enable route aggregation.
Context
Route aggregation involves combining routes of different subnets into one route. Route
aggregation helps to reduce the routing traffic in the network and the size of the routing table.

Procedure
Step 2 Run the summary command to enable route aggregation.
Step 4 Run the display rip command to query the configuration of default route aggregation.
----End
Example
To enable the route aggregation, do as follows:
huawei(config-rip-1)#summary
RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Networks : None
Related Operation
Table 12-10 lists the related operation for configuring route aggregation.
Table 12-10 Related operation for configuring route aggregation
Disable route aggregation undo summary
12.7.6 Specifying Default Routing Metric

This topic describes how to specify the default routing metric.
Procedure

Step 2 Run the default-cost command to set the default routing metric.
Step 4 Run the display rip command to query the configuration information about the default routing
metric.
----End
Example
To set the default routing metric as 10, do as follows:
huawei(config-rip-1)#default-cost 10
RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 10
Summary : Enabled
Networks : None
Related Operation
Table 12-11 lists the related operation for specifying the default routing metric.
Table 12-11 Related operation for specifying the default routing metric
Restore the default routing metric undo default-cost
12.7.7 Importing Routes of Other Protocols

This topic describes how to import routes of other protocols.
Context
To enhance the routing function, the UA5000 allows RIP to import routes of other protocols.
By importing routes (including direct routes, static routes and OSPF routes) of other protocols
into RIP packets on a certain metric and sending the RIP packets, the UA5000 improves the
capability of RIP to obtain routes and enhances the performance of RIP.

Procedure
Step 2 Run the import-route command to import routes of other protocols.
----End
Example
To import static routes, do as follows:
huawei(config-rip-1)#import-route static
Related Operation
Table 12-12 lists the related operation for importing routes of other protocols.
Table 12-12 Related operation for importing routes of other protocols

Stop importing routes of other protocols undo import-route
12.7.8 Disabling Host Routes Receiving

This operation prohibits the router from receiving host routes. In certain cases, the router can
receive a number of host routes from the same subnet, and these routes cannot be used for route
addressing, but occupy a lot of network resources. In this case, the host routes receiving function
must be disabled.
Context
By default, receiving host routes is enabled.
Procedure
Step 2 Run the undo host-route command to prohibit the system from receiving other host routes.
Step 4 Run the display rip command to query the configuration information of a host route.
----End
Example
To prohibit the system from receiving other host routes, do as follows:
huawei(config-rip-1)#undo host-route

RIP process : 1
RIP version : RIP-2
Preference : 100
Checkzero : Enabled
Default-cost : 10
Summary : Enabled
Hostroutes : Disabled
Networks : None
Related Operation
Table 12-13 lists the related operation for disabling host routes receiving.
Table 12-13 Related operation for disabling host routes receiving

Receive host routes host-route
12.7.9 Configuring the RIP Priority

This topic describes how to configure the RIP priority.
Context
l Each kind of IGP routing protocol has its own priority. The route policy selects the route
of the routing protocol with the highest priority as the optimal route.
l The greater the priority value, the lower the preference.
l The default RIP priority is 100.
Procedure
Step 2 Run the preference command to set the RIP priority.
Step 4 Run the display rip command to query the configuration information about the RIP priority.
----End
Example
To set the RIP priority as 120, do as follows:

huawei(config-rip-1)#preference 120
RIP process : 1
RIP version : RIP-2
Preference : 120
Checkzero : Enabled
Default-cost : 10
Summary : Enabled
Networks : None
Related Operation
Table 12-14 lists the related operation for configuring the RIP priority.
Table 12-14 Related operation for configuring the RIP priority

Restore the default RIP priority undo preference
12.7.10 Configuring the Route Filtering Policy

This topic describes how to configure the route filtering policy to filter unnecessary routes.
Context
The route filtering can be performed based on the ACL, IP-prefix list of the system, or the IP-
prefix of the VLAN interface. Routes that fail to meet the filtering rules should not be received
or sent.
Procedure
Step 2 Run the filter-policy ip-prefix export static command to configure the route filtering policy.
----End
Example
To filter the transmitted RIP routing updates based on the IP-prefix list abc, do as follows:
huawei(config-rip-1)#filter-policy ip-prefix abc export static

Related Operation
Table 12-15 lists the related operation for configuring the route filtering policy.
Table 12-15 Related operation for configuring the route filtering policy
Delete the route filtering policy undo filter-policy
12.7.11 Verifying the Source IP Address of a RIP Route Update

This topic describes how to verify the source IP address of a RIP route update.
Context
In general, do not disable this function.
Procedure
Step 2 Run the verify-source command to verify the source IP address of a RIP route update.
Step 4 Run the display rip command to query the configuration information.
----End
Example
To enable the verification on the source IP address of a RIP route update, do as follows:
huawei(config-rip-1)#verify-source
RIP process : 1
RIP version : RIP-2
Preference : 120
Checkzero : Enabled
Default-cost : 10
Summary : Enabled
Networks : None

Related Operation
Table 12-16 lists the related operation for verifying the source IP address of a RIP route update.
Table 12-16 Related operation for verifying the source IP address of a RIP route update
Disable the verification function undo verify-source
12.7.12 Resetting RIP

This topic describes how to restore the default settings of RIP.
Procedure
Step 2 Run the reset command to restore the system configuration parameters of the RIP process.
Step 4 Run the display rip command to query the system configuration parameters of the RIP process.
----End
Example
To restore the system configuration parameters of the RIP process, do as follows:
huawei(config-rip-1)#reset
RIP process : 1
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Networks : None
12.7.13 Clearing RIP Process Statistics

This topic describes how to clear RIP process statistics.

Procedure
Run the reset rip statistics command to clear the statistics of the RIP process.
----End
Example
To clear the statistics of RIP process 1, do as follows:
huawei(config)#reset rip 1 statistics
12.7.14 Disabling RIP Packet Transmission on a Specified Interface

This topic describes how to disable RIP packet transmission on a specified interface.
Context
After the RIP packet transmission is disabled on an interface, the interface can still receive and
process RIP packets from other routers.
Procedure
Step 1 Run the interface serial command to enter the configuration mode of the serial port.
Step 2 Run the ip address command to configure the IP address of the serial port.
Step 3 Run the quit command to quit the configuration mode of the serial port.
Step 5 Run the network command to enable the RIP routing for the interface specified in a network
segment.
Step 6 Run the silent-interface command to disable RIP packet transmission on a specified interface.
Step 8 Run the display current-configuration command to query the configuration information about
disabling RIP packet transmission on a specified interface.
----End
Example
To disable the serial port from transmitting RIP packets, do as follows:
huawei(config)#interface serial 0
huawei(config-if-serial0)#ip address 192.0.1.2 24
huawei(config-if-serial0)#quit
huawei(config-rip-1)#silent-interface serial 0
huawei(config)#display current-configuration section rip
[UA5000IPMBV100R017: 11102]
#
[rip]
<rip-1>
rip 1
network 192.0.1.0

silent-interface serial0
#
return
Related Operation
Table 12-17 lists the related operation for disabling RIP packet transmission on a specified
interface.
Table 12-17 Related operation for disabling RIP packet transmission on a specified interface
Restore RIP packet transmission on a undo silent-interface

specified interface
12.7.15 Configuring the IP Address of a Peer Router

This topic describes how to configure the IP address of a peer router. In general, RIP packets
are forwarded in broadcast mode. If you want an interface to exchange routing information with
a peer router in unicast mode, enable this function to specify the IP address of the peer router.
Context
Specifying the peer router enables the peer router to receive the same packet in multicast
(broadcast) and unicast modes. Therefore, when running the peer command, it is recommended
that you change the related interface on the router to the silent mode.
Procedure
Step 2 Run the peer command to specify the IP address of the peer router.
----End
Example
To specify the IP address of the peer router as 10.0.0.1, do as follows:
huawei(config-rip-1)#peer 10.0.0.1
Related Operation
Table 12-18 lists the related operation for configuring the IP address of a peer router.
Table 12-18 Related operation for configuring the IP address of a peer router
Cancel the IP address of a specified peer undo peer

router

12.7.16 Configuring the IP Address of a Summary Route

This topic describes how to configure the IP address of a summary route.
Context
l The summary address is valid only when the classifiable aggregation is disabled.
l When split horizon or poison reverse is enabled, the summary address and the classifiable
aggregation fail. That is, to transmit route aggregation to neighbors, disable split horizon
or poison reverse of the related interface.
Procedure
Step 2 Run the rip summary-address command to configure the IP address of a summary route.
----End
Example
To set the summary IP address of interface VLAN 2 as 10.0.0.0, do as follows:
huawei(config-if-vlanif2)#rip summary-address 10.0.0.0 255.255.255.0
Related Operation
Table 12-19 lists the related operation for configuring a summary route IP address.
Table 12-19 Related operation for configuring a summary route IP address
Cancel the specified summary route IP undo rip summary-address

address
12.7.17 Enabling an Interface to Receive and Transmit RIP Packets

This topic describes how to enable an interface to receive and transmit RIP packets.
Context
By default, an interface is enabled to receive and transmit RIP packets.
Procedure

Step 2 Run the rip input (rip output) command to enable the interface to receive and transmit RIP
packets.
----End
Example
To enable interface VLAN 2 to receive RIP packets, do as follows:
huawei(config-if-vlanif2)#rip input
To allow interface VLAN 2 to transmit RIP packets, do as follows:

huawei(config-if-vlanif2)#rip output
Related Operation
Table 12-20 lists the related operations for enabling an interface to receive and transmit RIP
packets.
Table 12-20 Related operations for enabling an interface to receive and transmit RIP packets
Prevent an interface from transmitting undo rip output

RIP packets
Prevent an interface from receiving RIP undo rip input

packets
12.7.18 Enabling the Split Horizon Function

This topic describes how to enable the split horizon function. After the function is enabled, RIP
does not send the routing information learned from a neighbor router to the neighbor router
again. This avoids creating routing loops.
Context
l By default, the split horizon function is enabled.
l The split horizon and poison reserve functions cannot be enabled at the same time.
Procedure
Step 2 Run the rip split-horizon command to enable the split horizon function.
----End
Example
To enable the RIP split horizon function, do as follows:

huawei(config-if-vlanif2)#rip split-horizon
Related Operation
Table 12-21 lists the related operation for enabling the split horizon function.
Table 12-21 Related operation for enabling the split horizon function
Disable the split horizon undo rip split-horizon

function
12.7.19 Enabling the Poison Reverse Function

This topic describes how to enable the poison reverse function.
Context
The split horizon and poison reserve functions cannot be enabled at the same time.
Procedure
Step 2 Run the rip poison-reverse command to enable the poison reverse function.
----End
Example
To enable the RIP poison reverse function, do as follows:
huawei(config-if-vlanif2)#rip poison-reverse
NOTE
After the function is enabled, if a route breaks down but is still kept in RIP packets, the route is configured
as infinite, that is, the routing metric is set as 16. The poison reverse function avoids creating routing loops
among multiple routers.
Related Operation
Table 12-22 lists the related operation for enabling the poison reverse function.
Table 12-22 Related operation for enabling the poison reverse function
Disable the poison reverse undo rip poison-reverse

function

12.7.20 Configuring the RIP-2 Authentication Mode

This topic describes how to configure the RIP-2 authentication mode.
Context
RIP-2 supports two authentication modes: plain text authentication and MD5 encrypted text
authentication.
l The plain text authentication does not ensure security. The authentication key, which is not
encrypted, is sent together with the packet.
l MD5 encrypted text authentication ensures security. The authentication key is first
encrypted and then sent. MD5 encrypted text authentication has two formats: one is a
common packet format and the other is a non-standard packet format.
Procedure
Step 2 Run the rip authentication-mode command to configure the RIP-2 authentication mode.
----End
Example
To configure the RIP-2 authentication mode as the plain text mode and password as huawei, do
as follows:
huawei(config-if-vlanif2)#rip authentication-mode simple huawei
Related Operation
Table 12-23 lists the related operation for configuring the RIP-2 authentication mode.
Table 12-23 Related operation for configuring the RIP-2 authentication mode
Disable the RIP authentication undo rip authentication-mode
12.7.21 Configuring the Additional Metric of a Route

This topic describes how to configure the additional metric of a route.
Context
By default, the metric of a route is as follows:
l The input metric is 0.

l The output metric is 1.

Procedure
Step 2 Run the rip metricin (rip metriout) command to configure the additional metric when the
interface receives or transmits the RIP packets.
----End
Example
To configure the added metric when the interface receives the RIP packets as 5, do as follows:
huawei(config-if-vlanif2)#rip metricin 5
To configure the added metric when the interface transmits the RIP packets as 5, do as follows:
huawei(config-if-vlanif2)#rip metriout 5
Related Operation
Table 12-24 lists the related operations for configuring the additional metric of a route.
Table 12-24 Related operations for configuring the additional metric of a route
Restore the default added metric undo rip metricin

when the interface receives the RIP
packets
Restore the default added metric undo rip metricout

when the interface transmits the RIP
packets
12.7.22 Configuring the RIP Timer

This topic describes how to configure the RIP timer, to improve the RIP performance.
Context
By default:
l The interval for sending updates is 30s.
l The route expiration time is 180s.
l The suppression time is 0s.
l The aging time of the route in the route table (garbage-collect time defined in the standard)
is 120s.
In general, do not change the default values of the timer.
The suppression time must be set to 0. Otherwise, the system prompts "Suppress time will not
take effect in system."

Procedure
Step 2 Run the timers rip command to configure the RIP timer.
Step 4 Run the display rip command to query the configuration information about the RIP timer.
----End
Example
To set the interval for sending updates as 35s, route expiration time as 170s, suppression time
as 0s and garbage-collect time as 240s, do as follows:
RIP process : 1
Preference : 100
Checkzero : Enabled
Default-cost : 0
Summary : Enabled
Silent interfaces :
vlanif7
Networks :
192.0.1.0
Configured peers :
10.0.0.1
Related Operation
Table 12-25 lists the related operation for configuring the RIP timer.
Table 12-25 Related operation for configuring the RIP timer

Restore the default RIP timer configuration undo timers rip
12.8 Configuring OSPF

This topic describes how to configure Open Shortest Path First (OSPF).
12.8.1 Enabling the OSPF Process

This topic describes how to enable the OSPF process.

12.8.2 Entering OSPF Area Configuration Mode
This topic describes how to enter the OSPF area configuration mode.
12.8.3 Configuring Subnets for an Area
This topic describes how to configure the interface running OSPF and the area to which the
interface belongs.
12.8.4 Configuring DR Priority
This topic describes how to configure the designated router (DR) priority. To reduce the OSPF
packet traffic in the network segment, a router is specified as the DR and another router is
specified as the backup designated router (BDR) according to the interface DR priority.
12.8.5 Configuring the OSPF Stub Area
This topic describes how to configure an area as an OSPF stub area and set the attributes of the
area.
12.8.6 Configuring an NBMA Adjacent Router
This topic describes how to configure a router adjacent to the NBMA interface. Because the
adjacent route cannot be found by broadcasting Hello packets in the NBMA network, you need
to specify the adjacent router.
12.8.7 Setting the OSPF Priority
This topic describes how to set the OSPF priority. The problem of route sharing and selection
among the routing protocols occurs because multiple dynamic routing protocols may run on one
router. The system sets a priority for each routing protocol. When different protocols find
different routes reaching the same destination, the route found by the routing protocol with the
highest priority is the currently valid route.
12.8.8 Disabling OSPF Packet Transmission on an Interface
This topic describes how to prohibit an interface from transmitting OSPF packets. This enhances
the network adaptability of OSPF and reduces the consumption of system resources.
12.8.9 Configuring the Maximum Number of OSPF Routes
This topic describes how to configure the maximum number of OSPF routes.
12.8.10 Enabling the OSPF Logging Function
This topic describes how to enable the OSPF logging function.
12.8.1 Enabling the OSPF Process

This topic describes how to enable the OSPF process.
Context
l By default, OSPF is disabled.
l To configure the related parameters, you need to enable OSPF.
l The system supports the configuration of only one OSPF process at the same time.
Procedure
Step 1 Run the ospf command to start the OSPF process.
Step 2 Run the quit command to quit the OSPF mode.

Step 3 Run the display ospf command to query the OSPF process.
----End
Example
To enable OSPF process 1, do as follows:
huawei(config)#ospf 1
huawei(config)#display ospf brief
OSPF Process 1 with Router ID 10.144.78.141

OSPF Protocol Information
RouterID: 10.144.78.141 Border Router:

Route Tag: 0
Multi-VPN-Instance is not enabled
Spf-schedule-interval: 5
Default ASE parameters: Metric: 1 Tag: 1 Type: 2
Route Preference: 10
ASE Route Preference: 150
SPF Computation Count: 0
RFC 1583 Compatible
Retransmission limitation is disabled
Area Count: 0 Nssa Area Count: 0
ExChange/Loading Neighbors: 0
Related Operation
Table 12-26 lists the related operation for enabling the OSPF process.
Table 12-26 Related operation for enabling the OSPF process
Disable the OSPF process undo ospf
12.8.2 Entering OSPF Area Configuration Mode

This topic describes how to enter the OSPF area configuration mode.
Context
l OSPF divides the AS into different areas. Routing information is transmitted between the
areas through the ABRs, which are located at the borders of the areas. This helps to reduce
the number of OSPF packets in the network, thus improving the performance of OSPF.
l If the specified area does not exist, the system first creates the area and then enters the area
configuration mode.
l You can use an integer or an IP address to identify an area. The area ID is expressed only
in the IP address format.
l When an area ID is an integer, the system automatically converts the integer into an IP
address.

Procedure
Step 1 Run the ospf to start the OSPF process.
Step 2 Run the area command to create an area and enter the configuration mode of the area.
----End
Example
To create area 1 and enter the area configuration mode, do as follows:
huawei(config-ospf-1-area-0.0.0.1)#
Related Operation
Table 12-27 lists the related operation for entering the OSPF area configuration mode.
Table 12-27 Related operation for entering the OSPF area configuration mode
Delete an area undo area
12.8.3 Configuring Subnets for an Area

This topic describes how to configure the interface running OSPF and the area to which the
interface belongs.
Context
Wildcard-mask in the network command is the reverse of the IP address, that is, the mask of
the IP address is reserved (0 changed to 1 and 1 changed to 0). "1" indicates that the digit in the
IP address is omitted and "0" indicates that the digit must be reserved.
Procedure
Step 3 Run the network command to configure the interface running OSPF and the area to which the
interface belongs.
----End
Example
To configure the subnet 192.1.1.0 for the interface running OSPF, do as follows:

Related Operation
Table 12-28 lists the related operation for configuring subnets for an area.
Table 12-28 Related operation for configuring subnets for an area

Delete the interface running OSPF undo network
12.8.4 Configuring DR Priority

This topic describes how to configure the designated router (DR) priority. To reduce the OSPF
packet traffic in the network segment, a router is specified as the DR and another router is
specified as the backup designated router (BDR) according to the interface DR priority.
Prerequisite
You must run the network command to configure the interface to run the OSPF protocol and
the area to which the interface belongs.
Context
l OSPF does not support configuring the DR priority for interface NULL.
l The DR is for broadcast or NBMA type interfaces. The interfaces of p2p and p2mp network
types do not need DR election.
l Before the DR priority is configured, the IP address of the layer 3 interface must be in an
OSPF domain.
Procedure
Step 2 Run the ospf dr-priority command to set the DR priority.
Step 3 Run the display ospf interface command to query the DR priority.
----End
Example
To configure the DR priority for interface VLANIF 2 as 8, do as follows:
huawei(config)#display ospf interface vlanif 2

Interfaces
Interface: 192.1.1.1 (vlanif2)

Cost: 1 State: Down Type: Broadcast MTU: 1500

Priority: 8
Designated Router: 0.0.0.0
Backup Designated Router: 0.0.0.0
Timers: Hello 10 , Dead 40 , Poll 120 , Retransmit 5 , Transmit Delay 1
12.8.5 Configuring the OSPF Stub Area

This topic describes how to configure an area as an OSPF stub area and set the attributes of the
area.
Procedure
Step 3 Run the stub command to configure the OSPF stub area.
----End
Example
To configure OSPF area 1 as a stub area, do as follows:
huawei(config-ospf-1-area-0.0.0.1)#stub
Related Operation
Table 12-29 lists the related operations for configuring a stub area.
Table 12-29 Related operations for configuring a stub area

Delete a stub area undo stub
Configure (delete) a stub router (undo)stub-router
12.8.6 Configuring an NBMA Adjacent Router

This topic describes how to configure a router adjacent to the NBMA interface. Because the
adjacent route cannot be found by broadcasting Hello packets in the NBMA network, you need
to specify the adjacent router.
Context
l By default, the priority for NBMA interface adjacent router is 1.
l Up to 128 adjacent routers can be configured in a process.
Procedure

Step 2 Run the peer command to configure an NBMA adjacent router.
----End
Example
To configure the IP address of the NBMA adjacent router as 1.1.1.1 and specify the DR priority
as 120, do as follows:
huawei(config-ospf-1)#peer 1.1.1.1 dr-priority 120
Related Operation
Table 12-30 lists the related operation for configuring an NBMA adjacent router.
Table 12-30 Related operation for configuring an NBMA adjacent router

Cancel the configuration of the undo peer

NBMA adjacent router
12.8.7 Setting the OSPF Priority

This topic describes how to set the OSPF priority. The problem of route sharing and selection
among the routing protocols occurs because multiple dynamic routing protocols may run on one
router. The system sets a priority for each routing protocol. When different protocols find
different routes reaching the same destination, the route found by the routing protocol with the
highest priority is the currently valid route.
Context
l The OSPF priority ranges from 1 to 255.
l By default, the OSPF priority is 10.
Procedure
Step 2 Run the preference command to set the OSPF priority.
Step 3 Run the display ospf interface command to query the OSPF priority.
----End
Example
To set the OSPF priority as 12, do as follows:
huawei(config-ospf-1)#preference 12
huawei(config)#display ospf brief

OSPF Protocol Information
RouterID: 192.0.2.3 Border Router:

Route Tag: 0
Multi-VPN-Instance is not enabled
Applications Supported: MPLS Traffic-Engineering
Spf-schedule-interval: 5
Default ASE parameters: Metric: 1 Tag: 1 Type: 2
Route Preference: 12
ASE Route Preference: 150
SPF Computation Count: 2
Retransmission limitation is disabled
Area Count: 0 Nssa Area Count: 0
ExChange/Loading Neighbors: 0
Related Operation
Table 12-31 lists the related operation for setting the OSPF priority.
Table 12-31 Related operation for setting the OSPF priority

Restore the default OSPF priority undo preference
12.8.8 Disabling OSPF Packet Transmission on an Interface

This topic describes how to prohibit an interface from transmitting OSPF packets. This enhances
the network adaptability of OSPF and reduces the consumption of system resources.
Context
After the transmission is disabled on an interface, the interface is in the silent state. The interface
can still advertise its direct route. The OSPF Hello packets of the interface, however, are blocked,
and no adjacency can be set up on the interface.
Procedure
Step 2 Run the silent-interface command to disable OSPF packet transmission on the interface.
----End
Example
To prohibit interface VLAN 7 from transmitting OSPF packets, do as follows:
huawei(config-ospf-1)#silent-interface vlanif 7
Related Operation
Table 12-32 lists the related operation for prohibiting an interface from transmitting OSPF
packets.

Table 12-32 Related operation for prohibiting an interface from transmitting OSPF packets
Allow an interface to send undo silent-interface By default, the system

OSPF packets allows an interface to send
OSPF packets.
12.8.9 Configuring the Maximum Number of OSPF Routes

This topic describes how to configure the maximum number of OSPF routes.
Context
By default, the maximum numbers of OSPF routes are as follows:
l Intra-area routes: 100000

l Inter-area routes: 100000
l External routes: 5000000
Procedure
Step 2 Run the maximum-routes command to configure the maximum number of OSPF routes.
----End
Example
To configure the maximum number of OSPF routes to 500, do as follows:
huawei(config-ospf-1)#maximum-routes intra 500
Related Operation
Table 12-33 lists the related operation for configuring the maximum number of OSPF routes.
Table 12-33 Related operation for configuring the maximum number of OSPF routes
Restore the default setting of OSPF undo maximum-routes

routes
12.8.10 Enabling the OSPF Logging Function

This topic describes how to enable the OSPF logging function.

Procedure
Step 2 Run the enable log command to enable the log information.
----End
Example
To enable the logging function of OSPF, do as follows:
huawei(config-ospf-1)#enable log config
Related Operation
Table 12-34 lists the related operation for enabling the OSPF logging function.
Table 12-34 Related operation for enabling the OSPF logging function
Disable the logging function of undo enable log

OSPF
12.9 Configuring OSPF on a VLAN Interface

This topic describes how to configure OSPF on a VLAN interface.
12.9.1 Configuring the Network Type of an OSPF Interface

This topic describes how to configure the network type of an OSPF interface.
12.9.2 Configuring OSPF Cost
This topic describes how to configure the cost of the interface on which the OSPF runs.
12.9.3 Configuring OSPF Packet Authentication
This topic describes how to configure OSPF packet authentication.
12.9.4 Configuring the MTU of a DD Packet
This topic describes how to configure the maximum transmission unit (MTU) of a database
description (DD) packet.
12.9.1 Configuring the Network Type of an OSPF Interface

This topic describes how to configure the network type of an OSPF interface.
Context
OSPF supports four network types. By default, the network type of an interface is determined
by the physical interface. For details, see "Table 12-35."

Table 12-35 Description of the network types
Network Description Default

Type
Broadcast Broadcast is the default network type. The default network type of
an Ethernet port is broadcast.
NBMA Non-Broadcast Multi-Access. This type of The default network type of

network is fully connected, non-broadcast, and an ATM interface is NBMA.
multi-access. The Asynchronous Transfer
Mode (ATM) network is of this type.
p2mp Point-to-Multipoint -
p2p Point-to-Point The default network type of

a serial port is P2P.
Procedure
Step 2 Run the ospf network-type command to configure the network type.
----End
Example
Assume that Ethernet port 0/3/0 is in VLAN 2. To configure the network type of the port as P2P,
do as follows:
huawei(config-vlanif-2)#ospf network-type p2p
Related Operation
Table 12-36 lists the related operation for configuring the network type on an OSPF interface.
Table 12-36 Related operation for configuring the network type on an OSPF interface
Restore the default network type of the undo ospf network-type

OSPF interface
12.9.2 Configuring OSPF Cost

This topic describes how to configure the cost of the interface on which the OSPF runs.

Procedure
Step 2 Run the ospf cost command to configure the cost of the interface on which the OSPF runs.
----End
Example
To configure the cost of the interface on which the OSPF runs as 5, do as follows:
huawei(config-vlanif2)#ospf cost 5
Related Operation
Table 12-37 lists the related operation for configuring the cost of the interface on which the
OSPF runs.
Table 12-37 Related operation for configuring the cost of the interface on which the OSPF runs
Command...
Restore the default cost undo ospf cost By default, the system calculates the cost
needed for the interface on which the OSPF
runs. The cost is calculated according to the
current baud rate of the interface.
12.9.3 Configuring OSPF Packet Authentication

This topic describes how to configure OSPF packet authentication.
Context
l OSPF supports plain text authentication or MD5/HMAC-MD5 encrypted text
authentication so that adjacent routes can transmit OSPF packets.
l By default, the interface is not configured with any authentication mode.
Procedure
Step 2 Run the ospf authentication-mode command to configure OSPF packet authentication.
----End
Example
To configure the OSPF authentication as plain text authentication and the authentication
password as "huawei", do as follows:

huawei(config-if-vlanif2)#ospf authentication-mode simple huawei
Related Operation
Table 12-38 lists the related operation for configuring OSPF packet authentication.
Table 12-38 Related operation for configuring OSPF packet authentication

Delete the configured authentication mode undo ospf authentication-mode

and key
12.9.4 Configuring the MTU of a DD Packet

This topic describes how to configure the maximum transmission unit (MTU) of a database
description (DD) packet.
Context
l After the adjacency is set up between two routers, the routers begin to transmit DD packets
to each other to exchange the routing information.
l By default, the MTU field in DD packets is 0. That is, the interface does not fill in the MTU
field when transmitting the DD packets.
Procedure
Step 2 Run the ospf mtu-enable command to enable the MTU check in DD packets.
----End
Example
To configure interface vlanif 2 to fill in the MTU field when the interface is transmitting DD
packets, do as follows:
huawei(config-if-vlanif2)#ospf mtu-enable
Related Operation
Table 12-39 lists the related operation for configuring the MTU of a DD packet.
Table 12-39 Related operation for configuring the MTU of a DD packet

Restore the default setting for the interface undo ospf mtu-enable
when it is transmitting DD packets

12.10 Configuring the OSPF Timer

This topic describes how to configure the OSPF timer.
12.10.1 Setting the Interval for Sending Hello Packets
This topic describes how to set the interval for sending Hello packets. The OSPF router transmits
Hello packets periodically to find the adjacent router, maintain adjacency, and elect the DR and
BDR.
12.10.2 Setting the Dead Time Between Adjacent Routers
This topic describes how to set the dead time between adjacent routers. If a router fails to receive
any Hello packet from an adjacent router within the dead time, the adjacent router is considered
as unavailable.
12.10.3 Setting the Poll Interval of Hello Packets
This topic describes how to set the poll interval of Hello packets.
12.10.4 Setting the LSA Transmit Delay
This topic describes how to set the link state advertisement (LSA) transmit delay.
12.10.5 Setting the LSA Retransmit Interval
This topic describes how to set the LSA retransmit interval.
12.10.6 Setting the SPF Calculation Interval for OSPF
This topic describes how to set the SPF calculation interval for OSPF.
12.10.1 Setting the Interval for Sending Hello Packets

This topic describes how to set the interval for sending Hello packets. The OSPF router transmits
Hello packets periodically to find the adjacent router, maintain adjacency, and elect the DR and
BDR.
Context
l By default, the interval for P2P and broadcast interfaces to send Hello packets is 10s and
the interval for P2MP and NBMA interfaces to send Hello packets is 30s.
l The intervals for network neighbors to send Hello packets must be consistent with each
other.
l The interval for sending Hello packets is in inversely proportional to the route convergence
speed and network load.
l After the network type of an interface is modified, the interval for sending Hello packets
is restored to the default value.
Procedure
Step 2 Run the ospf timer hello command to set the interval for sending Hello packets.
----End
Example
To set the interval for sending OSPF Hello packet to 15s, do as follows:

huawei(config-if-vlanif2)#ospf timer hello 15
Related Operation
Table 12-40 lists the related operation for setting the interval for sending Hello packets.
Table 12-40 Related operation for setting the interval for sending Hello packets
Restore the default interval for sending undo ospf timer hello
Hello packets
12.10.2 Setting the Dead Time Between Adjacent Routers

This topic describes how to set the dead time between adjacent routers. If a router fails to receive
any Hello packet from an adjacent router within the dead time, the adjacent router is considered
as unavailable.
Context
l By default, the dead time between adjacent routers on P2P and broadcast interfaces is 40s
and the dead time between adjacent routers on P2MP and NBMA (non-broadcast) interfaces
is 120s.
l The value of the dead time must be four times greater than the interval for sending Hello
packets.
l After the network type of an interface is modified, the dead time is restored to the default
value.
Procedure
Step 2 Run the ospf timer dead command to set the dead time between adjacent routers.
----End
Example
To set the dead time between adjacent routers to 60s, do as follows:
huawei(config-if-vlanif2)#ospf timer dead 60
Related Operation
Table 12-41 lists the related operation for setting the dead time between adjacent routers.

Table 12-41 Related operation for setting the dead time between adjacent routers
Restore the default dead time undo ospf timer dead
12.10.3 Setting the Poll Interval of Hello Packets

This topic describes how to set the poll interval of Hello packets.
Context
l In the NBMA network, after the adjacent router fails, a router transmits Hello packets to
the failed router at the poll intervals of Hello packets.
l The poll interval of Hello packets must equal to or four times greater than the interval for
sending Hello packets.
l By default, the poll interval of Hello packets is 120s.
Procedure
Step 2 Run the ospf timer poll command to set the poll interal of Hello packets.
----End
Example
To set the poll interval of Hello packets to 60s, do as follows:
huawei(config-if-vlanif2)#ospf timer poll 60
Related Operation
Table 12-42 lists the related operation for setting the poll interval of Hello packets.
Table 12-42 Related operation for setting the poll interval of Hello packets
Restore the default poll interval undo ospf timer poll
12.10.4 Setting the LSA Transmit Delay

This topic describes how to set the link state advertisement (LSA) transmit delay.

Context
l The LSA describes the interface status and the adjacency status of a router. The LSA ages
if it is saved in the link state database (LSDB) of the local router. The LSA, however, does
not age in the process of network transmission.
l To ensure the validity of the LSA, it is necessary to add the LSA transmit delay to the aging
time before transmission. This configuration is very important for low speed networks.
l By default, the LSA transmit delay is 1s.
Procedure
Step 2 Run the ospf trans-delay command to set the LSA transmit delay.
----End
Example
To set the LSA transmit delay as 10s, do as follows:
huawei(config-if-vlanif2)#ospf trans-delay 10
Related Operation
Table 12-43 lists the related operation for setting the LSA transmit delay.
Table 12-43 Related operation for setting the LSA transmit delay
Restore the default LSA transmit delay undo ospf trans-delay
12.10.5 Setting the LSA Retransmit Interval

This topic describes how to set the LSA retransmit interval.
Context
l When a router sends an LSA to its neighbors, it waits for an ACK from them. If no ACK
is received from the neighbors within the retransmit interval, the router resends an LSA to
the neighbors.
l If the LSA retransmit interval on an interface is very small, it may lead to unnecessary
retransmission. If the LSA retransmit interval is very large, it affects the flooding speed in
the case of packet loss.
l By default, the LSA retransmit interval is 5s.
Procedure

Step 2 Run the ospf timer retransmit command to set the LSA retransmit interval.
----End
Example
To set the LSA retransmit interval as 8s, do as follows:
huawei(config-if-vlanif2)#ospf timer retransmit 8
Related Operation
Table 12-44 lists the related operation for setting the LSA retransmit interval.
Table 12-44 Related operation for setting the LSA retransmit interval
Restore the default LSA retransmit undo ospf timer retransmit

interval
12.10.6 Setting the SPF Calculation Interval for OSPF

This topic describes how to set the SPF calculation interval for OSPF.
Context
l When the LSDB of OSPF changes, the shortest path must be recalculated.
l If the shortest path is calculated when any change takes place, a lot of resources are occupied
and the operation efficiency of the router is affected. Adjusting the SPF calculation interval
can restrain the resource (routers and bandwidth) consumption due to frequent network
changes.
l By default, the SPF recalculation interval is 5s.
Procedure
Step 2 Run the spf-schedule-interval command to set the SPF calculation interval for OSPF.
----End
Example
To set the SPF calculation interval as 10s, do as follows:
huawei(config-ospf-1)#spf-schedule-interval 10
Related Operation
Table 12-45 lists the related operation for setting the SPF calculation interval for OSPF.

Table 12-45 Related operation for setting the SPF calculation interval for OSPF
Restore the default SPF calculation undo spf-schedule-interval

interval
12.11 Configuring Route Aggregation

This topic describes how to configure route aggregation.
12.11.1 Configuring Route Aggregation Between Areas

This topic describes how to configure route aggregation between areas. The area border router
(ABR) summarizes all the routes with the same prefix to a routing entry and then sends it to
other areas, to reduce the broadcast routing information.
12.11.2 Configuring the Aggregation of Routes Imported by OSPF
This topic describes how to configure the aggregation of routes imported by OSPF.
12.11.1 Configuring Route Aggregation Between Areas

This topic describes how to configure route aggregation between areas. The area border router
(ABR) summarizes all the routes with the same prefix to a routing entry and then sends it to
other areas, to reduce the broadcast routing information.
Context
l By default, the ABR does not summarize routes between areas.
l One area can be configured with multiple aggregation network segments.
l The route aggregation is valid when it is configured on an ABR.
Procedure
Step 3 Run the network command to configure the interface on which the OSPF protocol runs and the
area to which the interface belongs.
Step 4 Run the abr-summary command to configure route aggregation between areas.
----End
Example
To summarize the routes in the two network segments 20.20.10.0 and 20.20.20.0 in OSPF area
1 as one routing entry 20.20.0.0 and send it to other areas, do as follows:
huawei(config-ospf-1-area-0.0.0.1#abr-summary 20.20.0.0 255.255.0.0

Related Operation
Table 12-46 lists the related operation for configuring route aggregation between areas.
Table 12-46 Related operation for configuring route aggregation between areas
Disable the route aggregation undo abr-summary

between areas
12.11.2 Configuring the Aggregation of Routes Imported by OSPF

This topic describes how to configure the aggregation of routes imported by OSPF.
Context
OSPF supports the aggregation of imported routes. By default, the aggregation of imported
routes is disabled.
Procedure
Step 1 Run the ospf command to start the OSPF process.
Step 2 Run the asbr-summary command to summarize the routes with the same prefix.
----End
Example
To configure the aggregation of routes with the same prefix of 10.2, do as follows:
huawei(config-ospf-1)#asbr-summary 10.2.0.0 255.255.0.0
Related Operation
Table 12-47 lists the related operation for configuring the aggregation of routes imported by
OSPF.
Table 12-47 Related operation for configuring the aggregation of routes imported by OSPF
Disable the aggregation of routes undo asbr-summary

imported by OSPF
12.12 Configuring OSPF Route Import

This topic describes how to configure OSPF route import.

12.12.1 Importing Routes from Other Protocols into OSPF

This topic describes how to import routes from other protocols into OSPF.
12.12.2 Configuring the Default Parameters of OSPF Imported Routes
This topic describes how to configure the default parameters of OSPF imported routes.
12.12.1 Importing Routes from Other Protocols into OSPF

This topic describes how to import routes from other protocols into OSPF.
Context
l Because of the OSPF feature, the route found by other routing protocols is processed as the
routing information outside the AS. The protocol types of routes that OSPF can import are
RIP, direct routes and static routes.
l By default, importing of routes from other protocols in to OSPF is disabled.
Procedure
Step 2 Run the import-route rip command to import routes from other protocols into OSPF.
----End
Example
To specify the imported RIP route as a type 2 external route, the route label as 33, and the cost
as 50, do as follows:
huawei(config-ospf-1)#import-route rip 40 type 2 tag 33 cost 50
Related Operation
Table 12-48lists the related operation for importing routes from other protocols into OSPF.
Table 12-48 Related operation for importing routes from other protocols into OSPF
Cancel the imported route from undo import-route rip

other protocols
12.12.2 Configuring the Default Parameters of OSPF Imported

Routes
This topic describes how to configure the default parameters of OSPF imported routes.
Context
By default, the cost of an imported route is 10. The type of the imported route is 2. The upper
limit of the imported external routes is 1000 at a time. The label value is 10.

Procedure
Step 2 Run the default command to configure the default parameters of OSPF imported routes.
----End
Example
Assume the following: The upper limit of the default imported external routes is 100. The default
cost for OSPF to receive external routes is 8. The default label for OSPF to accept external routes
is 8. The default type of imported routes is 1. To configure the OSPF imported routes, do as
follows:
huawei(config-ospf-100)#default cost 8 type 1 tag 8 limit 100
Related Operation
Table 12-49 lists the related operation for configuring the default parameters of OSPF imported
routes.
Table 12-49 Related operation for configuring the default parameters of OSPF imported routes
Restore the default cost for OSPF to import external undo default cost
routes
12.13 Configuring the Route Filtering Policy

This topic describes how to configure the route filtering policy. You can perform this operation
when you want to filter unnecessary routes.
Context
l Routing filtering can be based on an access control list (ACL) or an address prefix. Routes
that do not meet the filtering rules should not be received or sent.
l By default, the OSPF route filtering is disabled.
Procedure
Step 1 Run the acl command to create an ACL.
Step 2 Run the rule command to configure the ACL rule.
Step 3 Run the filter-policy import command to filer the received routing information.
----End
Example
To filter the routing information according to the rules specified by ACL 2000, do as follows:

huawei(config-acl-basic-2000)#rule permit source 192.168.0.1 0
huawei(config-ospf-1)#filter-policy 2000 import
Related Operation
Table 12-50 lists the related operation for configuring the route filtering policy.
Table 12-50 Related operation for configuring the route filtering policy
Delete the route filtering policy undo filter-policy
12.14 Querying and Debugging OSPF

This topic describes how to query the OSPF running status after it is configured, to verify the
configuration effect.
Context
Table 12-51 lists the commands for querying and debugging OSPF.
Table 12-51 Commands for querying and debugging OSPF
Query the information display ospf [ process-id ] brief

about the OSPF routing
process
Query OSPF statistics display ospf [ process-id ] cumulative
Query the LSDB display ospf [ process-id ] lsdb [ { brief | [ { router | network |
information about summary | asbr | nssa| opaque-link | opaque-area | opaque-as }
OSPF link-state-id ] [ originate-routeradvertising-router-id | self-
originate ] } ]
Query the OSPF display ospf [ process-id ] peer [ meth interface-number |

neighbor information vlanifinterface-number ] [ ip-address ]
Query the OSPF next display ospf [ process-id ] nexthop

hop information
Query the information display ospf [ process-id ] routing [ interface interface-type

about the OSPF routing interface-number ] [ nexthop nexthop-address ]
table
Query OSPF request list display ospf [ process-id ] request-queue [ interface-type

interface-number ] [neighbor-id ]

Query the OSPF display ospf [ process-id ] retrans-queue [ meth interface-

retransmission list number | vlanifinterface-number ] [ ip-address ]
Query the information display ospf [ process-id ] abr-asbr

about OSPF ABR and
autonomous system
boundary router
(ASBR)
Query OSPF interface display ospf [ process-id ] interface [ all | interface-typeinterface-

information number ]
Query OSPF errors display ospf [process-id ] error
Query OSPF ASBR display ospf [ process-id ] asbr-summary [ ip-address mask ]

aggregation
Configure the (undo)debugging ospf [ process-id ] packet [ ack | dd | hello |

debugging of OSPF request | update ] [ filter { src | nbr } { acl-number | prefixprefix-
packets list-name } ]
Configure the (undo)debugging ospf [ process-id ] event

debugging of OSPF
events
Configure the (undo)debugging ospf [ process-id ] lsa-originate

debugging of OSPF
LSA packets
Configure the debugging ospf [ process-id ] spf { all | brief | intra }

debugging of OSPF (undo)debugging ospf [ process-id ] spf { asbr-summary | ase |
SPF net-summary | nssa } [ filter { acl acl-number | ip-prefixprefix-
list-name } ]
12.15 Configuring an Address Prefix List

This topic describes how to configure an address prefix list.
Context
l The address prefix list is used to filter IP addresses. An address prefix list contains multiple
entries. Each entry specifies an address prefix range. The relationship between inter entries
is "or". That is, if an IP address passes through one entry in the address prefix list, it passes
the filtering of the address prefix list. If the IP address does not pass through any entry, it
means that the IP address does not pass the filtering of the address prefix list.
l The address prefix range consists of two parts: mask-length and [greater-equal-value, less-
equal-value]. If the two parts are specified, the IP address to be filtered must match the
prefix range specified by the two parts.
l If ip -address mask-length is specified as 0.0.0.0 0, the default route is matched.

l If the specified address prefix range is 0.0.0.0 0 less-equal 32, all the routes are matched.
Procedure
Run the ip ip-prefix command to configure an address prefix list.
----End
Example
Assume that: The name of an address prefix list is p1. Its mask length is 17 or 18. The routes in
the network segment 10.0.192.0/8 pass. To configure this address prefix list, do as follows:
huawei(config)#ip ip-prefix
{ string<S><1,19> }: pl
{ index<K>|permit<K>|deny<K> }: permit
{ ip_addr<X.X.X.X> }: 10.0.192.0
{ integer<0,32> }: 8
{ <cr>|greater-equal<K>|less-equal<K> }: greater-equal
{ integer<0,32> }: 17
{ <cr>|less-equal<K> }: less-equal
{ integer<0,32> }: 18
Command:
ip ip-prefix pl permit 10.0.192.0 8 greater-equal 17 less-equal 18
Related Operation
Table 12-52 lists the related operation for configuring an address prefix list.
Table 12-52 Related operation for configuring an address prefix list
Delete an address prefix list undo ip ip-prefix
12.16 Configuring a Route Policy

This topic describes how to configure a route policy.
12.16.1 Defining a Route Policy

This topic describes how to define a route policy.
12.16.2 Defining the If-match Clause of a Route Policy
This topic describes how to define the matching rules, namely, the preconditions for a route to
pass the current route policy, based on the attributes of the route.
12.16.3 Defining the Apply Clause of a Route Policy
This topic describes how to define the apply clause of a route policy.
12.16.1 Defining a Route Policy

This topic describes how to define a route policy.

Context
l Up to 16 route policies can be defined in the system, and each route policy can be configured
with up to 20 nodes.
l A route policy may consist of several nodes, with each node as a unit for the match test.
The node number and the matching order are the same.
l The relationship between nodes of a route policy is OR. The system checks every node of
a route policy. If one node passes the match test, it means that the route policy passes the
match test.
l Each node consists of if-match clauses and apply clauses:
The if-match clause defines the matching rules. The relationship between two if-
match clauses of a node is AND. That is, the match test can be passed only when the
matching requirements of all the if-match clauses of a node are met.
The apply clause specifies the action to be taken when the node match test is performed,
that is, setting certain attributes of the routes.
Parameter Description
Table 12-53 lists the parameters for defining a route policy.
Table 12-53 Parameters for defining a route policy

permit It specifies the matching mode of a node as "permit". When a routing entry
passes a node, the system runs the apply clause of the node without the test
by the next node. If the routing entry fails to pass the filtering, it goes to
the next node for test.
deny It specifies the matching mode of a node as "deny". In this mode, the
apply clause of the node is not executed. When a routing entry meets the
matching requirements of all the if-match clauses of a node, it does not go
to the next node for test. If the routing entry does not meet any requirement
of the if-match clauses of the node, it goes to the next node for test.
Procedure
Step 1 Run the route-policy command to create a route policy and enter the configuration mode of the
route policy.
Step 2 Run the display route-policy command to query the running status of the configured route
policy.
----End
Example
To configure route policy 1 with node number 10 and matching mode "permit", do as follows:
huawei(config)#route-policy policy1 permit node 10
Info: New Sequence of this List !
huawei(config-route-policy)#quit

huawei(config)#display route-policy
{ <cr>|string<S><1,19> }:policy1
Command:
display route-policy policy1
Route-policy : policy1
permit : 10
Related Operation
Table 12-54 lists the related operation for configuring a route policy.
Table 12-54 Related operation for configuring a route policy

Delete the specified undo route-policy By default, no route policy is

route policy defined.
12.16.2 Defining the If-match Clause of a Route Policy

This topic describes how to define the matching rules, namely, the preconditions for a route to
pass the current route policy, based on the attributes of the route.
Context
l By default, no match action is taken.
l The relationship between two if-match clauses of a node is AND. That is, the match test
can be passed only when the matching requirements of all the if-match clauses of the node
are met. After the node match test is performed, the action specified by the apply clause is
taken.
l If no if-match clause is specified, all the routes can pass through the node.
Procedure
Step 1 Run the route-policy command to create a route policy and enter the route policy configuration
mode.
Step 2 Run the if-match ip command to set the filtering rules of routing information.
Step 3 Run the display route-policy command to display the configured route policy.
----End
Example
To set the destination address prefix list p1 for filtering route information, do as follows:
huawei(config)#route-policy 1 permit node 1
Info: New Sequence of this List !
huawei(config-route-policy)#if-match ip next-hop ip-prefix p1
{ <cr>|string<S><1,19> }:1
Command:

display route-policy 1
Route-policy : 1
permit : 1
Match clauses :
if-match ip-prefix p1
Related Operation
Table 12-55 lists the related operation for defining the route policy matching rule.
Table 12-55 Related operation for defining the route policy matching rule
Delete the route policy matching undo if-match ip

rule
12.16.3 Defining the Apply Clause of a Route Policy

This topic describes how to define the apply clause of a route policy.
Context
l The system performs the operation specified by the apply clause to modify the attributes
if a route when the filtering requirements specified by the if-match clause are met.
l By default, no setting is available.
Procedure
Step 1 Run the route-policy command to create a route policy and enter the route policy configuration
mode.
Step 2 Run the if-match command to set the filtering rules of routing information.
Step 3 Run the apply tag command to set the tag of the route information.
Step 4 Run the display route-policy command to display the configured route policy.
----End
Example
To set the routing information tag of the filtered route as 100, do as follows:
huawei(config)#route-policy 1 permit node 1
huawei(config-route-policy)#if-match ip-prefix p1
huawei(config-route-policy)#apply tag 100
{ <cr>|string<S><1,19> }:1
Command:
display route-policy 1
Route-policy : 1
permit : 1
Match clauses :
if-match ip-prefix p1

Apply clauses :
apply tag 100
Related Operation
Table 12-56 lists the related operation for modifying the attributes of the filtered route.
Table 12-56 Related operation for modifying the attributes of the filtered route
Cancel the modification of the undo apply

attributes of the filtered route

Configuration Guide-IPM CLI 13 Configuring RSTP
13 Configuring RSTP
About This Chapter
This topic describes how to configure the RSTP protocol supported by the UA5000.
13.1 Introduction to the RSTP Protocol

This topic describes the Rapid Spanning Tree Protocol (RSTP) and its application on the
UA5000.
13.2 Enabling the RSTP Function
This topic describes how to enable RSTP so that a bridge or a port can remove the redundant
links in the network.
13.3 Setting the RSTP Working Mode
This topic describes how to set the RSTP working mode.
13.4 Setting the Bridge Diameter
This topic describes how to set the bridge diameter of a switching network.
13.5 Configuring the Parameters of a Specified Bridge
This topic describes how to configure the parameters of a specified bridge. The parameters
include: priority, Forward Delay, Hello Time, and MAX Age of the specified bridge.
13.6 Configuring the Parameters of a Specified Port
13.7 Configuring the mCheck Variable
This topic describes how to configure the mCheck variable to allow a port to work in RSTP
mode.
13.8 Clearing the RSTP Statistics
This topic describes how to clear the RSTP statistics.

13 Configuring RSTP Configuration Guide-IPM CLI
13.1 Introduction to the RSTP Protocol

This topic describes the Rapid Spanning Tree Protocol (RSTP) and its application on the
UA5000.
Service Description
Spanning Tree Protocol (STP) applies to the redundant network. It blocks certain redundant
paths through certain algorithms and prunes a loop network into a loop-free tree network. STP
can prevent the proliferation and infinite cycling of packets in the loop network. When a link
becomes faulty, STP can generate a network, which is reachable and free from redundant paths.
RSTP is an improvement of STP. In addition to all the features of the STP, RSTP reduces the
delay in generating a network topology and ensures the connectivity of the network.
The UA5000 supports the applications of STP, RSTP and the RSTP ring network to meet the
requirements for diversified network configurations.
13.2 Enabling the RSTP Function

This topic describes how to enable RSTP so that a bridge or a port can remove the redundant
links in the network.
Prerequisite
The network devices and lines must be normal.
Context
Pay attention to the following points:
l By default, the STP/RSTP function is disabled.
l The RSTP settings take effect only when RSTP is enabled. You can configure the port or
bridge before RSTP is enabled When RSTP is disabled, these settings are saved. When
RSTP is enabled again, the settings take effect.
l After RSTP is enabled for a bridge, it occupies a small amount of network resources. As a
common network contains redundant links, it is recommended that you enable RSTP.
l After RSTP is enabled for a bridge, it is also enabled for all the ports of the bridge. To
effectively control RSTP, you can disable it for a specified Ethernet port, to prevent the
port from attending spanning tree calculation.
Procedure
Step 1 Run the stp enable command or the stp port enable command to enable RSTP for a bridge or
a port.
Step 2 Run the display stp command or the display stp port command and you can find that RSTP is
enabled.
----End

Example
To enable RSTP for a bridge, do as follows:
huawei(config)#stp enable
huawei(config)#display stp
{ <cr>|port<K> }:
Command:
display stp
The bridge is executing the IEEE Rapid Spanning Tree protocol
The bridge diameter is 7
Bridge Priority : 32768 MAC Address : 00e0-fc59-0001
Hello Time: 2 sec Forward Delay: 15 sec Max Age: 20 sec
Root Priority : 32768 MAC Address : 00e0-fc59-0001
Path cost to root bridge is 0
------------------------------------------------------------------
Port F/ S/ P Priority Cost Admin-State Role State Type
------------------------------------------------------------------
9 0/ 2/ 2 128 200000 Enabled Disa - -
10 0/ 2/ 3 128 200000 Enabled Disa - -
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
25 0/ 2/ 0 128 200000 Enabled Disa - -
26 0/ 2/ 1 128 200000 Enabled Disa - -
------------------------------------------------------------------
Related Operation
Table 13-1 lists the related operations for enabling the RSTP function.
Table 13-1 Related operations for enabling the RSTP function
Disable RSTP for a bridge stp disable -
Disable RSTP for a port stp port disable -
Restore the default RSTP setting for a undo stp By default, it is

bridge disabled.
Restore the default RSTP setting for a undo stp port By default, it is
port disabled.
Clear RSTP statistics reset stp statistics -
13.3 Setting the RSTP Working Mode

This topic describes how to set the RSTP working mode.
Context
l There are two RSTP working modes:
RSTP

STP
l RSTP can coexist with STP. If a switching network contains bridges running STP, RSTP
can run in RSTP/STP compatible mode automatically.
l If the network is in good condition, although the bridge running STP is removed, the
corresponding port still runs in RSTP/STP compatible mode. In this case, run the stp mode
rstp command to force the port to work in RSTP mode.
Procedure
l Set the RSTP working mode to STP.
1. Run the stp mode stp command to set the RSTP working mode as STP.
2. Run the display stp command and you can find that the STP mode is configured.
l Set the RSTP workin mode to RSTP.
1. Run the stp mode rstp to set the RSTP working mode as RSTP.
2. Run the display stp command and you can find that the RSTP mode is configured.
----End
Example
To set the RSTP working mode to STP, do as follows:
huawei(config)#stp mode stp
{ <cr>|port<K> }:
Command:
display stp
The bridge is executing the IEEE compatible Spanning Tree protocol
------------------------------------------------------------------
------------------------------------------------------------------
1 0/ 2/ 0 160 200000 Enabled Disa - -
2 0/ 2/ 1 128 200000 Enabled Disa - -
9 0/ 2/ 2 128 200000 Enabled Disa - -
10 0/ 2/ 3 128 200000 Enabled Disa - -
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
------------------------------------------------------------------
To set the RSTP working mode as RSTP, do as follows:

huawei(config)#stp mode rstp
{ <cr>|port<K> }:
Command:
display stp

------------------------------------------------------------------
------------------------------------------------------------------
1 0/ 2/ 0 160 200000 Enabled Disa - -
2 0/ 2/ 1 128 200000 Enabled Disa - -
9 0/ 2/ 2 128 200000 Enabled Disa - -
10 0/ 2/ 3 128 200000 Enabled Disa - -
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
------------------------------------------------------------------
Related Operation
Table 13-2 lists the related operation for setting the RSTP working mode.
Table 13-2 Related operation for setting the RSTP working mode
Restore the default RSTP undo stp mode By default, the working mode
working mode is RSTP.
13.4 Setting the Bridge Diameter

This topic describes how to set the bridge diameter of a switching network.
Context
l The bridge diameter of the switching network ranges from 1 to 7. The default value is 7.
l The bridge diameter decreases by one when the BPDU packet is forwarded by one device
each time. The switching network discards the bridge protocol data unit (BPDU) packet
whose hop count is 0, to restrict the scale of the switching network.
l The forwarding delay of packets in the switching network varies according to the bridge
diameter. The larger the bridge diameter, the longer the forwarding delay and the less stable
the network.
Procedure
Step 1 Run the stp bridge-diameter command to set the bridge diameter of the switching network.
Step 2 Run the display stp command and you can find that the bridge diameter is configured correctly.
----End
Example
To set the bridge diameter of a switching network to 5, do as follows:
huawei(config)#stp bridge-diameter 5


Related Operation
Table 13-3 lists the related operation for setting the bridge diameter of a switching network.
Table 13-3 Related operation for setting the diameter of a switching network
Restore the default bridge diameter undo stp bridge-diameter
13.5 Configuring the Parameters of a Specified Bridge

This topic describes how to configure the parameters of a specified bridge. The parameters
include: priority, Forward Delay, Hello Time, and MAX Age of the specified bridge.
13.5.1 Setting the Priority of the Specified Bridge
This topic describes how to set the priority of a specified bridge.
13.5.2 Configure the Forward Delay of the Specified Bridge
This topic describes how to configure the Forward Delay of the specific bridge.
13.5.3 Setting the Hello Time of a Specified Bridge
This topic describes how to set the Hello Time of a specified bridge.
13.5.4 Setting the MAX Age of a Specified Bridge
This topic describes how to set the Max Age of a specified bridge.
13.5.1 Setting the Priority of the Specified Bridge

This topic describes how to set the priority of a specified bridge.
Context
l By default, the priority of the specified bridge is 32768.
l When RSTP is enabled, setting the priority of a bridge leads to the recalculation of the
spanning tree.
l The value of the bridge priority determines whether the bridge can be selected as the root
of the spanning tree.
l The smaller the priority value, the higher the priority. In this case, this bridge is more
possible to be the root bridge.
l If the priority values of all the bridges in the switching network are the same, the bridge
with the smallest MAC address is selected as the root bridge.

Procedure
Step 1 Run the stp priority command to set the priority of a specified bridge.
Step 2 Run the display stp command and you can find that the priority of the specified bridge is set
correctly.
----End
Example
To set the priority of the specified bridge as 4096, do as follows:
huawei(config)#stp priority 4096
{ <cr>|port<K> }:
Command:
display stp
Spanning tree protocol is disabled
Related Operation
Table 13-4 lists the related operation for setting the priority of a specified bridge.
Table 13-4 Related operation for setting the priority of a specified bridge
Restore the default priority of the bridge undo stp priority
13.5.2 Configure the Forward Delay of the Specified Bridge

This topic describes how to configure the Forward Delay of the specific bridge.
Context
l By default, the Forward Delay of the specified bridge is 15s. It is recommended that you
use the default setting.
l The link fault causes the spanning tree recalculation on the network. The recalculated result,
however, fails to take effect on the entire network.
l If the re-elected root port and the specified port begin to forward data immediately, a
temporary loopback occurs on the path.
l Therefore, the RSTP protocol applies a state transition mechanism. That is, before restarting
the data transmission, the root port and the specified port must experience an intermediate
state. After the Forward Delay, the intermediate state can switch to the forwarding state.
The Forward Delay guarantees the recalculated result to take effect on the entire network.
Procedure
Step 1 Run the stp timer forward-delay command to set the Forward Delay of a specified bridge.

Step 2 Run the display stp command to and you can find that the Forward Delay of the specified bridge
is set correctly.
----End
Example
To set the Forward Delay of a specified bridge to 20s (2000 centiseconds) after the STP function
is enabled, do as follows:
huawei(config)#stp timer forward-delay 2000
Bridge Priority : 4096 MAC Address : 00e0-cfc5-1999
Root Priority : 4096 MAC Address : 00e0-cfc5-1999
------------------------------------------------------------------
------------------------------------------------------------------
9 0/ 2/ 2 128 200 Enabled Desg FWD P2P
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
------------------------------------------------------------------
Related Operation
Table 13-5 lists the related operation for setting the Forward Delay of a specified bridge.
Table 13-5 Related operation to configure the Forward Delay of the specified bridge
Restore the default Forward Delay of the undo stp timer forward-delay
specified bridge
13.5.3 Setting the Hello Time of a Specified Bridge

This topic describes how to set the Hello Time of a specified bridge.
Context
l By default, the Hello Time of the specified bridge is 2s. It is recommended that you use
the default value.
l A proper Hello Time ensures timely detection of line failure without occupying too many
network resources.
l A very long Hello Time results in recalculation of the spanning tree, because the packet
loss of the link is considered as a link failure by the bridge.

l A very short Hello Time enables the bridge to frequently send configuration information.
This increases the load of the switching network and the CPU.
Procedure
Step 1 Run the stp timer hello command to set the Hello Time of the specified bridge.
Step 2 Run the display stp command and you can find that the Hello Time is set correctly.
----End
Example
To set the Hello Time of a specified bridge to 300 centiseconds (namely 3s), do as follows:
huawei(config)#stp timer hello 300
------------------------------------------------------------------
------------------------------------------------------------------
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
------------------------------------------------------------------
Related Operation
Table 13-6 lists the related operation for setting the Hello Time of a specified bridge.
Table 13-6 Related operation for setting the Hello Time of a specified bridge
Restore the default Hello Time of a specified undo stp timer hello
bridge
13.5.4 Setting the MAX Age of a Specified Bridge

This topic describes how to set the Max Age of a specified bridge.
Context
l The three time parameters, including Forward Delay, Hello Time, and Max Age must
comply with the following formula to ensure network stability.
2 x (Forward Delay -1 second) MAX Age

MAX Age 2 x (Hello Time + 1 second)

l By default, the Max Age of the specified bridge is 2000 centiseconds (20s). It is
recommended that you use the default settings.
l Max Age is a parameter that is used to check whether the configuration information is
outdated. You can set it according to the actual network situation.
l A very short Max Age results in frequent calculation of the spanning tree. The network
congestion is considered as a link failure.
l A very long Max Age may result in the inability of the bridge to detect the link failure in
time, thereby reducing the network auto-sensing ability.
Procedure
Step 1 Run the stp timer max-age command to set the MAX Age of a specified bridge.
Step 2 Run the display stp command and you can find that the MAX Age of a specified bridge is set
correctly.
----End
Example
To set the Max Age of a specified bridge to 10s, do as follows:
huawei(config)#stp timer max-age 1000
------------------------------------------------------------------
------------------------------------------------------------------
11 0/ 2/ 4 128 200000 Enabled Disa - -
12 0/ 2/ 5 128 200000 Enabled Disa - -
------------------------------------------------------------------
Related Operation
Table 13-7 lists the related operation for setting the Max Age of a specified bridge.
Table 13-7 Related operation for setting the Max Age of a specified bridge
Restore the default MAX Age of a specified undo stp timer max-age
bridge

13.6 Configuring the Parameters of a Specified Port

13.6.1 Setting the Maximum Transmission Rate of a Specified Port
This topic describes how to set the maximum transmission rate of a specified port.
13.6.2 Configuring the Specified Port as an Edge Port
This topic describes how to configure the specified port as an edge port.
13.6.3 Setting the Path Cost of a Specified Port
This topic describes how to set the path cost of a specified port.
13.6.4 Setting the Priority of a Specified Port
This topic describes how to set the priority of a specified port.
13.6.5 Configuring the Point-to-Point Link for a Specified Port
This topic describes how to configure a point-to-point link for a specified port.
13.6.1 Setting the Maximum Transmission Rate of a Specified Port

This topic describes how to set the maximum transmission rate of a specified port.
Context
l The maximum transmission rate of the specified port is the maximum number of BPDU
packets that can be sent by the port within each Hello Time.
l A port can send up to 255 BPDU packets. By default, a port sends three packets.
l The maximum transmission rate of an Ethernet port is related to the physical state of the
port and the network structure. You can set the rate according to the actual network
situation. If the maximum transmission rate of a port is very high, excessive network
resources may be occupied. It is recommended that you use the default settings.
Procedure
Step 1 Run the stp port transit-limit command to set the maximum transmission rate of the specified
port.
Step 2 Run the display stp port command and you can find that the maximum transmission rate is set
correctly.
----End
Example
To set the maximum transmission rate of a port as 5, do as follows:
huawei(config)#stp port 0/3/0 transit-limit 5
huawei(config)#display stp port 0/3/0
Port 25 (0/3/0) of bridge is DOWN
Port spanning tree protocol is enabled
The port is a(n) DisabledPort
Port path cost 200000
Port priority 128
Designated bridge has priority 32768, MAC address 00e0-fc9a-2394
The port is a non-edge port
Maximum transmission limit is 5 BPDUs per hello time

Times: Hello Time 2 second(s), Max Age 20 second(s)

Forward Delay 15 second(s), Message Age 0 second(s)
Sent BPDU: 0
TCN: 0, RST: 0, Config BPDU: 0
Received BPDU: 0
Related Operation
Table 13-8 lists the related operations for setting the maximum transmission rate.
Table 13-8 Related operations for setting the maximum transmission rate
Restore the default transmission rate of the undo stp port transit-limit
port
Query the RSTP configuration of a bridge display stp

and a port
13.6.2 Configuring the Specified Port as an Edge Port

This topic describes how to configure the specified port as an edge port.
Context
l By default, all the ports of a bridge are configured as non-edge ports.
l If an Ethernet port is not connected to any Ethernet port of other bridges, you can configure
the port as an edge port. This allows the edge port to switch to the forwarding state directly
and reduces the transition time.
l If a specified port is configured as the edge port when the port is connected to the port of
another bridge, the RSTP automatically detects it and reconfigures it as a non-edge port.
l When an Ethernet port switches from a non-edge port to an edge port, It is recommended
that you configure it as an edge port manually because RSTP cannot detect this kind of
transition.
Procedure
Step 1 Run the stp port edged-port enable command to configure the specified port as an edge port.
Step 2 Run the display stp port command and you can find that the specified port is configured as an
edge port.
----End
Example
To configure port 0/3/0 as an edge port, do as follows:
huawei(config)#stp port 0/3/0 edged-port enable


Port priority 128
Designated bridge has priority 32768, MAC address 00e0-fcaa-8516
The port is an edge port
Sent BPDU: 0
Received BPDU: 0
Related Operation
Table 13-9 lists the related operation for configuring the specified port as an edge port.
Table 13-9 Related operation for configuring the specified port as an edge port
Query the RSTP information of a bridge display stp

and a port
13.6.3 Setting the Path Cost of a Specified Port

This topic describes how to set the path cost of a specified port.
Context
l By default, the bridge directly obtains the path cost of a port according to the link rate.
l The path cost of an Ethernet port is related to the link rate of the port. The higher the link
rate, the smaller the path cost.
l RSTP can automatically identify the link rate and convert it into the proper path cost.
l Setting the path cost for an Ethernet port causes recalculation of the spanning tree. It is
recommended that you use the default value and allow RSTP to calculate the path cost of
the current Ethernet port.
Procedure
Step 1 Run the stp port cost command to set the path cost of a specified port.
Step 2 Run the display stp port command and you can find the path cost of the specified port is set
correctly.
----End
Example
To set the path cost of a port as 200, do as follows:
huawei(config)#stp port 0/3/0 cost 200


Port path cost 200
Port priority 128
Sent BPDU: 0
Received BPDU: 0
Related Operation
Table 13-10 lists the related operation for setting the path cost of a specified port.
Table 13-10 Related operation for setting the path cost of a specified port
Display the RSTP configuration of a display stp

bridge and a port
13.6.4 Setting the Priority of a Specified Port

This topic describes how to set the priority of a specified port.
Context
l By default, the priority value for all the Ethernet ports of a bridge is 128.
l In general, as the value becomes lower, the priority of the port becomes higher and the
Ethernet port is more likely to be included in the spanning tree.
l Any change of priority for an Ethernet port causes recalculation of the spanning tree. It is
recommended that you change the priority of the specified port with caution.
Procedure
Step 1 Run the stp port port-priority command to set the priority of a specified port.
Step 2 Run the display stp port command and you can find that the priority of the port is set correctly.
----End
Example
To set the priority of a port as 64, do as follows:
huawei(config)#stp port 0/3/0 port-priority 64
Command:
display stp port 0/3/0


Port priority 64
Designated bridge has priority 32768, MAC address 00e0-fc9a-2394
The port is a non-edge port
Sent BPDU: 0
Received BPDU: 0
Related Operation
Table 13-11 lists the related operation for setting the priority of a specified port.
Table 13-11 Related operation for setting the priority of a specified port
Query the RSTP information of a bridge display stp

and a port
13.6.5 Configuring the Point-to-Point Link for a Specified Port

This topic describes how to configure a point-to-point link for a specified port.
Context
l If this parameter is configured as auto, RSTP can automatically detect whether the point-
to-point link is enabled on the current Ethernet port.
l You can configure a point-to-point link for only the port that is an aggregated Ethernet port
or the port that works in full-duplex mode. Otherwise, the configuration does not take effect.
l You can manually configure this parameter. It is recommended that you use the auto mode.
Procedure
Step 1 Run the stp port point-to-point command to configure the point-to-point link for a specified
port.
Step 2 Run the display stp port command and you can find that the parameter of the specified port is
configured correctly.
----End
Example
To configure that the point-to-point link for a port can be automatically detected, do as follows:
huawei(config)#stp port 0/3/0 point-to-point auto
Port path cost 200
Port priority 128


Sent BPDU: 0
Received BPDU: 0
Related Operation
Table 13-12 lists the related operation for configuring a point-to-point link for a specified port.
Table 13-12 Related operation for configuring a point-to-point link for a specified port
Query the RSTP settings of a bridge and display stp

a port
13.7 Configuring the mCheck Variable

This topic describes how to configure the mCheck variable to allow a port to work in RSTP
mode.
Context
Run the stp port frameid/slotid/portid mcheck command to check whether there is a bridge that
is running STP in the network segment to which the current port is connected.
l If the bridge exists, the port changes to the STP compatible mode.
l If the network is in good condition, though the bridge running STP is removed, the port
still runs in STP compatible mode. You can run a command to force the port to work in
RSTP mode. Then, whether the port works in RSTP or STP compatible mode is determined
by the types of received packets.
Note that the command must be run in RSTP mode. If the bridge protocol is configured to the
STP mode, the command does not take effect.
Procedure
Run the stp port mcheck command to configure the mCheck variable.
----End
Example
To transit port 0/3/0 to work in RSTP mode, do as follows:
huawei(config)#stp port 0/3/0 mcheck
13.8 Clearing the RSTP Statistics

This topic describes how to clear the RSTP statistics.

Context
The RSTP statistics of UA5000 or a port can be cleared.
Procedure
l Run the reset stp command to clear the RSTP statistics of a device.
l Run the reset stp port command to clear the RSTP statistics of a port.
----End
Example
To clear the RSTP statistics of the UA5000, do as follows:
huawei(config)#reset stp
To clear the RSTP statistics of port 0/3/0, do as follows:

huawei(config)#reset stp port 0/3/0

Configuration Guide-IPM CLI 14 Configuring RRPP
14 Configuring RRPP
About This Chapter
This topic describes the concept of the rapid ring protection protocol (RRPP) and the procedure
for configuring RRPP on the UA5000.
14.1 Introduction to RRPP
This topic describes the concept and the features of RRPP.
14.2 Configuration Example of the Single RRPP Ring Networking
This topic describes how to configure the single RRPP ring networking to protect loops.
14.3 Enabling RRPP
This topic describes how to enable RRPP.
14.4 Configuring RRPP Domain Parameters
The RRPP domain parameters include the ID of the RRPP domain, the ID of the control VLAN,
hello timer, and fail timer of the RRPP domain.
14.5 Configuring the Running Mode of RRPP
This topic describes how to configure the running mode of RRPP.
14.6 Configuring an RRPP Ring
This topic describes the concept of an RRPP ring and the procedure for configuring an RRPP
ring.
14.7 Configuring the Working Mode of an RRPP Port
This topic describes how to configure the working mode of an RRPP port.
14.8 Configuring the Working Mode of an RRPP Node
The nodes in an RRPP ring are classified into the master node and the transmission node. This
topic describes how to configure the working mode of the two nodes.

14 Configuring RRPP Configuration Guide-IPM CLI
14.1 Introduction to RRPP

This topic describes the concept and the features of RRPP.
Service Description
RRPP is a link layer protocol that is used particularly for Ethernet ring networks.
RRPP can prevent the broadcast storm caused by a data loop when the Ethernet ring network is
complete. When a link on the Ethernet ring network is disconnected, RRPP can quickly recover
the communication on the ring network.
When configuring RRPP, you need to configure a role for each node on the RRPP ring.
An RRPP domain contains the RRPP ring, control VLAN, master node, transmission node,
primary port, and secondary port.
Compared with STP, RRPP has the following features:
l The topology convergence is fast (shorter than 50 ms).
l The convergence time is irrelevant to the number of nodes on the ring network.
NOTE
On a ring network, either RRPP or STP can be configured for the same interface. RRPP and STP, however,
cannot be configured for the same interface simultaneously.
14.2 Configuration Example of the Single RRPP Ring

Networking
This topic describes how to configure the single RRPP ring networking to protect loops.
Networking
Figure 14-1 shows the example network for configuring the single RRPP ring topology.

Figure 14-1 Example network for configuring the single RRPP ring topology
Router
0/2/3
0/2/0
B
0/2/1
UA5000_1
UA5000_2 0/2/1 UA5000_4

0/2/0
0/2/0
0/2/1 UA5000_3
0/2/0 0/2/1
0/11/0
Modem
PC
The area inside the dotted line indicates the RRPP domain.
The solid line in blue indicates the RRPP ring.
The arrows in red indicate the service data flow
B indicates that when the RRPP network is normal, port 0/2/1 of UA5000_1 is blocked.
Data Plan
Table 14-1 provides the data plan for configuring the single RRPP ring networking.

Table 14-1 Data plan for configuring the single RRPP ring networking
Config Data Remarks
uration
Item
RRPP 1 The UA5000s

domain in the same
ID domain
should be
Control 10 configured
VLAN with the same
ID domain ID,
ring ID, and
control
VLAN.
Timer Hello timer: 2s Default

value: 1s
Fail timer: 7s Default

value: 3s
RRPP RRPP ring ID: 1 -

ring
RRPP ring level: 0
Master node: UA5000_1
Transmission nodes: UA5000_2, UA5000_3, and UA5000_4
UA5000 H612IPMD board: -

_1 l Primary port: 0/2/0
l Secondary port: 0/2/1
l Uplink port: 0/2/3
VLAN ID: 20 It must be

consistent
with the upper
layer device.


consistent
with the upper
layer device.


Config Data Remarks

uration
Item
ADSL2+ port: 0/11/0

consistent
with the upper
layer device.


consistent
with the upper
layer device.
Internet Internet access mode: IPoA -

access
mode Encapsulation mode: LLC
Subscriber line rate: 2 Mbit/s
Gateway IP address: 10.1.1.1/24 The

maintenance
terminal is
connected to
the device
through the
serial port or
the network
port, and you
can maintain
the device
successfully.
Source IP address: 10.1.1.20/24 The source IP

address must
be the same as
the IP address
of the
modem.
Context
The UA5000s in the same domain should be configured with the same domain ID, ring ID, and
control VLAN.

Figure 14-2 shows the flowchart for configuring the single RRPP ring networking.
Figure 14-2 Flowchart for configuring the single RRPP ring networking
Start
Create an RRPP domain and configure the

control VLAN
Configure the hello timer and fail timer of the

RRPP domain
Create an RRPP ring
Enable the RRPP ring
Enable RRPP
Configure the services
Save the data
End
Procedure
l Configure UA5000_1.
1. Configure the RRPP domain and the control VLAN for the master node.
huawei(config)#rrpp domain 1
huawei(config-rrpp-region)#control-vlan 10
2. Configure the intervals of the hello timer and the fail timer for the master node.
huawei(config-rrpp-region)#timer hello-timer 2 fail-timer 7
NOTE
This step is optional. If you do not configure the intervals of the hello timer and the fail timer,
the interval of the hello timer is configured to 1s and the interval of the fail timer is configured
to 3s by default.
3. Configure UA5000_1 as the master node of the RRPP ring and specify the primary
port and the secondary port.

huawei(config-rrpp-region)#ring 1 node-mode master primary-port 0/2/0

secondary-port 0/2/1 level 0
huawei(config-rrpp-region)#ring 1 enable
huawei(config-rrpp-region)#quit
4. Enable RRPP.
huawei(config)#rrpp enable
5. Create a VLAN and specify the uplink port.

6. Add the primary port and the secondary port to the VLAN.
7. Save the data.

huawei(config)#save
NOTE
to 3s by default.
3. Configure UA5000_2 as the transmission node of the RRPP ring and specify the
primary port and the secondary port.
huawei(config-rrpp-region)#ring 1 node-mode Transit primary-port 0/2/0
4. Enable RRPP.
5. Create a VLAN and add the primary port and the secondary port to the VLAN.
6. Save the data.

huawei(config)#save
NOTE
to 3s by default.

4. Enable RRPP.
6. Add a service port. Use the default traffic entry to set the traffic of the service port.
huawei(config)#service-port vlan 20 adsl 0/11/0 vpi 0 vci 35 rx-cttr 6 tx-
cttr 6
7. Use the default line profile 1 to activate port 0/11/0.

huawei(config)#interface adsl 0/11
huawei(config-if-adsl-0/11)#activate 0 profile-index 1
huawei(config-if-adsl-0/11)#quit
8. Configure the Internet access mode.

huawei(config)#mac-pool 0 0000-0000-0001
huawei(config)#ipoa enable
huawei(config)#ipoa default gateway 10.1.1.1
huawei(config)#encapsulation 0/11/0 vpi 0 vci 35 type ipoa llc srcIP
10.1.1.20
9. Save the data.

huawei(config)#save
NOTE
to 3s by default.
4. Enable RRPP.
6. Save the data.

huawei(config)#save
----End
Result
l After the configuration, do as follows:

Run the display rrpp brief command to check whether the RRPP network state of
UA5000_1 is "Enable."
Run the display rrpp verbose command to check whether the RRPP ring state of
UA5000_1 is "Complete."
Run the display rrpp verbose command to check whether the state of port 0/2/0 on
UA5000_1 is "UP" and the state of port 0/2/1 on UA5000_1 is "BLOCKED."
UA5000_3 is "UP" and the state of port 0/2/1 on UA5000_3 is "UP."
The user should be able to access the Internet in IPoA mode.
l Disconnect UA5000_2 from UA5000_3 and do as follows:
Run the display rrpp brief command to check whether the RRPP network state of
UA5000_1 is "Enable."
Run the display rrpp verbose command to check whether the RRPP ring state of
UA5000_1 is "Failed."
UA5000_1 is "UP" and the state of port 0/2/1 on UA5000_1 is "UP."
UA5000_3 is "DOWN" and the state of port 0/2/1 on UA5000_3 is "UP."
The user should still be able to access the Internet in IPoA mode.
14.3 Enabling RRPP

This topic describes how to enable RRPP.
Context
To enable RRPP, you need to enable RRPP on each node of the RRPP ring. In this manner, the
RRPP ring can be activated successfully.
By default, RRPP is disabled.
Procedure
Step 1 Run the rrpp enable command to enable RRPP.
Step 2 Run the display rrpp brief command to query whether RRPP is enabled.
----End
Example
To enable RRPP globally, do as follows:
huawei(config)#display rrpp brief
Abbreviations for Switch Node Mode :
M - Master , T - Transit , E - Edge , A - Assistant-Edge
RRPP Protocol Status : Enable

RRPP Protocol Mode : RRPP
Number of RRPP Domains: 1

Domain Index : 1
Control VLAN : major 10 sub -
Hello Timer : 4 sec(default is 1 sec) Fail Timer : 15 sec(default is 3 sec)
Ring Ring Node Primary/Common Secondary/Edge Is
ID Level Mode Port Port Enabled
--------------------------------------------------------------------
1 0 M 0/2/0 0/2/1 YES
--------------------------------------------------------------------
Related Operation
Table 14-2 lists the related operation for enabling RRPP.
Table 14-2 Related operation for enabling RRPP
Disable RRPP rrpp disable -
14.4 Configuring RRPP Domain Parameters

The RRPP domain parameters include the ID of the RRPP domain, the ID of the control VLAN,
hello timer, and fail timer of the RRPP domain.
14.4.1 Configuring an RRPP Domain

An RRPP domain is identified by an ID that consists of integers. A group of switches, which
are configured with the same domain ID, ring ID, and control VLAN, and are connected with
each other, form an RRPP domain.
14.4.2 Configuring the Control VLAN of an RRPP Domain
In an RRPP domain, the control VLAN transmits only RRPP packets to protect loops. This topic
describes how to configure the control VLAN of an RRPP domain.
14.4.3 Configuring the Interval of the Hello Timer of an RRPP Domain
This topic describes how to configure the interval of the hello timer of an RRPP domain.
14.4.4 Configuring the Interval of the Fail Timer of an RRPP Domain
This topic describes how to configure the interval of the fail timer of an RRPP domain.
14.4.1 Configuring an RRPP Domain

An RRPP domain is identified by an ID that consists of integers. A group of switches, which
are configured with the same domain ID, ring ID, and control VLAN, and are connected with
each other, form an RRPP domain.
Prerequisite
Before you create an RRPP domain, the RRPP domain must not exist in the system.
When you delete an RRPP domain, RRPP must be disabled and there must not be any ring in
the RRPP domain.

Procedure
Step 1 Run the rrpp domain command to create an RRPP domain.
Step 2 Run the undo rrpp domain command to delete an RRPP domain.
----End
Example
To create an RRPP domain with ID 1, do as follows:
huawei(config-rrpp-region)#
To delete an RRPP domain with ID 1, do as follows:

huawei(config)#undo rrpp domain 1
NOTE
If the domain with ID 1 exists in the system when you create the domain, run the rrpp domain command
to enter the configuration mode of the specified domain.
If domain 1 is enabled or a ring exists in the domain, domain 1 cannot be deleted.
14.4.2 Configuring the Control VLAN of an RRPP Domain

In an RRPP domain, the control VLAN transmits only RRPP packets to protect loops. This topic
describes how to configure the control VLAN of an RRPP domain.
Prerequisite
The RRPP domain for which the control VLAN needs to be configured must already exist in
the system.
Context
Each RRPP domain is configured with the control VLAN. The control VLAN should not be
configured with other services.
The control VLAN is a concept in comparison to the data VLAN. That is, in an RRPP domain,
the control VLAN transmits RRPP packets and the data VLAN transmits data packets.
The configured control VLAN must be unique.
Procedure
Step 1 Run the rrpp domain command to enter the domain configuration mode.
Step 2 Run the control vlan command to configure the control VLAN of a domain.
Step 3 Run the quit command to quit the domain configuration mode.
Step 4 Run the display rrpp brief command to query the configuration result.
----End

Example
To create a control VLAN with ID 10, do as follows:


Domain Index : 1
--------------------------------------------------------------------
1 0 T 0/2/0 0/2/1 Yes
--------------------------------------------------------------------
14.4.3 Configuring the Interval of the Hello Timer of an RRPP

Domain
This topic describes how to configure the interval of the hello timer of an RRPP domain.
Prerequisite
The RRPP domain for which the interval of the hello timer needs to be configured must already
exist in the system.
Context
By default, the interval of the hello timer is set to 1s.
The interval of the fail timer is at least three times longer than the interval of the hello timer.
Procedure
Step 2 Run the timer command to configure the interval of the hello timer of an RRPP domain.
Step 4 Run the display rrpp brief command to query the RRPP configuration.
----End
Example
To configure the interval of the hello timer to 4s and the interval of the fail timer to 15s, do as
follows:



Domain Index : 1
--------------------------------------------------------------------
1 0 T 0/2/0 0/2/1 Yes
--------------------------------------------------------------------
Related Operation
Table 14-3 lists the related operation for configuring the interval of the hello timer of an RRPP
domain.
Table 14-3 Related operation for configuring the interval of the hello timer of an RRPP domain
Delete a timer undo timer
14.4.4 Configuring the Interval of the Fail Timer of an RRPP

Domain
This topic describes how to configure the interval of the fail timer of an RRPP domain.
Prerequisite
The RRPP domain for which the interval of the fail timer needs to be configured must already
exist in the system.
Context
By default, the interval of the fail timer is set to 3s.
The interval of the fail timer is at least three times longer than the interval of the hello timer.
Procedure
Step 2 Run the timer command to configure the interval of the fail timer of an RRPP domain.
Step 3 Run the quit command to quit the domain configuration domain.
----End

Example
To configure the interval of the hello timer to 4s and the interval of the fail timer to 15s, do as
follows:

Domain Index : 1
--------------------------------------------------------------------
1 0 T 0/2/0 0/2/1 Yes
--------------------------------------------------------------------
Related Operation
Table 14-4lists the related operation for configuring the interval of the fail timer of an RRPP
domain.
Table 14-4 Related operation for configuring the interval of the fail timer of an RRPP domain
Delete a timer undo timer
14.5 Configuring the Running Mode of RRPP

This topic describes how to configure the running mode of RRPP.
Context
l The running modes of RRPP are classified into the following:
RRPP standard mode
Ethernet automatic protection switching (EAPS) standard mode
l By default, the running mode of RRPP is the RRPP standard mode.
l When RRPP is enabled, the running mode cannot be modified.
Procedure
Step 1 Run the config command to enter the global config mode.
Step 2 Run the rrpp enable/disable command to enable or disable RRPP.
Step 3 Run the rrpp mode command to configure the running mode of RRPP.

----End
Example
To configure the running mode of RRPP as the EAPS standard mode, do as follows:
Enable RRPP globally.
Change the running mode of RRPP to the EAPS standard mode.

huawei(config)#rrpp disable
huawei(config)#rrpp mode eaps
Query the configuration result.


RRPP Protocol Mode : EAPS
Domain Index : 1
--------------------------------------------------------------------
1 0 M 0/2/0 0/2/1 YES
--------------------------------------------------------------------
NOTE
Before changing the running mode of RRPP, you need to disable RRPP.
14.6 Configuring an RRPP Ring

This topic describes the concept of an RRPP ring and the procedure for configuring an RRPP
ring.
Prerequisite
The RRPP domain for which an RRPP ring needs to be configured must already exist in the
system.
Context
Each RRPP ring corresponds to an Ethernet topology where the devices are connected in a ring.
An RRPP ring is identified by an ID that consists of integers.
Each RRPP ring is a local unit of the RRPP domain to which the RRPP ring belongs. In practice,
RRPP takes effect on the RRPP ring.
An RRPP ring cannot be modified once it is created. When an RRPP ring is enabled, it cannot
be deleted.
In the single RRPP ring networking, the level of the RRPP ring must be set to 0.

Procedure
Step 2 Run the ring command to configure an RRPP ring.
Step 3 Run the enable/disable command to enable or disable an RRPP ring.
----End
Example
Assume the following:
l The ID of an RRPP ring is 1.
l The RRPP ring is the master ring.
l The node is the master node.
l The primary port is 0/2/0.
l The secondary port is 0/2/1.
To create such an RRPP ring, do as follows:
huawei(config-rrpp-region)#ring 1 node-mode master primary-port 0/2/0 secondary-
port 0/2/1 level 0
huawei(config-rrpp-region)#ring 1 disable

Domain Index : 1
--------------------------------------------------------------------
1 0 M 0/2/0 0/2/1 NO
--------------------------------------------------------------------
Related Operation
Table 14-5 lists the related operation for configuring an RRPP ring.
Table 14-5 Related operation for configuring an RRPP ring
Delete an RRPP ring undo ring

14.7 Configuring the Working Mode of an RRPP Port

This topic describes how to configure the working mode of an RRPP port.
Prerequisite
The node for which the working mode of the RRPP port needs to be configured must exist in
the system and must work in the normal state.
Context
Of the two ports through which the master node or the transmission node accesses the Ethernet
ring, one port is the primary port and the other port is the secondary port. The port roles are
determined by the user configuration.
The functions of the primary port and the secondary port on the master node are different,
whereas the functions of the primary port and the secondary port on the transmission node are
the same.
The master node transmits the packet to detect the loop status from the primary port. If the
secondary port on the master node can receive the packet, it indicates that the RRPP ring where
the master node is located is complete. In this case, you need to block the secondary port to
prevent data loops. Conversely, if the secondary port cannot receive the packet within a certain
period, it indicates that the ring is faulty. In this case, you need to unblock the secondary port to
ensure that all the nodes in the ring can communicate successfully.
Procedure
Step 2 Run the ring command to configure the port working mode of a node in an RRPP ring.
----End
Example
To configure such an RRPP ring, do as follows:
port 0/2/1 level 0



Domain Index : 1
--------------------------------------------------------------------
1 0 M 0/2/0 0/2/1 YES
--------------------------------------------------------------------
NOTE
An RRPP ring cannot be modified once it is created. Therefore, ensure that the parameters are planned correctly
when you configure an RRPP ring. Otherwise, you have to rework if certain parameters are planned incorrectly.
14.8 Configuring the Working Mode of an RRPP Node

The nodes in an RRPP ring are classified into the master node and the transmission node. This
topic describes how to configure the working mode of the two nodes.
Context
An RRPP ring consists of nodes. Each RRPP ring must have only one master node.
The master node initiates the polling mechanism (a mechanism for the master node of the RRPP
ring to actively detect the network status), and determines the operations to be performed when
the network topology changes.
The nodes, except the master node in an RRPP ring, are the transmission nodes. The transmission
nodes monitor the status of the RRPP links that are directly connected to the nodes, and notify
the master node of the link change. Then, the master node determines how to handle the change.
Procedure
Step 2 Run the ring command to configure the working mode of a node in an RRPP ring.
----End
Example


To configure such an RRPP ring, do as follows:
port 0/2/1 level 0

Domain Index : 1
--------------------------------------------------------------------
1 0 M 0/2/0 0/2/1 YES
--------------------------------------------------------------------
NOTE
An RRPP ring cannot be modified once it is created. Therefore, the configuration of the port working mode
must be complete when you create the RRPP ring.

Configuration Guide-IPM CLI 15 Configuring NTP
15 Configuring NTP
About This Chapter
This topic describes the NTP protocol and how to configure it on the UA5000.
15.1 Introduction to NTP

This topic describes the Network Time Protocol (NTP) concept and its specification on the
UA5000.
15.2 Configuration Example of the NTP Broadcast Mode
This topic describes how to configure the clock synchronization of the UA5000 in the broadcast
mode.
15.3 Configuration Example of the NTP Multicast Mode
This topic describes how to configure the clock synchronization of the UA5000 in the multicast
mode.
15.4 Configuration Example of the NTP Unicast Server Mode
This topic describes how to configure the clock synchronization of the UA5000 in the unicast
server mode.
15.5 Configuration Example of the NTP Peer Mode
This topic describes how to configure the clock synchronization of the UA5000 in the peer mode.
15.6 Configuring the NTP ID Authentication
This topic describes how to configure the NTP ID authentication to enhance the network security
and prevent unauthorized clock modification.
15.7 Configuring the NTP Master Clock
This topic describes how to configure the NTP master clock. You can choose the external
reference clock or local clock as the master clock.
15.8 Configuring the NTP Server in Broadcast Mode
This topic describes how to configure the UA5000 as the NTP server in broadcast mode.
15.9 Configuring the NTP Client in Broadcast Mode
This topic describes how to configure the UA5000 as the NTP client in broadcast mode.
15.10 Configuring the NTP Server in Multicast Mode
This topic describes how to configure the UA5000 as the NTP server in multicast mode.

15 Configuring NTP Configuration Guide-IPM CLI
15.11 Configuring the NTP Client in Multicast Mode

This topic describes how to configure the UA5000 as the NTP client in multicast mode.
15.12 Configuring the NTP Unicast Client
This topic describes how to configure a client in the NTP unicast server mode and specify a
server for the clock synchronization.
15.13 Configuring the NTP Peer
This topic describes how to configure the UA5000 as an active peer.
15.14 Configuring the Authority of Access to a Local Device NTP Service
This topic describes how to configure the authority of access to a local device NTP service. The
access control authority provides the minimum security measure. A more secure method is to
configure the NTP authentication.
15.15 Configuring an Interface for Transmitting or Receiving NTP Packets
This topic describes how to configure an interface for transmitting or receiving NTP packets.

15.1 Introduction to NTP

This topic describes the Network Time Protocol (NTP) concept and its specification on the
UA5000.
Service Description
NTP is an application layer protocol in the TCP/IP protocol suite. NTP is used to synchronize
the time between the distributed time server and the client. The network devices that support
NTP maintain consistent time by exchanging NTP packets to implement various service
applications (such as the network management system and the network accounting system) based
on the universal time.
For details on NTP, see "NTP" in the UA5000 Universal Access Unit Feature Description.
NTP has four working modes as follows:
l Broadcast
l Multicast
l Unicast server
l Peer
The UA5000 supports all the four modes.
15.2 Configuration Example of the NTP Broadcast Mode

This topic describes how to configure the clock synchronization of the UA5000 in the broadcast
mode.
Prerequisite
l The time zone of the UA5000 must be configured. For details, see "3.3.5 Configuring the
System Time."
l The network devices and the line must work in the normal state.
Context
The number of clock strata of the synchronizing device must be equal to or smaller than the
number of clock strata of the synchronized device. Otherwise, the clock synchronization fails.
Networking
Figure 15-1 shows an example network for configuring the NTP broadcast mode.

Figure 15-1 Example network for configuring the NTP broadcast mode
Router
VLAN interface 1
VLAN interface 2
1.1.1.1/24 1.1.1.2/24
UA5000 _A UA5000 _B
UA5000_A functions as an NTP broadcast server, and periodically sends clock synchronization
packets to destination address 255.255.255.255. UA5000_B functions as a client to listen to the
broadcast packets from the server, and then synchronizes its clock with the clock of the server.
Data Plan
Table 15-1 provides the data plan for configuring the NTP broadcast mode.
Table 15-1 Data plan for configuring the NTP broadcast mode
Item Data
UA5000_A VLAN ID: 2

IP address of L3 interface 1: 1.1.1.1
Clock: Functions as the broadcast server. Uses the local clock as

the NTP master clock with two strata.
UA5000_B VLAN ID: 2

IP address of L3 interface 2: 1.1.1.2
Clock: Functions as the broadcast client. Follows the clock of the

broadcast server.
Figure 15-2 and Figure 15-3 show the flowcharts for configuring the NTP broadcast mode.

Figure 15-2 Flowchart for configuring the NTP broadcast mode on the UA5000_A side
Start
Is the reference No
clock available?
Yes Configure the NTP master clock
No Configure the NTP

ID authentication?
Yes
Configure the NTP ID authentication
Configure an No
L3 interface?
Yes
Configure an L3 interface
Configure the NTP broadcast server
Save the data
End

Figure 15-3 Flowchart for configuring the NTP broadcast mode on the UA5000_B side
Start

ID authentication?
Yes
Configure an No
L3 interface?
Yes
Configure the NTP broadcast client
Save the data
End
Procedure
l Configure NTP broadcast server UA5000_A.
1. Configure the local clock of UA5000_A as the NTP master clock with two strata.
huawei(config)#ntp-service refclock-master 2
2. Configure the NTP ID authentication.

huawei(config)#ntp-service authentication enable
huawei(config)#ntp-service authentication-keyid 88 authentication-mode
md5 12345
6
huawei(config)#ntp-service reliable authentication-keyid 88
3. Configure an L3 interface.
4. Configure UA5000_A as the NTP broadcast server.

huawei(config-if-vlanif2)#ntp-service broadcast-server authentication-
keyid 88
5. Save the data.

huawei(config)#save
l Configure NTP broadcast client UA5000_B.

md5 12345

6
3. Configure UA5000_B as the NTP broadcast client.

huawei(config-if-vlanif2)#ntp-service broadcast-client
4. Save the data.

huawei(config)#save
----End
Result
Follow the following steps to verify the configuration:
1. After the synchronization, observe the status of UA5000_A.
huawei(config)#display ntp-service
status
clock status:
synchronized
clock stratum:
2
reference clock ID: LOCAL
(0)
nominal frequency: 100.0000
Hz
actual frequency: 100.0000
Hz
clock precision:
2^18
clock offset: 0.0000
ms
root delay: 0.00
ms
root dispersion: 10.94
ms
peer dispersion: 10.00
ms
reference time: 22:17:31.1000 UTC Mar 4 2009(CD597C7B.FFFFFFFF)
2. Before the synchronization, observe the status of UA5000_B.

status
clock status:
unsynchronized
clock stratum:
16
reference clock ID:
none
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms

ms
reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)
3. After the synchronization, observe the status of UA5000_B.

huawei(config)#display ntp-service status
clock status:
synchronized
clock stratum:
3
reference clock ID:
1.1.1.1
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 22:17:31.1000 UTC Mar 4 2009(CCCFBECD.FFFFFFFF)
In this case, the clock of UA5000_B is synchronized with the clock of UA5000_A. The
clock of UA5000_B has three strata, which is one stratum larger than the clock strata of
UA5000_A.
15.3 Configuration Example of the NTP Multicast Mode

This topic describes how to configure the clock synchronization of the UA5000 in the multicast
mode.
Prerequisite
System Time."
Context
Networking
Figure 15-4 shows an example network for configuring the NTP multicast mode.

Figure 15-4 Example network for configuring the NTP multicast mode
Router
VLAN interface 1
VLAN interface 2
1.1.1.1/24 1.1.1.2/24
UA5000 _A UA5000 _B
UA5000_A sends multicast packets through VLAN interface 2, whereas UA5000_B monitors
multicast packets through VLAN interface 2. After receiving multicast packets from
UA5000_A, UA5000_B synchronizes its clock with the clock of UA5000_A.
Data Plan
Table 15-2 provides the data plan for configuring the NTP multicast mode.
Table 15-2 Data plan for configuring the NTP multicast mode
Item Data
UA5000_A IP address of L3 interface 2: 1.1.1.1/24
Clock: Functions as the multicast server. Uses the local clock as

the NTP master clock with two strata.
UA5000_B IP address of L3 interface 2: 1.1.1.2/24
Clock: Functions as the multicast client. Follows the clock of the

multicast server.
Figure 15-5 and Figure 15-6 show the flowcharts for configuring the NTP multicast mode.

Figure 15-5 Flowchart for configuring the NTP multicast mode on the UA5000_A side
Start
Is the reference No
clock available?
Yes Configure the NTP master clock

ID authentication?
Yes
Configure an No
L3 interface?
Yes
Configure the NTP multicast server
Save the data
End

Figure 15-6 Flowchart for configuring the NTP multicast mode on the UA5000_B side
Start

ID authentication?
Yes
Configure an No
L3 interface?
Yes
Configure the NTP multicast client
Save the data
End
Procedure
l Configure NTP multicast server UA5000_A.

md5 123456
4. Configure UA5000_A as the NTP multicast server.

huawei(config-if-vlanif2)#ntp-service multicast-server authentication-
keyid 88
5. Save the data.

huawei(config)#save
l Configure NTP multicast client UA5000_B.


md5 123456
3. Configure UA5000_B as the NTP multicast client.

huawei(config-if-vlanif2)#ntp-service multicast-client
4. Save the data.

huawei(config)#save
----End
Result
status
clock status:
synchronized
clock stratum:
2
(0)
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 22:34:52.1000 UTC Mar 4 2009(CD59808C.FFFFFFFF)

status
clock status:
unsynchronized
clock stratum:
16
reference clock ID:
none
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms

ms

clock status:
synchronized
clock stratum:
3
reference clock ID:
1.1.1.1
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 22:34:52.1000 UTC Mar 4 2009(CD598081.FFFFFFFF)
UA5000_A.
15.4 Configuration Example of the NTP Unicast Server

Mode
This topic describes how to configure the clock synchronization of the UA5000 in the unicast
server mode.
Prerequisite
System Time."
Context
Networking
Figure 15-7 shows an example network for configuring the NTP unicast server mode.

Figure 15-7 Example network for configuring the NTP unicast server mode
Router
VLAN interface 1
VLAN interface 2
1.1.1.1/24 1.1.1.2/24
UA5000 _A UA5000 _B
UA5000_A functions as an NTP server, whereas UA5000_B functions as a client. The client
sends the request packets for clock synchronization to the server and the server responds to the
request packets and synchronizes the clock.
Data Plan
Table 15-3 provides the data plan for configuring the NTP unicast server mode.
Table 15-3 Data plan for configuring the NTP unicast server mode
Item Data
UA5000_A IP address of VLAN interface 2: 1.1.1.1/24
Clock: Uses the local clock as the NTP master clock with two
strata.
UA5000_B IP address of VLAN interface 2: 1.1.1.2/24
Clock: Uses UA5000_A as a time server.
Figure 15-8 and Figure 15-9 show the flowcharts for configuring the NTP unicast server mode.

Figure 15-8 Flowchart for configuring the NTP unicast server mode on the UA5000_A side
Start
Yes Is the reference

clock available?
No
Configure the NTP master clock
Configure an No
L3 interface?
Yes
Save the data
End
Figure 15-9 Flowchart for configuring the NTP unicast server mode on the UA5000_B side
Start
No Configure an
L3 interface?
Yes
Specify the server
Save the data
End
Procedure
l Configure NTP unicast server UA5000_A.

3. Save the data.

huawei(config)#save
l Configure NTP unicast client UA5000_B.

2. Specify UA5000_A as the server.

huawei(config)#ntp-service unicast-server 1.1.1.1
3. Save the data.

huawei(config)#save
----End
Result
1. Before the synchronization, observe the status of UA5000_A.
status
clock status:
synchronized
clock stratum:
2
(0)
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 22:51:14.1000 UTC Mar 4 2009(CD598462.FFFFFFFF)

status
clock status:
unsynchronized
clock stratum:
16
reference clock ID:
none
Hz
Hz
clock precision:
2^18

ms
root delay: 0.00
ms
ms
ms

clock status:
synchronized
clock stratum:
3
reference clock ID:
1.1.1.1
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 22:51:14.1000 UTC Mar 4 2009(CD5983C9.FFFFFFFF)
UA5000_A.
15.5 Configuration Example of the NTP Peer Mode

This topic describes how to configure the clock synchronization of the UA5000 in the peer mode.
Prerequisite
System Time."
Context
Whether the clock of the active peer synchronizes with the clock of the passive peer or the clock
of the passive peer synchronizes with the clock of the active peer is determined by the clock
strata. The clock of the peer with higher stratum is synchronized by the clock of the peer with
lower stratum.
Networking
Figure 15-10 shows an example network for configuring the NTP peer mode.

Figure 15-10 Example network for configuring the NTP peer mode
Router
VLAN interface 1
VLAN interface 2
1.1.1.1/24 1.1.1.2/24
UA5000 _A UA5000 _B
UA5000_A functions as an NTP active peer, whereas UA5000_B functions as the NTP passive
peer. The active peer sends request packets for clock synchronization to the passive peer, and
then the passive peer responds to the request packets. In this case, the peer with higher stratum
is synchronized by the clock of the peer with lower stratum.
Data Plan
Table 15-4 provides the data plan for configuring the NTP peer mode.
Table 15-4 Data plan for configuring the NTP peer mode
Item Data
UA5000_A IP address of VLAN interface 2: 1.1.1.1/24
Clock: Uses the local clock as the NTP master clock with two
strata.
UA5000_B IP address of VLAN interface 2: 1.1.1.2/24
Clock: Uses UA5000_A as the peer.
Figure 15-11 and Figure 15-12 show the flowcharts for configuring the NTP peer mode.

Figure 15-11 Flowchart for configuring the NTP peer mode on the UA5000_A side
Start
Yes Is the reference

clock available?
No
Configure the NTP master clock
Configure an No
L3 interface?
Yes
Specify the passive peer
Save the data
End
Figure 15-12 Flowchart for configuring the NTP peer mode on the UA5000_B side
Start
No Configure an
L3 interface?
Yes
Save the data
End
Procedure
l Configure NTP active peer UA5000_A.

3. Specify UA5000_B as the NTP passive peer.

huawei(config)#ntp-service unicast-peer 1.1.1.2
4. Save the data.

huawei(config)#save
l Configure NTP passive peer UA5000_B.

2. Save the data.

huawei(config)#save
----End
Result
By default, the system clock has 16 strata, so the clock of UA5000_B has 16 strata. The clock
of UA5000_A has two strata. Therefore, the clock of UA5000_B is synchronized by the clock
of UA5000_A.
status
clock status:
synchronized
clock stratum:
2
(0)
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 23:18:14.1000 UTC Mar 4 2009(CD598AB6.FFFFFFFF)

status
clock status:
unsynchronized
clock stratum:
16
reference clock ID:
none
Hz


Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms

clock status:
synchronized
clock stratum:
3
reference clock ID:
1.1.1.1
Hz
Hz
clock precision:
2^18
ms
root delay: 0.00
ms
ms
ms
reference time: 23:18:14.1000 UTC Mar 4 2009(CCCFBECD.FFFFFFFF)
In this case, the clock of UA5000_B is synchronized with the clock of UA5000_A. The clock
of UA5000_B has three strata, which is one stratum larger than the clock strata of UA5000_A.
15.6 Configuring the NTP ID Authentication

This topic describes how to configure the NTP ID authentication to enhance the network security
and prevent unauthorized clock modification.
Context
l If the NTP authentication is disabled on the client, the clock of the client can be
synchronized with the clock of the server, regardless of whether the NTP authentication is
enabled on the server.
l If NTP authentication is enabled on the client, a reliable key should be configured.
l The key configuration of the server should be consistent with the key configuration of the
client.
l If NTP authentication is enabled on the client, the client can pass the authentication, as long
as the server is configured with the same key as the client. In this case, you need not enable
the NTP authentication on the server or define its key as a reliable one.
l The client synchronizes only with the server that provides the reliable key. If the server
provides an unreliable key, the client does not synchronize with the server.

Figure 15-13 shows the flowchart for configuring the NTP ID authentication.
Figure 15-13 Flowchart for configuring the NTP ID authentication
Start
Enable ID authentication for

NTP server
Set an ID authentication key

for the NTP server
Define the key as a reliable

key
End
Procedure
Step 1 Run the ntp-service authentication enable command to enable the NTP-service ID
authentication.
Step 2 Run the ntp-service authentication-keyid command to set a key for the NTP ID authentication.
Step 3 Run the ntp-service reliable authentication-keyid command to define the key as a reliable
one.
----End
Example
To enable the NTP ID authentication, configure the name of the NTP ID authentication key to
aNiceKey, configure the key number to 42, and then define key 42 as a reliable key, do as follows:
huawei(config)#ntp-service authentication-keyid 42 authentication-mode md5
aNiceKey
Related Operation
Table 15-5 lists the related operations for configuring the NTP ID authentication.

Table 15-5 Related operations for configuring the NTP ID authentication
Disable the NTP ID undo ntp-service authentication enable

authentication
Cancel the configuration of undo ntp-service authentication-keyid

the NTP authentication key
Cancel a reliable key undo ntp-service reliable authentication-keyid
Display the NTP service status display ntp-service status
15.7 Configuring the NTP Master Clock

This topic describes how to configure the NTP master clock. You can choose the external
reference clock or local clock as the master clock.
Context
l The IP address of the local reference lock is set to 127.127.t.u, in which:
t ranges from 0 to 37. When the IP address is of a local reference clock, the value of t
can only be 1.
u ranges from 0 to 3, representing the NTP process number.
l With no IP address specified, by default, local clock 127.127.1.0 functions as the NTP
master clock.
l The number of clock strata represents clock accuracy. The number of clock strata ranges
from 1 to 15. The initial value is 16 before it is configured. The clock with one stratum is
of the highest accuracy. The larger the number of clock strata, the lower the clock accuracy.
Procedure
Run the ntp-service refclock-master command to configure the NTP master clock.
----End
Example
To configure the clock of the local device whose IP address is 127.127.1.0 as an NTP master
clock with two strata, do as follows:
huawei(config)#ntp-service refclock-master 127.127.1.0 2
Related Operation
Table 15-6 lists the related operation for configuring the NTP master clock.

Table 15-6 Related operation for configuring the NTP master clock
Cancel the NTP master undo ntp-service refclock-master

clock
15.8 Configuring the NTP Server in Broadcast Mode

This topic describes how to configure the UA5000 as the NTP server in broadcast mode.
Context
After the UA5000 is configured as the NTP server in broadcast mode, it periodically sends clock
synchronization packets through specified interfaces to destination address 255.255.255.255.
The client listens to the broadcast packets from the server, and then synchronizes its clock with
the clock of the server.
Procedure
Step 1 Run the interface vlanif command to enter VLANIF mode.
Step 2 Run the ntp-service broadcast-server command to configure the NTP server in broadcast
mode.
----End
Example
Assume that the NTP version is 2. To configure the UA5000 as the NTP server in broadcast
mode to transmit broadcast packets encrypted by key 88 through VLAN interface 2, do as
follows:
huawei(config-if-vlanif2)#ntp-service broadcast-server authentication-keyid 88
version 2
Related Operation
Table 15-7 lists the related operations for configuring the NTP server in broadcast mode.
Table 15-7 Related operations for configuring the NTP server in broadcast mode
Configure the UA5000 not as undo ntp-service broadcast- -

the NTP server in broadcast server
mode

Display the NTP service display ntp-service trace Trace the reference clock
tracing source from the local
device along the NTP
server chain for time
synchronization, and
display brief information
about each NTP server.
Display the status of sessions display ntp-service sessions -

maintained by the NTP
service
Enable NTP debugging debugging ntp-service -
15.9 Configuring the NTP Client in Broadcast Mode

This topic describes how to configure the UA5000 as the NTP client in broadcast mode.
Procedure
Step 2 Run the ntp-service broadcast-client command to configure the NTP client in broadcast mode.
----End
Example
To configure the UA5000 as the NTP client in broadcast mode to receive broadcast packets
through VLAN interface 2, do as follows:
huawei(config-if-vlanif2)#ntp-service broadcast-client
Related Operation
Table 15-8 lists the related operations for configuring the NTP client in broadcast mode.
Table 15-8 Related operations for configuring the NTP client in broadcast mode
Configure the UA5000 not as the NTP client undo ntp-service broadcast-client
in broadcast mode
Query the brief information about each NTP display ntp-service trace
time server on the way from the local device
to the reference clock source

15.10 Configuring the NTP Server in Multicast Mode

This topic describes how to configure the UA5000 as the NTP server in multicast mode.
Context
l After the UA5000 is configured as the NTP server in multicast mode, it periodically sends
clock synchronization packets through specified interfaces to destination address 224.0.1.1.
The client listens to the multicast packets from the server, and then synchronizes its clock
with the clock of the server.
l In multicast mode, the NTP configuration must be performed on both the server and the
client. The clock of the client can only be synchronized by the clock of the server.
Procedure
Step 2 Run the ntp-service multicast-server command to configure the NTP server in multicast mode.
----End
Example
Assume that the IP address of the corresponding multicast group is 224.0.1.1 and the NTP version
is 2. To configure the UA5000 as the NTP server in multicast mode to transmit multicast packets
encrypted by key 4 through VLAN interface 2, do as follows:
huawei(config-if-vlanif2)#ntp-service multicast-server 224.0.1.1 authentication-
keyid 4 version 2
Related Operation
Table 15-9 lists the related operations for configuring the NTP server in multicast mode.
Table 15-9 Related operations for configuring the NTP server in multicast mode
Configure the UA5000 not as the NTP server undo ntp-service multicast-server
in multicast mode
time server on the way from the local device
15.11 Configuring the NTP Client in Multicast Mode

This topic describes how to configure the UA5000 as the NTP client in multicast mode.

Context
In multicast mode, the NTP configuration must be performed on both the server and the client.
The clock of the client can be synchronized by only the clock of the server.
Procedure
Step 2 Run the ntp-service multicast-client command to configure the NTP client in multicast mode.
----End
Example
To configure the UA5000 as the NTP client in multicast mode to receive the multicast messages
with multicast IP address 224.0.1.2 from VLAN interface 2, do as follows:
huawei(config-if-vlanif2)#ntp-service multicast-client 224.0.1.2
Related Operation
Table 15-10 lists the related operations for configuring the NTP client in multicast mode
Table 15-10 Related operations for configuring the NTP client in multicast mode
Configure the UA5000 not as the NTP client undo ntp-service multicast-client
in multicast mode
timer server on the way from the local device
15.12 Configuring the NTP Unicast Client

This topic describes how to configure a client in the NTP unicast server mode and specify a
server for the clock synchronization.
Context
l The client sends request packets for clock synchronization to the server. After receiving
the request packets, the server sends response packets. After receiving the response packets
from the server, the client filters and selects the clock, and synchronizes the clock with the
clock of the server.
l In the NTP unicast server mode, only the client needs the NTP configuration while the
server need not. This mode is unidirectional, that is, only the client initiates the clock
synchronization with the server, while the server does not.

Procedure
Run the ntp-service unicast-server command to configure a client in the NTP unicast server
mode.
----End
Example
Assume that:
l The IP address of the device is 1.0.1.11.
l The version is 3.
l The UA5000 works on the client side.
l The packets are encrypted by key 88.
To specify such a device as a server, do as follows:
huawei(config)#ntp-service unicast-server 1.0.1.11 version 3 authentication-keyi
d 88
Related Operation
Table 15-11 lists the related operations for configuring the NTP unicast server.
Table 15-11 Related operations for configuring the NTP unicast server
Cancel the specified server in the NTP undo ntp-service unicast-server

unicast mode
Configure the maximum number of ntp-service max-dynamic-sessions

local and dynamic sessions
Restore the number of local and undo ntp-service max-dynamic-sessions

dynamic sessions to the default value
15.13 Configuring the NTP Peer

This topic describes how to configure the UA5000 as an active peer.
Context
l The active peer sends request packets for clock synchronization to the passive peer. After
receiving the request packets, the passive peer sends response packets. The active peer and
the passive peer synchronize their clocks mutually.
l In NTP peer mode, the NTP configuration is performed only on the active peer. The peer
mode is bidirectional. The active peer and the passive peer can synchronize their clocks
mutually.
l The clock of the peer with larger clock strata is synchronized by the clock of the peer with
smaller clock strata.

Procedure
Run the ntp-service unicast-peer command to configure an active peer.
----End
Example
To specify the host with IP address 3.0.1.32 as a passive peer, the device is an active peer, the
version is 2, and the packets are encrypted by key 7, do as follows:
huawei(config)#ntp-service unicast-peer 3.0.1.32 version 2 authentication-keyid
7
Related Operation
Table 15-12 lists the related operation for configuring the NTP peer.
Table 15-12 Related operation for configuring the NTP peer
Configure the UA5000 not as the active undo ntp-service unicast-peer

peer
15.14 Configuring the Authority of Access to a Local Device

NTP Service
This topic describes how to configure the authority of access to a local device NTP service. The
access control authority provides the minimum security measure. A more secure method is to
configure the NTP authentication.
Prerequisite
The applied access control (ACL) must exist.
Context
By default, access to a local device NTP service is not controlled. The access control authority
is classified into the following levels in a descending order: peer, query, server, and
synchronization.
l peer: authority for absolute access

l query: control and query authority
l server: authority for server access and query
l synchronization: authority for only the server access

Procedure
Run the ntp-service access command to configure the authority of access to a local device NTP
service.
----End
Example
To configure the authority of access to a local device NTP service to "peer", and the applied
ACL to 2000, do as follows:
huawei(config)#ntp-service access peer 2000
Related Operation
Table 15-13 lists the related operations for configuring the authority of access to a local device
NTP service.
Table 15-13 Related operations for configuring the authority of access to a local device NTP
service
Cancel the configuration of the undo ntp-service access

NTP access authority
Configure the maximum number ntp-service max-dynamic-sessions

of dynamic sessions that can be
set up on a local device
Cancel the configuration of the undo ntp-service max-dynamic-sessions

maximum number of dynamic
sessions that can be set up on a
local device
15.15 Configuring an Interface for Transmitting or

Receiving NTP Packets
This topic describes how to configure an interface for transmitting or receiving NTP packets.
Prerequisite
The ACL applied already exists.
Context
l Once an interface is specified through the ntp-service source-interface command, the
source IP address of the packet is obtained from this interface.

l If the ntp-service unicast-server command or the ntp-service unicast-peer command

also specifies a transmit interface, this transmit interface specified through the ntp-service
unicast-server command or the ntp-service unicast-peer command prevails.
Procedure
Run the ntp-service source-interface command to specify an interface for transmitting NTP
packets.
----End
Example
To specify VLAN interface 2 for transmitting NTP packets, do as follows:
huawei(config)#ntp-service source-interface vlanif 2
Related Operation
Table 15-14 lists the related operations for configuring an interface for transmitting or receiving
NTP packets.
Table 15-14 Related operations for configuring an interface for transmitting or receiving NTP
packets
Cancel a local interface for undo ntp-service source- -

transmitting or receiving NTP interface
packets
Disable an interface from ntp-service in-interface disable Configure in the

receiving NTP packets corresponding
interface config mode.
Enable an interface to receive undo ntp-service in-interface Configure in the

NTP packets disable corresponding
interface config mode.

Configuration Guide-IPM CLI 16 Managing the MAC Address
16 Managing the MAC Address
About This Chapter
This topic describes how to configure the MAC address and MAC address pool on the
UA5000.
16.1 Introduction to the MAC Address

This topic describes the media access control (MAC) address and its application on the
UA5000.
16.2 Adding a Static MAC Address
This topic describes how to add a static MAC address.
16.3 Setting the Maximum Number of MAC Addresses Learned by a Service Port
This topic describes how to set the maximum number of MAC addresses learned by a service
port. This helps to restrict the number of users connected to the port.
16.4 Configuring the Aging Time of a Dynamic MAC Address
This topic describes how to configure the aging time of a dynamic MAC address.
16.5 Configuring the MAC Address Filtering Function
This topic describes how to configure the MAC address filtering function to filter the packets
whose source MAC address is the specified MAC address.
16.6 Configuring a MAC Address Pool
This topic describes how to configure a MAC address pool.

16 Managing the MAC Address Configuration Guide-IPM CLI
16.1 Introduction to the MAC Address

This topic describes the media access control (MAC) address and its application on the
UA5000.
Service Description
The UA5000 manages the layer 2 address forwarding table (also called the MAC address list).
This table includes the MAC address of a device, VLAN and the number of the port connecting
to the device. According to the MAC address list, the UA5000 distributes the packets to the
corresponding physical ports. MAC address management refers to maintaining the MAC address
list by learning the MAC addresses, configuring the static MAC addresses and setting the aging
time of the MAC addresses.
The UA5000 supports up to 512 static MAC addresses. If the control board is H601IPMB,
H612IPMB, or H601IPMD, the UA5000 supports up to 16384 dynamic MAC addresses. If the
control board is H612IPMD, the UA5000 supports up to 32768 dynamic MAC addresses.
The UA5000 supports up to 20 MAC address pools, but the total number of MAC addresses
cannot exceed 2048.
16.2 Adding a Static MAC Address

This topic describes how to add a static MAC address.
Prerequisite
l Create a service port before adding a static MAC address to the service port.
l Add an uplink port to a specified VLAN before adding a static MAC address to the uplink
port.
Context
l When you add a static MAC address in the specified service channel or the uplink port of
a specified VLAN, if the same dynamic MAC address exists in the system, the dynamic
MAC address is overwritten by the static MAC address. A static MAC address cannot be
added if the same static MAC address exists in the system.
l The configured static MAC address must be excluded from the MAC address pool. You
can run the display mac-pool command to check it.
l An uplink port which is included in different VLANs can be configured with the same static
MAC address.
Procedure
Step 1 Run the mac-address static command to add a static MAC address.
Step 2 Run the display mac-address static command to query the configured static MAC address.
----End

Example
To configure the MAC address of ADSL2+ port 0/7/0 with VPI/VCI 0/32 to 1010-1010-1010,
do as follows:
huawei(config)#mac-address static adsl 0/7/0 vpi 0 vci 32 1010-1010-1010
huawei(config)#display mac-address static
---------------------------------------------------------------------------
Type MAC MAC Type F/S /P VPI VCI FLOWTYPE FLOWPARA VLANID
---------------------------------------------------------------------------
adl 1010-1010-1010 static 0/7 /0 0 32 - -
3
---------------------------------------------------------------------------
Total: 1
Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or
VLAN ID etc.), the VPI is access-end VLAN ID in vdsl/eau port
or PON ID in gpon port
Related Operation
Table 16-1 lists the related operation for adding a static MAC address.
Table 16-1 Related operation for adding a static MAC address

Delete a static MAC address undo mac-address static
16.3 Setting the Maximum Number of MAC Addresses

Learned by a Service Port
This topic describes how to set the maximum number of MAC addresses learned by a service
port. This helps to restrict the number of users connected to the port.
Context
l By default, the maximum number of MAC addresses learned by a service port is 255.
l The maximum number of MAC addresses learned by a service port does not include the
configured static MAC addresses.
Procedure
Step 2 Run the port vlan command to add the uplink port and service virtual port to the VLAN.
Step 3 Run the service-port command to add a service virtual port to the VLAN.
Step 4 Run the mac-address max-mac-count command to set the maximum number of MAC
addresses learned by a service port.
Step 5 Run the display mac-address max-mac-count command to query the configured maximum
number of MAC addresses learned by the service port.
----End

To set the maximum number of MAC addresses learned by ADSL service port 0/7/0 with VLAN
ID of 10 at the user side as 10, do as follows:
huawei(config)#service-port vlan 10 adsl 0/7/0 vpi 0 vci 35 multi-service user-v
lan 10 rx-cttr 6 tx-cttr 6
Add service virtual port successfully
huawei(config)#mac-address max-mac-count adsl 0/7/0 vpi 0 vci 32 user-vlan 10 10
huawei(config)#display mac-address max-mac-count adsl 0/7/0 vpi 0 vci 35 user-vl
an 10
----------------------------------------------------------------------------
Type F/S /P VPI VCI VLAN ID FLOWTYPE FLOWPARA Learnable MAC number
----------------------------------------------------------------------------
adl 0/7/0 0 35 10 byVlan 10 10
----------------------------------------------------------------------------
Note : F--Frame, S--Slot, P--Port(xDSL Port,UP-Link Port,IMA GROUP or
or PON ID in epon port
16.4 Configuring the Aging Time of a Dynamic MAC

Address
This topic describes how to configure the aging time of a dynamic MAC address.
Context
l To effectively realize the aging function of dynamic MAC addresses, you need to configure
the aging time. If a device does not receive any packet carrying the source MAC address
during the period which is equal to or double of the aging time, the MAC address of the
device is deleted from the MAC address list.
l By default, the aging time of the MAC address is 300s. In general, it is recommended that
you use the default value.
l If the aging time is very short, the dynamic MAC address is deleted quickly. In this case,
after receiving the packet that matches the MAC address entry, the device learns the MAC
address again by broadcasting the packet to all the ports in one VLAN. The relearning
affects the running performance of the device.
l If the aging time is very long, the device fails to update the MAC address list in time
according to the changes in the network. If the number of the learned MAC addresses
reaches the upper limit in a specified service port, the service port directly discards the
packets that carry new MAC addresses.
l The address aging function is effective only for dynamic MAC addresses.
Procedure
Step 1 Run the mac-address-table command to configure the aging time of a dynamic MAC address.
Step 2 Run the display mac-address timer command to query the configured aging time of the
dynamic MAC address.
----End
Example
To set the aging time of a dynamic MAC address as 500s, do as follows:

huawei(config)#mac-address timer 500

huawei(config)#display mac-address timer
MAC aging time: 500s
To configure that the dynamic MAC address of the system does not age, do as follows:
huawei(config)#mac-address timer no-aging
huawei(config)#display mac-address timer
MAC aging time: No aging

Context
l If the control board is IPMB, the system supports filtering packets with up to three MAC
addresses.
l If the control board is IPMD, the system supports filtering packets with up to four MAC
addresses.
Procedure
Step 1 Run the security mac-filter command to configure the MAC address filtering function.
Step 2 Run the display security mac-filter command to query the configured MAC address.
----End
Example
To configure the MAC address 1000-0000-0000 as the filtering MAC address if the control
board is H612IPMB, do as follows:
huawei(config)#security mac-filter 1000-0000-0000
huawei(config)#display security mac-filter
--------- Mac Address ---------
1000-0000-0000
---- 1 mac address found ----
Related Operation
Table 16-2 lists the related operation for configuring the MAC address filtering function.
Table 16-2 Related operation for configuring the MAC address filtering function
Cancel the MAC address filtering undo security mac-filter

function
16.6 Configuring a MAC Address Pool

This topic describes how to configure a MAC address pool.

Context
l The system supports up to 20 MAC address pools and totally 2048 MAC addresses.
l The MAC address pool to be added cannot include MAC addresses of the system, such as
the bridge MAC address and the MAC address used for intra-board communication. The
MAC address pool to be added cannot overlap with others.
Procedure
Step 1 Run the mac-pool command to configure a MAC address pool.
Step 2 Run the display mac-pool command to query the added MAC address pool.
----End
Example
To configure a MAC address pool with index 0, start MAC address 1000-0000-0000, and address
count 800, do as follows:
huawei(config)#mac-pool 0 1000-0000-0000 800
huawei(config)#display mac-pool all
Current allocation method of MAC addresses: manual
User-configured MAC pools :
----------------------------------------------------------------
Index StartMAC EndMAC Scope UsedNum
----------------------------------------------------------------
0 1000-0000-0000 1000-0000-031f 800 0
----------------------------------------------------------------
MAC pools : 1, MAC addresses :800, Addresses in use : 0

Configuration Guide-IPM CLI 17 Configuring the TCP/IP Connection
17 Configuring the TCP/IP Connection
About This Chapter
This topic describes how to configure the TCP&IP connection on the UA5000.
17.1 Introduction to the TCP/IP Connection

This topic describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connection
attributes and the application on the UA5000.
17.2 Related Concepts of TCP/IP Connection
This topic describes the concepts of the synwait timer and finwait timer.
17.3 Configuring the synwait Timer
This topic describes how to configure the synwait timer.
17.4 Configuring the finwait Timer
This topic describes how to configure the finwait timer.
17.5 Configuring the Socket Buffer
This topic describes how to configure the size of the socket transmit and receive buffer that are
connection-oriented.
17.6 Enabling the TCP Debugging
This topic describes how to enable the TCP debugging so that the required information can be
displayed on the terminal.
17.7 Enabling the IP Packet Debugging
This topic describes how to enable the IP packet debugging.

17 Configuring the TCP/IP Connection Configuration Guide-IPM CLI
17.1 Introduction to the TCP/IP Connection

This topic describes the Transfer Control Protocol/Internet Protocol (TCP/IP) connection
attributes and the application on the UA5000.
Service Description
The TCP connection configuration supported by the UA5000 involves the following:
l Configuring the synwait timer

l Configuring the finwait timer
l Configuring the socket buffer
l Enabling the TCP debugging
The UA5000 supports the TCP/IP connection configuration.
17.2 Related Concepts of TCP/IP Connection

This topic describes the concepts of the synwait timer and finwait timer.
synwart Timer
When the synchronization (SYN) packet is sent, TCP enables the synwait timer. If no
acknowledgement (ACK) packet is received before the synwait timer times out, the TCP
connection is terminated.
finwait Timer
If a TCP connection switches from the FIN_WAIT_1 state to the FIN_WAIT_2 state and fails
to receive any new data, the finwait timer is enabled. If this timer times out, the TCP connection
is dropped.
The purpose of enabling the finwait timer is to prevent the situation in which a connection stays
in the FIN_WAIT_2 state forever if the peer end does not send the FIN packet.
17.3 Configuring the synwait Timer

This topic describes how to configure the synwait timer.
Context
The timeout time of the synwait timer ranges from 2s to 600s. The default value is 75s.

Procedure
Run the tcp timer syn-timeout comand to configure the synwait timer.
----End
Example
To configure the time of the TCP synwait timer as 100s, do as follows:
huawei(config)#tcp timer syn-timeout 100
Related Operation
Table 17-1 lists the related operation for configuring the synwait timer.
Table 17-1 Related operation for configuring the synwait timer
Restore the default value of the undo tcp timer syn-timeout

synwait timer
17.4 Configuring the finwait Timer

This topic describes how to configure the finwait timer.
Context
The timeout time of finwait timer ranges from 76s to 3600s. The default is 675s.
Procedure
Run the tcp timer fin-timeout command to configure the finwait timer.
----End
Example
To configure the time of the finwait timer as 200s, do as follows:
huawei(config)#tcp timer fin-timeout 200
Related Operation
Table 17-2 lists the related operation for configuring the finwait timer.

Table 17-2 Related operation for configuring the finwait timer
Restore the default value of the undo tcp timer fin-timeout

finwait timer
17.5 Configuring the Socket Buffer

This topic describes how to configure the size of the socket transmit and receive buffer that are
connection-oriented.
Context
The buffer size ranges from 1 KB to 32 KB. The default is 4 KB.
Procedure
Run the tcp window command to set the size of the socket transmit and receive buffer.
----End
Example
To configure the size of the socket transmit and receive buffer as 12 KB, do as follows:
huawei(config)#tcp window 12
Related Operation
Table 17-3 lists the related operation for configuring the socket buffer.
Table 17-3 Related operation for configuring the socket buffer
Restore the default value of the undo tcp window

socket buffer
17.6 Enabling the TCP Debugging

This topic describes how to enable the TCP debugging so that the required information can be
displayed on the terminal.
Context
The debugging information is displayed on the terminal only after terminal monitor and (undo)
terminal debugging are enabled.

Procedure
Run the debugging tcp packet command to enable the TCP debugging.
----End
Example
To enable the TCP debugging, do as follows:
huawei(config)#debugging tcp packet
Related Operation
Table 17-4 lists the related operations for enabling the TCP debugging.
Table 17-4 Related operations for enabling the TCP debugging

Disable the debugging information about undo debugging tcp

TCP packets
Enable/Disable the function of displaying (undo) terminal monitor

the debugging/log/alarm information on
the terminal
Enable/Disable the output of the (undo) terminal debugging

debugging information on the terminal
17.7 Enabling the IP Packet Debugging

This topic describes how to enable the IP packet debugging.
Context
The debugging information is displayed on the terminal only after terminal monitor and (undo)
terminal debugging are enabled.
By default, the terminal monitor and (undo) terminal debugging function are disabled.
NOTE
A large amount of debugging information may be displayed on the terminal after the debugging is enabled.
Perform this operation with caution.
Procedure
Run the debug ip packet command to enable the IP packet debugging.
----End
Example
To enable the IP packet debugging, do as follows:

huawei(config)#debugging ip packet
*0.880717530 huawei IP/8/debug_case:
Sending, interface = meth0, version = 4, headlen = 20, tos = 192,
pktlen = 316, pktid = 5152, offset = 0, ttl = 255, protocol = 6,
checksum = 36292, s = 10.78.212.64, d = 10.70.47.67
prompt: Sending the packet from local at meth0
Related Operation
Table 17-5 lists the related operations for enabling the IP packet debugging.
Table 17-5 Related operations for enabling the IP packet debugging

Disable the IP packet debugging undo debugging ip packet
Enable/Disable the ICMP (undo) debugging ip icmp

debugging
Query the information about the display ip interface

IP layer interfaces
Enable/Disable the function of (undo) terminal monitor

displaying the debugging/log/
alarm information on the terminal
Enable/Disable the output of the (undo) terminal debugging

debugging information on the
terminal

Configuration Guide-IPM CLI 18 Configuring the ACL
18 Configuring the ACL
About This Chapter
The following lists the contents of this chapter.
18.1 Introduction to the ACL

This topic describes the access control list (ACL) and its applications on the UA5000.
18.2 Configuration Example of a Basic ACL
This example shows how to permit data packets that meet the source IP address conditions within
a certain period of time.
18.3 Configuration Example of an Advanced ACL
This topic describes how to filter data packets that meet the source IP address and DSCP
conditions within a certain period of time.
18.4 Configuration Example of a Layer 2 ACL
This topic describes how to filter data packets that meet the source MAC address, destination
MAC address, and VLAN ID conditions within a certain period of time.
18.5 Configuration Example of the Customized ACL
This topic describes how to filter data packets that meet the customized conditions within a
certain period of time.
18.6 Creating an ACL
This topic describes how to create a basic ACL, an advanced ACL, a layer 2 ACL or a customized
ACL.
18.7 Configuring a Time Range
This topic describes how to configure a time range, to specify the valid time of an ACL rule.
18.8 Setting the Step
This topic describes how to modify the step of ACL rules when they are automatically numbered.
18.9 Creating a Basic ACL Rule
This topic describes how to configure a basic ACL rule so that the UA5000 can filter data packets
according to the source IP address.
18.10 Creating an Advanced ACL Rule

18 Configuring the ACL Configuration Guide-IPM CLI
This topic describes how to configure an advanced ACL rule to filter data packets according to
information such as the source IP address, destination IP address, IP bearer protocol type and
features for the protocol.
18.11 Creating a Layer 2 ACL Rule
This topic describes how to configure a layer 2 ACL rule to filter data packets according to the
link layer information such as the source MAC address, source VLAN ID, layer 2 protocol type,
layer 2 receive port, layer 2 forward port and destination MAC address.
18.12 Creating a Customized ACL Rule
This topic describes how to configure a customized ACL rule to filter data packets according to
any eight character strings (up to four bytes in a character string) in the first 80 bytes of the layer
2 data frame.
18.13 Activating an ACL
This topic describes how to activate a configured ACL.

18.1 Introduction to the ACL

This topic describes the access control list (ACL) and its applications on the UA5000.
Service Description
An ACL performs the packet filtering function. You can configure some matching rules on
network devices to filter unwanted data packets. With the matching rules, the network devices
can permit or deny the data packets that can pass. The process of filtering packet traffic by the
ACL is the prerequisite for configuring the Quality of Service (QoS).
For details on ACL, see "ACL" in the UA5000 Universal Access Unit Feature Description.
The UA5000 provides high QoS based on the traffic rule classification, traffic statistics, and
scheduling policies. The UA5000 supports the following types of ACLs: basic ACL, advanced
ACL, layer 2 ACL, and customized ACL. It performs the operations of filtering, traffic mirroring,
traffic limitation, adding the priority tag, redirection, and traffic measurement on packets filtered
by ACL rules.
If ACL rules are delivered to the user port of the UA5000, such as ADSL2+ port 0/10/0, then
all the ADSL2+ ports in slot 0/10 filter packets. If the ACL rules are delivered to an Ethernet
port, then only the Ethernet port filters packets.
In the case of a basic ACL, an advanced ACL, or a layer 2 ACL, the mask of the IP/MAC address
is the inverse mask. In the case of a customized ACL, the mask of the IP/MAC address is the
positive mask.
ACL Types
Table 18-1 lists the four types of ACLs
Table 18-1 ACL types
Type Numeral Feature

Range
Basic ACL 20002999 Allows rule definition according to the L3 source IP

address.
Advanced ACL 30003999 Allows rule definition according to the source address,
destination address, IP bearer protocol type, TCP source
port, TCP destination port, ICMP protocol type and ICMP
code.
Compared with the basic ACL, the definition of the
advanced ACL is more accurate, more detailed and more
flexible.
Layer 2 ACL 40004999 Allows rule definition according to the source MAC
address, source VLAN ID, layer 2 protocol type, and
destination MAC address.

Type Numeral Feature

Range
Customized 50005999 Allows rule definition according to any 16 bytes of the

ACL first 64 bytes in a layer 2 frame.
Difference Between Matching Sequence and Configuration Sequence

ACL rule IDs are assigned in the same sequence as that in which an ACL is defined.
By default, the ID of the first ACL rule is 5, the ID of the second rule is 10, the ID of the third
rule is 15, and so on. This is called configuration sequence.
If a traffic stream reaches a device and matches with two or more ACL rules, the rule that should
be followed to handle the traffic is determined by the matching sequence.
You can match the traffic with one group of ACL rules or with different groups of ACL rules.
Matching with One Group of ACL Rules

l If all the rules in an ACL are activated at the same time, a rule defined earlier has a higher
priority than the rules defined later.
l If all the rules in an ACL are activated one by one, a rule activated later has a higher priority
than the rules activated earlier.
Assume that ACL rule A denies all the IP packets, and ACL rule B permits packets to a specific
IP address, and ACL rule B is configured earlier than ACL rule A. Activate the two rules at the
same time. In this case, the two ACL rules conflict when they are used to process packets to
such specific IP address. Because ACL rule B is configured earlier, it has higher priority over
ACL rule A, so ACL rule B is chosen as the rule to handle the packets to such a specific address.
The combination of ACL rule A and ACL rule B filter all the IP packets except the packets
carrying the specific IP address.
Matching with Different Groups of ACL Rules

When different groups of ACL rules are used to match the packets, the QoS action that is
activated earlier has a higher priority than the actions activated later.
Assume that ACL group A filters all the IP packets, and ACL group B permits packets to a
specific IP address. QoS action A is based on ACL A, and QoS action B is based on ACL B.
Activate QoS action A first on a port, and then activate QoS action B on the same port. Because
QoS action B is activated later than QoS action A, all the IP packets are filtered except the packets
carrying the specific IP address.
If QoS action B is activated first on the port, and QoS action A is activated later, all the IP packets
are filtered.
Default Matching Sequence

The preceding section describes the matching sequence when a traffic stream matches with
multiple rules. If the traffic stream does not match with any rule, the stream is processed
according to a default rule.
The default rule is to forward all the unmatched packets.

You can define a rule such as permit any or deny any for all ACLs so that any packet has a
rule to match.
Recommendations on Configuring ACL Rules

To use ACLs more efficiently, you can do as follows:
l Activate the QoS actions consecutively if the QoS actions apply to the same ACL rule.
To enable traffic statistics and traffic limitation on packets that match with rule 10 of
ACL 2001, activate these two actions consecutively. This is because all QoS actions
based on the same rule share the same hardware resource.
l Activate the QoS actions consecutively if the rules applied to the QoS actions have the
same parameters with different values. This is because the rules with the same parameters
but different values share the same hardware resource.
Assume that the configuration parameter of ACL 2000 rule 10 is IP group, and the
source IP address is 1.1.1.1. The configuration parameter of ACL 2000 rule 15 is IP
group, and the source IP address is 2.2.2.2.
The parameters used in CLI configuration are the same, but the parameter values are
different. In this case, activate the QoS actions consecutively if the two rules have their
associated QoS actions.
l If the rules defined in different ACL groups have the same parameters with different values,
the rules share the same hardware resources. If the QoS actions are delivered based on the
ACL groups, the priorities of the rules defined in the ACL groups become the same.
Assume that the configuration parameter of ACL 2000 rule 10 is IP group, and the
source IP address is 1.1.1.1. The configuration parameter of ACL 2001 rule 15 is IP
group, and the source IP address is 2.2.2.2.
The parameters used in CLI configuration are the same, but the parameter values are
different. The two rules share the same hardware resources. Therefore, they have the
same priority when the QoS actions using the rules are consecutively activated.
If you need the QoS actions applied in different ACL groups to have different priorities,
define the rules in an ACL group with the same parameters and different values.
l The activated ACL rules occupy the hardware resources and share the hardware resources
with the protocol module (such as DHCP and IPoA) functions. In this case, the hardware
resources are insufficient.
Occupying of many hardware resources by the ACL rules results in failure in enabling
other service function. Therefore, it is recommended that you initiate the protocol
module first and then activate ACL rules.
If you fail to initiate a protocol module, handle it according to the following steps:
Check whether ACL rules occupy too many resources.

If ACL rules occupy too many resources, deactivate or delete the ACL configurations
that are not important or not in use, and then initiate the protocol module.
18.2 Configuration Example of a Basic ACL

This example shows how to permit data packets that meet the source IP address conditions within
a certain period of time.

Data Plan
Table 18-2 provides the data plan for configuring a basic ACL.
Table 18-2 Data plan for configuring a basic ACL
Item Data Remarks
ACL number 2000 -
Source IP 2.2.2.2 Data packets from 2.2.2.2 are permitted to

address pass.
Wildcard: 0.0.0.0 (inverse mask)
ACL step Default value -
Time range From 00:00 to 12:00 every -

Friday
Port 0/3/0 Apply ACL 2000 to the port.
Figure 18-1 shows the flowchart for configuring a basic ACL.
Figure 18-1 Flowchart for configuring a basic ACL
Start
(Optional) Configure
a time range
Create a basic ACL
Configure the basic ACL rule
Activate the basic ACL
Save the data
End

Procedure
Step 1 (Optional) Configure a time range.
huawei(config)#time-range time1 00:00 to 12:00 fri
Step 2 Create a basic ACL.

Step 3 Configure the basic ACL rule.

huawei(config-acl-basic-2000)#rule deny time-range time1
huawei(config-acl-basic-2000)#rule permit source 2.2.2.2 0.0.0.0 time-range time1
Step 4 Activate the basic ACL on port 0/3/0.

huawei(config)#packet-filter inbound ip-group 2000 port 0/3/0

huawei(config)#save
----End
Result
According to the ACL rule, from 00:00 to 12:00 every Friday, port 0/3/0 on the UA5000 can
receive the data packets only from IP address 2.2.2.2, and discard other data packets.
18.3 Configuration Example of an Advanced ACL

This topic describes how to filter data packets that meet the source IP address and DSCP
conditions within a certain period of time.
Data Plan
Table 18-3 provides the data plan for configuring an advanced ACL.
Table 18-3 Data plan for configuring an advanced ACL

Item Data Remarks
ACL number 3000 -
Source IP 2.2.2.2 Wildcard: 0.0.0.255 (inverse mask)

address
Destination 3.3.3.3 Wildcard mask: 0.0.0.0 (inverse mask)

IP address
DSCP 23 -

Friday

Figure 18-2 shows the flowchart for configuring an advanced ACL.
Figure 18-2 Flowchart for configuring an advanced ACL.
Start
a time range
Create an advanced ACL
Configure the
advanced ACL rule
Activate the advanced ACL
Save the data
End
Procedure
Step 2 Create an advanced ACL.

Step 3 Configure the advanced ACL rule.

huawei(config-acl-adv-3000)#rule deny ip time-range time1
huawei(config-acl-adv-3000)#rule 3 permit ip source 2.2.2.2 0.0.0.255 destination
3.3.3.3 0 dscp 23 time-range time1
Step 4 Activate the advanced ACL on port 0/3/0.

huawei(config-acl-adv-3000)#quit
huawei(config)#packet-filter inbound ip-group 3000 port

huawei(config)#save
----End
Result
receive the data packets from 2.2.2.0 to 3.3.3.3 with DSCP of 23. Other packets are discarded.

18.4 Configuration Example of a Layer 2 ACL

This topic describes how to filter data packets that meet the source MAC address, destination
MAC address, and VLAN ID conditions within a certain period of time.
Data Plan
Table 18-4 provides the data plan for configuring a layer 2 ACL.
Table 18-4 Data plan for configuring a layer 2 ACL

Item Data Remarks
ACL number 4000 -
Type 0x8863 Indicates the type of the Ethernet bearer

protocol in hexadecimal digits.
COS 1 802.1p priority
Source VLAN ID 12 -
Source MAC 2222-2222-2222 Wildcard: 0000-0000-0000 (inverse mask)

address
Destination MAC 00e0-fc11-4141 Wildcard: 0000-0000-0000 (inverse mask)

address
Time range From 00:00 to 12:00 -

every Friday
Context
If you omit "0x" when entering the type of an Ethernet bearer protocol, the input should be
considered as a decimal number. The decimal number you input is converted to hexadecimal
ones for the protocol type.
Figure 18-3 shows the flowchart for configuring a layer 2 ACL.

Figure 18-3 Flowchart for configuring a layer 2 ACL
Start
a time range
Create a layer 2 ACL
Configure the
layer 2 ACL rule
Activate the layer 2 ACL
Save the data
End
Procedure
Step 2 Create a layer 2 ACL.

Step 3 Configure the layer 2 ACL rule.

huawei(config-acl-link-4000)#rule deny time-range time1
huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1 source 12
2222-2222-2222 0000-0000-0000 destination 00e0-fc11-4141 0000-0000-0000 time-range
time1
Step 4 Activate the layer 2 ACL on port 0/3/0.

huawei(config-acl-link-4000)#quit
huawei(config)#packet-filter inbound link-group 4000 port 0/3/0

huawei(config)#save
----End
Result
receive the Ethernet frames with the source MAC address of 2222-2222-2222, destination MAC
address of 00e0-fc11-4141, VLAN ID of 12, and COS of 1. Other packets are discarded.

18.5 Configuration Example of the Customized ACL

This topic describes how to filter data packets that meet the customized conditions within a
certain period of time.
Context
The customized ACL can only be used to filter the data frame that is in the format of ETH II +
VLAN tag.
Data Plan
Table 18-5 provides the data plan for configuring the customized ACL.
Table 18-5 Data plan for configuring the customized ACL

Item Data Remarks
ACL number 5000 -
Matching byte 06 Wildcard: FF (normal mask)
Offset 27 -
ACL step default -

Friday
Figure 18-4 shows the flowchart for configuring a customized ACL.

Figure 18-4 Flowchart for configuring a customized ACL
Start
a time range
Create a customized ACL
Configure the
customized ACL rule
Activate the
customized ACL
Save the data
End
Procedure
Step 2 Create a customized ACL.

Step 3 Configure the customized ACL rule.

huawei(config-acl-user-5000)#rule deny 06 ff 27 time-range time1
Step 4 Activate the customized ACL on port 0/3/0.

huawei(config-acl-user-5000)#quit
huawei(config)#packet-filter inbound user-group 5000 port 0/3/0

huawei(config)#save
----End
Result
According to the ACL rule, from 00:00 to 12:00 every Friday, port 0/3/0 on the UA5000 rejects
TCP packets.
18.6 Creating an ACL

This topic describes how to create a basic ACL, an advanced ACL, a layer 2 ACL or a customized
ACL.

Context
The UA5000 supports up to 64 ACLs. Each ACL can be configured with up to 64 rules.
Table 18-6 lists the ACL number range.
Table 18-6 ACL number range
ACL Type Numeral Range
Basic ACL for IP packets 2000-2999
Advanced ACL for IP packets 3000-3999
Layer 2 ACL for link layer packets 4000-4999
Customized ACL 5000-5999
Procedure
Step 1 Run the acl command to create an ACL.
Step 2 Run the quit command to quit from ACL mode.
Step 3 Run the display acl command to query the configuration of the ACL.
----End
Example
To create an advanced ACL with ID of 3000, do as follows:
huawei(config)#display acl 3000
Advanced ACL 3000, 0 rule
Acl's step is 5
Related Operation
Table 18-7 lists the related operations for creating an ACL.
Table 18-7 Related operations for creating an ACL

Command...
Delete an ACL undo acl If an ACL and its rules are activated, or if they are
quoted by other QoS functions, the ACL and the
rules cannot be deleted.
Configure the description Create a description which describes the use of the
description for an ACL.
ACL


Command...
Delete the undo -

description for an description
ACL
Configure the step step Step means the difference between two
for an ACL neighboring rules in a group of ACL rules. By
default, it is 5.
Restore the default undo step By default, it is 5.

step
18.7 Configuring a Time Range

This topic describes how to configure a time range, to specify the valid time of an ACL rule.
Context
ACL time ranges include relative time and absolute time.
l Relative time refers to periodical intervals, such as the period from 8:30 in the morning to
18:30 in the afternoon every Monday.
l Absolute time refers to intervals from a specific moment to another specific moment, such
as the period from 12:00 on June 8, 2006 to 18:00 on August 8, 2006.
The principles for a time range to take effect are as follows:
l When a time range includes only the absolute time or relative time, the union set of all the
intervals in the time range takes effect.
l When a time range includes the absolute time and the relative time, the intersection set of
the union sets of relative time and absolute time takes effect.
l The time range is optional for configuring an ACL rule.
l A time range being used cannot be deleted.
Procedure
Step 1 Run the time-range command to configure a time range.
Step 2 Run the display time-range command to query the configured time range.
----End
Example
To create a time range named "last24hrs" that is valid through the entire day of 2008-03-24, do
as follows:
huawei(config)#time-range last24hrs from 00:00 2008/03/24 to 24:00 2008/03/24

huawei(config)#display time-range all

Current time is 15:12:28 3-21-2007 Wednesday
Time-range : last24hrs ( Inactive )

from 00:00 2008/3/24 to 24:00 2008/3/24
18.8 Setting the Step

This topic describes how to modify the step of ACL rules when they are automatically numbered.
Context
l By default, the step is 5.
l If a step changes, the rules in an ACL are re-numbered.
For example, assume that the rules of an ACL are numbered as 5, 10, and 15. If you set
the step to 2, the rules are numbered as 2, 4 and 6.
l When the step is changed to the default value, the rules of the ACL are re-numbered.
For example, assume that the rules of the ACL are numbered as 1, 3 and 5. The step is
2. If you change the step to the default value, the rules are re-numbered as 5, 10 and 15.
Procedure
Step 1 Run the acl command to create a basic ACL.
Step 2 Run the step command to modify the step of the ACL rules.
Step 3 Run the quit command to quit the basic ACL mode.
Step 4 Run the display acl command to query the configured step.
----End
Example
To set the step to 10, do as follows:
huawei(config-acl-basic-2000)#step 10
Basic ACL 2000, 1 rule
Acl's step is 10
rule 10 permit (0 times matched)
Related Operation
Table 18-8 lists the related operation for setting the step.

Table 18-8 Related operation for setting the step

Command...
Restore the default undo step By default, it is 5.

step
18.9 Creating a Basic ACL Rule

This topic describes how to configure a basic ACL rule so that the UA5000 can filter data packets
according to the source IP address.
Prerequisite
The basic ACL to which the rule is added already exists.
Context
Up to 64 rules can be created for an ACL.
You can change the configuration of an ACL rule by specifying the number of the rule. This
method does not change another rules.
Procedure
Step 1 Run the acl command to createa basic ACL rule.
Step 2 Run the rule command to configure the basic ACL rule.
Step 3 Run the quit command to quit the basic ACL config mode.
Step 4 Run the display acl command to query the information about the basic ACL rule.
----End
Example
To configure a basic ACL rule that enables data packets from 2.2.2.2 to pass, do as follows:
huawe(config)#acl 2000
huawei(config-acl-basic-2000)#rule permit source 2.2.2.2 0
Acl's step is 5
rule 5 permit source 2.2.2.2 0 (0 times matched)
Related Operation
Table 18-9 lists the related operation for creating a basic ACL rule.

Table 18-9 Related operation for creating a basic ACL rule
Delete an ACL rule undo rule
18.10 Creating an Advanced ACL Rule

This topic describes how to configure an advanced ACL rule to filter data packets according to
information such as the source IP address, destination IP address, IP bearer protocol type and
features for the protocol.
Prerequisite
The advanced ACL to which the rule is added already exists.
Context
Procedure
Step 1 Run the acl command to create an advanced ACL rule.
Step 2 Run the rule command to configure the advanced ACL rule.
Step 3 Run the quit command to quit the advanced ACL config mode.
Step 4 Run the display acl command to query the advanced ACL rule.
----End
Example
To configure an advanced ACL rule that allows data packets from 2.2.2.2 to 3.3.3.3 with DSCP
of 23 to pass, and the valid time as the predefined time 1, do as follows:
huawei(config-acl-adv-3000)#rule 3 permit ip source 2.2.2.2 0 destination 3.3.3.3
0 dscp 23 time-range time1
Advanced ACL 3000, 1 rule
Acl's step is 5
rule 3 permit ip source 2.2.2.2 0 destination 3.3.3.3 0 dscp 23 time-range
time1 (0 times matched)(Inactive)
Related Operation
Table 18-10 lists the related operation for creating an advanced ACL rule.

Table 18-10 Related operation for creating an advanced ACL rule
18.11 Creating a Layer 2 ACL Rule

This topic describes how to configure a layer 2 ACL rule to filter data packets according to the
link layer information such as the source MAC address, source VLAN ID, layer 2 protocol type,
layer 2 receive port, layer 2 forward port and destination MAC address.
Prerequisite
The layer 2 ACL to which the rule is added already exists.
Context
Procedure
Step 1 Run the acl command to create a layer 2 ACL rule.
Step 2 Run the rule command to configure the layer 2 ACL rule.
Step 3 Run the quit command to quit the layer 2 ACL config mode.
Step 4 Run the display acl command to query the information about the layer 2 ACL rule.
----End
Example
To define a layer 2 ACL rule that allows data packets with the type of 0x8863, VLAN ID of 12,
COS of 1, source MAC address of 2222-2222-2222 and destination MAC address of 00e0-
fc11-4141 to pass, do as follows:
huawei(config-acl-link-4000)#rule 1 permit type 0x8863 cos 1 source 12
2222-2222-2222 0000-0000-0000 destination 00e0-fc11-4141 0000-0000-0000
huawei(config-acl-link-4000)#quit
Acl's step is 5
rule 1 permit type 0x8863 cos background source 2222-2222-2222 0000-0000-0000
12 destination 00e0-fc11-4141 0000-0000-0000
Related Operation
Table 18-11 lists the related operation for creating a layer 2 ACL rule.

Table 18-11 Related operation for creating a layer 2 ACL rule
18.12 Creating a Customized ACL Rule

This topic describes how to configure a customized ACL rule to filter data packets according to
any eight character strings (up to four bytes in a character string) in the first 80 bytes of the layer
2 data frame.
Prerequisite
The customized ACL to which the rule is added already exists.
Context
Figure 18-5 shows the first 64 bytes of a layer 2 frame. Every letter represents one hexadecimal,
and every two letters represent one byte.
Figure 18-5 First 64 bytes of a layer 2 frame
Table 18-12 lists the meaning of the letters and their offset values.
Table 18-12 Description of letters and their offset values
Letter Meaning Offset Lette Meaning Offset

r
A Destination MAC 0 L IP check sum 28

address
B Source MAC address 6 M Source IP address 30
C VLAN tag field 12 N Destination IP address 34
D Protocol type 16 O TCP source port 38


r
E IP version 18 P TCP destination port 40
F TOS field 19 Q Serial number 42
G IP packet length 20 R Acknowledgement 46
H ID number 22 S IP header length and 50

reserved bit
I Flags field 24 T Reserved bit and flags 51

bit
J TTL field 26 U Window Size field 52
K Protocol number (6 27 V Other 54

refers to TCP and 17
refers to UDP)
Table 18-13 Description of letters and their offset values

r
A Destination MAC 0 O TTL field 34

address
B Source MAC address 6 P Protocol number (6 35

refers to TCP and 17
refers to UDP)
C VLAN tag field 12 Q IP check sum 36
D Length filed of a frame 14 R Source IP address 38
E Destination service 18 S Destination IP address 42

access point (DSAP)
filed
F source service access 19 T TCP source port 46

point (SSAP) filed
G Ctrl field 20 U TCP destination port 48
H org code field 21 V Serial number 50
I Type of encapsulated 24 W Acknowledgement 54

frame
J IP version 26 XY IP header length and 58

reserved bit
K TOS field 27 Z Reserved bit and flags 59

bit


r
L IP packet length 28 A Window Size field 60
M ID number 30 B Other 62
N Flags field 32
In Figure 18-5, the offset of their field is their offset in the ETH II +VLAN tag format. For the
customized ACL, the user can use the rule mask and offset parameters to extract any byte from
the first 80 bytes of data frame, and then compare the extracted byte with customized rules to
filter matched data frames for processing.
Procedure
Step 1 Run the acl command to create a customized ACL rule.
Step 2 Run the rule command to configure the customized ACL rule.
Step 3 Run the quit command to quit the customized ACL mode.
Step 4 Run the display acl command to query the information about the ACL rule.
----End
Example
To filter all TCP packets, do as follows:
huawei(config-acl-adv-5000)#rule permit 06 ff 27
User ACL 5000, 1 rule
Acl's step is 5
rule 5 permit 06 ff 27
Related Operation
Table 18-14 lists the related operation for creating a customized ACL rule.
Table 18-14 Related operation for creating a used defined ACL rule
18.13 Activating an ACL

This topic describes how to activate a configured ACL.

Prerequisite
The ACL to be activated must be configured, and the port for which the ACL needs to be activated
must work in the normal state.
Procedure
Step 1 Run the packet-filter command to activate an ACL.
Step 2 Run the display packet-filter port command to query the activated state of the ACL.
----End
Example
To activate ACL 3000 on port 0/3/0, do as follows:
huawei(config)#packet-filter inbound ip-group 3000 port 0/3/0
huawei(config)#display packet-filter port 0/3/0
port 0/3/0
Inbound:
inbound Acl 3000 rule 5 port 0/3/0 running
Total number of packet-filter inbound : 1

Total number of packet-filter outbound : 0
Total number of packet-filter all : 1
Related Operation
Table 18-15 lists the related operation for activating an ACL.
Table 18-15 Related operation for activating an ACL

Deactivate an ACL undo packet-filter

Configuration Guide-IPM CLI 19 Configuring the QoS
19 Configuring the QoS
About This Chapter
This topic describes how to configure the QoS supported by the UA5000.
19.1 Introduction to QoS
This topic describes the feature of quality of service (QoS) and its application on the UA5000.
19.2 Configuration Example of Traffic Sorting
This topic describes how to implement traffic management by adding or deleting a traffic entry,
and setting the traffic class.
19.3 Traffic Management
A traffic entry can control and monitor service traffic. The traffic entries are the core of traffic
management. You can bind traffic entries with service traffic to implement traffic management.
19.4 Limiting the Traffic of the Packet That Matches an ACL Rule
This topic describes how to enable traffic limitation for the packet that matches an ACL rule.
Traffic limitation ensures efficient use of network resources and provides better services by
limiting the traffic of the services of specified users on the specified ports.
19.5 Adding a Priority Tag to the Packet That Matches an ACL Rule
This topic describes how to add priority tags to TOS, DSCP, and 802.1p packets that match an
ACL.
19.6 Mirroring the Traffic of the Packet That Matches an ACL Rule
This topic describes how to mirror the traffic of the packet that matches an ACL rule. Mirroring
involves duplicating data packets that match an ACL rule to a monitoring port for network
detection and troubleshooting. Both the source port and the destination port can receive or
forward packets.
19.7 Redirecting the Packet That Matches an ACL Rule
This topic describes how to redirect the packet that matches an ACL on a port. After this
operation, the transmit port of the packet is re-specified. The original port neither receives nor
forwards the packet.
19.8 Collecting Traffic Statistics of the Packet That Matches an ACL Rule
This topic describes how to collect the traffic statistics of the packet that matches an ACL for
analysis.
19.9 Modifying the VLAN for the Packet That Matches an ACL Rule

19 Configuring the QoS Configuration Guide-IPM CLI
This topic describes how to modify the VLAN ID of the packet that matches an ACL rule to
switch the data stream to different VLANs.
19.10 Enabling Line Rate Limitation on a Port
This topic describes how to enable the line rate limitation on a port.
19.11 Configuring the Queue Scheduling Mode
This topic describes how to configure the queue scheduling mode to solve the problem that
multiple data streams compete for network resources when network congestion occurs.

19.1 Introduction to QoS

This topic describes the feature of quality of service (QoS) and its application on the UA5000.
Service Description
By setting different parameters of the QoS, such as service availability, throughput, time delay,
jitter, and packet loss rate, you can provide users with high quality services.
For details on QoS, see "QoS" in the UA5000 Universal Access Unit Feature Description.
The UA5000 supports ACL-based QoS policies and multiple QoS features, including:
l Priority policies based on the traffic classification: priority specification and priority
duplication
l Traffic classification and queue scheduling based on ports
l Bandwidth management: the two rate three color marker (trTCM) based on the traffic
classification
l Multi-level traffic monitoring
Traffic classification refers to the classification of packets from end users on access points. After
the classification, service streams map to different upstream VLANs. The traffic classification
is the basis for service management. It also comprises the principles for QoS policies such as
setting priority labels and performing traffic control for subscriber services. Currently, the
UA5000 supports the following types of traffic classifications:
l By user VLAN
l By 802.1p priority classification of user packets
l By encapsulation type of user packets
19.2 Configuration Example of Traffic Sorting

This topic describes how to implement traffic management by adding or deleting a traffic entry,
and setting the traffic class.
Figure 19-1 shows the flowchart for configuring traffic management.

Figure 19-1 Flowchart for configuring traffic management
Start
Query the traffic class in

the rate table
Set the traffic class
Configure the item of the

traffic table
Query traffic table items
End
Procedure
Step 1 Query the traffic class in the rate table.
huawei(config)#display rate table row
Step 2 Configure the traffic class and modify the rate of the No. 1 traffic class from 128 kbit/s to 160
kbit/s.
huawei(config)#modify rate table row 128 160
Step 3 Configure traffic entries.

huawei(config)#traffic table atm srvcategory cbr tdtype noClpNoScr clp01Pcr 160
priority 6 priority-policy tag-In-Package
Step 4 Query the traffic entries.

huawei(config)#display traffic table from-index 0
{ <cr>|to-index<K> }:
Command:
display traffic table from-index 0
Traffic parameters for IP service:
-----------------------------------------------------------------------------
TID CAR(kbps) Priority Pri-Policy
-----------------------------------------------------------------------------
0 128 6 tag-pri
5 64 1 pvc-pri
-----------------------------------------------------------------------------
Traffic parameters for ATM service:

-----------------------------------------------------------------------------
TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/SHAPE
Type Type kbps kbps kbps kbps cells 1/10us
-----------------------------------------------------------------------------
0 cbr 2 160 -- -- -- -- -- off/--
5 ubr 2 80 -- -- -- -- -- on /--
-----------------------------------------------------------------------------
Total Num : 2
Traffic type definition:
1:NoTrafficDescriptor 2:NoClpNoScr 3:ClpNoTaggingNoScr

4:ClpTaggingNoScr 5:NoClpScr 6:ClpNoTaggingScr

7:ClpTaggingScr 8:ClpNoTaggingMcr 9:ClpTransparentNoScr
10:ClpTransparentScr 11:NoClpTaggingNoScr 12:NoClpNoScrCdvt
13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt 15:ClpTaggingScrCdvt
-----------------------------------------------------------------------------

huawei(config)#save
----End
19.3 Traffic Management

A traffic entry can control and monitor service traffic. The traffic entries are the core of traffic
management. You can bind traffic entries with service traffic to implement traffic management.
Context
ATM traffic management:
The ATM related services of the UA5000 are implemented through PVCs. Traffic profile index
is selected when the PVC is set up. The traffic profile index corresponds to the traffic entry.
The entries included in the ATM traffic profile are as follows:
l Traffic index
It is the traffic profile index selected at the PVC setup.

l Service type
The UA5000 supports four service types: CBR, nrt-VBR, rt-VBR, and UBR. Each
service type corresponds to multiple traffic types.
l Traffic type
The UA5000 supports 15 traffic types. Each traffic type has its own parameters.
l Traffic parameters
Traffic parameters include peak cell rate (PCR), sustainable cell rate (SCR), and cell
delay variation tolerance (CDVT).
l Seven default traffic profiles with the IDs of 0 to 6 exist in the system.
l After the traffic profile is added successfully, the system displays the index of the new
profile (TID). Then the TID is used for the operation of referencing or deleting the new
profile.
l The system automatically adapts the rate of the traffic profile downwards to a multiple of
64 according to the value input by the user.
l If the upstream and downstream traffic profiles of the service traffic are different, ensure
that the priorities of the two profiles are the same.
When adding a service port to the UA5000, select the traffic profile index. The traffic profile
index corresponds to the traffic entry.
The entries included in the ATM traffic profile are as follows:
l Traffic index

It is the traffic profile index selected when the service port is added.
l CAR
Committed access rate (CAR) indicates the maximum access rate.

l Priority and priority policy
It is the policy for selecting the traffic priority and packet priority.
Procedure
Step 1 Run the traffic table command to configure a traffic entry.
Step 2 Run the display traffic table command to query a traffic entry.
----End
Example
Assume that:
l The service type is cbr.
l The traffic description type is noClpNoScr.
l clp01Pcr is 160.
l 802.1p priority is 6.
l The priority policy is tag-In-Package.
To add such an ATM traffic entry, do as follows:
huawei(config)#traffic table atm srvcategory cbr tdtype noClpNoScr clp01Pcr 160
priority 6 priority-policy tag-In-Package
Create traffic descriptor record successfully
-----------------------------------------------------------------------------
TD Index : 0
Priority : 6
Priority policy : tag-pri
CAR : 128 kbps
TD Type : NoClpNoScr
Service category : cbr
Referenced Status : not used
EnPPDISC : off
EnEPDISC : off
Clp01Pcr : 160 kbps
--------------------------------------------------------------------------
Command:
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 128 6 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 160 -- -- -- -- -- off/--

-----------------------------------------------------------------------------
Total Num :
1
1:NoTrafficDescriptor 2:NoClpNoScr
3:ClpNoTaggingNoScr
7:ClpTaggingScr 8:ClpNoTaggingMcr
9:ClpTransparentNoScr
10:ClpTransparentScr 11:NoClpTaggingNoScr
12:NoClpNoScrCdvt
13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt
15:ClpTaggingScrCdvt
-----------------------------------------------------------------------------
Assume that:
l CAR is 2048 kbit/s.

l 802.1p priority is 6.
l The priority policy is tag-In-Package.
To add such an IP traffic entry, do as follows:
huawei(config)#traffic table ip car 2048 priority 6 priority-policy tag-In-Package
-----------------------------------------------------------------------------
TD Index : 10
Priority : 6
Priority policy : tag-pri
CAR : 2048 kbps
Service category : ubr
Referenced Status: not used
EnPPDISC : on
EnEPDISC : on
Clp01Pcr : 2048 kbps
-----------------------------------------------------------------------------

Command:
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
10 2048 6 tag-
pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
10 ubr 2 2048 -- -- -- -- -- on /--
-----------------------------------------------------------------------------
Total Num : 1
1:NoTrafficDescriptor 2:NoClpNoScr
3:ClpNoTaggingNoScr
7:ClpTaggingScr 8:ClpNoTaggingMcr
9:ClpTransparentNoScr
10:ClpTransparentScr 11:NoClpTaggingNoScr
12:NoClpNoScrCdvt
13:NoClpScrCdvt 14:ClpNoTaggingScrCdvt

15:ClpTaggingScrCdvt
-----------------------------------------------------------------------------
Related Operation
Table 19-1 lists the related operation for configuring a traffic entry.
Table 19-1 Related operation for configuring a traffic entry

Delete a traffic entry undo traffic table You can delete a traffic entry
only if the traffic entry is not
referenced.
19.4 Limiting the Traffic of the Packet That Matches an ACL

Rule
This topic describes how to enable traffic limitation for the packet that matches an ACL rule.
Traffic limitation ensures efficient use of network resources and provides better services by
limiting the traffic of the services of specified users on the specified ports.
Prerequisite
The ACL and its rules are configured, and the port for traffic limitation works in the normal
state.
Context
l The traffic limitation is valid for only the permit rules of an ACL.
l The rate of the limited traffic must be a multiple of 64.
Procedure
Step 1 Run the traffic-limit command to enable traffic limitation for the packet that matches an ACL
rule.
Step 2 Run the display qos-info traffic-limit port command to query the status of traffic limitation.
----End
Example
In the case of the traffic that is received on port 0/3/0 and matches the rule of ACL 2001, to limit
its rate to 512 kbit/s and to mark DSCP priority tags to the packet that exceeds the limitation,
do as follows:
huawei(config)#traffic-limit inbound ip-group 2001 512 exceed remark-dscp af1 port
0/3/0
huawei(config)#display qos-info traffic-limit port 0/3/0
traffic-limit:
port 0/3/0:
Inbound:

Matches: Acl 2001 rule 5 running

Target rate: 512 Kbps
Exceed action: remark-dscp af1
Total number of traffic-limit all : 1
Related Operation
Table 19-2 lists the related operation for configuring traffic limitation.
Table 19-2 Related operation for configuring traffic limitation

Disable the traffic limitation for the undo traffic-limit

packet that matches an ACL rule on a port
19.5 Adding a Priority Tag to the Packet That Matches an

ACL Rule
This topic describes how to add priority tags to TOS, DSCP, and 802.1p packets that match an
ACL.
Prerequisite
The ACL and its rules are configured, and the port involved in adding priority tags to packets
works in the normal state.
Context
l The operation is valid only for permit rules of an ACL.
l The cos priority and the DSCP priority cannot be configured at the same time.
Procedure
Step 1 Run the traffic-priority command to add priority tags to packets that match an ACL.
Step 2 Run the display qos-info traffic-priority port command to query the configured priority.
----End
Example
Assume that DSCP priority is 10 (af1) and the local priority is 0. To add priority tags to packets
that match ACL 2001 and are received on port 0/3/0, do as follows:
huawei(config)#traffic-priority inbound ip-group 2001 dscp af1 local-precedence 0
port 0/3/0
huawei(config)#display qos-info traffic-priority port 0/3/0
traffic-priority:
port 0/3/0:
Inbound:

Priority action: dscp af1 cos background
Total number of traffic-priority inbound : 1

Total number of traffic-priority outbound : 0
Total number of traffic-priority all : 1
Related Operation
Table 19-3 lists the related operation for adding priority tags to packets.
Table 19-3 Related operation for adding priority tags to packets

Disable traffic restriction on the priority undo traffic-priority

tags of packets that match an ACL on a
port
19.6 Mirroring the Traffic of the Packet That Matches an

ACL Rule
This topic describes how to mirror the traffic of the packet that matches an ACL rule. Mirroring
involves duplicating data packets that match an ACL rule to a monitoring port for network
detection and troubleshooting. Both the source port and the destination port can receive or
forward packets.
Prerequisite
The ACL and its rules must be configured, and the port involved in traffic mirroring must work
Context
l The mirroring destination port cannot be a trunk port or an aggregation port.
l Only one mirroring destination port is supported and the mirroring destination port must
be an uplink port.
Procedure
Step 1 Run the traffic-mirror command to mirror the traffic of the packet that matches an ACL rule.
Step 2 Run the display qos-info traffic-mirror port command to query the traffic mirroring of a port.
----End
Example
Assume that the packets match ACL rule 2001 and are received on port 0/3/1. To mirror the
packets to port 0/3/0, do as follows:
huawei(config)#traffic-mirror inbound ip-group 2001 port 0/3/1 to port 0/3/0

huawei(config)#display qos-info traffic-mirror port 0/3/1
traffic-mirror:
port 0/3/1:
Inbound:
Mirror to: port 0/3/0
Total number of traffic-mirror inbound : 1

Total number of traffic-mirror outbound : 0
Total number of traffic-mirror all : 1
Related Operation
Table 19-4 lists the related operation for mirroring the traffic of the packet that matches an ACL
rule.
Table 19-4 Related operation for mirroring the traffic of the packet that matches an ACL rule
Cancel the operation of mirroring the undo traffic-mirror

traffic of the packet that matches an ACL
rule on a specified port
19.7 Redirecting the Packet That Matches an ACL Rule

This topic describes how to redirect the packet that matches an ACL on a port. After this
operation, the transmit port of the packet is re-specified. The original port neither receives nor
forwards the packet.
Prerequisite
The ACL and its rules are configured, and the port involved in traffic redirection works in the
normal state.
Context
l The system can redirect only the packets on the control boards.
l The system can redirect packets to CPU. The packet redirection to the CPU and the priority
tag adding for the packet should not be configured at the same time.
Procedure
Step 1 Run the traffic-redirect command to redirect the packet that matches an ACL.
Step 2 Run the display qos-info traffic-redirect port command to query the packet redirection.
----End

Example
To redirect the packets that match the rules of ACL 2001 and are received on port 0/3/0 to port
0/3/1, do as follows:
huawei(config)#traffic-redirect inbound ip-group 2001 port 0/3/0 to port 0/3/1
huawei(config)#display qos-info traffic-redirect port 0/3/0
traffic-redirect:
port 0/3/0:
Inbound:
Redirected to: port 0/3/1
Total number of traffic-redirect inbound : 1
Total number of traffic-redirect outbound : 0
Total number of traffic-redirect all : 1
Related Operation
Table 19-5 lists the related operation for redirecting packets.
Table 19-5 Related operation for redirecting packets
Disable the redirection of the packet undo traffic-redirect

that matches an ACL rule on a port
19.8 Collecting Traffic Statistics of the Packet That Matches

an ACL Rule
This topic describes how to collect the traffic statistics of the packet that matches an ACL for
analysis.
Prerequisite
The ACL and its rules are configured, and the port involved in traffic statistics works in the
normal state.
Context
The operation is valid only for permit rules of an ACL.
Traffic statistics are valid for the traffic on only uplink ports.
Procedure
Step 1 Run the traffic-statistic command to collect the traffic statistics of the packet that matches an
ACL.
Step 2 Run the display qos-info traffic-statistic port command to query the traffic statistics
information about a port.
----End

Example
To collect the traffic statistics of the packets that match the rules of ACL 2001 and are received
on port 0/3/0, do as follows:
huawei(config)#traffic-statistic inbound ip-group 2001 port 0/3/0
huawei(config)#display qos-info traffic-statistic port 0/3/0
traffic-statistic:
port 0/3/0:
Inbound:
0 packet
Total number of traffic-statistic inbound : 1

Total number of traffic-statistic outbound : 0
Total number of traffic-statistic all : 1
Related Operation
Table 19-6 lists the related operations for enabling traffic statistics.
Table 19-6 Related operations for enabling traffic statistics
Clear the traffic statistics of the packet reset traffic-statistic

that matches an ACL rule on a port
Disable traffic statistics collection for undo traffic-statistic

the packet that matches an ACL rule
on the port
19.9 Modifying the VLAN for the Packet That Matches an

ACL Rule
This topic describes how to modify the VLAN ID of the packet that matches an ACL rule to
switch the data stream to different VLANs.
Prerequisite
The ACL-based rule must exist.
Context
NOTE
The H601IPMD board does not support the traffic-vlan command.
Procedure
Step 1 Run the acl command to create an ACL rule.
Step 2 Run the rule command to configure the ACL rule.

Step 3 Run the traffic-vlan command to switch the data stream that matches the ACL rule to different
VLANs.
Step 4 Run the display qos-info command to query the configuration information.
----End
Example
To configure an ACL rule and switch the data stream that matches the ACL rule to a different
VLAN, do as follows:
huawei(config-acl-basic-2000)#rule 1 permit source 10.10.10.10 0
huawei(config)#traffic-vlan inbound ip-group 2000 rule 1 vlanid 20 port 0/3/0
huawei(config)#display qos-info traffic-vlan port 0/3/0
traffic-vlan:
port 0/3/0:
Inbound:
New Vlan ID: 20
Total number of traffic-vlan inbound : 1

Total number of traffic-vlan outbound : 0
Total number of traffic-vlan all : 1
Related Operation
Table 19-7 lists the related operation for modifying the VLAN of the packet that matches an
ACL rule.
Table 19-7 Related operation for modifying the VLAN of the packet that matches an ACL rule
Disable the VLAN switching of the data

stream that matches an ACL rule on a undo traffic-vlan
specified port
19.10 Enabling Line Rate Limitation on a Port

This topic describes how to enable the line rate limitation on a port.
Context
l Line rate limitation on the UA5000 should limit the total transmit rate of an Ethernet port,
instead of limiting the rate at a specific port on a service board.
l Line rate limitation should limit the bit rate of a port.
l The limited rate must be a multiple of 64.

Procedure
Step 1 Run the line-rate command to limit the line rate on a port.
Step 2 Run the display qos-info line-rate port command to query the limited line rate on the port.
----End
Example
To limit the rate of Ethernet port 0/3/0 to 640 kbit/s, do as follows:
huawei(config)#line-rate 640 port 0/3/0
huawei(config)#display qos-info line-rate port 0/3/0
line-rate:
port 0/3/0:
Line rate: 640 Kbps
Related Operation
Table 19-8 lists the related operation for enabling the line rate limitation on a port.
Table 19-8 Related operation for enabling the line rate limitation on a port
Disable the line rate limitation on a undo line-rate

port
19.11 Configuring the Queue Scheduling Mode

This topic describes how to configure the queue scheduling mode to solve the problem that
multiple data streams compete for network resources when network congestion occurs.
Context
The IPMB board of the UA5000 supports four queue scheduling modes: strict-priority queue
(PQ), weighted fair queuing (WFQ), PQ+WRR, and weighted round robin (WRR). By default,
the PQ mode is used.
The IPMD board of the UA5000 does not support the WFQ mode. Other specifications of the
IPMD board are the same as the specifications of the IPMB board of the UA5000.
l PQ
In PQ mode, the packets are sent strictly according to priority. The packets in a high-
priority queue are sent before the packets in a low-priority queue. When the queue of a
higher priority is empty, the packets in the queue of a lower priority are sent.
l WFQ
WFQ automatically implements the allocation fairness of the bandwidth to a certain
extent. WFQ arranges all the data streams in queue, monitors the throughput, and
allocates metric based on the sent traffic.
l WRR

The system supports WRR for eight queues. Each queue has a weight value (namely,
w7, w6, w5, w4, w3, w2, w1 and w0 in descending order) for resource acquisition. WRR
is performed for the queues in turn. This guarantees that each queue can obtain certain
service time.
The weight sum of queues must be equal to 100.
l PQ+WRR
PQ+WRR indicate that the system first meets the requirements of PQ, and then meets
the requirements of WRR.
The system supports PQ+WRR for eight queues.
l In queue scheduling, 802.1p priority maps with the local priority by default.
l cos priority maps with the local priority.
l tos priority cannot map with the local priority.
Procedure
Step 1 Run the queue-scheduler command to configure queue scheduling.
Step 2 Run the display queue-scheduler command to query the configuration of queue scheduling.
----End
Example
To configure a WRR queue scheduling and assign weight values (10, 10, 20, 20, 10, 10, 10, and
10) to the eight queues, do as follows:
huawei(config)#queue-scheduler wrr 10 10 20 20 10 10 10 10
huawei(config)#display queue-scheduler
Queue scheduling mode: weighted round robin
weight of queue 0: 10%
Related Operation
Table 19-9 lists the related operation for configuring queue scheduling.
Table 19-9 Related operation for configuring queue scheduling
Restore the default settings of undo queue-scheduler

queue scheduling

Configuration Guide-IPM CLI 20 Configuring the User Security
20 Configuring the User Security
About This Chapter
This topic describes how to configure the user security supported by the UA5000.
20.1 Introduction to User Security

This topic describes the service description and service specifications of user security.
20.2 Configuring the PITP Function
The Policy Information Transfer Protocol (PITP) is a protocol for transferring the policy
information between the access equipment and the BRAS in an L2 P2P communication mode.
PITP is used to transfer the information about a user access location. After the BRAS obtains
the port information, it authenticates the binding of the user account with the access port to
prevent account embezzlement or account roaming.
20.3 Setting the RAIO Working Mode
This topic describes how to set the relay agent information option (RAIO) working mode to
correctly classify the formats of the DHCP option82 tag and the PITP tag required by different
operators.
20.4 Enabling the DHCP Option82 Function
When this function is enabled, the UA5000 adds the option82 field to the DHCP packets to
ensure the security of the DHCP function. This topic describes how to enable the DHCP option82
function so that the BRAS can authenticate the access users.
20.5 Setting the Maximum Length of a DHCP Packet
This topic describes how to set the maximum length of DHCP packets after the Option82 filed
is added.
20.6 Binding the IP Address
This topic describes how to bind a service port with one or multiple IP addresses so that the
packets from the IP addresses other than the bound IP addresses do not pass through the service
channel of the port.
20.7 Enabling the Anti MAC Spoofing Function
When the anti MAC spoofing function is enabled, unauthorized users cannot forge MAC
addresses of the valid users to send PPPoE and DHCP control packets. The anti MAC spoofing
function is implemented through MAC address binding.
20.8 Enabling the Anti IP Spoofing Function

20 Configuring the User Security Configuration Guide-IPM CLI
This topic describes how to enable the anti IP spoofing function. When the anti IP spoofing
function is enabled, unauthorized users are prevented from logging in to the device by using the
IP addresses of legal users.

20.1 Introduction to User Security

This topic describes the service description and service specifications of user security.
Service Description
Policy Information Transfer Protocol (PITP) is a member of Huawei Group Management
Protocol (HGMP) family. PITP provides the broadband remote access server (BRAS) with the
information about the ports of access users. After the BRAS obtains the user port information,
PITP binds user accounts with the user ports to prevent the theft and roaming of user accounts.
The DHCP option82 contains reliable user port information and terminal information, which are
added to the DHCP packets. It is used as reference for the DHCP server to allocate IP addresses
and other parameters.
For details on the user security feature, see "User Security" in the UA5000 Universal Access
Unit Feature Description.
The UA5000 supports the PITP V mode, P mode, and DHCP option82 to bind a user account
and a user port.
l V mode (VBAS mode): After the PPPoE discovery phase, the BRAS actively initiates a
request for querying the user port, requiring the UA5000 to report the port information
about the user. The UA5000 sends the port information to the BRAS through a response
packet.
l P mode (PPPoE tag mode): In the PPPoE discovery phase, the UA5000 actively sends the
port information about the user, and adds tags to the PPPoE authentication request packets.
In this manner, the port information about the user is sent to the BRAS.
l In addition, the security check on the user password is supported. If a user inputs wrong
password for three consecutive times, the user account is locked.
20.2 Configuring the PITP Function

The Policy Information Transfer Protocol (PITP) is a protocol for transferring the policy
information between the access equipment and the BRAS in an L2 P2P communication mode.
PITP is used to transfer the information about a user access location. After the BRAS obtains
the port information, it authenticates the binding of the user account with the access port to
prevent account embezzlement or account roaming.
Prerequisite
If a special PITP tag format is required, you must set the working mode of the RAIO to the
required mode beforehand according to the description in "20.3 Setting the RAIO Working
Mode." Then, configure the PITP function. Generally, use the default working mode common
for the RAIO.
Context
The PITP function works in the following two modes:

l V mode (VBAS mode): After the PPPoE discovery phase, the BRAS actively initiates a
request for querying the user port, requiring the UA5000 to report the port information
about the user. The UA5000 sends the port information to the BRAS through a response
packet.
l P mode (PPPoE tag mode): In the PPPoE discovery phase, the UA5000 actively sends the
port information about the user, and adds tags to the PPPoE authentication request packets.
In this manner, the port information about the user is sent to the BRAS.
The two modes have similar functions, that is, binding a user ID to a user port. The differences
are as follows:
l In V mode, the BRAS actively initiates a request for querying the user port.
l In P mode, the DSLAM actively initiates a request for querying the user port.
The V mode and the P mode can be switched. The system, however, works in only one mode.
Disabling the PITP function invalidates the two modes.
Procedure
l To use the PITP V mode, perform the following operations:
1. Run the pitp command to enable the PITP function and select the PITP V mode.
2. Run the display pitp config command to query the configuration of the PITP function.
3. Run the pitp vmode ether-type command to configure the Ethernet encapsulation
protocol type.
4. Run the display pitp vmode ether-type command to query the Ethernet encapsulation
protocol type.
l To use the PITP P mode, perform the following operations:
1. Run the pitp command to enable the PITP function and select the PITP P mode.
2. Run the display pitp config command to query the configuration of the PITP function.
----End
Example
To enable the PITP V mode and configure the Ethernet encapsulation protocol type, do as
follows:
huawei(config)#pitp enable vmode
huawei(config)#display pitp config
PITP is enabled. Current mode:vmode
huawei(config)#pitp vmode ether-type
huawei(config)#display pitp vmode ether-type
Vmode ethernet type is 0x8400
To enable the PITP P mode, do as follows:

huawei(config)#pitp enable pmode
huawei(config)#display pitp config
PITP is enabled. Current mode:pmode
Related Operation
Table 20-1 lists the related operations for configuring the PITP function.

Table 20-1 Related operations for configuring the PITP function
Configure the working mode of raio-mode

the RAIO
Query the current PITP status display pitp config
20.3 Setting the RAIO Working Mode

This topic describes how to set the relay agent information option (RAIO) working mode to
correctly classify the formats of the DHCP option82 tag and the PITP tag required by different
operators.
Context
l The RAIO working mode specifies the formats of the DHCP option82 tag and the PITP
tag. Different operators may have different formats of the DHCP option82 tag and the PITP
tag because these two options are not standardized.
l By default, the RAIO working mode is common.
l To differentiate the formats, correctly set the RAIO working mode before using the DHCP
option82 and PITP functions.
l The RAIO working modes include: common, xdsl-port-rate, cntel, ti, and neuf.
l The PITP-VMODE supports only common, cntel, and user-defined RAIO modes. The
PITP-PMODE and DHCP option82 supports all the RAIO modes.
NOTE
PITP tags include the following:

l PPPoE tags in PITP P mode.
l VBAS packet tags in PITP V mode.
Circuit ID (CID), remote ID (RID), and line encapsulation information (optional) are added to the PPPoE tag
and the DHCP option82 field. The DHCP server allocates IP addresses and other parameters according to the
CID and RID. The CID is used to identify the attributes of a device. The RID is used to identify the access
information of a user.
Procedure
Step 1 Run the raio-mode command to set the RAIO working mode.
Step 2 Run the display raio-mode command to query the RAIO working mode.
----End
Example
To set the RAIO working mode as common, do as follows:
huawei(config)#raio-mode common
huawei(config)#display raio-mode
Current mode: common mode

To set the RAIO working mode as xdsl-port-rate so that after the PITP P mode is enabled on the
port, the PPPoE packets contain the upstream/downstream activation rate of the port, do as
follows:
huawei(config)#raio-mode xdsl-port-rate pitp-pmode
huawei(config)#display raio-mode
Current mode: xdsl-port-rate mode
20.4 Enabling the DHCP Option82 Function

When this function is enabled, the UA5000 adds the option82 field to the DHCP packets to
ensure the security of the DHCP function. This topic describes how to enable the DHCP option82
function so that the BRAS can authenticate the access users.
Context
l An option82 field contains the Circuit ID (CID), Remote ID (RID) and sub-option90
(optional) field. It provides the information about the user shelf number, slot number, port
number, VPI and VCI.
The format and the contents of CID and RID are different according to the RAIO
working mode, see "20.3 Setting the RAIO Working Mode."
A sub-option90 field contains the link encapsulation information, and whether to add
the field can be controlled by a switch.
l When the DHCP option82 function is enabled, the UA5000 can add/remove the option82
field to/from DHCP packets.
l When the DHCP option82 function is disabled, the UA5000 transparently transmits or
directly forwards DHCP packets without processing them.
Procedure
Step 1 Run the dhcp option82 enable command to enable the DHCP Option82 function.
Step 2 Run the display dhcp option82 config command and you can find that DHCP option82 function
is enabled successfully.
----End
Example
To enable the DHCP option82, do as follows:
huawei(config)#dhcp option82 enable
huawei(config)#dhcp sub-option90 enable
huawei(config)#display dhcp option82 config
DHCP option82 is enabled
Related Operation
Table 20-2 lists the related operations for enabling the DHCP option82 function.

Table 20-2 Related operations for enabling the DHCP option82 function
Disable the DHCP option82 dhcp option82 disable

function
Set the maximum length of a dhcp option82 max-length

DHCP packet
20.5 Setting the Maximum Length of a DHCP Packet

This topic describes how to set the maximum length of DHCP packets after the Option82 filed
is added.
Context
l By default, the maximum length of DHCP packets is 1500 bytes.
l You can set the maximum length of the DHCP packets added with Relay Agent Information
Option messages. If there are packets with length that exceeds this value, the system
transparently transmits these packets.
l If the maximum length is not set, the system uses the length of the maximum transmission
unit (MTU) as the maximum length of a DHCP packet.
Procedure
Step 1 Run the dhcp option82 max-length command to set the maximum length of a DHCP packet.
Step 2 Run the display dhcp option82 config command to query the configured maximum length of
DHCP packets.
----End
Example
To set the maximum length of a DHCP packet to 1300 bytes, do as follows:
huawei(config)#dhcp option82 max-length 1300
huawei(config)#display dhcp option82 config
DHCP option82 is enabled
Maximum length of DHCP packet is 1300 bytes
20.6 Binding the IP Address

This topic describes how to bind a service port with one or multiple IP addresses so that the
packets from the IP addresses other than the bound IP addresses do not pass through the service
channel of the port.
Context
l A service channel can be bound with up to 8 IP addresses. The bound IP addresses must
be unicast IP addresses.

l The system supports the binding of IP addresses of up to 1024 virtual service ports.
l The bound IP addresses must be unicast IP addresses.
Procedure
Step 1 Run the bind ip command to bind an IP address.
Step 2 Run the display bind command to query the IP address binding information.
----End
Example
To bind the IP address 10.1.1.245 of the service channel (VPI/VCI of 0/35) with ADSL port
0/7/0, do as follows:
huawei(config)#bind ip adsl 0/7/0 vpi 0 vci 35 10.1.1.245
huawei(config)#display bind adsl 0/7/0 vpi 0 vci 35
{ <cr>|user-encap<K>|user-vlan<K> }:
Command:
display bind adsl 0/7/0 vpi 0 vci 35
-------------------------
No. IP address
-------------------------
0 10.1.1.245
1 -
2 -
3 -
4 -
5 -
6 -
7 -
-------------------------
No. MAC address
-------------------------
0 -
1 -
2 -
3 -
4 -
5 -
6 -
7 -
-------------------------
Related Operation
Table 20-3 lists the related operation for binding an IP address.
Table 20-3 Related operation for binding an IP address
Cancel the binding of the IP address undo bind ip

20.7 Enabling the Anti MAC Spoofing Function

When the anti MAC spoofing function is enabled, unauthorized users cannot forge MAC
addresses of the valid users to send PPPoE and DHCP control packets. The anti MAC spoofing
function is implemented through MAC address binding.
Context
l The anti MAC spoofing function is implemented through MAC address binding.
l Each service port can be bound with up to eight different MAC addresses dynamically.
l If a user is online before the anti MAC spoofing function is enabled, the system does not
bind MAC address. Then, the user is forced to log out, and log in again.
l The user MAC address can be bound only when a user logs in after the anti MAC spoofing
function is enabled.
CAUTION
It is recommended that the anti MAC spoofing function is enabled for the sake of device security.
Procedure
Step 1 Run the security anti-macspoofing enable command to enable the anti MAC spoofing function.
Step 2 Run the display security config command and you can find that the function is enabled.
----End
Example
To enable the anti MAC spoofing function, do as follows:
huawei(config)#security anti-macspoofing enable
huawei(config)#display security config
Anti-ipspoofing function : disable
Anti-dos function : disable
Anti-macspoofing function : enable
Anti-ipattack function : disable
Anti-icmpattack function : disable
Related Operation
Table 20-4 lists the related operations for enabling the anti MAC spoofing function.
Table 20-4 Related operations for enabling the anti MAC spoofing function
Disable the anti MAC spoofing security anti-macspoofing disable

function

Query the dynamically bound MAC display security bind mac

addresses
20.8 Enabling the Anti IP Spoofing Function

This topic describes how to enable the anti IP spoofing function. When the anti IP spoofing
function is enabled, unauthorized users are prevented from logging in to the device by using the
IP addresses of legal users.
Context
l The anti IP spoofing function is implemented through dynamic IP address binding. A
maximum of eight IP addresses can be bound to each user port.
l By default, the dynamic IP address binding function is disabled.
l The system only binds the IP address of the user who obtains the IP address through DHCP.
l If a user is online before the anti IP spoofing function is enabled, the system does not bind
the IP address. Then, the user is forced to log out, and log in again.
l The user IP address can be bound only when a user logs in after the anti IP spoofing function
is enabled.
Procedure
Step 1 Run the security anti-ipspoofing enable command to enable the anti IP spoofing function.
----End
Example
To enable the anti IP spoofing function, do as follows:
huawei(config)#security anti-ipspoofing enable
Anti-macspoofing function : enable
Anti-icmpattack function :
disable
Related Operation
Table 20-5 lists the related operations for enabling the anti IP spoofing function.
Table 20-5 Related operations for enabling the anti IP spoofing function
Disable the anti IP spoofing function security anti-ipspoofing disable

Query the dynamically bound IP display security bind ip

addresses

Configuration Guide-IPM CLI 21 Configuring the System Security
21 Configuring the System Security
About This Chapter
This topic describes how to configure the system security supported by the UA5000.
21.1 Introduction to System Security

This topic describes the service description and service specifications of system security.
21.2 Enabling the Anti DoS Attack Function
By enabling the anti DoS attack function, you can prevent an unauthorized user from sending
control packets to the device and hacking the device.
21.3 Enabling the Anti IP Attack Function
This topic describes how to enable the anti IP attack function. This function prevents users from
maliciously sending IP packets to the device to enhance the device security.
21.4 Enabling the Anti ICMP Attack Function
This topic describes how to enable the anti ICMP attack function. When the anti ICMP attack
function is enabled, it prevents users from sending malicious ICMP packets to the IP address of
a device, thus protecting the device.
21.6 Enabling the Ring Network Detection on the User Side
This topic describes how to enable the ring network detection on the user side to prevent the
services from being affected by the ring network.
21.7 Configuring the Firewall Black List Function
This topic describes how to add certain IP addresses to a firewall black list and configure the
firewall black list so that the service packets from these IP addresses cannot pass the firewall.
21.8 Configuring the Firewall Function
This topic describes how to configure the firewall function to control the packets that access the
device management interface. In this manner, unauthorized users are prevented from attacking
the system in the inband or outband mode.
21.9 Configuring an Accessible Address Segment

21 Configuring the System Security Configuration Guide-IPM CLI
This topic describes how to configure the accessible address segment for the firewall of a
specified protocol type.
21.10 Configuring an Inaccessible Address Segment
This topic describes how to add an inaccessible address segment for the firewall of the specified
protocol type.

21.1 Introduction to System Security

This topic describes the service description and service specifications of system security.
Service Description
System security setting prevents attacks initiated on the network or user side. This helps to ensure
device stability.
For details on the system security, see "System Security" in the UA5000 Universal Access
Unit Feature Description.
The UA5000 supports the following security features: anti IP spoofing, anti MAC spoofing, anti
IP attack, anti ICMP attack, source route filtering, MAC address filtering, IP address binding,
outband firewall, and SSH.
21.2 Enabling the Anti DoS Attack Function

By enabling the anti DoS attack function, you can prevent an unauthorized user from sending
control packets to the device and hacking the device.
Context
l After the anti DoS attack function is enabled, the device monitors the control packets sent
by each port and discards the control packets that exceed the restriction.
l After the anti DoS attack function is disabled, the device does not monitor the control
packets. When the DoS attack occurs, the CPU occupancy of the device is very high and
the device cannot accept the service requests of the normal subscribers. The DoS attack
may even cause system breakdown.
Procedure
Step 1 Run the security anti-dos enable command to enable the anti DoS attack function.
Step 2 Run the display security config command and you can find that the anti DoS attack function is
enabled.
----End
Example
To enable the anti DoS attack function, do as follows:
huawei(config)#security anti-dos enable
Anti-dos function : enable
Anti-macspoofing function : disable

Related Operation
Table 21-1 lists the related operations for enabling the anti DoS attack function.
Table 21-1 Related operations for enabling the anti DoS attack function
Disable the anti DoS attack function security anti-dos disable
Query a dynamically bound MAC display security bind mac

address
21.3 Enabling the Anti IP Attack Function

This topic describes how to enable the anti IP attack function. This function prevents users from
maliciously sending IP packets to the device to enhance the device security.
Procedure
Step 1 Run the security anti-ipattack enable command to enable the anti IP attack function.
----End
Example
To enable the anti IP attack function, do as follows:
huawei(config)#security anti-ipattack enable
Anti-ipattack function : enable
Related Operation
Table 21-2 lists the related operation for enabling the anti IP attack function.
Table 21-2 Related operation for enabling the anti IP attack function
Disable the anti IP attack function security anti-ipattack disable
21.4 Enabling the Anti ICMP Attack Function

This topic describes how to enable the anti ICMP attack function. When the anti ICMP attack
function is enabled, it prevents users from sending malicious ICMP packets to the IP address of
a device, thus protecting the device.

Procedure
Step 1 Run the security anti-icmpattack enable command to enable the anti ICMP attack function.
----End
Example
To enable the anti ICMP attack function, do as follows:
huawei(config)#security anti-icmpattack enable
Anti-ipspoofing function :
disable
Anti-icmpattack function :
enable
Related Operation
Table 21-3 lists the related operation for enabling the anti ICMP attack function.
Table 21-3 Related operation for enabling the anti ICMP attack function
Disable the anti ICMP attack function security anti-icmpattack disable

Context
l If the control board is IPMB, the system supports filtering packets with up to three MAC
addresses.
l If the control board is IPMD, the system supports filtering packets with up to four MAC
addresses.
Procedure
Step 1 Run the security mac-filter command to configure the MAC address filtering function.
Step 2 Run the display security mac-filter command to query the configured MAC address.
----End

Example
To configure the MAC address 1000-0000-0000 as the filtering MAC address if the control
board is H612IPMB, do as follows:
huawei(config)#security mac-filter 1000-0000-0000
huawei(config)#display security mac-filter
--------- Mac Address ---------
1000-0000-0000
---- 1 mac address found ----
Related Operation
Table 21-4 lists the related operation for configuring the MAC address filtering function.
Table 21-4 Related operation for configuring the MAC address filtering function
Cancel the MAC address filtering undo security mac-filter

function
21.6 Enabling the Ring Network Detection on the User Side

This topic describes how to enable the ring network detection on the user side to prevent the
services from being affected by the ring network.
Context
l By default, the ring network detection on the user side is disabled.
l After the ring network detection on the user side is enabled, the system automatically detects
the ring network on the user side.
CAUTION
To ensure the security of the device, it is recommended that the ring network detection on the
user side is enabled.
Procedure
Step 1 Run the ring check enable command to enable the ring network detection on the user side.
Step 2 Run the display ring check command to query the status of the ring network detection on the
user side.
----End
Example
To enable the ring network detection on the user side, do as follows:

hauwei(config)#ring check enable

huawei(config)#display ring check
{ <cr>|result<K> }:
Command:
display ring check
Ring checking function is enabled
Related Operation
Table 21-5 lists the related operation for enabling the ring network detection on the user side.
Table 21-5 Related operation for enabling the ring network detection on the user side
Disable the ring network detection on the ring check disable

user side
21.7 Configuring the Firewall Black List Function

This topic describes how to add certain IP addresses to a firewall black list and configure the
firewall black list so that the service packets from these IP addresses cannot pass the firewall.
Prerequisite
The ACL applied to the firewall function exists.
Context
l The system supports up to 2000 entries in a firewall black list.
l You can use the ACL rule when enabling the firewall black list function. In this case, the
priority level of the firewall black list is higher than the priority level of the ACL rule. That
is, the system checks the firewall black list first, and then matches the ACL rule.
l The ACL rule used when the black list function is enabled can only be the advanced ACL
rule.
l The firewall black list function takes effect only to the service packets that are sent from
the user side.
Procedure
Step 1 Run the firewall blacklist item command to add a firewall black list entry.
Step 2 Run the firewall blacklist enable command to enable the firewall black list function.
Step 3 Run the display firewall blacklist item command to query the configuration of the firewall
black list.
----End

Example
To add the IP address 10.10.10.10 to a firewall black list with the aging time 100 minutes, enable
the firewall black list function, and apply ACL 3000, do as follows:
huawei(config)#firewall blacklist item 10.10.10.10 timeout 100
huawei(config)#firewall blacklist enable acl-number 3000
huawei(config)#display firewall blacklist item
Firewall blacklist items :
Current manual insert items : 1
Current automatic insert items : 0
Need aging items : 1
IP Reason AgeTime
---------------------------------------
10.10.10.10 Manual 100
Related Operation
Table 21-6 lists the related operations for configuring the firewall black list function.
Table 21-6 Related operations for configuring the firewall black list function
Disable the firewall black list undo firewall blacklist enable

function
Delete an entry from the undo firewall blacklist item

firewall black list
21.8 Configuring the Firewall Function

This topic describes how to configure the firewall function to control the packets that access the
device management interface. In this manner, unauthorized users are prevented from attacking
the system in the inband or outband mode.
Prerequisite
The ACL applied to the firewall function already exists.
Context
l Apply one ACL rule to one direction only. If one direction is applied with multiple ACL
rules, the later rule overwrites the previous rule.
l The priority of the ACL rule is higher than the priority of the default operation of the
firewall. That is, the packets matching the ACL rule are processed according to the ACL
rule, and the packets not matching the rule are processed according to the default operation
of the firewall.
l When the firewall blacklist function and the ACL rule work together, the priority of the
firewall blacklist is higher than the priority of the ACL rule. That is, the system checks the
firewall blacklist, and then matches the ACL rule.
l By default, the configuration of the firewall is "permit".

CAUTION
To ensure the security of the device, the firewall function must be configured to control the
packets that access the device management interface.
Figure 21-1 shows the flowchart for configuring the firewall function.
Figure 21-1 Flowchart for configuring the firewall function
Start
Enable the firewall function
Set the default operation of firewall
Apply ACL to the inband or outband

management interface
End
Procedure
Step 1 Run the firewall enable command to enable the firewall function.
Step 2 Run the firewall default command to set the default operation of the firewall.
Step 3 Run the interface meth 0 or the interface vlanif command to enter the config mode of the
inband or outband interface.
Step 4 Run the firewall packet-filter command to apply an ACL to the maintenance network port and
VLAN interface.
Step 5 Run the display firewall packet-filter statistics command to query the configuration.
----End
Example
To enable the outband firewall function, set the default operation of the firewall to deny, and
apply ACL 2000 to the maintenance network port to filter packets, do as follows:
huawei(config)#firewall enable
huawei(config)#firewall default deny

huawei(config-if-meth0)#firewall packet-filter 2000 inbound

huawei(config)#display firewall packet-filter statistics all
Interface: meth0
In-bound Policy: acl 2000
From 2006-02-16 10:00:26 to 2006-02-16 10:02:43
0 packets, 0 bytes, 0% permitted,
0 packets, 0 bytes, 0% denied,
0 packets, 0 bytes, 0% permitted default,
0 packets, 0 bytes, 0% denied default,
Totally 0 packets, 0 bytes, 0% permitted,
Totally 0 packets, 0 bytes, 0% denied.
To enable the inband firewall function, set the default operation of the firewall to deny, and
apply ACL 2000 to the VLAN interface to filter packets, do as follows:
huawei(config)#firewall enable
huawei(config)#firewall default deny
huawei(config-if-vlanif1)#firewall packet-filter 2000 inbound
huawei(config)#display firewall packet-filter statistics all
Interface: vlanif1
In-bound Policy: acl 2000
From 2006-02-16 10:00:26 to 2006-02-16 10:02:43
0 packets, 0 bytes, 0% permitted,
0 packets, 0 bytes, 0% denied,
0 packets, 0 bytes, 0% permitted default,
0 packets, 0 bytes, 0% denied default,
Totally 0 packets, 0 bytes, 0% permitted,
Totally 0 packets, 0 bytes, 0% denied.
Related Operation
Table 21-7 lists the related operation for configuring the outband firewall function.
Table 21-7 Related operation for configuring the outband firewall function
Disable the firewall undo firewall enable

function
21.9 Configuring an Accessible Address Segment

This topic describes how to configure the accessible address segment for the firewall of a
specified protocol type.
Context
l The specified protocol types include: Telnet, SSH and SNMP.
l Each firewall can be added with up to 10 address segments.
l When adding one address segment, the first address cannot be the same as the existing first
address.
l When deleting one address segment, input only the first address of the address segment.

CAUTION
To ensure the security of the device, you must comply with the principle of the minimum
authorization to configure the accessible address segment. The accessible address segment can
contain only the mandatory IP addresses of the management network segment. Other IP
addresses cannot access the device management interface.
Procedure
Step 1 Run the sysman ip-access command to add an accessible address segment.
Step 2 Run the display sysman ip-access telnet command to query the configuration of the accessible
address segment.
----End
Example
To add a legal address segment to the access list of the telnet type, do as follows:
huawei (config)#sysman ip-access telnet 1.1.1.1 10.10.10.10
huawei(config)#display sysman ip-access telnet
IP-Access Table:
--------------------------------------------
Index Start-IPAddr End-IPAddr
--------------------------------------------
1 1.1.1.1 10.10.10.10
--------------------------------------------
Related Operation
Table 21-8 lists the related operations for configuring an accessible address segment.
Table 21-8 Related operations for configuring an accessible address segment
Delete an accessible address segment undo sysman ip-access
Query the firewall configuration display sysman
21.10 Configuring an Inaccessible Address Segment

This topic describes how to add an inaccessible address segment for the firewall of the specified
protocol type.
Context
l The specified protocol types include: Telnet, SSH and SNMP.
l Each firewall can be added with up to 10 address segments.

l When one address segment is added, the first address cannot be the same as the existing
address.
l When deleting one address segment, input only the first address of the address segment.
Procedure
Step 1 Run the sysman ip-refuse command to configure an inaccessible address segment.
Step 2 Run the display sysman ip-refuse command to query configuration of an accessible address
segment.
----End
Example
To add an address segment to the refuse list of the telnet type, do as follows:
huawei(config)#sysman ip-refuse telnet 1.1.1.10 10.10.10.1
huawei(config)#display sysman ip-refuse telnet
IP-Refuse Table:
--------------------------------------------
Index Start-IPAddr End-IPAddr
--------------------------------------------
1 1.1.1.10 10.10.10.1
--------------------------------------------
Related Operation
Table 21-9 lists the related operations for configuring an inaccessible address segment.
Table 21-9 Related operations for configuring an inaccessible address segment

Delete an inaccessible address undo sysman ip-refuse

segment
Query the firewall configuration display sysman

Configuration Guide-IPM CLI 22 Configuring the ADSL2+ Service
22 Configuring the ADSL2+ Service
About This Chapter
This topic describes the ADSL2+ technology and how to configure the ADSL2+ service on the
UA5000.
22.1 Introduction to the ADSL2+ Service

This topic describes the ADSL2+ service and the related service specifications.
22.2 Configuration Example of the ADSL2+ IPoA Service
This topic describes how to configure the ADSL2+ IPoA service so that the users can access the
Internet through the ADSL2+ lines in the IPoA mode.
22.3 Configuration Example of the ADSL2+ PPPoA Service
This topic describes how to configure the ADSL2+ PPPoA service so that the users can access
the Internet through ADSL2+ lines in PPPoA mode.
22.4 Configuration Example of the ADSL2+ PPPoE/IPoE Service
This topic describes how to configure the ADSL2+ PPPoE/IPoE service, so that the user can
access the Internet through the ADSL2+ lines in PPPoE/IPoE mode.
22.5 Adding an ADSL2+ Line Profile
This topic describes how to add an ADSL2+ line profile. This helps to include the parameters
needed by all the ADSL2+ ports in a line profile. After the line profile is configured successfully,
it can be directly used to activate the ports.
22.6 Adding an ADSL2+ Extended Line Profile
This topic describes how to add an ADSL2+ extended line profile. The ADSL2+ extended line
profile is used to configure the extended parameters for activating an ADSL2+ port. This helps
to filter the sub-carrier that is unsuitable for carrying data.
22.7 Adding an ADSL2+ Alarm Profile
This topic describes how to add an ADSL2+ alarm profile. If the line profile is configured and
bound with a port successfully, the port can reference the profile directly during the activation.
22.8 Activating an ADSL2+ Port
This topic describes how to activate an ADSL2+ port for transmitting service data.
22.9 Configuring the Port Rate Reachability Thresholds for an ADSL2+ Port

22 Configuring the ADSL2+ Service Configuration Guide-IPM CLI
This topic describes how to configure the upstream and downstream rate reachability thresholds
for an ADSL2+ port.
22.10 Configuring the Rate Change Reporting Switch of an ADSL2+ Port
This topic describes how to configure the rate change reporting switch of an ADSL2+ port.
22.11 Configuring IPoA/IPoE Protocol Conversion
This topic describes how to enable the IPoA users to access the IP network at the upper layer,
thus improving the access capability and the network compatibility of the UA5000.
22.12 Configuring PPPoA/PPPoE Protocol Conversion
This topic describes how to enable the PPPoA users to access the IP network at the upper layer,
thus improving the access capability and network compatibility of the UA5000.
22.13 Querying an ADSL2+ Port
This topic describes how to query the general information about an ADSL2+ port.

22.1 Introduction to the ADSL2+ Service

This topic describes the ADSL2+ service and the related service specifications.
Service Description
Asymmetrical digital subscriber line 2plus (ADSL2+) adopts the asymmetric transmission
mode. It supports 24 Mbit/s downstream rate and 2.5 Mbit/s upstream rate. The transmission
distance is up to 6.5 km.
The UA5000 supports the ADSL2+ service through the CSRB, ADRI and ADRB boards. Each
board provides 32 ADSL2+ ports. Table 22-1 lists the maximum number of ADSL2+
subscribers supported by each UA5000 shelf.
Table 22-1 Maximum number of ADSL2+ subscribers supported by each UA5000 shelf
Shelf Slots ADSL2+ Subscribers
HABD 12 384
HABE 14 448
HABF 18 576
The UA5000 provides six encapsulation modes, including llc-Bridge, vcmux-Bridge, llc-IPoA,
vcmux-IPoA, llc-PPPoA and vcmux-PPPoA.
The UA5000 provides an Auto mode. The mode includes five encapsulation modes: llc-Bridge,
vcmux-Bridge, llc-IPoA, llc-PPPoA and vcmux-PPPoA.
By default, the encapsulation mode is llc-Bridge.
Table 22-2 lists the encapsulation mode mapping between the UA5000 and the modem.
Table 22-2 Encapsulation mode mapping between the UA5000 and the modem
Access Service Type Modem Encapsulation UA5000 Encapsulation

Type Type
PPPoA llc-PPPoA llc-PPPoA, Auto
vcmux-PPPoA vcmux-PPPoA, Auto
IPoA llc RFC1483/2684 Route llc-IPoA, Auto
vcmux RFC1483/2684 vcmux-IPoA

Route
IPoE llc-Bridge llc-Bridge, Auto

Access Service Type Modem Encapsulation UA5000 Encapsulation

Type Type
vcmux-Bridge vcmux-Bridge, Auto
PPPoE llc-RFC1483/2684 Bridge llc-Bridge, Auto
vcmux-RFC1483/2684 vcmux-Bridge, Auto

Bridge
vcmux-PPPoA vcmux-Bridge, Auto
llc-PPPoE llc-Bridge, Auto
22.2 Configuration Example of the ADSL2+ IPoA Service

This topic describes how to configure the ADSL2+ IPoA service so that the users can access the
Internet through the ADSL2+ lines in the IPoA mode.
Prerequisite
l All service boards must be in the normal state.
l To authenticate users on the BRAS device, configure the name and password of the access
users on the BRAS device. To assign the IP addresses to users through the BRAS device,
configure the corresponding IP address pool on the BRAS device.
NOTE
In this example, the extended line profile is not configured. For how to configure the extended line profile,
see "22.6 Adding an ADSL2+ Extended Line Profile."
Context
In the case of IPoA access, select the dynamic IP address (without specifying the source IP
address) or the static IP address (specifying the source IP address) for the packets. To switch
from a dynamic address to a static address in IPoA mode, you must first adopt LLC-Bridge
encapsulation, and then adopt the IPoA static address encapsulation.
UA5000You can restrict the user bandwidth through a specified traffic profile or an ADSL2+
line profile. When the traffic profile and the ADSL2+ line profile work, the smaller bandwidth
specified in the two profiles is used as the user line bandwidth. This configuration example shows
how to restrict the user bandwidth by configuring the traffic profile.If the port qualified rate is
lower than 96%, configure the data manually. If the user bandwidth is insufficient, reconfigure
the data of the traffic profile.
Only the deactivated port can be bound with the line profile.
Networking
Figure 22-1 shows an example network for configuring the ADSL2+ IPoA service.

Figure 22-1 Example network for configuring the ADSL2+ IPoA service
BRAS
LSW
0/3/0 0/7/0
I C
P S
M R
B B
UA5000
Modem
PC
Data Plan
Table 22-3 provides the data plan for configuring the ADSL2+ IPoA service.
Table 22-3 Data plan for configuring the ADSL2+ IPoA service
Item Data Remarks
Traffic profile Index: 7 Configure the access rate, priority

and priority policy in the traffic
Access rate: 3072 kbit/s profile. When you add a service port,
Priority: 6 you can specify the traffic profile to
restrict the access rate, priority and
Priority policy: Pvc-Setting priority policy.
Line profile ID of the line profile: 5 When activating the ADSL2+ port,
you can use the parameters
configured in the line profile to
negotiate with the customer premises
equipment (CPE).

Item Data Remarks
Alarm profile ID of the alarm profile: 3 Configure the alarm threshold of the
line parameter in the alarm profile.
By binding the profile with a port,
you can monitor the conditions of the
lines connected to the port.
In the default alarm profile, all the
alarm thresholds are set to 0, which
indicates that line monitoring is
disabled.
CSRB ADSL2+ port: 0/7/0 -
VLAN ID: 10 Keep consistent with the upper

device.
Upstream/Downstream Configure the upstream/downstream

bandwidth: 3 Mbit/s in the traffic profile according to the
user demands.
In general, set the rate of the traffic
profile to 3072 kbit/s. The actual
qualified rate of the port may be
lower than 96%. In this case, the
access rate must be set higher than the
ideal value to meet the user demands.
Access mode: IPoA -
IPMB Uplink port: 0/3/0 -
Gateway IP address: It is the IP address of the upper layer

10.1.1.1/24 router.
Figure 22-2 shows the flowchart for configuring the ADSL2+ IPoA service.

Figure 22-2 Flowchart for configuring the ADSL2+ IPoA service
Start
Is there an No
appropriate traffic
profile?
Yes Add a traffic profile Bind the alarm profile

Create a VLAN and
add port(s) to it (Optional) Bind the
extended line profile
Is the port No
activated? Activate the ADSL2+ port
Yes
Deactivate the ADSL2+ port Configure a MAC address pool
Is there an No Enable protocol conversion

appropriate line
profile?
Add a line profile Configure IPoA
Yes default gateway
Do you need Yes
to add an extended Set the encapsulation mode
line profile?
Add an extended
No line profile
Save the data
Is there an No
appropriate alarm
profile? End
Add an alarm profile
Yes
Procedure
Step 1 Query and configure the traffic profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

TID Service Traf CLP01PCR CLP0PCR CLP01SCR CLP0SCR MBS CDVT PPD/EPD/SHAPE
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
-----------------------------------------------------------------------------
Total Num : 7
-----------------------------------------------------------------------------
After the query, it is found that there is no proper traffic profile for use. You need to add a
required traffic profile.
huawei(config)#traffic table index 7 ip car 3072 priority 6 priority-policy pvc-
Setting
-----------------------------------------------------------------------------
TD Index : 7
Priority : 6
Priority policy : pvc-pri
CAR : 3072 kbps
EnPPDISC : on
EnEPDISC : on
-----------------------------------------------------------------------------
Step 2 Configure a VLAN and add a service port and an upstream port to the VLAN.
Step 3 Query the status of the ADSL2+ port.

huawei(config-if-adsl-0/7)#display port state 0
----------------------------------------------------------------------
Port Status Line_Profile Alm_Profile Ext_Profile Power_Mode
----------------------------------------------------------------------
0 Activated 1002 1 -- --
----------------------------------------------------------------------
Step 4 Deactivate the ADSL2+ port.

huawei(config-if-adsl-0/7)#deactivate 0
Deactivate port 0 successfully
Step 5 Configure the ADSL2+ line profile.

huawei(config)#adsl line-profile add 5
Start adding profile
Press 'Q' to quit the current configuration and new configuration will be
neglected
>Do you want to name the profile (y/n) [n]:
> Please choose default value type 0-adsl 1-adsl2+ (0~1) [0]:1
> Will you set basic configuration for modem? (y/n)[n]:
> Please select channel mode 0-interleaved 1-fast (0~1) [0]:
> Will you set interleaved delay? (y/n)[n]:
>Please select form of transmit rate adaptation in downstream:

> 0-fixed 1-adaptAtStartup 2-adaptAtRuntime (0~2) [1]:2

> Will you set SNR margin for modem? (y/n)[n]:
>Will you set shifttime? (y/n)[n]:
> Will you set parameters for rate? (y/n)[n]:
Add profile 5 successfully
Step 6 Configure the ADSL2+ alarm profile.

huawei(config)#adsl alarm-profile add 3
neglected
<ATU-C>
> The number of Loss of Frame Seconds (0~900) [0]:
> The number of Loss of Signal Seconds (0~900) [0]:50
> The number of Loss of Link Seconds (0~900) [0]:
> The number of Loss of Power Seconds (0~900) [0]:
> The number of Errored Seconds (0~900) [0]:
> Enable or disable the Initial failure trap 0-disable 1-enable (0~1) [0]:
> The number of failed fast retrain seconds (0~900) [0]:10
> The number of severely errored seconds (0~900) [0]:
> The number of unavailable seconds (0~900) [0]:
> Threshold of positive difference between the current and the past transmit
rate in fast mode (0~31968Kbps) [0]:
rate in interleaved mode (0~31968Kbps) [0]:
> Threshold of negative difference between the current and the past transmit
<ATU-R>
> The number of Loss of Power Seconds (0~900) [0]:10
Step 7 Bind alarm profile 3.

huawei(config-if-adsl-0/7)#alarm-config 0 3
Set port 0 alarm profile successfully
Step 8 Use line profile 5 to activate port 0/7/0.

Activate port 0 successfully
Step 9 Configure the IPoA service.

l Configure the MAC address pool 0, which begins with 0000-0000-0001.
l Enable the IPoA protocol conversion.

l Configure the IPoA default gateway.

l Set the IPoA service encapsulation mode of ADSL2+ port 0/7/0 to LLC-IPoA.
huawei(config)#encapsulation 0/7 start-portId 0 end-portId 10 type ipoa llc


huawei(config)#save
----End
Result
After the configuration, the users can access the Internet in the IPoA mode.
22.3 Configuration Example of the ADSL2+ PPPoA Service

This topic describes how to configure the ADSL2+ PPPoA service so that the users can access
the Internet through ADSL2+ lines in PPPoA mode.
Prerequisite
users on the BRAS device. To assign the IP addresses to users through the BRAS device,
NOTE
In this example, the extended line profile is not configured. For how to configure the extended line profile,
see "22.6 Adding an ADSL2+ Extended Line Profile."
Context
The UA5000 can limit the access rate of the users through the configured traffic profile or the
configured ADSL2+ line profile. If the two profiles work together, the user bandwidth is the
minimum value defined in the two profiles. This configuration example shows how to restrict
the user bandwidth by configuring the traffic profile.If the port qualified rate is lower than 96%,
configure the data manually. If the user bandwidth is insufficient, reconfigure the data of the
traffic profile.
Only the deactivated ports can be bound with the line profile.
Networking
Figure 22-3 shows an example network for the ADSL2+ PPPoA service.

Figure 22-3 Example network of the ADSL2+ PPPoA service
BRAS
LSW
0/3/0 0/7/0
I C
P S
M R
B B
UA5000
Modem
PC
Data Plan
Table 22-4 provides the data plan for configuring the ADSL2+ PPPoA service.
Table 22-4 Data plan for configuring the ADSL2+ PPPoA service
Item Data Remarks
Traffic profile Index: 7 Configure the access rate,

Access rate: 3072 kbit/s priority and priority policy in
the traffic profile. When you
Priority: 6 add a service port, you can
Priority policy: Pvc-Setting specify the traffic profile to
restrict the access rate,
priority and priority policy.
Line profile ID of the line profile: 5 When activating the ADSL2

+ port, you can use the
parameters configured in the
line profile to negotiate with
the CPE.

Item Data Remarks
Alarm profile ID of the alarm profile: 3 Configure the alarm

threshold of the line
parameter in the alarm
profile. By binding the
profile with a port, you can
monitor the conditions of the
In the default alarm profile,
all the alarm thresholds are
set to 0, which indicates that
line monitoring is disabled.
CSRB ADSL2+ port:0/7/0 -
VLAN ID: 10 Keep consistent with the

upper device.
Upstream/Downstream Configure the upstream/

bandwidth: 3 Mbit/s downstream in the traffic
profile according to the user
demands.
In general, configure the
access rate of the traffic
profile as 3072 kbit/s. The
actual qualified rate of the
port may be lower than 96%.
In this case, the access rate
must be set higher than the
ideal value to meet the user
demands.
Access mode: PPPoA -
Gateway IP address: It is the IP address of the

10.1.1.1/24 upper layer router.

Item Data Remarks
Requirements for the upper- LAN switch: For the configuration of the
layer device l The LAN switch must LSW and the configuration
transparently transmit the of the BRAS, refer to the
service packets of the corresponding configuration
UA5000. guide.
l Configure the VLAN for
the UA5000. The VLAN
ID must be consistent with
the upstream VLAN of the
UA5000.
BRAS:
l According to the
authentication and
charging requirements for
the dial-up users, the
BRAS must finish the
related configurations, for
example, configuring the
access user domain
(including the
authentication scheme,
charging scheme, and
authorization scheme to be
bound to) and specifying
the RADIUS server.
l If the BRAS is used to
authenticate users, you
must configure the user
name password on the
BRAS. If the BRAS is
used to allocate IP
addresses, you must
configure the related IP
address pool on the BRAS.
Figure 22-4shows the flowchart for configuring the ADSL2+ PPPoA service.

Figure 22-4 Flowchart for configuring the ADSL2+ PPPoA service
Start
Is there an No
appropriate traffic
profile?
Yes Add a traffic profile Bind the alarm profile

Create a VLAN and
add port(s) to it (Optional) Bind the
Is the port No
activated? Activate the ADSL2+ port
Yes
Deactivate the ADSL2+ port Configure a MAC address pool
Is there an No Enable protocol conversion

appropriate line
profile?
Yes Add a line profile Set the encapsulation mode
Do you need Yes

to add an extended
Save the data
line profile?
Add an extended
No line profile
End
Is there an No
appropriate alarm
profile?
Add an alarm profile
Yes
Procedure
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 3072 6 pvc-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
7 ubr 2 3072 -- -- -- -- -- on /on /--
-----------------------------------------------------------------------------
Total Num : 8
-----------------------------------------------------------------------------
The query result shows that traffic profile 7 is available.

NOTE
If there is no proper traffic profile after the query, run the traffic table command to create a required traffic
profile.
Step 2 Create a VLAN and add a service port and an upstream port to the VLAN.

----------------------------------------------------------------------
----------------------------------------------------------------------
0 Activated 1002 1 -- --
----------------------------------------------------------------------


neglected
> Will you set SNR margin for modem? (y/n)[n]:


neglected
<ATU-C>
<ATU-R>


Step 9 Configure the PPPoA service.

1. Configure the MAC address pool 0, which begins with 0000-0000-0001.
2. Enable the PPPoA protocol conversion.

huawei(config)#pppoa enable
3. Set the PPPoA service encapsulation mode of ADSL2+ port 0/7/0 to PPPoA-LLC.
huawei(config)#encapsulation 0/7/0 vpi 0 vci 35 type pppoa llc

huawei(config)#save
----End
Result
After the configuration, the users can access the Internet in the PPPoA mode.

22.4 Configuration Example of the ADSL2+ PPPoE/IPoE

Service
This topic describes how to configure the ADSL2+ PPPoE/IPoE service, so that the user can
access the Internet through the ADSL2+ lines in PPPoE/IPoE mode.
Prerequisite
users on the BRAS device. To assign the IP addresses to users on the BRAS device,
NOTE
In this example, the extended line profile is not configured. If it needs to be configured, see "22.6 Adding
an ADSL2+ Extended Line Profile."
Context
UA5000 can limit the rate of users through the configured traffic profile or the configured
ADSL2+ line profile. If the two profiles work together, the user bandwidth is the minimum value
defined in the two profiles. This configuration example shows how to limit the rate by
configuring the traffic profile.If the port qualified rate is lower than 96%, configure the data
manually. If the user bandwidth is insufficient, reconfigure the data of the traffic profile.
Only a deactivated port can be bound with a line profile.
Networking
Figure 22-5 lists an example network for configuring the ADSL2+ PPPoE/IPoE service.

Figure 22-5 Example network for configuring the ADSL2+ PPPoE/IPoE service
BRAS
LSW
0/3/0 0/7/0
I C
P S
M R
B B
UA5000
Modem
PC
Data Plan
Table 22-5 provides the data plan for configuring the ADSL2+ PPPoE/IPoE service.
Table 22-5 Data plan for configuring the ADSL2+ PPPoE/IPoE service
Item Data Remarks

Access rate: 3072 kbit/s priority and priority policy in
priority and priority policy.
Line profile ID of the line profile: 5 When activating the ADSL2

+ port, you can use the
parameters configured in the
line profile to negotiate with
the CPE. Upon successful
negotiation, the ADSL2+
port is activated and the lines
connected to the port can bear
services.

Item Data Remarks

VLAN ID: 10 Keep consistent with the

upper device.
Upstream/Downstream Configure the upstream/

bandwidth: 3 Mbit/s downstream in the traffic
profile according to the user
demands. In general, set the
rate of the traffic profile to
3072 kbit/s. The actual
qualified rate of the port may
be lower than 96%.
Therefore, increase the rate to
meet the user demands.
Access mode: PPPoE/IPoE -
Gateway IP address: This parameter is the IP

10.1.1.1/24 address of the upper layer
router.

Item Data Remarks
Requirements for the upper- LAN switch: For the configuration of the
layer device l The LAN switch must LSW and the configuration
transparently transmit the of the BRAS, refer to the
service packets of the corresponding configuration
UA5000. guide.
l Configure the VLAN for
the UA5000. The VLAN
ID must be consistent with
the upstream VLAN of the
UA5000.
BRAS:
l According to the
authentication and
charging requirements for
the dial-up users, the
BRAS must finish the
related configurations, for
example, configuring the
access user domain
(including the
bound to) and specifying
the RADIUS server.
authenticate users, you
must configure the user
name password on the
BRAS. If the BRAS is
used to allocate IP
addresses, you must
configure the related IP
address pool on the BRAS.
The
Figure 22-6 shows the flowchart for configuring the ADSL2+ PPPoE/IPoE service.

Figure 22-6 Flowchart for configuring the ADSL2+ PPPoE/IPoE service
Start
Is there an No
appropriate traffic
profile?
Yes Add a traffic profile

Create a VLAN and
add port(s) to it
Is the port No
activated?
Yes
Deactivate the ADSL2+ port
Bind the alarm profile

Is there an No
appropriate line
(Optional) Bind the
profile?
Yes Add a line profile
Do you need Yes Activate the ADSL2+ port

to add an extended
line profile?
Save the data
No Add an extended line profile
Is there an
No End
appropriate alarm
profile?
Yes Add an alarm profile
Procedure
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 3072 6 pvc-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
7 ubr 2 3072 -- -- -- -- -- on /on /--
-----------------------------------------------------------------------------
Total Num : 8
-----------------------------------------------------------------------------

NOTE
profile.

----------------------------------------------------------------------
----------------------------------------------------------------------
0 Activated 1002 1 -- --
----------------------------------------------------------------------


neglected
> Will you set SNR margin for modem? (y/n)[n]:y
> Target SNR margin in downstream(0~15 dB) [6]:8
> Minimum SNR margin in downstream (0~8 dB) [0]:2
> Maximum SNR margin in downstream (8~31 dB) [31]:
> Target SNR margin in upstream (0~15 dB) [6]:8
> Minimum SNR margin in upstream (0~8 dB) [0]:2
> Maximum SNR margin in upstream (8~31 dB) [31]:
> DownStream SNR margin for rate downshift (2~7 dB) [3]:
> DownStream SNR margin for rate upshift (9~31 dB) [9]:
> UpStream SNR margin for rate downshift (2~7 dB) [2]:

> UpStream SNR margin for rate upshift (9~31 dB) [12]:

neglected
<ATU-C>
<ATU-R>



huawei(config)#save
----End
Result
After the configuration, the users can access the Internet in the PPPoE/IPoE mode.

22.5 Adding an ADSL2+ Line Profile

This topic describes how to add an ADSL2+ line profile. This helps to include the parameters
needed by all the ADSL2+ ports in a line profile. After the line profile is configured successfully,
it can be directly used to activate the ports.
Context
When configuring an ADSL2+ line profile, pay attention to the following points:
l Up to 1002 line profiles can be configured for the UA5000. 1, 1000, 1001, and 1002 are
default line profiles. 1 is the common ADSL line profile, 1000 is the fast mode profile,
1001 is the long-distance profile, and 1002 is the ADSL2+ line profile. The user can modify
the default line profiles but cannot delete the default line profiles.
l ADSL2+ line profile contains a series of parameters, such as:
Upstream/downstream rate
Upstream/downstream interleaved depth
Signal to noise ratio (SNR) margin
When a port is being activated, the ATU-R negotiates with the ATU-C based on the
parameters in the line profile to determine whether the connection can be set up to between
them under the existing conditions.
l When the transmission mode is G.lite (G992.2/G992.4), you can select only "interleaved"
as the channel mode.
l When the downstream channel mode is fixed, the maximum rate of the downstream channel
must be equal to the minimum rate.
l When setting the upstream/downstream SNR margin, ensure that the settings comply with
mini. SNR margin target SNR margin max. SNR margin.
l According to G.lite Standards, when the transmission mode is G.lite (G992.2/G992.4), the
supported rate ranges 64-1536 kbit/s in downstream, and 32-512 kbit/s in upstream.
l When setting the upstream/downstream SNR margin for rate downshift, ensure that it is
larger than or equal to the upstream/downstream mini. SNR margin and less than the
upstream/downstream target SNR margin. The upstream/downstream SNR margin for rate
upshift should be larger than the upstream/downstream target SNR margin and less than or
equal to the max. upstream/downstream SNR margin.
Figure 22-7 and Figure 22-8 show the flowchart for configuring an ADSL2+ line profile.

Figure 22-7 Flowchart for configuring an ADSL2+ line profile-1
Start
No
Name the profile?
Yes
Set profile name
Select ADSL2+ profile
Perform the basic No

configuration?
Yes
Select ADSL2+ working mode
Set trellis coding
Set downstream channel bit swap
Set upstream channel bit swap
Interleaved mode
Set channel mode
Set interleaved delay? No Fast channel mode
Select adaptAtRuntime as the

Yes
downstream transmit rate adaptation
Set max. downstream
interleaved delay
Set SNR margin B
Set max. upstream for modem?
interleaved delay No
Yes
Set downstream target SNR margin
Set min. downstream SNR margin
Set max. downstream SNR margin

Figure 22-8 Flowchart for configuring an ADSL2+ line profile-2
A
Set downstream SNR margin
Set target SNR margin in for rate downshift
upstream
Set downstream SNR margin
Set min. SNR margin in for rate upshift
upstream
Set upstream SNR margin for

Set max. SNR margin
rate downshift
in upstream
Set upstream SNR margin for

rate upshift
No
Set adjustment time? B
Yes
Set min. downshift time in
downstream

upstream

upstream
Set min. upshift time in

B upstream
No
Set bit rate?
Yes
Set min. transmit rate in
downstream
Set max. transmit rate in

downstream
Set min. transmit rate in

upstream
Set max. transmit rate in

upstream
End

NOTE
l The ADSL2+ line profile of the UA5000 supports only the configuration of the downstream seamless
rate adaptation (SRA).
l If the downstream rate adaptation mode is the fixed mode, the judgmental items and the configuration
items in both the dashed frame and the solid frame of Figure 22-8 cannot be displayed or configured.
After setting the max. SNR margin in upstream of the line profile, follow the steps in the flowchart to
set the min. transmit rate in downstream and configure other items.
l If the downstream rate adaptation mode is the adaptAtStartup mode, the judgmental items and the
configuration items in the dashed frame of Figure 22-8 cannot be displayed or configured. After setting
the max. SNR margin in upstream of the line profile, determine whether to set rate parameters, and
follow the steps in the flowchart to configure other items.
Procedure
Run the adsl line-profile add command to add an ADSL2+ line profile.
----End
Example
Assume that:
l Index of the ADSL2+ line profile: 4
l ADSL2+ working mode: G.dmt
l Maximum downstream interleaved delay: 8 ms
l Maximum upstream interleaved delay: 2 ms
l Transmit rate adaptation in downstream: adaptAtRuntime
l Minimum downshift time in downstream: 50s
l Maximum transmit rate in downstream: 1024 kbit/s
l Maximum transmit rate in upstream: 512 kbit/s
l Other parameters: default
To add an ADSL2+ line profile, do as follows:
neglected
> Will you set basic configuration for modem? (y/n)[n]:y
Note: Setting to these mode of G992.3~5 will lead that the adsl ports that are
not support adsl2+ not be activated
ADSL transmission mode:
> 0: All (G992.1~5,T1.413)
> 1: Full rate(G992.1/3/5 or T1.413)
> 2: g.lite(G992.2/4) (ADSL over ISDN board doesn't support g.lite mode)
> 3: T1.413(ADSL over ISDN board doesn't support T1.413 mode)
> 4: g.dmt (G992.1/3/5)
> 5: g.hs (G992.1~5, G992.5 is prior)
> 6: G992.1
> 7: G992.2
> 8: G992.3
> 9: G992.4
> 10:G992.5
> 11: ADSL all (G992.1~2,T1.413)

Please select (0~11) [0]:4

> Trellis mode 0-disable 1-enable (0~1) [1]:
> Downstream channel bit swap 0-disable 1-enable (0~1) [1]:
> Upstream channel bit swap 0-disable 1-enable (0~1) [1]:
> Will you set interleaved delay? (y/n)[n]:y
> Maximum downstream interleaved delay(0~255 ms) [16]:8
> Maximum upstream interleaved delay(0~255 ms) [6]:2
> Target SNR margin in downstream(0~15 dB) [6]:
> Minimum SNR margin in downstream (0~6 dB) [0]:
> Target SNR margin in upstream (0~15 dB) [6]:
> Minimum SNR margin in upstream (0~6 dB) [0]:
> DownStream SNR margin for rate downshift (0~5 dB) [3]:
> DownStream SNR margin for rate upshift (7~31 dB) [9]:
> UpStream SNR margin for rate downshift (0~5 dB) [0]:
> UpStream SNR margin for rate upshift (7~31 dB) [12]:
>Will you set shifttime? (y/n)[n]:y
> Minimum Downshift time in downstream (0~16383 second) [60]:50
> Minimum Upshift time in downstream (0~16383 second) [60]:
> Minimum Downshift time in upstream (0~16383 second) [0]:
> Minimum Upshift time in upstream (0~16383 second) [0]:
> Will you set parameters for rate? (y/n)[n]:y
> Minimum transmit rate in downstream (32~32000 Kbps) [32]:
> Maximum transmit rate in downstream (1024~32000 Kbps) [24544]:
1024
> Minimum transmit rate in upstream (32~6000 Kbps) [32]:
> Maximum transmit rate in upstream (512~6000 Kbps) [1024]:
512
huawei(config)#display adsl line-profile 4
-----------------------------------------------------------------------------
Profile index :4 Name: ADSL LINE PROFILE 4

ADSL transmission mode : g.dmt(G992.1/3/5)
Trellis mode : Enable
Upstream channel bit swap : Enable
Downstream channel bit swap : Enable
Channel mode : Interleaved
Maximum downstream interleaved delay(ms) : 8
Maximum upstream interleaved delay(ms) : 2
Target downstream SNR margin(dB) : 6
Maximum acceptable downstream SNR margin(dB) : 31
Minimum acceptable downstream SNR margin(dB) : 0
Target upstream SNR margin(dB) : 6
Maximum acceptable upstream SNR margin(dB) : 31
Minimum acceptable upstream SNR margin(dB) : 0
Downstream SNR margin for rate downshift(dB) : 3
Downstream SNR margin for rate upshift(dB) : 9
Upstream SNR margin for rate downshift(dB) : 0
Upstream SNR margin for rate upshift(dB) : 12
Minimum upshift time in downstream(seconds) : 60
Minimum downshift time in downstream(seconds) : 50
Minimum upshift time in upstream(seconds) : 0
Minimum downshift time in upstream(seconds) : 0
Downstream form of transmit rate adaptation : Adapting at runtime
Minimum transmit rate downstream(Kbps) : 32
Maximum transmit rate downstream(Kbps) : 1024
Minimum transmit rate upstream(Kbps) : 32
Maximum transmit rate upstream(Kbps) : 512
-----------------------------------------------------------------------------
Related Operation
Table 22-6 lists the related operations for adding an ADSL2+ line profile.

Table 22-6 Related operations for adding an ADSL2+ line profile
Quickly add an ADSL2+ adsl line-profile quickadd The parameters of this command
line profile are entered in the non-interactive
mode. Therefore, this command is
a supplement to the adsl line
profile add command.
Delete an ADSL2+ line adsl line-profile delete You cannot delete the default line
profile profiles or a referenced line profile.
Modify an ADSL2+ line adsl line-profile modify After the line profile is modified,
profile the system prompts that the profile
takes effect immediately
Quickly modify an adsl line-profile The parameters of this command

ADSL2+ line profile quickmodify are entered in the non-interactive
mode. Therefore, this command is
a supplement to the adsl line
profile modify command.
22.6 Adding an ADSL2+ Extended Line Profile

This topic describes how to add an ADSL2+ extended line profile. The ADSL2+ extended line
profile is used to configure the extended parameters for activating an ADSL2+ port. This helps
to filter the sub-carrier that is unsuitable for carrying data.
Context
An ADSL2+ extended line profile is used to configure the extended parameters for an ADSL2
+ port when the port is activated. The three major parameters are as follows:
l missingtone
When you set this parameter to the specified sub-carrier of the line, these sub-carriers
have no power output, and no bit is allocated to them.
If the noise of certain bands is very unstable, you can set this parameter to forbid this
band. In this manner, the line is not affected by the band.
There are bands that have special purposes in certain regions. To prevent interference
to these bands, you can set the parameter to forbid these bands.
l Impulse Noise Protection (INP)
INP defines the capacity of resisting the impulse interference of the ADSL channel. The
unit is DMT SYMBOL.
If INP is 1, it indicates that the current ADSL channel can resist the impulse noise of
one DMT SYMBOL.
l Maximum downstream power spectral density (PSD) margin
The maximum downstream PSD margin ranges from 40 dBm/Hz to 52 dBm/Hz. By

default, it is 40 dBm/Hz.

The UA5000 supports up to 32 ADSL2+ extended line profiles. After an ADSL2+ extended line
profile is configured, bind it with a port and directly reference it for activating the port.
Procedure
Step 1 Run the adsl extline-profile add command to add an ADSL2+ extended line profile.
Step 2 Run the display adsl extline-profile command to query an ADSL2+ extended line profile.
----End
Example
To add an ADSL2+ extended line profile and disable the tones 80-90, do as follows:
huawei(config)#adsl extline-profile add
neglected
>Do you want to name the profile (y/n) [n]:y
>Please input profile name:ADSL EXTLINEPROFILE
> Warning: The configuration of transmission mode in extline-profle will
replace the one configured in line-profile when the transmission mode is enabled
!
> Will you enable the transmission mode?(y/n)[n]:y
> ADSL transmission mode in standard :
> 1: G992.1 2: G992.2 3: G992.3 4: G992.5 5: T1.413
> Please input the transmission mode(s) possible in use(1-5) [1,3-4]:1
> ADSL Annex type :
> 1: Annex.A 2: Annex.B 3: Annex.L 4: Annex.M
> Please input the Annex type(s) possible in use(1-2) [1-2]:1
> Do you want to configure the disabled tone? (y/n)[n]:y
> Please input the section number you want to configure(1-4)[4]:
> No.1 Please input the start index of the disabled tone(32-511)[32]:80
> Please input the end index of the disabled tone(32-511)[80]:90
> Do you want to validate the settings of this section? (y/n)[n]:y
> No.2 Please input the start index of the disabled tone(32-511)[90]:
> Please input the end index of the disabled tone(32-511)[90]:
> Do you want to validate the settings of this section? (y/n)[n]:
> Do you want to configure the minimum INP in downstream? (y/n)[n]:
> Do you want to configure the minimum INP in upstream? (y/n)[n]:
> Do you want to configure the TSSi parameter? (y/n)[n]:
> Do you want to configure the L2 parameter? (y/n)[n]:
> Do you want to configure the PSD parameter? (y/n)[n]:
huawei(config)#display adsl extline-profile 1
-----------------------------------------------------------------------------
Profile Index : 1 Name: ADSL EXTLINEPROFILE
ADSL transmission mode in standard :G992.1
Annex type :Annex.A
Annex.M tone expand scope :-
L2 mode state :disable
Maximum PSD mask in downstream :-40
Mininum INP in downstream(DMT Symbol) :-
Mininum INP in upstream(DMT Symbol) :-
Current configuration of each section:
Sections Value Effective
Section 1 80 - 90 y
Section 2 90 - 90 n
Section 3 90 - 90 n

Section 4 90 - 90 n
-----------------------------------------------------------------------------
Total: 1
Note : The value '-' denotes that the value has never been configured
Related Operation
Table 22-7 lists the related operations for adding an ADSL2+ extended line profile.
Table 22-7 Related operations for adding an ADSL2+ extended line profile
Quickly add an adsl extline-profile The system adopts the non-interactive

ADSL2+ extended quickadd mode for entering the parameters of the
line profile command. It complements the adsl
extline-profile add command.
Delete an ADSL2+ adsl extline-profile The extended line profile in use cannot
extended line profile. delete be deleted.
Modify an ADSL2+ adsl extline-profile After the line profile is modified, the
extended line profile modify system prompts that the profile takes
effect immediately
Quickly modify an adsl extline-profile The system adopts the non-interactive

ADSL2+ extended quickmodify mode for entering the parameters of the
line profile command. It complements the adsl
extline-profile add command.
Bind/Unbind the (undo)extline-config To bind an ADSL2+ extended line

ADSL2+ extended profile with all the ports on a board at a
line profile. time, run the extline-config all
command.
22.7 Adding an ADSL2+ Alarm Profile

This topic describes how to add an ADSL2+ alarm profile. If the line profile is configured and
bound with a port successfully, the port can reference the profile directly during the activation.
Prerequisite
The ADLS2+ line meets the requirement for service provisioning.
Context
When adding an ADSL2+ alarm profile, pay attention to the following points: The UA5000 has
a default ADSL2+ alarm profile with the name of DEFVAL and index of 1. You can modify the
profile but cannot delete it. The ADSL2+ alarm profile contains a series of alarm thresholds to
measure and monitor the performance of the activated ADSL2+ line. When a statistic reaches
the threshold, the UA5000 reports the alarm to the BMS.

Procedure
Figure 22-9 shows the flowchart for adding an ADSL2+ alarm profile.
Figure 22-9 Flowchart for adding an ADSL2+ alarm profile
Configure an ADSL2+ alarm profile Set threshold of negative difference between

current and past transmit rate in interleaved mode
Set the alarm profile index Set LOF seconds in ATU-R
Set LOF seconds in ATU-C Set LOS seconds in ATU-R
Set LOS seconds in ATU-C Set LOP seconds in ATU-R
Set LOL seconds in ATU-C Set errored seconds in ATU-R
Set LOP seconds in ATU-C Set severely errored seconds in ATU-R
Set unavailable seconds in ATU-R

Set errored seconds in ATU-C
Set threshold of positive difference between current

Set whether to report initialization failure and past transmit rate in fast mode

Set failed fast retrain seconds in ATU-C and past transmit rate in interleaved mode
Set threshold of negative difference between

Set severely errored seconds in ATU-C current and past transmit rate in fast mode
Set threshold of negative difference between

Set unavailable seconds in ATU-C current and past transmit rate in interleaved mode
End
Set threshold fo positive difference between current
and past transmit rate in fast mode

and past transmit rate in interleaved mode
Set threshold of negative difference betwen current

and past transmit rate in fast mode

Procedure
Run the adsl alarm-profile add command to add an ADSL2+ alarm profile.
----End
Example
To add ADSL2+ alarm profile 2, do as follows:
neglected
<ATU-C>
> The number of Loss of Frame Seconds (0~900) [0]:50
rate in fast mode (0~31968Kbps) [0]:100
<ATU-R>
> The number of Loss of Frame Seconds (0~900) [0]:10
huawei(config)#display adsl alarm-profile 2
------------------------------------------------------------------------------
Profile Index : 2 Name: ADSL ALARM PROFILE 2
<ATU-C>
The number of Loss of Frame Seconds : 50
The number of Loss of Signal Seconds : 10
The number of Loss of Link Seconds : 0
The number of Loss of Power Seconds : 0
The number of Errored Seconds : 0
Enable or disable the initial failure trap : Disable
The number of failed fast retrain seconds : 10
The number of severely errored seconds : 0
The number of unavailable seconds : 0
Threshold of positive difference between the current and
the past transmit rate in fast mode : 100
the past transmit rate in interleaved mode : 0
Threshold of negative difference between the current and


<ATU-R>
The number of Loss of Frame Seconds : 10
The number of Loss of Signal Seconds : 10
The number of Loss of Power Seconds : 10
The number of Errored Seconds : 0
------------------------------------------------------------------------------
Related Operation
Table 22-8 lists the related operations for adding an ADSL2+ alarm profile.
Table 22-8 Related operations for adding an ADSL2+ alarm profile
Quickly add an ADSL2+ adsl alarm-profile The system adopts the non-
alarm profile quickadd interactive mode for entering
the parameters of the
command. The command
functions as a complement to
the adsl alarm-profile add
command.
Delete an ADSL2+ alarm adsl alarm-profile delete You cannot delete the default
profile. alarm profiles or an alarm
profile that is in use.
Modify an ADSL2+ alarm adsl alarm-profile modify After the profile is modified,
profile. the system prompts that the
profile takes effect
immediately.
Quickly modify an ADSL2+ adsl alarm-profile The system adopts the non-
alarm profile quickmodify interactive mode for entering
the parameters of the
command. The command
functions as a complement to
the adsl alarm-profile
modify command.
Display an ADSL2+ alarm display adsl alarm-profile -

profile
Bind an ADSL2+ alarm alarm-config A configured alarm profile

profile can take effect only after it is
bound with an ADSL2+ port.

22.8 Activating an ADSL2+ Port

This topic describes how to activate an ADSL2+ port for transmitting service data.
Prerequisite
The ADSL2+ line profile must be configured.
Context
l Activating (or activation) refers to the training between the ATU-C and the ATU-R. During
the training process, the system checks the line distance and line state based on the settings
included in the line profile, such as upstream/downstream line rate and SNR margin. The
ATU-C negotiates with the ATU-R to check whether the UA5000 can work properly in the
existing conditions.
l If the training is successful, the ATU-C can communicate with the ATU-R. At this point
of time, the port works in the activated state, and is ready for service data transmission.
l When the ATU-R is online, the activation process ends on the completion of the training.
When the ATU-R goes offline, the communication is terminated, and the ATU-C is in the
listening state. When the ATU-R goes online, the training process begins automatically.
When the training is successful, the port is activated.
l To activate an ADSL2+ port, you need to bind the port with an ADSL2+ line profile.
If no profile is specified, the system uses the default profile to activate the ADSL2+
port.
If the index of the line profile to be referenced in this activation is not entered, the system
uses the profile bound with the port last time to activate the ADSL2+ port.
Procedure
Step 1 Run the activate command to activate an ADSL2+ port.
Step 2 Run the display port state command to query the activated port.
----End
Example
To activate all ADSL2+ ports in slot 0/7, and bind line profile 1, do as follows:
huawei(config-if-adsl-0/7)#activate all profile-index 1
huawei(config-if-adsl-0/7)#display port state all
----------------------------------------------------------------------
----------------------------------------------------------------------
0 Activated 1 1 -- --
...

----------------------------------------------------------------------
To activate ADSL2+ port 0/7/0 and bind line profile named huawei, do as follows:
huawei(config-if-adsl-0/7)#activate 0 profile-name huawei
----------------------------------------------------------------------
----------------------------------------------------------------------
0 Activated huawei 1 -- --
----------------------------------------------------------------------
Related Operation
Table 22-9 lists the related operations for activating an ADSL2+ port.
Table 22-9 Related operations for activating an ADSL2+ port

Command...
Deactivate an ADSL2+ deactivate After an ADSL port is deactivated, the

port communication link established during
activation between the ATU-C and the
ATU-R is disconnected. In the case of
service transmission, activate the port
again.
Loop back an ADSL2+ loopback An ADSL port cannot be activated in the

port loopback state. To activate an ADSL
port, cancel the loopback.
22.9 Configuring the Port Rate Reachability Thresholds for

an ADSL2+ Port
This topic describes how to configure the upstream and downstream rate reachability thresholds
for an ADSL2+ port.
Context
l When an ADSL2+ port is activated, if the status of the upstream or downstream rate
reachability changes, the system reports an alarm for unqualified rate or a recovery alarm.
l The threshold for the upstream rate reachability is independent of the threshold of the
downstream rate reachability. To monitor the upstream and downstream rates, set the
thresholds separately.
l The upstream and downstream rate reachability thresholds for a port can be configured
according to the required rates or percentages of the upstream and downstream rates to the
maximum upstream and downstream rates specified in the line profile.
l The system supports the configuration of the upstream and downstream rate reachability
thresholds for the ADSL ports in an entire shelf.

l If the rate of a port becomes qualified or unqualified, the system reports an alarm only.
Other processing of the port is not affected.
Procedure
Step 1 Run the adsl line-monitoring command to configure rate reachability thresholds for an ADSL2
+ port.
Step 2 Run the display adsl line-monitoring command to query the configuration of the rate
reachability thresholds for an ADSL2+ port.
----End
Example
huawei(config)#adsl line-monitoring port 0/7/0 rate-threshold upstream upstream-
rate 1024
huawei(config)#display adsl line-monitoring 0/7/0
Port ID : 0/7/0
Port Type : ADSL
Line Monitoring Upstream Rate : 1024 kbps
Line Monitoring Downstream Rate : 0 kbps
huawei(config)#adsl line-monitoring port 0/7/0 rate-threshold downstream downst
ream-rate 2048
Port ID : 0/7/0
Port Type : ADSL
Line Monitoring Upstream Rate : 1024 kbps
To configure the upstream rate reachability threshold for port 0/7/0 to be 80% of the maximum
upstream rate specified in the bound line profile, do as follows:
hauwei(config)#adsl line-monitoring port 0/7/0 rate-threshold upstream upstream-
rate-percent 80
Port ID : 0/7/0
Port Type : ADSL
Line Monitoring Upstream Rate-percent : 80 percent
NOTE
The upstream and downstream rate reachability thresholds for a port can be configured according to the required
rates or in percentage. The configuration methods are as follows:
l The upstream and downstream rate reachability thresholds for a port are configured according to the
required rates.
l The upstream and downstream rate reachability thresholds for a port are configured according to the
percentages of the upstream and downstream rates to the maximum upstream and downstream rates
specified in the line profile.
l The upstream rate reachability threshold for a port is configured according to the required rate, and the
downstream rate reachability threshold is configured according to the percentage of the downstream rate
to the maximum downstream rate specified in the line profile.
l The downstream rate reachability threshold for a port is configured according to the required rate, and the
upstream rate reachability threshold is configured according to the percentage of the upstream rate to the
maximum upstream rate specified in the line profile.
When the rate reachability thresholds for an ADSL port are queried, the corresponding results are displayed
according to configuration methods.

22.10 Configuring the Rate Change Reporting Switch of an

ADSL2+ Port
This topic describes how to configure the rate change reporting switch of an ADSL2+ port.
Context
l Only the rate change pertaining to the ADSL2+ lines can be reported. Other lines do not
support the rate change reporting.
l The rate change reporting switch of an ADSL2+ port can be enabled only when the port is
configured with service ports.
l Currently, an ADSL2+ port supports only three downstream transmission modes, namely,
fixed, adaptAtStartup, and adaptAtRuntime. The rate change is reported only when the port
works in adaptAtStartup mode.
l By default, the rate change switch of an ADSL2+ port is disabled.
l The criteria for comparing the line rate change: An ADSL2+ port that is activated for the
first time reports traps if the port meets the requirements on rate change reporting; when
the difference between the activation rate and the rate reported last time exceeds 32 kbit/s,
traps are reported.
Procedure
Step 1 Run the service-port command to add a service port.
Step 2 Run the display adsl line-rate command to query the thresholds for the qualified rate of an
ADSL2+ port.
----End
Example
To enable the rate change reporting switch of ADSL2+ port 0/7/0, do as follows:
huawei(config)#adsl line-rate
{ change<K>}:change
{ trap<K> }:trap
{ enable<K>|disable<K> }:enable
Command:
adsl line-rate change trap enable
NOTE: ADSL line-monitoring rate-threshold feature has been disabled by system
because ADSL line-rate change trap feature has been enabled
huawei(config)#display adsl line-rate
{ change<K> }:change
{ trap<K> }:trap
{ config<K> }:config
Command:
display adsl line-rate change trap config
ADSL line-rate change trap function is enabled

22.11 Configuring IPoA/IPoE Protocol Conversion

This topic describes how to enable the IPoA users to access the IP network at the upper layer,
thus improving the access capability and the network compatibility of the UA5000.
22.11.1 Enabling IPoA Protocol Conversion
This topic describes how to enable IPoA/IPoE protocol conversion.
22.11.2 Setting the Aging Time of IPoA Forwarding Entry
This topic describes how to set the aging time of an IPoA forwarding entry.
22.11.3 Configuring the Default Gateway of the IPoA User
This topic describes how to configure the default gateway of the IPoA user.
22.11.4 Configuring the Encapsulation Type of the IPoA User
This operation enable you to configure the encapsulation type of the IPoA user.
22.11.1 Enabling IPoA Protocol Conversion

This topic describes how to enable IPoA/IPoE protocol conversion.
Procedure
Step 1 Run the ipoa enable command to enable IPoA protocol conversion.
Step 2 Run the display ipoa config command to query the IPoA protocol conversion status.
----End
Example
To enable IPoA protocol conversion, do as follows:
huawei(config)#display ipoa config
IPoA status : enable
IPoA user default gateway : 0.0.0.0
IPoA expire-time : 900 s
Related Operation
Table 22-10 lists the related operation for enabling IPoA protocol conversion.
Table 22-10 Related operation for enabling IPoA protocol conversion
Disable IPoA protocol conversion ipoa disable
22.11.2 Setting the Aging Time of IPoA Forwarding Entry

This topic describes how to set the aging time of an IPoA forwarding entry.

Context
l By default, the aging time of an IPoA forwarding entry is 1200s.
l When the aging time times out, the IPoA forwarding entry cannot be updated, and the
system considers users to be offline.
Procedure
Step 1 Run the ipoa expire-time command to set the aging time of an IPoA forwarding entry.
Step 2 Run the display ipoa config command to query the aging time of the IPoA forwarding entry.
----End
Example
To set the aging time of an IPoA forwarding entry as 300s, do as follows:
huawei(config)#ipoa expire-time 300
22.11.3 Configuring the Default Gateway of the IPoA User

This topic describes how to configure the default gateway of the IPoA user.
Context
l By default, the gateway of the IPoA user is 0.0.0.0.
l The default gateway IP address of the IPoA user is the IP address of the interface on the
upper device that connects to the UA5000, and not the IP address of the interface on the
UA5000.
Procedure
Step 1 Run the ipoa default gateway command to set the default gateway of the IPoA user.
Step 2 Run the display ipoa config command to query the default gateway of the IPoA user.
----End
Example
To set the default gateway of the IPoA user as 10.1.1.1, do as follows:
Related Operation
Table 22-11 lists the related operation for configuring the default gateway of the IPoA user.

Table 22-11 Related operation for configuring the default gateway of the IPoA user
Restore the default gateway of the IPoA user undo ipoa default gateway
22.11.4 Configuring the Encapsulation Type of the IPoA User

This operation enable you to configure the encapsulation type of the IPoA user.
Context
l By default, LLC and VC-MUX are used for the IPoA encapsulation. You can set the
encapsulation type as required.
l When configuring LLC for the IPoA service, pay attention to the following points:
LLC encapsulation supports both dynamic and static source IP address learning.
Therefore, you need not specify the source IP address if the modem automatically
reports the IP address. If the modem does not automatically reports the IP address, you
need specify the IP address of the modem as the source IP address.
When a default gateway has been configured for the IPoA service, you need not
configure the destination IP address for the IPoA user. In this case, the users destination
IP address is that of the default gateway.
After you have configured IPoA encapsulation for an xDSL port, you can delete a
service port only after you have changed the encapsulation type to LLC bridge.
Ensure that the MAC address pool is configured before the encapsulation configuration.
Otherwise, the encapsulation configuration fails.
l When configuring VC-MUX for the IPoA service, pay attention to the following points:
Because VC-MUX encapsulation supports only static source IP address learning, you
must specify the source IP address. Ensure that the specified source IP address is the
same as the IP address of the modem.
When a default gateway has been configured for the IPoA service, you need not
configure the destination IP address for the IPoA user. In this case, the users destination
IP address is that of the default gateway.
After you have configured IPoA encapsulation for an xDSL port, you can delete a
service port only after you have changed the encapsulation type to LLC bridge.
Ensure that the MAC address pool is configured before the encapsulation configuration.
Procedure
Step 1 Run the encapsulation command to configure the encapsulation type of the IPoA user.
Step 2 Run the display encapsulation type command to query the configuration.
----End
Example
To configure the encapsulation type of the IPoA user as LLC, do as follows:

huawei(config)#encapsulation 0/7/0 vpi 0 vci 34 type ipoa llc

{ <cr>|srcIP<K>|dstIP<K> }:
Command:
encapsulation 0/7/0 vpi 0 vci 34 type ipoa llc
Changing encapsulation type may cause service interruption, are you sure to
make the operation? (y/n)[n]y
Set encapsulation type successfully
huawei(config)#display encapsulation type ipoa llc
{ <cr>|number<K> }:
Command:
display encapsulation type ipoa llc
--------------------------------------------------------------------------
F/S /P VPI VCI ENCAP SRCIP DSTIP SRCIP-MODE
--------------------------------------------------------------------------
0/7 /0 0 34 llc_ip 0.0.0.0 1.1.1.1 dynamic
--------------------------------------------------------------------------
Total: 1
VLAN ID etc.), The vpi is access-end VLAN ID in vdsl port
To configure the encapsulation type of the IPoA user as VC-MUX, do as follows:

huawei(config)#encapsulation 0/7/0 vpi 0 vci 34 type ipoa vc-mux srcIP 10.1.1.2
{ <cr>|dstIP<K> }:
Command:
encapsulation 0/7/0 vpi 0 vci 34 type ipoa vc-mux srcIP 10.1.1.2
huawei(config)#display encapsulation type ipoa vc-mux
{ <cr>|number<K> }:
Command:
display encapsulation type ipoa vc-mux
----------------------------------------------------------------------------
----------------------------------------------------------------------------
0/7 /0 0 34 vc_ip 10.1.1.2 10.1.1.1 static
----------------------------------------------------------------------------
Total: 1
VLAN ID etc.), The VPI is access-end VLAN ID in VDSL port
22.12 Configuring PPPoA/PPPoE Protocol Conversion

This topic describes how to enable the PPPoA users to access the IP network at the upper layer,
thus improving the access capability and network compatibility of the UA5000.
22.12.1 Enabling PPPoA Protocol Conversion

This topic describes how to convert the PPPoA protocol to the PPPoE protocol so that the PPPoA
user can access the IP network at the upper layer.
22.12.2 Configuring the Encapsulation Type of the PPPoA User
This topic describes how to configure the encapsulation type of the PPPoA user.
22.12.3 Enabling PPPoA/PPPoE MRU Negotiation
This topic describes how to enable the PPPoA/PPPoE maximum receive unit (MRU) negotiation.
22.12.1 Enabling PPPoA Protocol Conversion

This topic describes how to convert the PPPoA protocol to the PPPoE protocol so that the PPPoA
user can access the IP network at the upper layer.

Prerequisite
The ADLS2+ line must meet the requirement for service provisioning.
Procedure
Step 1 Run the pppoa enable command to enable PPPoA/PPPoE protocol conversion.
Step 2 Run the display pppoa config command to query the PPPoA/PPPoE protocol conversion state.
----End
Example
To enable the PPPoA/PPPoE protocol conversion, do as follows:
huawei(config)#display pppoa config
Global PPPoA-to-PPPoE conversion : Enable
Max-receive-unit negotiate function: Disable
PPPoA-to-PPPoE monitor timeout : 120 s
Related Operation
Table 22-12 lists the related operation for enabling PPPoA protocol conversion.
Table 22-12 Related operation for enabling PPPoA protocol conversion
Disable the PPPoA protocol pppoa disable

conversion
22.12.2 Configuring the Encapsulation Type of the PPPoA User

This topic describes how to configure the encapsulation type of the PPPoA user.
Context
l By default, LLC and VC-MUX are used for the PPPoA encapsulation. You can set the
encapsulation type as required.
l In the case of PPPoA access, the system configuration of the LLC encapsulation and the
system configuration of the VC-MUX encapsulation are similar. You can configure it based
on the actual access user type.
l After you have configured PPPoA encapsulation for an xDSL port, you can delete a service
port only when you have changed the encapsulation type to LLC bridge.
l Ensure that the MAC address pool is configured before the encapsulation configuration.
Procedure
Step 1 Run the encapsulation command to configure the encapsulation type of the PPPoA user.

Step 2 Run the display encapsulation type command to query the encapsulation type.
----End
Example
To configure the encapsulation type of a PPPoA user as LLC, do as follows:
huawei(config)#display encapsulation type pppoa llc
--------------------------------------------------------------------------
--------------------------------------------------------------------------
0/7 /0 0 34 llc_ppp - - -
--------------------------------------------------------------------------
Total: 1
VLAN ID etc.), The vpi is access-end VLAN ID in vdsl port
22.12.3 Enabling PPPoA/PPPoE MRU Negotiation

This topic describes how to enable the PPPoA/PPPoE maximum receive unit (MRU) negotiation.
Context
UA5000The UA5000 determines whether to segment and reassemble packets according to the
PPPoA/PPPoE MRU configuration.
l MRU disabled
The PC initiates the PPPoE connection and negotiates by an MRU of 1492 bytes. In
this case, the packets are segmented and reassembled.
l MRU enabled
The UA5000 identifies the PPPoE packets converted from PPPoA packets. It adds a tag
to the packets and then sends them to the upper layer BRAS. The BRAS negotiates with
the CPE according to the 1500-byte MRU. In this manner, the size of the MTU between
the CPE and the BRAS is equal to that of the standard MTU of the Ethernet. In this
case, the packet is not segmented and reassembled.
Procedure
Step 1 Run the pppoa mru enable command to enable PPPoA/PPPoE MRU negotiation.
Step 2 Run the display pppoa config command to query the PPPoA and MRU switch status.
----End
Example
To enable the MRU negotiation, do as follows:
huawei(config)#pppoa mru enable
huawei(config)#display pppoa config
Global PPPoA-to-PPPoE conversion : Enable
Max-receive-unit negotiate function: Enable
PPPoA-to-PPPoE monitor timeout : 120 s

Related Operation
Table 22-13 lists the related operation for enabling PPPoA/PPPoE MRU negotiation.
Table 22-13 Related operation for enabling PPPoA/PPPoE MRU negotiation

Disable PPPoA/PPPoE MRU negotiation pppoa mru disable
22.13 Querying an ADSL2+ Port

This topic describes how to query the general information about an ADSL2+ port.
Context
An ADSL2+ port may be in the activating, activated, deactivated, or loopback state.
Figure 22-10 shows the switchover between these statuses.
Figure 22-10 Switchover between ADSL2+ port statuses

Modem training
undo
activate succeeds
loopback
activating
Loopback deactivated deactivate Modem is off or activated
powered off
loopback deactivate
Procedure
Run the display interface adsl command to query the general information about an ADSL2+
port.
----End
Example
To query the general information about ADSL2+ port 0/7/0, do as follows:
huawei(config)#display interface adsl 0/7/0
huawei(config)#
Adsl 0/ 7/ 0 : down
State of port : activating
Power mode : --
Description : --
Bind line-profile : No.1 DEFVAL
Bind alarm-profile : No.1 DEFVAL
Bind ext-profile : --
BTV user bind profile name : --
Hardware : ATU-C
Last up time : --

Last down time : --

Current transmission mode : --
Current upstream rate (kbps) : 0
Current downstream rate (kbps) : 0
Total count of line training : --
Total up stream cells num (cell) : 0
Total down stream cells num (cell) : 0
PVC 0/35
PVC encapsulation : Bridge LLC
Flow type : --
Flow para : --
Rx-cttr : 6
Tx-cttr : 6
VLAN : 10
Max mac-address learning count : 255
Support down multicast stream : enable
Up stream bytes num (byte) : 0
Up stream packets num (packet) : 0
Down stream bytes num (byte) : 0
Down stream packets num (packet) : 0
Related Operation
Table 22-14 lists the related operations for querying an ADSL2+ port.
Table 22-14 Related operations for querying an ADSL2+ port

Query the status of an ADSL2+ port display port state
Query the configuration of an ADSL2 display parameter

+ port
Query the performance statistics of an display statistics performance

ADSL2+ port
Query the bit allocation display line bit-allocation
Query the sub-carrier SNR of an display line snr

activated line
Query the alarm status of an ADSL2+ display alarm state

port
Query the operation parameters of an display line operation

activated line
Configure the switch for displaying adsl line-operation detail

details of ADSL2+ line operation
parameters
Query the switch for displaying details display adsl line-operation detail config
of ADSL2+ line operation parameters

Configuration Guide-IPM CLI 23 Configuring the SHDSL Service
23 Configuring the SHDSL Service
About This Chapter
This topic describes the SHDSL technology and how to configure the SHDSL service on the
UA5000.
23.1 Introduction to the SHDSL Service

This topic describes the service description and service specifications of the single-line high
speed digital subscriber line (SHDSL) service.
23.2 Configuration Example of the SHDSL IPoA Service
This topic describes how to configure the SHDSL IPoA service so that the user can access the
Internet through the SHDSL lines in IPoA mode.
23.3 Configuration Example of the SHDSL PPPoA Service
This topic describes how to configure the SHDSL PPPoA service so that the user can access the
Internet through the SHDSL lines in PPPoA mode.
23.4 Configuration Example of the SHDSL IPoE/PPPoE Service
This topic describes how to configure the SHDSL service in IPoE/PPPoE mode so that the user
can access the Internet through the SHDSL lines in IPoE/PPPoE mode.
23.5 Adding an SHDSL Line Profile
This topic describes how to add an SHDSL line profile. Most of the parameters of an SHDSL
port can be configured in an SHDSL line profile. If the line profile is configured successfully,
the port can use the profile directly during the activation.
23.6 Adding an SHDSL Alarm Profile
This topic describes how to add an SHDSL alarm profile. The SHDSL alarm profile is used to
set a group of alarm thresholds for measuring and monitoring the performances of an activated
SHDSL line. If the line profile is configured and bound successfully, the port can use the profile
directly during the activation. When a statistic reaches the threshold, the UA5000 informs the
device of the event, and reports an alarm to the BMS.
23.7 Binding an SHDSL Alarm Profile
This topic describes how to bind an SHDSL alarm profile with a port. The profile takes effect
after the port is activated.
23.8 Configuring the SHDSL Multi-Pair Binding

23 Configuring the SHDSL Service Configuration Guide-IPM CLI
The purpose of configuring the SHDSL multi-pair (M-pair) binding is to improve the line rate.
When configuring the SHDSL M-pair binding, ensure that no service exists on any SHDSL port
and all the SHDSL ports are deactivated and are in the non-loopback state.
23.9 Configuring the SHDSL EFM M-Pair Binding
The purpose of configuring the SHDSL M-pair binding is to improve the line rate. When
configuring the SHDSL EFM M-pair binding, ensure that no service exists on all the ports and
the ports are in the deactivated and non-loopback state.
23.10 Activating an SHDSL Port
This topic describes how to activate an SHDSL port for service transmission.
23.11 Querying an SHDSL Port
This topic describes how to query the SHDSL port status to check the port conditions.
23.12 Configuring the Channel Mode Switch of SHDSL Chipset
The subscriber can configure the SHDSL chipset channel mode of the H603SHLB board to PTM
or ATM.
23.13 Configuring the Clock Mode
This topic describes how to configure the clock mode.

23.1 Introduction to the SHDSL Service

This topic describes the service description and service specifications of the single-line high
speed digital subscriber line (SHDSL) service.
Service Description
The SHDSL technology provides symmetric high rate leased line access service over twisted
pairs to meet the requirements of the small-sized to medium-sized enterprises or small office,
and home office (SOHO) users. SHDSL provides a transmission distance from 3 km to 6 km.
The H601SDLB, H612SDLB, and H603SHLB boards support two-wire and four-wire SHDSL
lines. The rate of the two-wire SHDSL line ranges from 192 kbit/s to 2312 kbit/s. The rate of
the four-wire SHDSL line ranges from 384 kbit/s to 4624 kbit/s. In addition, the H603SHLB
board supports six-wire and eight-wire SHDSL.bis lines. The rate of the six-wire SHDSL line
ranges from 576 kbit/s to 17088 kbit/s. The rate of the eight-wire SHDSL line ranges from 768
kbit/s to 22784 kbit/s.
For details on SHDSL, see "SHDSL Access" in the UA5000 Universal Access Unit Feature
Description.
The UA5000 provides the SHDSL service through the SDLB/SHLB board. The SDLB board
provides G.SHDSL interface in ATM mode. The SHLB board supports the high-rate SHDSL.bis
feature. Each SDLB/SHLB board provides 16 SHDSL ports.
The SHDSL ports of the SHLB board support the activation in ATM/PTM mode. The ATM/
PTM mode switchover can be implemented on the SHDSL port through profile configuration.
Table 23-1 shows the encapsulation type mapping between the UA5000 and the modem.
Table 23-1 Encapsulation type mapping between the UA5000 and the modem
Access Type Modem Encapsulation UA5000 Encapsulation Type

Type
PPPoA PPPoA PPPoA or Auto
IPoA RFC1483 Route or IPoA IPoA or Auto
IPoE RFC1483 Bridge Bridge or Auto
PPPoE RFC1483 Bridge Bridge or Auto
PPPoE Bridge or Auto
23.2 Configuration Example of the SHDSL IPoA Service

This topic describes how to configure the SHDSL IPoA service so that the user can access the
Internet through the SHDSL lines in IPoA mode.

Prerequisite
Before configuring the SHDSL access service, ensure the following:
l The network devices and lines must be normal.
l The SDLB board must be in the normal state.
l The upper router of the UA5000 must assign VLANs to the SHDSL online users.
l Currently, the application service of IPoA/PPPoA users is the common Internet service.
l The UA5000 can restrict the user bandwidth through a specified traffic profile or an SHDSL
line profile. When the traffic profile and the SHDSL line profile work, the smaller
bandwidth restricted by the two profiles is used as the user bandwidth.
l The following section considers the user rate restriction through an SHDSL line profile as
an example. The bandwidth configured in a traffic profile should be higher than the
bandwidth configured in a line profile.
Networking
Figure 23-1 shows an example network for configuring the SHDSL IPoA service.
Figure 23-1 Example network for configuring the SHDSL IPoA service
BRAS
LSW
0/3/0 0/7/0
I S
P D
M L
B B
UA5000
Modem
PC
Data Plan
Table 23-2 provides the data plan for configuring the SHDSL IPoA service.

Table 23-2 Data plan for configuring the SHDSL IPoA service
Item Data Remarks

priority, and priority policy
Access rate: 2 Mbit/s in the traffic profile. When
Priority: 6 you add a service port, you
can specify the traffic profile
Priority policy: Pvc-Setting to restrict the access rate,
priority, and priority policy.
Line profile ID of the line profile: 3 To activate the SHDSL port,

use the parameters
configured in the line profile
to negotiate with the CPE.
When the two parties
negotiate successfully, the
SHDSL port is activated and
the lines connected to the
port can bear services.

SDLB board SHDSL port: 0/7/0 -

SHDSL mode: ATM
VLAN ID: 10 The same as the VLAN ID of

the upper layer device.
Upstream/Downstream bandwidth: 2 Mbit/s Configure the upstream/

downstream in the traffic
profile according to the
requirements of the user. In
general, set the rate of the
traffic profile to 2048 kbit/s.
The actual qualified rate of
the port may be lower than
96%. Therefore, increase the
rate to meet the requirements
of the user.
Access mode: IPoA -
IPMB board Uplink port0/3/0 -

Item Data Remarks
Gateway IP address: 10.1.1.1/24 It is the IP address of the

upper layer router.
Figure 23-2 shows the flowchart for configuring the SHDSL IPoA service.
Figure 23-2 Flowchart for configuring the SHDSL IPoA service
Start
Is there No
an appropriate traffic Bind the alarm profile
profile?
Yes Add a traffic profile Bind the line profile and

activate the SHDSL port
Create a VLAN and
add port(s) to it Configure the
MAC address pool
Is the SHDSL port No

Enable the IPoA
activated? protocol conversion
Yes
Configure the IPoA
Deactivate the SHDSL port default gateway
Set the encapsulation

mode of the SHDSL port
Is there No
an appropriate line
profile? Save the data
Is there No End
an appropriate alarm
profile?
Procedure
Step 1 Check whether there is a proper traffic profile. If there is no proper traffic profile, add a required
traffic profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------

0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
10 2048 2 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
10 ubr 2 2048 -- -- -- -- -- on /on /--
-----------------------------------------------------------------------------
Total Num : 8
-----------------------------------------------------------------------------
After the query, it is found that there is no proper traffic profile for use. You need to add a
required traffic profile.
Setting
-----------------------------------------------------------------------------
TD Index : 7
Priority : 6
CAR : 2048 kbps
EnPPDISC : on
EnEPDISC : on
-----------------------------------------------------------------------------
1. Create VLAN 10, and add upstream port 0/3/0 to the VLAN.
2. Add a service port to the VLAN.

huawei(config)#service-port vlan 10 shdsl mode atm 0/7/0 vpi 0 vci 35 rx-cttr
7
tx-cttr 7
Step 3 Query the status of the SHDSL port.

huawei(config)#interface sdl 0/7
huawei(config-if-sdl-0/7)#display port state 0
-----------------------------------------------------------------------------
Port Running Control Line Alarm Running Config Bind
ID Status Status Profile Profile Operation Operation Status
-----------------------------------------------------------------------------

0 Activated Active 1 1 Normal None Normal

-----------------------------------------------------------------------------
Step 4 Deactivate the SHDSL port.

huawei(config-if-sdl-0/7)#deactivate 0
Step 5 Configure the SHDSL line profile.

huawei(config-if-sdl-0/7)#quit
huawei(config)#shdsl line-profile add 3
During inputting,press 'Q' to quit,then settings at this time will be ignored
Do you want to name the profile (y/n) [n]:
> G.SHDSL data path mode(1--ATM;2--PTM)[1]:1
> G.SHDSL interface mode of line (1--two wire;2--four wire;3--six wire;4--eight
wire)[1]:
> Do you use the default data to create a line profile?(y/n)[y]:n
> G.SHDSL minimum line rate
(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:
> G.SHDSL maximum line rate
> Power Spectral Density mode (1--symmetric;2--asymmetric)[1]:
> Transmission mode (1--G.991.2 Annex A;2--G.991.2 Annex B;
3--support Annex A&B)[3]:1
> Remote enable (1--enabled;2--disabled)[1]:
> Probe enable (1--disabled;2--enabled)[1]:
> Do you config the target SNR margin?(y/n)[n]:y
> Downstream current target SNR margin(0~10 db)[0]:3
> Downstream worst case target SNR margin(0~10 db)[0]:2
> Upstream current target SNR margin(0~10 db)[0]:9
> Upstream worst case target SNR margin(0~10 db)[0]:8
> Target SNR margin bitmap(0x01~0x0f,bit0--down current,bit1-down worst,
bit2--up current,bit3--up worst)[0x01]:
Step 6 Configure the SHDSL alarm profile.

huawei(config)#shdsl alarm-profile add 4
> Do you use the default data to create an alarm profile?(y/n)[y]:n
> Loop attenuation threshold (0~127 db)[0]:20
> SNR margin threshold (0~10 db)[0]:
> ES threshold (0~900 s)[0]:100
> SES threshold (0~900 s)[0]:
> CRC anomaly threshold (0~58981500)[0]:
> LOSWS threshold (0~900 s)[0]:
> UAS threshold (0~900 s)[0]:

huawei(config-if-sdl-0/7)#alarm-config 0 4

huawei(config-if-sdl-0/7)#activate 0 3
Step 9 Configure the MAC address pool. Configure MAC address pool 0 with the start address of
0000-0000-0001.
Step 10 Enable the IPoA protocol conversion.

Step 11 Configure the IPoA default gateway.


Step 12 Set the encapsulation type of SHDSL port 0/7/0 as IPoA-LLC.

huawei(config)#encapsulation 0/7/0 vpi 0 vci 35 type ipoa llc srcIP 10.1.1.20
NOTE
In the case of IPoA access, select the dynamic IP address (without specifying the source IP address) or the
static IP address (specifying the source IP address) for the packets. To switch from a dynamic address to
a static address in IPoA mode, you must first use LLC-Bridge encapsulation, and then use the IPoA static
address encapsulation.

huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet in IPoA mode.
23.3 Configuration Example of the SHDSL PPPoA Service

This topic describes how to configure the SHDSL PPPoA service so that the user can access the
Internet through the SHDSL lines in PPPoA mode.
Prerequisite
l The SDLB board is must be the normal state.
l The upper layer router of the UA5000 must assign VLANs to the SHDSL online users.
Context
l Currently, the application service of IPoA/PPPoA users is the common Internet service.
l The UA5000 can restrict the user bandwidth through a specified traffic profile or an SHDSL
line profile. When the traffic profile and the SHDSL line profile work, the smaller
bandwidth restricted by the two profiles is used as the user bandwidth.
l The following section considers the user rate restriction through an SHDSL line profile as
an example. The bandwidth configured in a traffic profile should be higher than the
bandwidth configured in a line profile.
Networking
Figure 23-3 shows an example network for configuring the SHDSL PPPoA service.

Figure 23-3 Example network for configuring the SHDSL PPPoA service
BRAS
LSW
0/3/0 0/7/0
I S
P D
M L
B B
UA5000
Modem
PC
Data Plan
Table 23-3 provides the data plan for configuring the SHDSL PPPoA service.
Table 23-3 Data plan for configuring the SHDSL PPPoA service
Item Data Remarks
Traffic profile Index: 7 Configure the access rate, priority,

Access rate: 2 Mbit/s profile. When you add a service port,
restrict the access rate, priority, and
Priority policy: Pvc-Setting priority policy.
Line profile ID of the line profile: 6 To activate the SHDSL port, use the
parameters configured in the line
profile to negotiate with the CPE.
When the two parties negotiate
successfully, the SHDSL port is
activated and the lines connected to
the port can bear services.

Item Data Remarks
disabled.

SHDSL mode: ATM
VLAN ID: 10 The same as the VLAN ID of the

upper layer device.
Upstream/Downstream bandwidth: Configure the upstream/downstream

2 Mbit/s in the traffic profile according to the
requirements of the user. In general,
set the rate of the traffic profile to
2048 kbit/s. The actual qualified rate
of the port may be lower than 96%.
Therefore, increase the rate to meet
the requirements of the user.
Access mode: PPPoA -
IPMB board Uplink port: 0/3/0 -
Gateway IP address: 10.1.1.1/24 It is the IP address of the upper layer

router.

Item Data Remarks
Requirements LAN switch: For the configuration of the LSW and

for the upper- l The LAN switch must the configuration of the BRAS, refer
layer device transparently transmit the service to the corresponding configuration
packets of the UA5000. guide.
l Configure the VLAN for the
UA5000. The VLAN ID must be
consistent with the upstream
VLAN of the UA5000.
BRAS:
l According to the authentication
and charging requirements for the
dial-up users, the BRAS must
finish the related configurations,
for example, configuring the
access user domain (including the
authentication scheme, charging
scheme, and authorization scheme
to be bound to) and specifying the
RADIUS server.
authenticate users, you must
configure the user name password
on the BRAS. If the BRAS is used
to allocate IP addresses, you must
configure the related IP address
pool on the BRAS.
Figure 23-4 shows the flowchart for configuring the SHDSL PPPoA service.

Figure 23-4 Flowchart for configuring the SHDSL PPPoA service
Start
Is there No
an appropriate traffic Bind the alarm profile
profile?
Yes Add a traffic profile Bind the line profile and

Create a VLAN and
MAC address pool
Is the SHDSL port No

Enable the PPPoA
activated? protocol conversion
Yes
Deactivate the SHDSL port mode of the SHDSL port
Save the data

Is there No
an appropriate line
profile? End
Is there No
profile?
Procedure
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 2048 6 pvc-pri
10 2048 6 pvc-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--

2 ubr 2 512 -- -- -- -- -- on /on /--

3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
7 ubr 2 2048 -- -- -- -- -- on /on /--
10 ubr 2 2048 -- -- -- -- -- on /on /--
-----------------------------------------------------------------------------
Total Num : 9
-----------------------------------------------------------------------------

NOTE
profile.
Step 2 Create a VLAN and add uplink ports and service ports to the VLAN.
1. Create VLAN 10, and add uplink port 0/3/0 to VLAN 10.

7
tx-cttr 7

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------


Do you want to name the profile (y/n) [n]:y
Please input profile name:prof_name_6
> G.SHDSL data path mode(1--ATM;2--PTM)[1]:
wire)[1]:
(Value must be multiple of 64,except 2312kbps,192~5696,2312 kbps)[2048]:2048



> Loop attenuation threshold (0~127 db)[0]:30
> SNR margin threshold (0~10 db)[0]:4
> ES threshold (0~900 s)[0]:
> UAS threshold (0~900 s)[0]:500


Step 9 Configure the MAC address pool. Configure MAC address pool 0 with the start address of
0000-0000-0001.
Step 10 Enable the PPPoA protocol conversion.

Step 11 Set the encapsulation type of SHDSL port 0/7/0 as PPPoA-LLC.


huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet in PPPoA mode.
23.4 Configuration Example of the SHDSL IPoE/PPPoE

Service
This topic describes how to configure the SHDSL service in IPoE/PPPoE mode so that the user
can access the Internet through the SHDSL lines in IPoE/PPPoE mode.
Prerequisite
l The SDLB board must be in the normal state.

Context
l The UA5000 can restrict the user rate through a traffic profile or an SHDSL line profile.
When both the traffic profile and the SHDSL line profile work, the smaller one of the
bandwidths restricted by the two profiles is used as the user bandwidth.
l In this example, the traffic is considered as an example. Ensure that the user rate configured
in the line profile is larger than the user rate configured in the traffic profile.
Networking
Figure 23-5 shows an example network for the SHDSL IPoE/PPPoE service.
Figure 23-5 Example network of the SHDSL IPoE/PPPoE service
BRAS
LSW
0/3/0 0/7/0
I S
P D
M L
B B
UA5000
Modem
PC
Data Plan
Table 23-4 provides the data plan for configuring the SHDSL IPoE/PPPoE service.
Table 23-4 Data plan for configuring the SHDSL IPoE/PPPoE service
Item Data Remarks

Access rate: 3072 kbit/s profile. When you add a service port,

Item Data Remarks
Priority policy: Pvc-Setting restrict the access rate, priority, and

priority policy.
Line profile ID of the line profile: 2 To activate the SHDSL port, use the
parameters configured in the line
profile to negotiate with the CPE.
When the two parties negotiate
successfully, the SHDSL port is
activated and the lines connected to
the port can bear services.
Currently, the system has five default
line profiles: 1, 100, 101, 102, and
103.
disabled.

SHDSL mode: ATM
VLAN ID: 10 The same as the VLAN ID of the

upper layer device.
Upstream/Downstream bandwidth: Configure the upstream/downstream

3 Mbit/s in the traffic profile according to the
requirements of the user. In ideal
cases, set the rate of the traffic profile
to 2048 kbit/s. The actual qualified
rate of the port may be lower than
96%. Therefore, increase the rate to
meet the requirements of the user.
Access mode: IPoE/PPPoE -
Gateway IP address: 10.1.1.1/24 It is the IP address of the upper layer

router.

Item Data Remarks
Requirements LAN switch: For the configuration of the LSW and

for the upper- l The LAN switch must the configuration of the BRAS, refer
layer device transparently transmit the service to the corresponding configuration
packets of the UA5000. guide.
UA5000. The VLAN ID must be
consistent with the upstream
VLAN of the UA5000.
BRAS:
and charging requirements for the
dial-up users, the BRAS must
finish the related configurations,
for example, configuring the
access user domain (including the
authentication scheme, charging
scheme, and authorization scheme
to be bound to) and specifying the
RADIUS server.
configure the user name password
on the BRAS. If the BRAS is used
to allocate IP addresses, you must
configure the related IP address
pool on the BRAS.
Figure 23-6 shows the flowchart for configuring the SHDSL IPoE/PPPoE service.

Figure 23-6 Flowchart for configuring the SHDSL IPoE/PPPoE service
Start
Is there No
an appropriate traffic
profile?

Create a VLAN and
add port(s) to it
Is the SHDSL No
port activated?
Yes
Deactivate the SHDSL port
Is there
No
an appropriate line
profile?
Is there No
profile?
Bind the alarm profile
Bind the line profile and

Save the data
End
Procedure
Step 1 Query and configure a traffic profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri

3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 3072 6 pvc-pri
10 2048 6 pvc-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
7 ubr 2 3072 -- -- -- -- -- on /on /--
10 ubr 2 2048 -- -- -- -- -- on /on /--
-----------------------------------------------------------------------------
Total Num : 9
-----------------------------------------------------------------------------

NOTE
profile.
Step 2 Add a VLAN and add a service port and an upstream port to the VLAN.
1. Create VLAN 10, and add upstream port 0/3/0 to the VLAN.

7
tx-cttr 7

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------



Please input profile name:prof_name_test

wire)[1]:

> Loop attenuation threshold (0~127 db)[0]:
> SNR margin threshold (0~10 db)[0]:3
> CRC anomaly threshold (0~58981500)[0]:500



huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet in IPoE/PPPoE mode.
23.5 Adding an SHDSL Line Profile

This topic describes how to add an SHDSL line profile. Most of the parameters of an SHDSL
port can be configured in an SHDSL line profile. If the line profile is configured successfully,
the port can use the profile directly during the activation.

Context
l Each SHDSL line of the UA5000 is associated with a specific channel mode, and is bound
with a line profile. A configuration table of the SHDSL line profile can hold up to 103
SHDSL line profiles.
l The SHLB board supports the SHDSL.bis feature with high rate.
l The SHDSL port supports activation in ATM/PTM mode. Users can switch the SHDSL
port between the ATM mode and the PTM mode by configuring different profiles.
l Five SHDSL line profiles are default line profiles, the indexes of which are 1, 100, 101,
102, and 103. These five profiles can be modified but cannot be deleted.
Each SHDSL line of the UA5000 is associated with a specific channel mode, and is bound with
a line profile. A configuration table can hold up to 100 line profiles, including two default
profiles, profile 1 and profile 100, which cannot be deleted but can be modified.
Figure 23-7 shows the flowchart for adding an SHDSL line profile.

Figure 23-7 Flowchart for adding an SHDSL line profile
Start
Set the line profile index Set the transmission

mode
Configure the remote

No enable
Name the SHDSL
line profile?
Yes Configure the probe
enable
Name the profile
Set the target No

Set the SHDSL SNR margin?
interface mode of line
Yes
Yes Set the downstream

current target SNR margin
Use the default data for
the line profile?
Set the downstream worst
No target SNR margin
Set the SHDSL
minimum line rate Set the upstream current
target SNR margin
Set the SHDSL
maximum line rate Set the upstream worst
target SNR margin
Set the power spectral

density mode Set the target SNR
margin used bitmap
End
Procedure
Step 1 Run the shdsl line-profile add command to add an SHDSL line profile.
Step 2 Run the display shdsl line-profile command to query the SHDSL line profile which has been
added.
----End
Example
To add an SHDSL line profile with the index of 3, do as follows:
Do you want to name the profile (y/n) [n]:


wire)[1]:2
> G.SHDSL four wire lines rate
(The value should be the multiple of 128,384~11392 kbps)[4096]:2048
> Do you config the target SNR margin?(y/n)[n]:
huawei(config)#display shdsl line-profile 3
----------------------------------------------------------
Line profile index :3
Line profile name :PROFILE03
Path mode :ATM
G.SHDSL interface mode of line :four wire
G.SHDSL minimum line rate(unit:kbps) :2048
G.SHDSL maximum line rate(unit:kbps) :2048
PSD :symmetric
Transmission mode :G.991.2 Annex A&B
Remote enable :enabled
Probe enable :disabled
Downstream current target SNR margin :0
Downstream worst target SNR margin :0
Upstream current target SNR margin :0
Upstream worst target SNR margin :0
Target SNR margin used bitmap :0x1
Reference status :not referenced
----------------------------------------------------------
23.6 Adding an SHDSL Alarm Profile

This topic describes how to add an SHDSL alarm profile. The SHDSL alarm profile is used to
set a group of alarm thresholds for measuring and monitoring the performances of an activated
SHDSL line. If the line profile is configured and bound successfully, the port can use the profile
directly during the activation. When a statistic reaches the threshold, the UA5000 informs the
device of the event, and reports an alarm to the BMS.
Context
There is a default alarm profile with name of DEFVAL and the index of 1.
The default alarm profile cannot be deleted.
Figure 23-8 shows the flowchart for adding an SHDSL alarm profile.

Figure 23-8 Flowchart for adding an SHDSL alarm profile
Configure SHDSL alarm

profile
Set alarm profile index
Use default
Yes
parameter to create
alarm profile?
No
Set loop attenuation threshold
Set SNR margin threshold
Set errored second threshold
Set SES threshold
Set CRC abnormality threshold
Set LOSW threshold
Set UAS threshold
End
Procedure
Run the shdsl alarm-profile add command to add an SHDSL alarm profile.
----End

Example
To add an SHDSL alarm profile with the index of 3, do as follows:
Please input profile name:profile-3
> Loop attenuation threshold (0~127 db)[0]:
> SNR margin threshold (0~10 db)[0]:
Table 23-5 lists the parameters of an SHDSL alarm profile.
Table 23-5 Parameters of an SHDSL alarm profile
Profile index You can enter a profile index or press Enter to enable the
system to allocate a profile index. The profile index is unique,
and is in the range of 2 to 99.
Loop attenuation threshold The system collects the performance data generated within
any 15-minute period. If the loop attenuation exceeds the
threshold, an alarm is reported.
SNR margin threshold The system collects SNR related performance data generated
within any 15-minute period. If the SNR margin exceeds the
ES threshold The system collects ES related performance data generated

within any 15-minute period. If the accumulated ES exceeds
the threshold, an alarm is reported.
SES threshold The system collects SES related performance data generated
within any 15-minute period. If the accumulative SES exceeds
CRC anomalies number The system collects CRC related performance data generated
threshold within any 15-minute period. If the accumulative CRC
exceeds the threshold, an alarm is reported.
LOSWS threshold The system collects LOSW related performance data

generated within any 15-minute period. If the LOSW exceeds
UAS threshold The system collects UAS related performance data generated
within any 15-minute period. If the UAS exceeds the

Related Operation
Table 23-6 lists the related operations for adding an SHDSL alarm profile.
Table 23-6 Related operations for adding an SHDSL alarm profile
Delete an SHDSL alarm profile shdsl alarm-profile You cannot delete the default
delete alarm profiles or an alarm profile
in use.
Query an SHDSL alarm profile display shdsl alarm- Run the command in privilege
profile mode or SHDSL config mode.
Quickly add an SHDSL alarm shdsl alarm-profile The system uses the non-
profile quickadd interactive mode for the input of
the parameter of the command.
If the index of a new alarm
profile is not specified, the
UA5000 uses a minimum idle
index as the index of the alarm
profile.
Modify an SHDSL line profile shdsl line-profile After the line profile is modified,
modify the system prompts that the
profile takes effect immediately
23.7 Binding an SHDSL Alarm Profile

This topic describes how to bind an SHDSL alarm profile with a port. The profile takes effect
after the port is activated.
Context
l The SHDSL alarm profile bound with a port takes effect after the port is activated.
l Only a deactivated port can be bound with an alarm profile.
l If no profile is specified, the system uses the profile bound with the SHDSL port last time
to activate the port. If the port is activated for the first time, the default alarm profile, namely
profile 1 is used for activating the port.
Procedure
Step 1 Run the alarm-config command to bind an SHDSL alarm profile with a port.
Step 2 Run the display port state command to query the binding between the alarm profile and the
port.
----End

Example
To bind alarm profile 3 with port 1 of the SHDSL board in slot 0/7, do as follows:
---------------------------------------------------------------------------
---------------------------------------------------------------------------
1 Deactivated Deactive 1 3 Normal None Normal
---------------------------------------------------------------------------
23.8 Configuring the SHDSL Multi-Pair Binding

The purpose of configuring the SHDSL multi-pair (M-pair) binding is to improve the line rate.
When configuring the SHDSL M-pair binding, ensure that no service exists on any SHDSL port
and all the SHDSL ports are deactivated and are in the non-loopback state.
Prerequisite
The port for configuring the SHDSL M-pair binding must be deactivated and cannot be
configured as any service port.
Context
Each SHDSL line of the UA5000 has a specific channel mode, and is bound with a line profile.
An SHDSL line profile table contains up to 103 line profiles.The configuration of the default
line profile is as follows:
l Line profile 1 is used to activate a two-wire SHDSL port.
l Line profile 100 is used to activate a four-wire SHDSL port.
l Line profile 101 is used to activate a six-wire SHDSL port.
l Line profile 102 is used to activate an eight-wire SHDSL port.
l Line profile 103 is the default EFM line profile.
In the SHDSL port encapsulation mode, the SDLB board supports the binding of two-pair and
the SHLB board supports the binding of two-pair, three-pair, and four-pair. The rates are
respectively twice, three times and four times as fast as the rate of the single-pair.
l The 16 ports of the SDLB board are divided into eight groups. Each group contains two
ports.
l The 16 ports of the SHLB board are divided into four groups. Each group contains four
ports.
l The ports for the M-pair binding must belong to the same group.
l When configuring the SHDSL multi-pair binding, configure the binding type as M-Pair.
The bound ports must be activated by the same profile simultaneously. Only the active port
can be configured. The configuration in this section refers to the operation of activating
and deactivating a port, configuring power backoff, performing and canceling a loopback
on a port.
l After a port is bound, each port in the binding group is automatically bound with the
corresponding pair and the default line profile of the encapsulation mode.

Procedure
Step 1 Run the interface sdl command to enter the SHDSL mode.
Step 2 Run the port bind command to configure the SHDSL M-pair binding.
Step 3 Run the display port state command to query the SHDSL port status.
----End
Example
To configure ports 0 and 1 in slot 0/7 of the SHDSL board as two-pair, do as follows:
huawei(config-if-sdl-0/7)#port bind m-pair 0-1
huawei(config-if-sdl-0/7)#display port state all
---------------------------------------------------------------------------
---------------------------------------------------------------------------
0 Activating Deactive 101 1 Normal None MPair 0
1 Activating Deactive 101 1 Normal None MPair 0
2 Activating Deactive 1 1 Normal None Normal
---------------------------------------------------------------------------
Related Operation
Table 23-7 lists the related operations for configuring the SHDSL M-pair binding.
Table 23-7 Related operations for configuring the SHDSL M-pair binding
Add an SHDSL line profile shdsl line-profile add
Activate an SHDSL port activate
Deactivate an SHDSL port deactivate
23.9 Configuring the SHDSL EFM M-Pair Binding

The purpose of configuring the SHDSL M-pair binding is to improve the line rate. When
configuring the SHDSL EFM M-pair binding, ensure that no service exists on all the ports and
the ports are in the deactivated and non-loopback state.

Prerequisite
The port for configuring the SHDSL EFM M-pair binding must be deactivated and cannot be
configured with any service port.
Context
Each SHDSL line of the UA5000 has a specific channel mode, and is bound with a line profile.
An SHDSL line profile table contains up to 103 SHDSL line profiles.
l Line profile 1 is used to activate a two-wire SHDSL port.
l Line profile 100 is used to activate a four-wire SHDSL port.
l Line profile 101 is used to activate a six-wire SHDSL port.
l Line profile 102 is used to activate an eight-wire SHDSL port.
l Line profile 103 is the default EFM line profile.
In SHDSL port encapsulation mode, the system supports the binding of two-pair, three-pair, and
four-pair. The rates are respectively twice, three times and four times as fast as the single-pair
rate.
l The 16 ports of the SHLB board are divided into four groups. Each group contains four
ports. The ports for the EFM M-pair binding must belong to the same group.
l When you configure the SHDSL EFM M-pair binding, configure the binding type as EFM.
The bound ports can be activated by using different line profiles. You can configure each
bound port. The configuration in this section refers to the operation of activating and
deactivating a port, configuring power backoff, performing a loopback, and canceling a
loopback on a port.
l After a port is bound, each port in the binding group is automatically bound with the
corresponding pair and the default line profile of the encapsulation mode.
Procedure
Step 2 Run the port bind command to configure the SHDSL EFM M-pair binding.
Step 3 Run the display port state command to query the SHDSL port status.
----End
Example
To configure ports 4, 5 and 6 in slot 0/7 of the SHDSL board as three-pair, do as follows:
huawei(config-if-sdl-0/7)#port bind efm 4-6
huawei(config-if-sdl-0/7)#display port state all
---------------------------------------------------------------------------
---------------------------------------------------------------------------
0 Activating Active 101 1 Normal None MPair 0
4 Activating Deactive 103 1 Normal None EFM 4


---------------------------------------------------------------------------
Related Operation
Table 23-8 lists the related operations for configuring the SHDSL EFM M-pair binding.
Table 23-8 Related operations for configuring the SHDSL EFM M-pair binding
Add an SHDSL line profile shdsl line-profile add
Activate an SHDSL port activate
23.10 Activating an SHDSL Port

This topic describes how to activate an SHDSL port for service transmission.
Prerequisite
There must be a suitable SHDSL line profile.
Context
l Activating (or activation) refers to the training between the STU-C and the STU-R. During
the training process, the system checks the line distance and line state based on the settings
included in the line profile, such as upstream/downstream line rate and SNR margin. The
STU-C negotiates with the STU-R to check whether the devices can work properly in the
existing conditions.
l If the training is successful, the STU-C can communicate with the STU-R. At the same
time, the port works in the activated state, and is ready for service transmission.
l When the STU-R is online, the activation process ends after the training is complete. When
the STU-R goes offline, the communication is terminated, and the STU-C is in the listening
state. Once the STU-R goes online, the training process begins automatically. When the
training is successful, the port is activated.
l Before transmitting service traffic, an SHDSL port must be activated.
l If you require to use new parameters for an activated port, first deactivate the port and then
activate it by using the profile with the required parameters.

l If no profile is specified, the system uses the profile bound with the SHDSL port last time
to activate the port. If the port is activated for the first time, the default alarm profile, namely,
profile 1 is used for activating the port.
Procedure
Step 1 Run the activate command to activate an SHDSL port.
Step 2 Run the display port state command to query the information of the SHDSL port.
----End
Example
To activate the SHDSL port 0 in slot 0/7 by using line profile 1, do as follows:
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
Related Operation
Table 23-9 lists the related operations for activating an SHDSL port.
Table 23-9 Related operations for activating an SHDSL port
Loopback an SHDSL port loopback
23.11 Querying an SHDSL Port

This topic describes how to query the SHDSL port status to check the port conditions.
Context
l An SHDSL port may be in the activating, activated, deactivated or loopback state.
l Figure 23-9 shows the inter-conversion between the states.
Figure 23-9 Inter-conversion between the SHDSL port states

undo Modem training
loopback activate succeeds loopback
activating
Remote Remote
deactivated deactivate activated
loopback Modem link failure loopback
or power-off
loopback deactivate undo
loopback

Procedure
Run the display port state command to query the SHDSL port state.
----End
Example
To query the configuration and running status of the port 0/7/0, do as follows:
-------------------------------------------------------------------------
--------------------------------------------------------------------------
0 Activating Active 1 1 Normal None Normal
--------------------------------------------------------------------------
23.12 Configuring the Channel Mode Switch of SHDSL

Chipset
The subscriber can configure the SHDSL chipset channel mode of the H603SHLB board to PTM
or ATM.
Context
After the channel mode of a chipset is configured to ATM or PTM by running the set chipset-
mode command, the ports on the chipset can be activated only in the corresponding mode.
Procedure
Step 2 Run the set chipset-mode command to configure the channel mode of the SHDSL chipset.
Step 3 Run the display chipset-mode command to query the configured channel mode of the SHDSL
chipset.
----End
Example
To configure the channel mode of the SHDSL chipset to PTM, do as follows:
huawei(config-if-sdl-0/7)#set chipset-mode 0 ptm
uawei(config-if-sdl-0/7)#display chipset-mode 0
Command:
display chipset-mode 0
Chipset mode: PTM
23.13 Configuring the Clock Mode

This topic describes how to configure the clock mode.

Context
The clock modes of the SHDSL port are as follows:
l System
l Free-run
The network synchronization reference (NSR) clock mode takes effect only when the port is
reactivated.
l Activate it directly if the port is in the deactivated state.
l Deactivate it and then reactivate it if the port is in the activated state.
Procedure
Step 1 Run the set clockmode command to configure the clock mode.
Step 2 Run the display clockmode command to display the set clock mode.
----End
Example
To set the clock mode to system, do as follows:
huawei(config-if-sdl-0/7)#set clockmode system
The new clockmode will not take effect until the port is activated again.
Are you sure to set clockmode? (y/n)[n]:y
huawei(config-if-sdl-0/7)#display clockmode
Clock mode: System

Configuration Guide-IPM CLI 24 Configuring the VDSL2 Service
24 Configuring the VDSL2 Service
About This Chapter
This topic describes the VDSL2 technology and how to configure the VDSL2 service on the
UA5000.
24.1 Introduction to the VDSL2 Service

This topic describes the VDSL2 service and the related service specifications.
24.2 Configuration Example of the VDSL2 IPoA Service
This topic describes how to configure the VDSL2 IPoA service so that the user can access the
Internet through the VDSL2 lines in IPoA mode.
24.3 Configuration Example of the VDSL2 PPPoA Service
This topic describes how to configure the VDSL2 PPPoA service so that the user can access the
Internet through the VDSL2 lines in PPPoA mode.
24.4 Configuration Example of the VDSL2 PPPoE/IPoE Service
This topic describes how to configure the VDSL2 PPPoE/IPoE service so that the user can access
the Internet through the VDSL2 lines in PPPoE/IPoE mode.
24.5 Adding a VDSL2 Line Profile
This topic describes how to add a VDSL2 line profile. Configuring the VDSL2 line profile
indicates that you can configure most of the parameters required by each port as a profile.
24.6 Adding a VDSL2 Channel Profile
This topic describes how to add a VDSL2 channel profile.
24.7 Adding a VDSL2 Line Template
This topic describes how to add a VDSL2 line template. The specified line profile and channel
profile are bound together in a line template. You can use the line template when activating ports.
24.8 Adding a VDSL2 Line Alarm Profile
The VDSL2 line alarm profile is used to configure a series of alarm thresholds for measuring
and monitoring the performance of an activated VDSL2 line. When a statistic item reaches the
alarm threshold, the event is reported to the device and an alarm is reported to the log host and
the BMS.
24.9 Adding a VDSL2 Channel Alarm Profile

24 Configuring the VDSL2 Service Configuration Guide-IPM CLI
This topic describes how to add a VDSL2 channel alarm profile. The new channel alarm profile
contains alarm thresholds for channel parameters.
24.10 Adding a VDSL2 Alarm Template
This topic describes how to add a VDSL2 alarm template.
24.11 Binding a VDSL2 Alarm Template
This topic describes how to bind a VDSL2 alarm template to a port. After the port is activated,
the system monitors the line according to the alarm threshold configured in the alarm template.
24.12 Activating a VDSL2 Port
This topic describes how to activate a VDSL2 port. Activation refers to the training performed
between the VDSL transceiver unit - central office end (VTU-C) and the VDSL transceiver unit
- remote end (VTU-R). According to the upstream and downstream line rates and the specified
noise margin configured in the line template, the system detects the line length and line
conditions. The VTU-C and the VTU-R negotiates with each other and confirm whether the
VDSL2 port can work normally in the conditions described above.
24.13 Querying a VDSL2 Port
This topic describes how to query the information about a VDSL2 port.

24.1 Introduction to the VDSL2 Service

This topic describes the VDSL2 service and the related service specifications.
Service Description
The VDSL2 service uses the symmetric or asymmetric data transmission mode. The maximum
transmission distance can be 3.5 km.
For details of the VDSL2 service, see "Feature Description VDSL2 Access."
l The UA5000 provides the VDSL2 service through the VDMB board.
l The UA5000 supports the master shelf and the extended shelf. The master shelf and the
extended shelf house up to 30 VDSL2 boards in total. Each VDSL2 board provides 16
VDSL2 ports. The master shelf and the extended shelf provide up to 480 ports in total for
the VDSL2 service.
24.2 Configuration Example of the VDSL2 IPoA Service

This topic describes how to configure the VDSL2 IPoA service so that the user can access the
Internet through the VDSL2 lines in IPoA mode.
Prerequisite
l The VDMB board works in the normal state.
l The upper layer device of the UA5000 assigns VLANs to the VDSL2 Internet access
subscribers.
Context
l The UA5000 can restrict the user bandwidth through the configured traffic profile or the
configured VDSL2 line profile. If the two profiles work together, the user bandwidth is the
minimum value defined in the two profiles.
l In the case of IPoA access, select the dynamic IP address (without specifying the source
IP address) or the static IP address (specifying the source IP address) for the packets. When
switching from a dynamic address to a static address in the IPoA mode, you need to use
LLC-Bridge encapsulation first, and then use the IPoA static address encapsulation.
Networking
Figure 24-1 shows an example network for configuring the VDSL2 IPoA service.

Figure 24-1 Example network for configuring the VDSL2 IPoA service
BRAS
LSW
0/3/0 0/7/0
I V
P D
M M
B B
UA5000
Modem
PC
Data Plan
Table 24-1 provides the data plan for configuring the VDSL2 IPoA service.
Table 24-1 Data plan for configuring the VDSL2 IPoA service
Item Data Remarks

Access rate: 3072 kbit/s and priority policy in the traffic
profile. When you add a service
Priority: 6 port, you can specify the traffic
Priority policy: Pvc-Setting profile to restrict the access rate,

Item Data Remarks
Line template ID of the line template: 3 When the VDSL port is activated,
Line profile: the VDSL port uses the line and
channel parameters configured in
l Index: 3 the line template to negotiate with
l Target downstream/upstream the CPE. When the two parties
SNR margin: 12 dB negotiate successfully, the VDSL
l Minimum downstream/ port is activated and the lines
upstream SNR margin: 0.5 dB connected to the port can transmit
services.
setting
Channel profile:
l Index: 3
l Path mode: ATM
setting
Alarm template ID of the alarm template: 1 (the Configure the alarm threshold of
default template) the line parameter in the alarm
template. By binding the profile to
a port, you can monitor the
conditions of the lines connected to
the port.
In the default alarm template, all
the alarm thresholds are set to 0,
which indicates that line
monitoring is disabled.
VDMB board VDSL2 port: 0/7/0 -
VLAN ID: 10 This parameter is consistent with

the parameter of the upper layer
device.
IP address of the gateway: This parameter is the IP address of

10.1.1.1/24 the upper layer router.
Figure 24-2 shows the flowchart for configuring the VDSL2 IPoA service.

Figure 24-2 Flowchart for configuring the VDSL2 IPoA service
Start
Is there No
an appropriate traffic Bind the alarm template
profile?
Yes Add a traffic profile Bind the line template and

activate the VDSL2 port
Create a VLAN and
MAC address pool
Is the VDSL2 port No

Enable the protocol conversion
activated?
Yes
Configure the IPoA
Deactivate the VDSL2 port default gateway

mode of the VDSL2 port
Is there No
an appropriate line
template? Save the data
Yes Add a line template
Is there No End
template?
Yes Add an alarm template
NOTE
When adding a service port, you can select the ATM or PTM as the data path mode. The PTM data path
mode does not support the PPPoA and IPoA modes.
Procedure
Step 1 Check whether there is a proper traffic profile. If there is no proper traffic profile, add a traffic
profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
-----------------------------------------------------------------------------
Total Num : 7
-----------------------------------------------------------------------------
After the query, it is found that there is no proper traffic profile in the system to meet the
requirements for the service. Create traffic profile 7 according to the data plan.
Setting
-----------------------------------------------------------------------------
TD Index : 7
Priority : 6
CAR : 3072 kbps
EnPPDISC : on
EnEPDISC : on
-----------------------------------------------------------------------------
Step 2 Create VLAN 10 and add uplink port 0/3/0 to the VLAN.
Step 3 Add a service port to VLAN 10.

huawei(config)#service-port vlan 10 vdsl mode atm 0/7/0 vpi 0 vci 35 rx-cttr 7 t
x-cttr 7
Step 4 Query the status of the VDSL2 port.

huawei(config)#interface vdsl 0/7
huawei(config-if-vdsl-0/7)#display port state 0
-----------------------------------------------------------------
Port Status Loopback Line Template Alarm Template
-----------------------------------------------------------------
0 Activated Disable 1 1
-----------------------------------------------------------------
Step 5 Deactivate the VDSL2 port.

huawei(config-if-vdsl-0/7)#deactivate 0
Step 6 Configure the VDSL2 line profile.

huawei(config-if-vdsl-0/7)#quit
huawei(config)#vdsl line-profile add 3
neglected
> Do you want to name the profile (y/n) [n]:
> Transmission mode:
> 0: Custom
> 1: All (G992.1~5,T1.413,G993.2)

> 2: Full rate(G992.1/3/5,T1.413,G993.2)

> 3: G.DMT (G992.1/3/5,G993.2)
> 4: G.HS (G992.1~5,G993.2)
> 5: ADSL (G.992.1~5,T1.413)
> 6: VDSL (G993.2)
> Please select (0~6) [1]:0
> Current configured modes:
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L/M)
> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J/M)
> 7-G.993.2 (Annex A/B/C)
> Please select 1-Modify 2-Delete 3-Save and quit [3]:1
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> Please select (1,2-3) [1]:2-6
> G.992.1: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexC (1,2-3) [1]:
> G.992.2: 1-All Annex 2-AnnexA 3-AnnexC (1,2-3) [1]:
> G.992.3: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexL
> 7-AnnexM (1,2-3) [1]:2-6
> G.992.4: 1-All Annex 2-AnnexA 3-AnnexI (1,2-3) [1]:
> G.992.5: 1-All Annex 2-AnnexA 3-AnnexB 4-AnnexI 5-AnnexJ 6-AnnexM
> (1,2-3) [1]:2-5
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 3-G.992.2 (Annex A/C) 4-G.992.3 (Annex A/B/I/J/L)
> 5-G.992.4 (Annex A/I) 6-G.992.5 (Annex A/B/I/J)
> 7-G.993.2 (Annex A/B/C)
> Please select the form of transmit rate adaptation downstream:
> 1-fixed 2-adaptAtStartup (1~2) [2]:
> Please select the form of transmit rate adaptation upstream:
> Will you set SNR margin parameters? (y/n) [n]:y
> Target SNR margin downstream (0~310 0.1dB) [60]:
> Minimum SNR margin downstream (0~60 0.1dB) [0]:
> Maximum SNR margin downstream (60~310 0.1dB) [300]:
> Target SNR margin upstream (0~310 0.1dB) [60]:
> Minimum SNR margin upstream (0~60 0.1dB) [0]:
> Maximum SNR margin upstream (60~310 0.1dB) [300]:
> Will you set DPBO parameters? (y/n)[n]:y
> DPBO E-side electrical length (0~511 0.5dB) [0]:
> Will you set UPBO parameters? (y/n)[n]:y
> UPBO reference PSD per band, each band consists of two parameters[a, b].
Parameter a value from 40 dBm/Hz (coded as 0) to 80.95 dBm/Hz
(coded as 4095) in steps of 0.01 dBm/Hz; and b value from 0 (coded as 0)
to 40.95 dBm/Hz (coded as 4095) in steps of 0.01 dBm/Hz
> UPBO US1 band reference PSD parameter a(0~4095) [1650]:
> UPBO US1 band reference PSD parameter b(0~4095) [1020]:
> Will you force the CPE to use the electrical length to compute the UPBO:
> 1-forced, 2-auto(1~2) [2]:
> Will you set RFI notch configuration parameter? (y/n) [n]:y
> Please set the RFI notch band range, the format : tone index(0~4095)
> or begin tone index-end tone index. Begin tone index must not be more
> than end tone index, for example:20,25-30. You cannot set more than
> 16 ranges:1-20,50-100,400-700,1000-2000
> Will you set ADSL tone blackout configuration parameter? (y/n) [n]:y
> The parameter format is : tone index or begin tone index to end tone
> index. Begin tone index must not be more than end tone index, for
> example: 20,25-30.
> Downstream, tone index is from 0 to 511, you cannot set more than 8
> rangs:
> Upstream, tone index is from 0 to 63, you cannot set more than 4
> rangs:

> Will you set VDSL tone blackout configuration parameter? (y/n) [n]:
> Will you set mode-specific parameters? (y/n) [n]:
Step 7 Configure the VDSL2 channel profile.

huawei(config)#vdsl channel-profile add 3
neglected
> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:1
> Will you set the minimum impulse noise protection? (y/n) [n]:
> Will you set interleaving delay parameters? (y/n) [n]:
> Will you set parameters for rate? (y/n) [n]:
Step 8 Configure the VDSL2 line template.

Bind the configured line profile and channel profile. Assume that the index of the line template
is 3.
huawei(config)#vdsl line-template add 3
Start adding template
neglected
> Do you want to name the template (y/n) [n]:
> Please set the line-profile index (1~128) [1]:3
> Will you set channel configuration parameters? (y/n) [n]:y
> Please set the channel number (1~2) [1]:
> Channel1 configuration parameters:
> Please set the channel-profile index (1~128) [1]:3
Add template 3 successfully
Step 9 Bind an alarm template to the VDSL2 port.

NOTE
l In this example, the default alarm template is used. Therefore, you need not configure an alarm template.
l If the default alarm template is not used and you need to use alarm template 2, run the vdsl alarm-template
add 2 command to add alarm template 2, and then run the alarm-config 0 2 command to bind the template
to the VDSL2 port.
l A VDSL2 alarm template takes effect only when it is bound to a port. By default, each port is bound to alarm
template 1.
Step 10 Use line template 3 to activate VDSL2 port 0/7/0.

huawei(config-if-vdsl-0/7)#activate 0 template-index 3
Step 11 Configure the MAC address pool.

Configure MAC address pool 0, which begins with 0000-0000-0001.
Step 12 Enable the IPoA protocol conversion.

Step 13 Configure the default IPoA gateway.

Step 14 Set the encapsulation mode of VDSL2 port 0/7/0 to LLC.

huawei(config)#encapsulation 0/7/0 vpi 0 vci 35 type ipoa llc srcIP 10.1.1.20

huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet in IPoA mode.
24.3 Configuration Example of the VDSL2 PPPoA Service

This topic describes how to configure the VDSL2 PPPoA service so that the user can access the
Internet through the VDSL2 lines in PPPoA mode.
Prerequisite
subscribers.
Context
The UA5000 can restrict the user bandwidth through the configured traffic profile or the
Networking
Figure 24-3 shows an example network for configuring the VDSL2 PPPoA service.
Figure 24-3 Example network for configuring the VDSL2 PPPoA service
BRAS
LSW
0/3/0 0/7/0
I V
P D
M M
B B
UA5000
Modem
PC

Data Plan
Table 24-2 provides the data plan for configuring the VDSL2 PPPoA service.
Table 24-2 Data plan for configuring the VDSL2 PPPoA service
Item Data Remarks

services.
setting
Channel profile:
l Index: 3
l Path mode: ATM
setting
the port.

device.

Item Data Remarks
Requirements for LAN switch: For the configuration of the LSW

the upper-layer l The LAN switch must and the configuration of the BRAS,
device transparently transmit the refer to the corresponding
service packets of the UA5000. configuration guide.
UA5000. The VLAN ID must
be consistent with the upstream
VLAN of the UA5000.
BRAS:
and charging requirements for
the dial-up users, the BRAS
must finish the related
configurations, for example,
configuring the access user
domain (including the
bound to) and specifying the
RADIUS server.
configure the user name
password on the BRAS. If the
BRAS is used to allocate IP
addresses, you must configure
the related IP address pool on
the BRAS.
Figure 24-4 shows the flowchart for configuring the VDSL2 PPPoA service.

Figure 24-4 Flowchart for configuring the VDSL2 PPPoA service
Start
Is there No
profile? Configure the MAC
address pool
Create a VLAN and add
Enable the protocol
port(s) to it
conversion

Is the VDSL2 port No mode of the VDSL2 port
activated?
Save the data
Yes
Deactivate the VDSL2 port

End
Is there No
an appropriate line
template?
Yes Add a line template
Is there No
template?
Bind the alarm template
Bind the line template and

NOTE
When adding a service port, you can select the ATM or PTM as the data path mode. The PTM data path
mode does not support the PPPoA and IPoA modes.
Procedure
profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri

3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
-----------------------------------------------------------------------------
Total Num : 7
-----------------------------------------------------------------------------
Setting
-----------------------------------------------------------------------------
TD Index : 7
Priority : 6
CAR : 3072 kbps
EnPPDISC : on
EnEPDISC : on
-----------------------------------------------------------------------------
Step 2 Create VLAN 10, and add uplink port 0/3/0to VLAN 10.

huawei(config)#service-port vlan 10 vdsl mode atm 0/7/0 vpi 0 vci 35 rx-cttr 7 tx-
cttr 7

-----------------------------------------------------------------
-----------------------------------------------------------------
-----------------------------------------------------------------


neglected
> 0: Custom
> 1: All (G992.1~5,T1.413,G993.2)
> 2: Full rate(G992.1/3/5,T1.413,G993.2)
> 3: G.DMT (G992.1/3/5,G993.2)
> 4: G.HS (G992.1~5,G993.2)
> 5: ADSL (G.992.1~5,T1.413)
> 6: VDSL (G993.2)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> Please select (1,2-3) [1]:2-6
> 7-AnnexM (1,2-3) [1]:2-6
> (1,2-3) [1]:2-5
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-forced, 2-auto(1~2) [2]:

> 16 ranges:1-20,50-100,400-700,1000-2000
> example: 20,25-30.
> rangs:
> rangs:

neglected

is 3.
neglected

NOTE
to the VDSL2 port.
template 1.

Step 11 Configure the MAC address pool.

Configure MAC address pool 0, which begins with 0000-0000-0001.
Step 12 Enable the PPPoA protocol conversion.


Step 13 Set the encapsulation mode of VDSL2 port 0/7/0 to LLC.


huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet in PPPoA mode.
24.4 Configuration Example of the VDSL2 PPPoE/IPoE

Service
This topic describes how to configure the VDSL2 PPPoE/IPoE service so that the user can access
the Internet through the VDSL2 lines in PPPoE/IPoE mode.
Prerequisite
subscribers.
Context
The UA5000 can restrict the user bandwidth through the configured traffic profile or the
Networking
Figure 24-5 shows an example network for configuring the VDSL2 PPPoE/IPoE service.

Figure 24-5 Example network for configuring the VDSL2 PPPoE/IPoE service
BRAS
LSW
0/3/0 0/7/0
I V
P D
M M
B B
UA5000
Modem
PC
Data Plan
Table 24-3 provides the data plan for configuring the VDSL2 PPPoE/IPoE service.
Table 24-3 Data plan for configuring the VDSL2 PPPoE/IPoE service
Item Data Remarks


Item Data Remarks
services.
setting
Channel profile:
l Index: 3
l Path mode: PTM
setting
the port.

device.
IP address of the gateway: This parameter is the IP address of

10.1.1.1/24 the upper layer router.

Item Data Remarks
Requirements for LAN switch: For the configuration of the LSW

the upper-layer l The LAN switch must and the configuration of the BRAS,
device transparently transmit the refer to the corresponding
service packets of the UA5000. configuration guide.
UA5000. The VLAN ID must
be consistent with the upstream
VLAN of the UA5000.
BRAS:
and charging requirements for
the dial-up users, the BRAS
must finish the related
configurations, for example,
configuring the access user
domain (including the
bound to) and specifying the
RADIUS server.
configure the user name
password on the BRAS. If the
BRAS is used to allocate IP
addresses, you must configure
the related IP address pool on
the BRAS.
Figure 24-6 shows the flowchart for configuring the VDSL2 PPPoE/IPoE service.

Figure 24-6 Flowchart for configuring the VDSL2 PPPoE/IPoE service
Start
Is there No
profile?
Create a VLAN and
add port(s) to it
Is the VDSL2 port No

activated?
Yes
Deactivate the VDSL2 port
Is there No
an appropriate line
template?
Add a line template
Yes
Is there No
template?
Bind the alarm template
Bind the line template and

Save the data
End
Procedure
profile.
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 1024 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri

3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
0 cbr 2 1024 -- -- -- -- -- off/off/--
1 cbr 2 2500 -- -- -- -- -- off/off/--
2 ubr 2 512 -- -- -- -- -- on /on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /on /off
5 ubr 2 2048 -- -- -- -- -- on /on /--
6 ubr 1 -- -- -- -- -- -- off/off/--
-----------------------------------------------------------------------------
Total Num : 7
-----------------------------------------------------------------------------
Setting
-----------------------------------------------------------------------------
TD Index : 7
Priority : 6
CAR : 3072 kbps
EnPPDISC : on
EnEPDISC : on
-----------------------------------------------------------------------------
Step 2 Create a VLAN and add ports to the VLAN.

1. Create a VLAN.
2. Add uplink port 0/3/0 to the VLAN.


huawei(config)#service-port vlan 10 vdsl mode ptm 0/7/0 multi-service user-
encap pppoe rx-cttr 7 tx-cttr 7

-----------------------------------------------------------------
-----------------------------------------------------------------
-----------------------------------------------------------------


neglected
> 0: Custom
> 1: All (G992.1~5,T1.413,G993.2)
> 2: Full rate(G992.1/3/5,T1.413,G993.2)
> 3: G.DMT (G992.1/3/5,G993.2)
> 4: G.HS (G992.1~5,G993.2)
> 5: ADSL (G.992.1~5,T1.413)
> 6: VDSL (G993.2)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> Please select (1,2-3) [1]:2-6
> 7-AnnexM (1,2-3) [1]:2-6
> (1,2-3) [1]:2-5
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-forced, 2-auto(1~2) [2]:

> 16 ranges:1-20,50-100,400-700,1000-2000
> example: 20,25-30.
> rangs:
> rangs:

neglected
is 3.
neglected

NOTE
to the VDSL2 port.
template 1.


huawei(config)#save
----End

Result
After the configuration, the user should be able to access the Internet in PPPoE/IPoE mode.
24.5 Adding a VDSL2 Line Profile

This topic describes how to add a VDSL2 line profile. Configuring the VDSL2 line profile
indicates that you can configure most of the parameters required by each port as a profile.
Context
l The UA5000 has 128 line profiles in total. Profile 1 functions as the default profile. You
can modify the default line profile but cannot delete it.
l If the adaptation mode of the downstream channel is fixed, the maximum rate of the
downstream channel must equal the minimum rate.
l When setting the upstream or downstream SNR margin, set the target SNR margin,
minimum SNR margin, and maximum SNR margin by complying with the following
principles: The target SNR margin must be between the minimum SNR margin and the
maximum SNR margin.
Figure 24-7 shows the flowchart for adding a VDSL2 line profile.

Figure 24-7 Flowchart 1 for adding a VDSL2 line profile
Start
Name the No
line profile?
Yes
Set the name of the line profile
Set the transmission mode
Select the downstream

transmit rate adaptation mode
Select the upstream transmit

rate adaptation mode
Set SNR margin No

parameters? B
Yes
Set the downstream
target SNR margin
Set the minimum

downstream SNR margin
Set the maximum

downstream SNR margin

Set the upstream

target SNR margin
Set the minimum

upstream SNR margin
Set the maximum Set UPBO No

parameters? C
upstream SNR margin
Yes
Set UPBO US1 band
Set DPBO No
B reference PSD parameter a
parameters?
Yes Set UPBO US1 band

reference PSD parameter b
Set the E-side 0
electrical length? Set UPBO US2 band
reference PSD parameter a
Not 0
Set the DPBO PSD mask Set UPBO US2 band
Set DPBO E-side
cable model scalar A Set UPBO US3 band
reference PSD parameter a
Set DPBO E-side cable
model scalar B Set UPBO US3 band
Set DPBO E-side cable
model scalar C
D
Set the minimum DPBO
usable signal PSD
Set the minimum

frequency of the DPBO
Set the maximum

frequency of the DPBO

Set mode-specific No
parameters?
D
Yes
Select the corresponding mode

Force the CPE to use No
the electrical length to
calculate the UPBO? Set the downstream maximum
nominal aggregate transmit power
Yes
Set the upstream maximum
Set the upstream electrical length
nominal aggregate transmit power
Set the RFI notch No Set the downstream No

configuration parameter? PSD mask parameter?
Yes Yes
Set the RFI notch
Set the downstream PSD mask
configuration parameter
Set the VDSL tone No No

Set the upstream PSD
C blackout configuration
mask parameter?
parameter?
Yes Yes
Set the VDSL tone blackout
Set the upstream PSD mask
configuration parameter
Set UPBO parameters
End
Procedure
Step 1 Run the adsl line-profile add command to add a VDSL2 line profile.
Step 2 Run the display vdsl line-profile command to query an added VDSL2 line profile.
----End

Example
To add a VDSL2 line profile, do as follows:
neglected
> 0: Custom
> 1: All (G992.1~5,T1.413,G993.2)
> 2: Full rate(G992.1/3/5,T1.413,G993.2)
> 3: G.DMT (G992.1/3/5,G993.2)
> 4: G.HS (G992.1~5,G993.2)
> 5: ADSL (G.992.1~5,T1.413)
> 6: VDSL (G993.2)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> Please select (1,2-3) [1]:2-6
> 7-AnnexM (1,2-3) [1]:2-6
> (1,2-3) [1]:2-5
> 1-T1.413 2-G.992.1 (Annex A/B/C)
> 7-G.993.2 (Annex A/B/C)
> 1-forced, 2-auto(1~2) [2]:

> 16 ranges:1-20,50-100,400-700,1000-2000
> example: 20,25-30.
> rangs:
> rangs:
> Will you set mode-specific parameters? (y/n) [n]:y
> 1-defmode
> Please select 1-Add 2-Modify 3-Save and quit [3]:1
> 2-adsl 3-adsl2Pots 4-adsl2Isdn
> 5-adsl2PlusPots 6-adsl2PlusIsdn 7-adsl2ReachExtended
> 8-vdsl2Pots 9-vdsl2Isdn
> Please select [2]:7
> Maximum nominal aggregate transmit power downstream
> (0~205 0.1dBm) [145]:
> Maximum nominal aggregate transmit power upstream
> (0~205 0.1dBm) [145]:
> Will you set PSD mask value downstream parameter? (y/n) [n]:
> Will you set PSD mask value upstream parameter? (y/n) [n]:
> 1-defmode 7-adsl2ReachExtended
> Please select 1-Add 2-Modify 3-Delete 4-Save and quit [4]:
huawei(config)#display vdsl line-profile 3
------------------------------------------------------------------------------
Profile index: 3 Name: VDSL LINE PROFILE 3
Transmission mode:
T1.413 G.992.1(Annex A/B/C)
G.992.2(Annex A/C) G.992.3(Annex A/B/I/J/L)
G.992.4(Annex A/I) G.992.5(Annex A/B/I/J)
G.993.2(Annex A/B/C)
Form of transmit rate adaptation downstream : AdaptAtStartup
Form of transmit rate adaptation upstream : AdaptAtStartup
Target SNR margin downstream(0.1dB) : 60
Minimum downstream SNR margin(0.1dB) : 0
Maximum downstream SNR margin(0.1dB) : 300
Target SNR margin upstream(0.1dB) : 60
Minimum SNR margin upstream(0.1dB) : 0
Maximum SNR margin upstream(0.1dB) : 300
UPBO US1 band reference PSD parameters[a, b] : 1650,1020
UPBO use of electrical length to compute UPBO : Auto
RFI notch configuration:
Number Start Tone Stop Tone Start Frequency End Frequency
(KHz) (KHz)
1 1 20 4.3 90.5
2 50 100 215.6 435.5
3 400 700 1725.0 3023.0
4 1000 2000 4312.5 8629.3
<defmode>
G.993.2 profile : Profile12a
VDSL2 PSD class mask : AnnexB998-M2x-B(B8-6)
VDSL2 link use of U0 : Unused
Maximum nominal aggregate transmit power
downstream(0.1dBm) : 145
upstream(0.1dBm) : 145
<adsl2ReachExtended>
downstream(0.1dBm) : 145


upstream(0.1dBm) : 145
------------------------------------------------------------------------------
Related Operation
Table 24-4 lists the related operations for adding a VDSL2 line profile.
Table 24-4 Related operations for adding a VDSL2 line profile
Delete a VDSL2 line profile vdsl line-profile delete You cannot delete the default
line profile or a referenced
line profile.
Modify a VDSL2 line profile vdsl line-profile modify After the line profile is
modified, the system
prompts that the profile
immediately takes effect.
Quickly add a VDSL2 line vdsl line-profile quickadd The command is entered in
profile the non-interactive mode.
This is a complement to
entering a command to add a
VDSL2 line profile in the
interactive mode.
Quickly modify a VDSL2 vdsl line-profile The command is entered in

line profile quickmodify the non-interactive mode.
This is a complement to
entering a command to
modify a VDSL2 line profile
in the interactive mode.
24.6 Adding a VDSL2 Channel Profile

This topic describes how to add a VDSL2 channel profile.
Context
l The system has a default channel profile. The parameters in the default channel profile are
the data for reference. You can add channel profiles according to the actual line conditions.
l The added channel profiles are numbered from 2 to 128. When adding a channel profile,
you can specify the profile index. If you do not specify the profile index, the system
automatically allocates an idle profile index.
l You can enter the parameters in interactive mode when adding a channel profile.
Figure 24-10 shows the flowchart for adding a VDSL2 channel profile.

Figure 24-10 Flowchart for adding a VDSL2 channel profile
Start
No
Set the interleaved
delay parameter?
Set the channel No
Yes
profile name?
Set the max. downstream
Yes interleaved delay
set the channel profile name

Set the max. uptream
interleaved delay
Set the data path mode

No
Set the transmit
rate parameter?
No
Set the min. impulse
noise protection? Yes
Set the min. downstream
Yes transmit rate
Set the downstream impulse
noise protection Set the max. downstream
transmit rate
Set the downstream impulse
noise protection
Set the min. upstream
transmit rate
Set the max. upstream

transmit rate
End
Procedure
Step 1 Run the vdsl channel-profile add command to add a VDSL2 channel profile.
Step 2 Run the display vdsl channel-profile command to query the added VDSL2 channel profile.
----End
Example
To add a VDSL2 channel profile, do as follows:
neglected
> Data path mode 1-ATM, 2-PTM, 3-Both (1~3) [3]:
> Will you set the minimum impulse noise protection? (y/n) [n]:y
> Minimum impulse noise protection downstream:
> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols

> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols

> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols
> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols
> 17-fifteenSymbols 18-sixteenSymbols
> Please select (1~18) [1]:
> Minimum impulse noise protection upstream:
> 1-noProtection 2-halfSymbol 3-singleSymbol 4-twoSymbols
> 5-threeSymbols 6-fourSymbols 7-fiveSymbols 8-sixSymbols
> 9-sevenSymbols 10-eightSymbols 11-nineSymbols 12-tenSymbols
> 13-elevenSymbols 14-twelveSymbols 15-thirteenSymbols 16-fourteenSymbols
> 17-fifteenSymbols 18-sixteenSymbols
> Please select (1~18) [1]:
> Will you set interleaving delay parameters? (y/n) [n]:y
> Maximum interleaving delay downstream (0~200 ms) [20]:
> Maximum interleaving delay upstream (0~200 ms) [20]:
> Will you set parameters for rate? (y/n) [n]:y
> Minimum transmit rate downstream (128~100000 Kbps) [128]:
> Maximum transmit rate downstream (128~100000 Kbps) [100000]:
> Minimum transmit rate upstream (128~100000 Kbps) [128]:
> Maximum transmit rate upstream (128~100000 Kbps) [100000]:
huawei(config)#display vdsl channel-profile
{ <cr>|profile-index<L><1,128> }:2
Command:
display vdsl channel-profile 2
------------------------------------------------------------------------------
Profile index: 2 Name: VDSL CHANNEL PROFILE 2
Data path mode : Both
Minimum impulse noise protection downstream : NoProtection
Minimum impulse noise protection upstream : NoProtection
Maximum interleaving delay downstream(ms) : 20
Maximum interleaving delay upstream(ms) : 20
Minimum transmit rate downstream(Kbps) : 128
Maximum transmit rate downstream(Kbps) : 100000
Minimum transmit rate upstream(Kbps) : 128
Maximum transmit rate upstream(Kbps) : 100000
------------------------------------------------------------------------------
Table 24-5 lists the parameters of a VDSL2 channel profile.
Table 24-5 Parameters of a VDSL2 channel profile
Parameter Description Default Value
profile-index You can enter a profile index, or directly -

press Enter to enable the system to allocate
a profile index. The allocated profile index is
the smallest idle index. The profile index
must be unique.
profile-name You can enter a profile name or directly press -

Enter to enable the system to allocate a
profile name.
Data path mode If the configured mode is not consistent with -

the mode supported by the actual physical
line, preferentially ensure the line activation.
The board automatically adapts to the
supported mode.

Parameter Description Default Value
Maximum The value ranges from 0 ms to 200 ms. 20 ms

interleaved delay
downstream/
upstream
Minimum impulse There are 18 types of upstream/downstream No protection

noise protection minimum impulse noise protections.
downstream/
upstream
Minimum transmit The value ranges from 128 kbit/s to 100000 128 kbit/s
rate downstream/ kbit/s.
upstream
Maximum transmit The value ranges from 128 kbit/s to 100000 100000 kbit/s
rate downstream/ kbit/s.
upstream
Related Operation
Table 24-6 lists the related operations for adding a VDSL2 channel profile.
Table 24-6 Related operations for adding a VDSL2 channel profile

Delete a VDSL2 channel vdsl channel-profile delete You cannot delete the default
profile channel profile or a
referenced channel profile.
Modify a VDSL2 channel vdsl channel-profile After the channel profile is

profile modify modified, the system prompts
that the profile immediately
takes effect.
Quickly add a VDSL2 vdsl channel-profile The command is entered in

channel profile quickadd non-interactive mode. This is
a complement to entering a
command to add a VDSL2
channel profile in interactive
mode.
Quickly modify a VDSL2 vdsl channel-profile The command is entered in

channel profile quickmodify non-interactive mode. This is
command to modify a
VDSL2 channel profile in
interactive mode.

24.7 Adding a VDSL2 Line Template

This topic describes how to add a VDSL2 line template. The specified line profile and channel
profile are bound together in a line template. You can use the line template when activating ports.
Prerequisite
The line profile and channel profile are configured.
Context
l The system has a default line template. The parameters in the default line template are the
data for reference. You can add line templates according to the actual line conditions.
l The added line templates are numbered from 2 to 128. When adding a template, you can
specify the template index. If you do not specify the template index, the system
automatically allocates an idle template index.
l You can enter the parameters in interactive mode when adding a line template.
Procedure
Step 1 Run the vdsl line-template add command to add a VDSL2 line template.
Step 2 Run the display vdsl line-template command to query the added VDSL2 line template.
----End
Example
To add a VDSL2 line template, do as follows:
neglected
huawei(config)#display vdsl line-template
{ <cr>|template-index<L><1,128> }:2
Command:
display vdsl line-template 2
------------------------------------------------------------------------------
Template index: 2 Name: VDSL LINE TEMPLATE 2
Line profile index : 3
Channel1 profile index : 2
Channel1 rate adaptation ratio downstream : -
Channel1 rate adaptation ratio upstream : -
------------------------------------------------------------------------------
Table 24-7 lists the parameters of a VDSL2 line template.

Table 24-7 Parameters of a VDSL2 line template

Template index You can enter a template index, or directly press Enter to
enable the system to allocate a template index. The allocated
template index is the minimum one of the idle indexes. The
template index must be unique.
Template name You can enter a template name or directly press Enter.
Line profile index It is the index of the configured line profile.
Channel count This parameter is used to set the number of channels supported
by the line. You can configure the second channel only after
you have configured the first channel.
When modifying the line template, if you enter a channel count
that is different from the channel count entered last time, the
system considers that you need to reconfigure the following
channel parameters, and clears the parameters configured
before.
Channel profile index It is the index of the configured channel profile.
Related Operation
Table 24-8 lists the related operations for adding a VDSL2 line template.
Table 24-8 Related operations for adding a VDSL2 line template

Delete a VDSL2 line vdsl line-template delete You cannot delete the default
template line template or a referenced
line template.
Modify a VDSL2 line vdsl line-template modify After the line template is
template modified, the system prompts
that the template immediately
takes effect.
Quickly add a VDSL2 line vdsl line-template quickadd The command is entered in
template non-interactive mode. This is a
complement to entering a
command to add a VDSL2 line
template in interactive mode.
Quickly modify a VDSL2 vdsl line-template The command is entered in

line template quickmodify non-interactive mode. This is a
complement to entering a
command to modify a VDSL2
line template in interactive
mode.

24.8 Adding a VDSL2 Line Alarm Profile

The VDSL2 line alarm profile is used to configure a series of alarm thresholds for measuring
and monitoring the performance of an activated VDSL2 line. When a statistic item reaches the
alarm threshold, the event is reported to the device and an alarm is reported to the log host and
the BMS.
Context
When configuring a VDSL2 line alarm profile, you cannot delete line alarm profile 1, but you
can modify it. The added line alarm profiles are numbered from 2 to 50.
Figure 24-11 shows the flowchart for adding a VDSL2 line alarm profile.
Figure 24-11 Flowchart for adding a VDSL2 line alarm profile
Start
Set the alarm No Set the alarm No

profile name? thresholds for CPE?
Yes Yes
Set the alarm profile name Set the forward error correction
seconds
Set the alarm No Set the errored seconds

threholds for CO?
Yes
Set the severely errored seconds
Set the forward error correction
seconds
Set the loss of signal seconds
Set the errored seconds
Set the number of unavailable

Set the severely errored seconds seconds
Set the loss of signal seconds Set the failed full initialization
Set the he number of unavailable End

seconds

Procedure
Step 1 Run the vdsl alarm-profile add command to add a VDSL2 line alarm profile.
Step 2 Run the display vdsl alarm-profile command to query an added VDSL line alarm profile.
----End
Example
To add a VDSL2 line alarm profile with the index of 2, do as follows:
huawei(config)#vdsl alarm-profile add 2
neglected
> Will you set the line thresholds for CO? (y/n) [n]:y
> The number of forward error correction seconds (0~900) [0]:10
> The number of errored seconds (0~900) [0]:
> The number of loss of signal seconds (0~900) [0]:
> Will you set the line thresholds for CPE? (y/n) [n]:y
> The number of forward error correction seconds (0~900) [0]:10
> The number of errored seconds (0~900) [0]:10
> The number of loss of signal seconds (0~900) [0]:
> The number of failed full initialization (0~900) [0]:5
huawei(config)#display vdsl alarm-profile
{ <cr>|profile-index<L><1,50> }:2
Command:
display vdsl alarm-profile 2
------------------------------------------------------------------------------
Profile index: 2 Name: VDSL ALARM PROFILE 2
<CO>
The number of forward error correction seconds : 10
The number of errored seconds : 0
The number of loss of signal seconds : 0
<CPE>
The number of forward error correction seconds : 10
The number of errored seconds : 0
The number of loss of signal seconds : 0
The number of failed full initialization : 5
------------------------------------------------------------------------------
Table 24-9 lists the parameters of a VDSL2 line alarm profile.

Table 24-9 Parameters of a VDSL2 line alarm profile

Line alarm profile index You can enter a profile index, or directly press
Enter to enable the system to allocate a profile
index. The allocated profile index is the minimum
one of the idle indexes. The profile index must be
unique.
Line alarm profile name It is the name of the configured alarm profile.
Forward error correction seconds During the 15-minute period of performance data
collection, an alarm is generated if the forward error
correction seconds exceeds the preset threshold. If
the forward error correction seconds does not
exceed the preset threshold, no alarm is generated.
Errored seconds During the 15-minute period of performance data

collection, an alarm is generated if the errored
seconds exceeds the preset threshold. If the errored
seconds does not exceed the preset threshold, no
alarm is generated.
Severely errored seconds During the 15-minute period of performance data

collection, an alarm is generated if the severely
errored seconds exceeds the preset value. If the
severely errored seconds does not exceed the preset
threshold, no alarm is generated.
Loss of signal seconds During the 15-minute period of performance data

collection, an alarm is generated if the loss of signal
seconds exceeds the preset value. If the loss of
signal seconds does not exceed the preset threshold,
no alarm is generated.
The number of unavailable seconds During the 15-minute period of performance data
collection, an alarm is generated if the number of
unavailable seconds exceeds the preset value. If the
number of unavailable seconds does not exceed the
preset threshold, no alarm is generated.
Failed full initialization During the 15-minute period of performance data

collection, an alarm is generated if the failed full
initialization exceeds the preset value. If the failed
full initialization does not exceed the preset
threshold, no alarm is generated.
Related Operation
Table 24-10 lists the related operations for adding a VDSL2 line alarm profile.

Table 24-10 Related operations for adding a VDSL line alarm profile
Delete a VDSL2 line alarm vdsl alarm-profile delete You cannot delete the default
profile line alarm profile or a
referenced line alarm profile.
Modify a VDSL2 line alarm vdsl alarm-profile modify After the line alarm profile is
profile modified, the system
prompts that the profile
Quickly add a VDSL2 line vdsl alarm-profile The command is entered in

alarm profile quickadd non-interactive mode. This is
line alarm profile in
interactive mode.
Quickly modify a VDSL2 vdsl alarm-profile The command is entered in

line alarm profile quickmodify non-interactive mode. This is
command to modify a
VDSL2 line alarm profile in
interactive mode.
24.9 Adding a VDSL2 Channel Alarm Profile

This topic describes how to add a VDSL2 channel alarm profile. The new channel alarm profile
contains alarm thresholds for channel parameters.
Context
When configuring a VDSL2 channel alarm profile, you cannot delete channel alarm profile 1,
but you can modify it. The added channel alarm profiles are numbered from 2 to 50.
Figure 24-12 shows the flowchart for adding a VDSL2 channel alarm profile.

Figure 24-12 Flowchart for adding a VDSL2 channel alarm profile
Start
Set the channel No
thresholds for CPE?
No Yes
Set the channel
alarm profile?
Set the number of coding violations counts
Yes
Set the name of the channel alarm profile

Set the number of corrected blocks counts
No
Set the threshold of
Set the channel
channel monitoring rate downstream
thresholds for CO?
Yes
Set the threshold of
channel monitoring rate upstream
End
Procedure
Step 1 Run the vdsl channel-alarm-profile add command to add a VDSL2 channel alarm profile.
Step 2 Run the display vdsl channel-alarm-profile command to query the added VDSL2 channel
alarm profile.
----End
Example
To add channel alarm profile 2, do as follows:
huawei(config)#vdsl channel-alarm-profile add 2
neglected
> Will you set the channel thresholds for CO? (y/n) [n]:y
> The number of coding violations counts (0~60000) [0]:10
> The number of corrected blocks counts (0~60000) [0]:
> Will you set the channel thresholds for CPE? (y/n) [n]:y
> The number of coding violations counts (0~60000) [0]:10
> The number of corrected blocks counts (0~60000) [0]:10
> The threshold of channel monitoring rate downstream
> (0~100000Kbps) [0]:2048
> The threshold of channel monitoring rate upstream
> (0~100000Kbps) [0]:4096

huawei(config)#display vdsl channel-alarm-profile 2

------------------------------------------------------------------------------
Profile index: 2 Name: VDSL CHANNEL ALARM PROFILE 2
<CO>
The number of coding violations counts : 10
The number of corrected blocks counts : 0
<CPE>
The number of coding violations counts : 10
The number of corrected blocks counts : 10
The threshold of channel monitoring rate downstream(Kbps) : 2048
The threshold of channel monitoring rate upstream(Kbps) : 4096
------------------------------------------------------------------------------
Table 24-11 lists the parameters of a VDSL2 channel alarm profile.
Table 24-11 Parameters of a VDSL2 channel alarm profile

Channel alarm profile index You can enter a profile index, or directly press
Enter to enable the system to allocate a profile
index. The allocated profile index is the minimum
one of the idle indexes. The profile index must be
unique.
The number of coding violations During the 15-minute performance data collection,
counts an alarm is generated if the number of coding
violations counts exceeds the preset threshold. If the
number of coding violations counts does not exceed
the preset threshold, no alarm is generated. 0
indicates that no alarm is required.
The number of corrected blocks counts During the 15-minute performance data collection,
an alarm is generated if the number of corrected
blocks counts exceeds the preset threshold. If the
number of corrected blocks counts does not exceed
the preset threshold, no alarm is generated. 0
The threshold of channel monitoring If the activation rate of the current channel does not
rate upstream/downstream reach the preset threshold, an alarm is generated. 0
Related Operation
Table 24-12 lists the related operations for adding a VDSL2 channel alarm profile.

Table 24-12 Related operations for adding a VDSL2 channel alarm profile
Delete a VDSL2 channel vdsl channel-alarm-profile You cannot delete the default
alarm profile delete channel alarm profile or a
referenced channel alarm
profile.
Modify a VDSL2 channel vdsl channel-alarm-profile After the channel alarm

alarm profile modify profile is modified, the
system prompts that the
profile immediately takes
effect and the profile name
cannot be modified.
Quickly add a VDSL2 vdsl channel-alarm-profile The command is entered in

channel alarm profile quickadd non-interactive mode. This is
channel alarm profile in
interactive mode.
Quickly modify a VDSL2 vdsl channel-alarm-profile The command is entered in

channel alarm profile quickmodify non-interactive mode. This is
command to modify a
VDSL2 channel alarm
profile in interactive mode.
24.10 Adding a VDSL2 Alarm Template

This topic describes how to add a VDSL2 alarm template.
Prerequisite
The line alarm profile and channel alarm profile are configured.
Context
l The specified line alarm profile and specified channel alarm profile are bound together in
the new VDSL2 alarm template.
l If you do not enter a specified index of a line alarm profile or a channel alarm profile, the
default line alarm profile and the default channel alarm profile are bound together in the
VDSL2 alarm template.
Procedure
Step 1 Run the vdsl alarm-template add command to add a VDSL2 alarm template.
Step 2 Run the display vdsl alarm-template command to query the added VDSL2 alarm template.
----End

Example
To add the alarm template with the index of 2, do as follows:
huawei(config)#vdsl alarm-template add 2
neglected
> Please set the alarm-profile index (1~50) [1]:2
> Please set the channel1 alarm-profile index (1~50) [1]:2
huawei(config)#display vdsl alarm-template 2

------------------------------------------------------------------------------
Template index: 2 Name: VDSL ALARM TEMPLATE 2
Line alarm profile index : 2
Channel1 alarm profile index : 2
------------------------------------------------------------------------------
Table 24-13 lists the parameters of a VDSL2 alarm template.
Table 24-13 Parameters of a VDSL2 alarm template

Alarm template index You can enter a template index, or directly press
Enter to enable the system to automatically allocate
a template index. The allocated template index is
the minimum one of the idle indexes. The template
index must be unique.
Alarm template name You can enter a template name or directly press
Enter.
Line alarm profile index It is the index of the configured line alarm profile.
Channel count l This parameter is used to set the number of

channels supported by the line.
l You can configure the second channel only after
you have configured the first channel.
l When modifying the alarm template, if you enter
a channel count that is different from the channel
count entered last time, the system considers that
you need to reconfigure the following channel
parameters, and clears the parameters configured
before.
Channel alarm profile index It is the index of the configured channel alarm
profile.

Related Operation
Table 24-14 the related operations for adding a VDSL2 alarm template.
Table 24-14 Related operations for adding a VDSL2 alarm template
Delete a VDSL2 alarm vdsl alarm-template delete You cannot delete the default
template alarm template or a
referenced alarm template.
Modify a VDSL2 alarm vdsl alarm-template After the alarm template is

template modify modified, the system
prompts that the template
Quickly add a VDSL2 alarm vdsl alarm-template The command is entered in

template quickadd non-interactive mode. This is
alarm template in interactive
mode.
Quickly modify a VDSL2 vdsl alarm-template The command is entered in

alarm template quickmodify non-interactive mode. This is
command to modify a
VDSL2 alarm template in
interactive mode.
Bind a VDSL2 alarm alarm-config The configured VDSL2

template alarm template takes effect
only after it is bound with a
VDSL2 port.
24.11 Binding a VDSL2 Alarm Template

This topic describes how to bind a VDSL2 alarm template to a port. After the port is activated,
the system monitors the line according to the alarm threshold configured in the alarm template.
Context
l The threshold configured in the VDSL2 alarm template takes effect only when the VDSL2
alarm template is bound with a port and the port is activated.
l By default, alarm template 1 is bound with a port. All the alarm thresholds are configured
to 0 in the template.
Procedure
Step 1 Run the alarm-config command to bind the alarm template with a port.

Step 2 Run the display port state command to query the binding between the alarm template and the
port.
----End
Example
To bind alarm template 2 with port 1 of the VDSL2 board in slot 0/7, do as follows:
huawei(config-if-vdsl-0/7)#alarm-config 1 2
-----------------------------------------------------------------
-----------------------------------------------------------------
1 Activating Disable 1 2
-----------------------------------------------------------------
24.12 Activating a VDSL2 Port

This topic describes how to activate a VDSL2 port. Activation refers to the training performed
between the VDSL transceiver unit - central office end (VTU-C) and the VDSL transceiver unit
- remote end (VTU-R). According to the upstream and downstream line rates and the specified
noise margin configured in the line template, the system detects the line length and line
conditions. The VTU-C and the VTU-R negotiates with each other and confirm whether the
VDSL2 port can work normally in the conditions described above.
Prerequisite
The VDSL2 line template is configured.
Context
l The port is bound with the line template during the port activation. If the index or the name
of the line template is not entered, the template bound last time is used to activate the port.
l If the training is successful, the VTU-C can communicate with the VTU-R. At this point
of time, the port works in the activated state, and is ready for service transmission.
l When the VTU-R goes online (or is started), the activation process ends upon the
completion of the training. When the VTU-R goes offline (or is stopped), the
communication established during the port activation is terminated, and the VTU-C is in
the listening state. When the VTU-R goes online again (or is started again), the training
process starts automatically. When the training is successful, the port is activated.
Procedure
Step 1 Run the active command to activate all the ports of a service board.
Step 2 Run the display port state command to query the status of a port and the line template bound
with the port.
----End
Example
To activate all the ports of the VDSL2 board in slot 0/7 and bind line template 1 with the port,
do as follows:


huawei(config-if-vdsl-0/7)#activate all template-index 1
huawei(config-if-vdsl-0/7)#display port state all
-----------------------------------------------------------------
-----------------------------------------------------------------
-----------------------------------------------------------------
Related Operation
Table 24-15 lists the related operation for activating a VDSL2 port.
Table 24-15 Related operation for activating a VDSL2 port
Deactivate a VDSL2 port deactivate
Perform a loopback a VDSL2 port loopback
24.13 Querying a VDSL2 Port

This topic describes how to query the information about a VDSL2 port.
Prerequisite
The VDSL2 line template is configured.
Context
The state of a VDSL port can be activating, activated, deactivated, or loopback.
Conversion Between the VDSL2 Port Status

Figure 24-13 shows the conversion between the VDSL2 port statuses.

Figure 24-13 Conversion between the VDSL2 port statuses

Modem
undo Successful training
loopback activate
Activating
Modem
Local deactivate Link disconnected
loopback Deactivated Activated
or power off
loopback deactivate
Procedure
Run the display port state command to query the information about a VDSL2 port.
----End
Example
To query the status of VDSL2 port 0/7/0, do as follows:
Activate all the ports of a board and bind line template 1.
-----------------------------------------------------------------
-----------------------------------------------------------------
0 Activating Disable 1 1
-----------------------------------------------------------------
Related Operation
Table 24-16 lists the related operations for querying a VDSL2 port.
Table 24-16 Related operations for querying a VDSL2 port

Query the configuration of a VDSL2 display parameter

port
Query the version information about the display inventory

modem in the central office or at the
remote end

Configuration Guide-IPM CLI 25 Protection Configuration for an Upstream Link
25 Protection Configuration for an

Upstream Link
About This Chapter
This topic describes how to configure the protection for the upstream link on the UA5000.
25.1 Introduction to the Upstream Link

This topic describes the service protection mechanism of the uplink port on the UA5000 to
enhance the reliability of the service transmission.
25.2 Configuration Example for Setting the Port State Detection Mode
This topic describes how to set the port state detection mode, which works with the active/
standby switchover mechanism to implement the service protection on an uplink port.
25.3 Configuration Example for Setting the Delay Detection Mode
This topic describes how to set the delay detection mode, which works with the active/standby
switchover mechanism to realize the service protection on an uplink port.
25.4 Configuration Example for Setting the LACP Detection Mode
This topic describes how to set the LACP detection mode, which works with the active/standby
25.5 Configuration Example of the Upstream Link Protection
This topic describes how to back up the upstream link.
25.6 Configuring a Protection Group
This topic describes how to configure a protection group. When the UA5000 is disconnected
from the upper layer device physically due to certain unknown causes, the UA5000 automatically
uses the standby line to transmit the subscriber services.

25 Protection Configuration for an Upstream Link Configuration Guide-IPM CLI
25.1 Introduction to the Upstream Link

This topic describes the service protection mechanism of the uplink port on the UA5000 to
enhance the reliability of the service transmission.
Service Description
l The broadband access service of the Internet is gradually becoming popular, and users
demand high performance and stable network access. As a result, carriers prefer the
broadband access equipment that runs stably and has better automatic protection and self-
healing capability.
l The UA5000 uses the active/standby mechanism to ensure the normal operation of the
service. In addition, it is designed with the service protection mechanism of dual uplink
ports. When the UA5000 is disconnected from the upper layer device physically due to
certain unknown causes, the UA5000 uses the standby line to transmit the subscriber
services so that the services can recover quickly.
The UA5000 provides two detection modes of the active/standby switchover to achieve the
service protection of the uplink port.
l Port status detection mode: It means that the two ports of a protection group, or the Tx ports
of the two boards are enabled. The port status determines whether to implement switchover.
l Delay detection mode: It means that only one Tx port in a protection group is enabled, and
the other Tx port is disabled. If the status of the enabled Tx port is DOWN, disable the port.
Then, enable the other Tx port. If the status of the other Tx port is UP, then switchover is
performed. Otherwise, the detection continues.
The UA5000 provides three detection modes of the active/standby switchover to achieve
the service protection of the uplink port.
l Link Aggregation Control Protocol (LACP) detection mode: In this mode, the link
aggregation protocol control is performed, the port fault is detected, and protection
switchover function is triggered.
25.2 Configuration Example for Setting the Port State

Detection Mode
This topic describes how to set the port state detection mode, which works with the active/
standby switchover mechanism to implement the service protection on an uplink port.
Networking
Figure 25-1 shows an example network for setting the port state detection mode.

Figure 25-1 Example network for setting the port state detection mode
NMS
Router
0 0
UA5000
1 1
0/2 0/3
Active IPMB Standby IPMB
Procedure
Step 1 Run the protect command to enter the protect mode.
huawei(config)#protect
Step 2 Run the protect-group command to configure the protection group and set the port state
detection mode for the protection group.
huawei(config-protect)#protect-group first 0/2/0 second 0/3/0 seco eth workmode
portstate enable
Step 3 Run the display protect-group command to query the information about the protection group
of the port.
huawei(config-protect)#display protect-group
{ <cr>|frameid/slotid<S><1,15>|frameid/slotid/portid<S><1,15> }:
Command:
display protect-group
---------------------------------------------------------------------------
NO. FirstIntf SecondIntf Enable ActiveFlag ProtectType WorkMode
---------------------------------------------------------------------------
0 0/2/0 0/3/0 Enable First ETH PortState
---------------------------------------------------------------------------
Total : 1
----End

Verification
The service protection of the uplink port uses the port state detection mode.
25.3 Configuration Example for Setting the Delay Detection

Mode
This topic describes how to set the delay detection mode, which works with the active/standby
Networking
Figure 25-2 shows an example network for setting the delay detection mode.
Figure 25-2 Example network for setting the delay detection mode
NMS
Router
0 0
UA5000
1 1
0/2 0/3
Procedure
Step 2 Run the protect-group command to configure the protection group, and set the delay detection
mode for the protection group.

huawei(config-protect)#protect-group first 0/2/0 second 0/3/0 eth workmode

timedelay enable
Step 3 Run the display protect-group command to query the information about the protection group
of the port.
{ <cr>|frameid/slotid<S><1,15>|frameid/slotid/portid<S><1,15> }:
Command:
display protect-group
---------------------------------------------------------------------------
---------------------------------------------------------------------------
0 0/2/0 0/3/0 Enable First ETH TimeDelay
---------------------------------------------------------------------------
Total : 1
----End
Verification
The service protection of the uplink port uses the delay detection mode.
25.4 Configuration Example for Setting the LACP Detection

Mode
This topic describes how to set the LACP detection mode, which works with the active/standby
Prerequisite
The upper layer device is configured with LACP.
Context
If the LACP protection group activates the protection switching, the service interruption time is
not longer than 4s.
Networking
Figure 25-3 shows an example network for setting the LACP detection mode.

Figure 25-3 Example network for setting the LACP detection mode
NMS
Router
0 0
UA5000
1 1
0/2 0/3
Procedure
Step 1 Configure the aggregation group of the LACP static port.
huawei(config-if-ipm-0/2)#link-aggregation 0-1 ingress
Step 2 Configure the protection group and set the LACP detection mode for the protection group.
huawei(config-protect)#protect-group first 0/2/0 second 0/3/0 eth workmode lacp
enable
Step 3 Query the configuration information about the protection group.

---------------------------------------------------------------------------
---------------------------------------------------------------------------
0 0/ 2/0 0/ 3/0 Enable First ETH LACP
---------------------------------------------------------------------------
Total : 1
Step 4 Query the information about the aggregation group of the LACP static port.
huawei(config-protect)#quit
huawei(config)#display lacp link-aggregation summary
Actor
Priority : 32768 MAC Address: 00e0-cfc5-1999
Short Period: 1 s Long Period: 30 s
----------------------------------------------------------------

Agg Partner Partner Select Standby Load Backup Master

ID Pri MAC Ports Ports Sharing Protect Port
----------------------------------------------------------------
1 - - 0 2 YES YES 0/ 2/ 0
----------------------------------------------------------------
huawei(config)#display lacp link-aggregation verbose 1
System Priority: 32768
MAC Address : 00e0-cfc5-1999
Protect Mode : BackupProtect
Master Port: 0/2/0

Actor Port Priority : 16384 Oper-key : 1
Port Role : STANDBY Port Status: Non-C&D
Sub Port: 0/2/1

Actor Port Priority : 16384 Oper-key : 1
Port Role : STANDBY Port Status: Non-C&D
----End
Verification
Configure the LACP detection mode to work with the active/standby switchover mechanism of
the UA5000. The service protection of the uplink port uses the LACP detection mode.
25.5 Configuration Example of the Upstream Link

Protection
This topic describes how to back up the upstream link.
Context
Two uplink ports can be on the same uplink board or on different uplink boards, but they must
be of the same port type.
Networking
Figure 25-4 shows an example network for configuring the upstream link protection.

Figure 25-4 Example network for configuring the upstream link protection
Router
Optical splitter
I
P C
M S
B R
0/3/0 B
0/3/1
UA5000
Modem

PC
Data Plan
Table 25-1 provides the data plan for configuring the upstream link protection.
Table 25-1 Data plan for configuring the upstream link protection
Item Data
VLAN ID 10
Uplink port 0/3/0 and 0/3/1
Service port 0/7/0
VPI/VCI: 0/35
Traffic profile index: 6 (the default value)
Figure 25-5 shows the flowchart for configuring the upstream link protection.
Figure 25-5 Flowchart for configuring the upstream link protection
Start
Aggregate the uplink ports
Create a VLAN
Add the uplink port to

the VLAN
Add the service port to the

VLAN
Save the data
End

Procedure
Step 1 Aggregate uplink ports.
huawei(config-if-ipm-0/3)#link-aggregation 0,1 egress-ingress
Step 2 Create a VLAN.

huawei(config-protect)#quit
Step 3 Add the uplink port to the VLAN.



huawei(config)#save
----End
Verification
After the configuration, the user should be able to access the Internet. When the upstream link
of uplink port 0/3/0 fails, the system automatically transfers the service to the upstream link of
uplink port 0/3/1. In this manner, the user can still access the Internet.
25.6 Configuring a Protection Group

This topic describes how to configure a protection group. When the UA5000 is disconnected
from the upper layer device physically due to certain unknown causes, the UA5000 automatically
uses the standby line to transmit the subscriber services.
Context
l Two uplink ports must be of the same port type.
l The two ports in the protection group must be the only two ports in the same aggregation
group.
Procedure
Step 2 Run the protect-group command to configure a protection group.
Step 3 Run the display protect-group command to query a protection group.
----End
Example
To configure a protection group that consists of ports 0/2/0 and 0/3/0, do as follows:
huawei(config-protect)#protect-group first 0/2/0 second 0/3/0 eth workmode timed
elay enable

---------------------------------------------------------------------------
---------------------------------------------------------------------------
0 0/ 2/0 0/ 3/0 Enable First ETH TimeDelay
---------------------------------------------------------------------------
Total : 1
Related Operation
Table 25-2 lists the related operation for configuring a protection group.
Table 25-2 Related operation for configuring a protection group

Delete a protection group undo protect-group

Configuration Guide-IPM CLI 26 Configuring the LAN Access
26 Configuring the LAN Access
About This Chapter
This topic describes the LAN access technology and how to configure the LAN access service
26.1 Introduction to the LAN Access

This topic describes the LAN access service and its service specifications.
26.2 Configuration Example of the LAN Access over EAU
This topic describes how to configure the LAN access service through the EAU card. The
UA5000 accesses the LAN service through the FE port on the EAU board, and then sends the
service data from the EAU board to the IP network through the uplink port on the IPMB board.
In this manner, a private circuit is formed between the local LAN and remote LAN, and the local
LAN provides the private circuit network access service.
26.3 Configuration Example of the LAN Access over IPMB
This topic describes how to configure the LAN access service over the access ports provided by
the IPMB board. The UA5000 plays the role of a LAN switch. That is, the IPMB board assigns
the service port and the uplink port to the same VLAN. In this case, the user data are accessed
to the UA5000 and then sent to the upper layer device through the uplink port.

26 Configuring the LAN Access Configuration Guide-IPM CLI
26.1 Introduction to the LAN Access

This topic describes the LAN access service and its service specifications.
Service Description
The ports provided by the IPMB and EAU boards support LAN access service.
l The IPMB board provides 4 FE ports through the backplane of the shelf.
l The EAU board provides 8 FE ports.
26.2 Configuration Example of the LAN Access over EAU

This topic describes how to configure the LAN access service through the EAU card. The
UA5000 accesses the LAN service through the FE port on the EAU board, and then sends the
service data from the EAU board to the IP network through the uplink port on the IPMB board.
In this manner, a private circuit is formed between the local LAN and remote LAN, and the local
LAN provides the private circuit network access service.
Prerequisite
l The EAU board must be in the normal state.
l The VLAN ID of the interface of the upper layer device is the same as the VLAN ID of
the uplink port of the UA5000.
Context
In the case of the VLAN on the EAU side, ensure the following:
l The VLAN ID has been created, and the VLAN is a MUX VLAN or a Smart VLAN.
l The VLAN ID is different from the default VLAN ID of other ports on the same EAU
board. In addition, the VLAN ID is different from the EAU-side VLAN ID of the existing
service channel on the same board.
l The VLAN ID can be the default VLAN ID of the local port.
Networking
Figure 26-1 shows an example network for the LAN access over EAU.

Figure 26-1 Example network for the LAN access over EAU
Subsidiary
0/3/0
VLAN ID:1000 UA5000
I E
P A
M
U
B
0/7/0
VLAN ID:100
Headquaters
VLAN ID:100
Data Plan
Table 26-1 provides the data plan for configuring the LAN access over EAU.
Table 26-1 Data plan for configuring the LAN access over EAU
Item Data Remarks
EAU board EAU port: 0/7/0 -
EAU port rate: 100 Mbit/s In general, the EAU port uses the
EAU port mode: full duplex default settings of the Ethernet
port:
EAU MDI: auto-sensing
l Port rate: auto-negotiation
l Port mode: auto-negotiation
l Port MDI: auto-sensing
VLAN ID: smart VLAN 100 The same as the VLAN ID of the
upper layer device.
Upstream bandwidth: 100 Mbit/s The system adapts the bandwidth to

the user demands.
Downstream bandwidth: 100 Mbit/ The system adapts the bandwidth to

s the user demands.

Item Data Remarks
IPMB Uplink port0/3/0 -
Uses the default settings of the -

Ethernet port:
Upstream VLAN: smart VLAN -

1000
Figure 26-2 shows the flowchart for configuring the LAN access over EAU.
Figure 26-2 Flowchart for configuring the LAN access over EAU
Start
Configure the EAU port
Configure the upstream

port
Configure the traffic

profile
Configure the service port
End
Procedure
Step 1 Configure the EAU port and the VLAN.
1. Configure the EAU port.
huawei(config)#interface eau 0/7
huawei(config-if-eau-0/7)#speed 0 100
huawei(config-if-eau-0/7)#duplex 0 full
2. Configure the VLAN on the EAU side.

huawei(config-if-eau-0/7)#quit
Step 2 Configure the uplink port and the VLAN.

1. The uplink port of the IPMB board uses default settings. When configuring the uplink port
of the IPMB board, run the command that is used for configuring the EAU port.
2. Configure the VLAN of the uplink port.
Step 3 Configure the traffic entry with index 7.

huawei(config)#traffic table ip car 100 priority 5 priority-policy pvc-Setting
Step 4 Configure the service port.

huawei(config)#service-port vlan 1000 lan 0/7/0 vlan 100 rx-cttr 7 tx-cttr 7

huawei(config)#save
----End
Verification
After the configuration, the UA5000 implements the LAN access through the EAU board. In
this manner, the headquarters can communicate with the subsidiaries through a private line.
26.3 Configuration Example of the LAN Access over IPMB

This topic describes how to configure the LAN access service over the access ports provided by
the IPMB board. The UA5000 plays the role of a LAN switch. That is, the IPMB board assigns
the service port and the uplink port to the same VLAN. In this case, the user data are accessed
to the UA5000 and then sent to the upper layer device through the uplink port.
Prerequisite
l Network devices and lines are normal.
l The IPMB board is in the normal state.
l The VLAN ID of the interface of the upper layer device is the same as that of the uplink
port of the UA5000.
Networking
Figure 26-3 shows an example network for the LAN access over IPMB.

Figure 26-3 Example network for the LAN access over IPMB
0/3/0
VLAN ID:1001 UA5000
I
P
M
B
0/3/1
VLAN ID:1001
LAN Switch
VLAN ID:1001
PC
Figure 26-4 shows the flowchart for configuring the LAN access over IPMB.
Figure 26-4 Flowchart for configuring the LAN access over IPMB
Start
Set the IPMB port mode
Configure the port VLAN
End

Data Plan
Table 26-2 provides the data plan for configuring the LAN access over IPMB.
Table 26-2 Data plan for configuring the LAN access over IPMB
Item Data
IPMB Uplink port: 0/3/0

VLAN ID: standard VLAN 1001
Access port: 0/3/1

VLAN ID: standard VLAN 1001
Uses the default settings of the Ethernet port:

Procedure
Step 1 The IPMB uplink port uses the default configuration of the Ethernet port. Its configuration
method is the same as that of the EAU port.
Step 2 Configure the VLAN.

huawei(config)#save
----End
Verification
After the configuration, the UA5000 realizes the LAN access through the IPMB board. The user
can access the UA5000 through the LAN switch.

Configuration Guide-IPM CLI 27 Configuring the EPON Upstream Transmission
27 Configuring the EPON Upstream

Transmission
About This Chapter
This topic describes the Ethernet passive optical network (EPON) technology and how to
configure the EPON upstream transmission on the UA5000 MiniMSAN. The UA5000
MiniMSAN supports the EPON upstream transmission only when the HABM shelf is used.
27.1 Introduction to the EPON Upstream Transmission
The EPON technology can transmit converged data, video, and voice over fibers.
27.2 Configuration Example of the EPON Upstream Transmission
The UA5000 MiniMSAN, which is an optical network unit (ONU), provides the EPON uplink
port and works with the optical line terminal (OLT) to form an Ethernet passive optical network
(EPON) network.
27.3 Clearing the Statistics About the EPON Port
This topic describes how to clear the original statistics about the Ethernet port when you need
to re-collect the statistics about the Ethernet port.

27 Configuring the EPON Upstream Transmission Configuration Guide-IPM CLI
27.1 Introduction to the EPON Upstream Transmission

The EPON technology can transmit converged data, video, and voice over fibers.
Service Description
The EPON is a new-generation broadband access technology. It uses the point-to-point
architecture and the passive optical transmission mode.
The EPON is also a low-cost solution. Operators can deploy optical access lines between the
office side and the subscriber side by using the EPON technology. The EPON is the passive
optical network based on the Ethernet mode. The EPON is to implement the full-service access.
That is, the EPON can transmit converged data, video, and voice over one fiber. The UA5000
that supports the EPON upstream transmission is called the fiber multi-service access node
(FMSAN).
l The EPON supports the transmission with 1.25 Gbit/s upstream/downstream rate.
l The EPON supports up to 20 km access distance.
27.2 Configuration Example of the EPON Upstream

Transmission
The UA5000 MiniMSAN, which is an optical network unit (ONU), provides the EPON uplink
port and works with the optical line terminal (OLT) to form an Ethernet passive optical network
(EPON) network.
Prerequisite
l The network devices and the lines must be normal.
l The interface VLAN of the upper layer device of the UA5000 MiniMSAN must be the
same as the VLAN configured on the uplink port of the UA5000 MiniMSAN.
Context
l When the EP1A board is used for upstream transmission, the UA5000 MiniMSAN supports
the VoIP, FoIP, MoIP, and ISDNIP services.
l This topic describe only the configuration on the UA5000 MiniMSAN side. For the
configuration on the OLT side, see related manuals. For example, if the OLT is the
MA5680T provided by Huawei, see the MA5680T Configuration Guide.
l The configuration of UA5000 MiniMSAN_A is the same as the configuration of UA5000
MiniMSAN_B. In this topic, the configuration of UA5000 MiniMSAN_A is considered as
an example.
Networking
Figure 27-1 shows an example network for configuring the EPON upstream transmission.

Figure 27-1 Example network for configuring the EPON upstream transmission
Router
OLT
EPON 0/3 0/7

Splitter I P E C C
S S
P V P R
1 R
M M A B B
EPON
HABM shelf
EPON
UA5000 MiniMSAN_B
UA5000 MiniMSAN_A
Modem
Splitter
Modem
PC PC
Phone
Data Plan
Table 27-1 provides the data plan for configuring the EPON upstream transmission.
Table 27-1 Data plan for the configuring the EPON upstream transmission
Configuration Item Data Remarks
UA5000 MiniMSAN_A Shelf/Slot of the control Control board: Configure an

board: 0/1 uplink port and a VLAN on
Shelf/Slot of the EP1A board: the control board. The packet
0/3 is transmitted to the EP1A
board through the backplane.
EP1A board: The EP1A
board provides the EPON
port to interconnect to the
upper layer OLT.


Access rate: 3072 kbit/s priority, and priority policy in
In theory, the downstream
bandwidth should be 3072
kbit/s. Therefore, you need to
configure the access rate to
3072 kbit/s in the traffic
profile. The actual qualified
rate of the port may be lower
than 96%. In this case,
increase the access rate to
meet the requirements of the
user.
Line profile Index: 1002 (the default) When you activate the ADSL
port, the ADSL port
determines the actual
transmission parameters
according to the negotiation
between the line profile and
the customer premises
equipment (CPE).
Alarm profile Index: 1 Alarm thresholds of

parameters are configured in
the alarm profile. After the
alarm profile is bound to a
port, the alarm profile
monitors the line status.
The default profile is used in
this example. All the alarm
thresholds are set to 0, which
indicates that line monitoring
is not performed.
VLAN ID: 10 It must be consistent with the

VPI: 0; VCI: 35 upper layer device.
Encapsulation mode: PPPoE
EP1A Uplink port: 0/3/0 -

Figure 27-2 shows the flowchart for configuring the EPON upstream transmission.
Figure 27-2 Flowchart for configuring the EPON upstream transmission
Start
Add an EP1A board or let the system automatically

find the board and confirm the board
Configure the service
Save the data
End
Procedure
Step 1 Add an EP1A board or let the system automatically find the board and confirm the board. The
command for adding the EP1A board is as follows.
huawei(config)#board add 0/3 h601ep1a
Step 2 Configure the service.

1. Query and configure the traffic profile.
Command:
--------------------------------------------------------------------------
--------------------------------------------------------------------------
0 960 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri
4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 3072 6 pvc-pri
--------------------------------------------------------------------------

--------------------------------------------------------------------------
--------------------------------------------------------------------------

0 cbr 2 1000 -- -- -- -- -- off/--

1 cbr 2 2500 -- -- -- -- -- off/--
2 ubr 2 512 -- -- -- -- -- on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /off
5 ubr 2 2048 -- -- -- -- -- on /--
6 ubr 1 -- -- -- -- -- -- off/--
7 ubr 2 3072 -- -- -- -- -- on /--
--------------------------------------------------------------------------
Total Num : 8
--------------------------------------------------------------------------
The query result shows that traffic profile 7 is available. If no traffic profile is available,
you can run the traffic table command to create a traffic profile.
2. Configure a VLAN and add the service port and uplink port to the VLAN.
huawei(config)#service-port vlan 10 adsl 0/7/0 vpi 0 vci 35 multi-service user-
3. Configure the ADSL2+ line profile.

If no line profile is available, add a new line profile. This example uses the default line
profile 1002.
4. Bind the line profile and activate ADSL2+ port 0/7/0.
5. Bind the default alarm profile 1.


huawei(config)#save
----End
Result
After the configuration, you should be able to access the Internet in PPPoE dialup mode.
27.3 Clearing the Statistics About the EPON Port

This topic describes how to clear the original statistics about the Ethernet port when you need
to re-collect the statistics about the Ethernet port.
Context
The EP1A board supports one EPON uplink port and one FE/GE auto-sensing electrical port.
Procedure
Step 1 Run the interface epon command to enter the EPON mode.

Step 2 Run the display port statistics command to query the statistics about the EPON port.
Step 3 Run the reset port statistics command to clear the statistics about the EPON port. Then, the
system re-collects the statistics.
Step 4 Run the display port statistics command to query the statistics about the EPON port again.
----End
Example
To clear the statistics about all the ports of the EPON board, do as follows:
huawei(config)#interface epon 0/3
huawei(config-if-epon-0/3)#display port statistics all
Command:
display port statistics all
Number of transmitted frames in pon port =95381564

Number of received frames in pon port =99295441
Number of received FEC error frames in pon port =0
Number of received HEC error frames in pon port =0
Number of discarded frames while transmit in pon port =0
Number of discarded frames while transmit in uni port =0
Number of transmitted frames in uni port =0
Number of received frames in uni port =168189
Number of received error frames in uni port =0
huawei(config-if-epon-0/3)#reset port statistics all

huawei(config-if-epon-0/3)#display port statistics all
huawei(config-if-epon-0/3)#
Number of transmitted frames in pon port =1352
Number of received frames in pon port =1399
Number of received FEC error frames in pon port =0
Number of received HEC error frames in pon port =0
Number of discarded frames while transmit in pon port =0
Number of discarded frames while transmit in uni port =0
Number of transmitted frames in uni port =0
Number of received frames in uni port =0
Number of received error frames in uni port =0

Configuration Guide-IPM CLI 28 Configuring the GPON Upstream Transmission
28 Configuring the GPON Upstream

Transmission
About This Chapter
This topic describes the gigabit passive optical network (GPON) technology and the procedure
for configuring the GPON upstream transmission on the UA5000 MiniMSAN. The UA5000
MiniMSAN implements the upstream transmission of the GPON service through the GPON
board.
28.1 Overview of the GPON Upstream Transmission

The GPON can transmit the converged data, video, and voice services over the optical fiber.
28.2 Configuration Example of the GPON Upstream Transmission
The UA5000 MiniMSAN functions as the optical network unit (ONU), provides the GPON
uplink port, and works with the optical line terminal (OLT) to form the GPON.
28.3 Clearing GPON Port Statistics
This topic describes how to clear the original statistics of the port on the GPON board when you
need to collect the statistics of the port again.

28 Configuring the GPON Upstream Transmission Configuration Guide-IPM CLI
28.1 Overview of the GPON Upstream Transmission

The GPON can transmit the converged data, video, and voice services over the optical fiber.
Service Description
l The GPON is a new-generation broadband access technology that uses the point-to-
multipoint (P2MP) architecture.
l The GPON is a low-cost solution, which provides the optical access between the central
office (CO) of an operator and a customer site.
l The GPON is gigabit-capable passive optical network, which supports the data transmission
with a high bandwidth. In this manner, the GPON can effectively solve the bandwidth
problem of the data transmission over twisted pairs and meet the service requirements of
users for high bandwidth.
l The GPON is defined by the ITU-T G.984.x standard series. The downstream rate can be
up to 1.2 or 2.4 Gbit/s, and the upstream rate can be up to 155 or 622 Mbit/s, or 1.2 or 2.4
Gbit/s.
l The GPON has a high access capability. That is, the GPON supports a physical distance of
up to 20 km and a logical distance of up to 60 km.
l The GPON port supports the upstream rate of up to 1.2 Gbit/s and the downstream rate of
up to 2.4 Gbit/s.
28.2 Configuration Example of the GPON Upstream

Transmission
The UA5000 MiniMSAN functions as the optical network unit (ONU), provides the GPON
uplink port, and works with the optical line terminal (OLT) to form the GPON.
Prerequisite
l The interface VLAN of the upper layer device of the UA5000 MiniMSAN must be the
same as the VLAN configured on the uplink port of the UA5000 MiniMSAN.
Context
l The GPON networking uses the P2MP technology and the access link shared by multiple
points to implement the access services. The GPON supports multiple networking modes
through subtending, including fiber to the curb (FTTC), fiber to the building (FTTB), and
fiber to the home (FTTH).
l This topic describes only the configuration on the UA5000 MiniMSAN side. For the
configuration on the OLT side, see related manuals. For example, if the OLT is the
MA5680T of Huawei, see the MA5680T Configuration Guide.

l The configuration of UA5000 MiniMSAN_A is the same as the configuration of UA5000

MiniMSAN_B. In this topic, the configuration of UA5000 MiniMSAN_A is considered as
an example.
Networking
Figure 28-1 shows an example network for configuring the GPON upstream transmission.
Figure 28-1 Example network for configuring the GPON upstream transmission
Router
OLT
GPON
0/3 0/7
Splitter C C
I P G
S S
P V P R
1 R
M M A B B
GPON
HABM shelf
GPON
UA5000 MiniMSAN_B
UA5000 MiniMSAN_A
Modem
Splitter
Modem
PC PC
Phone
Data Plan
Table 28-1 provides the data plan for configuring the GPON upstream transmission.

Table 28-1 Data plan for the configuring the GPON upstream transmission
UA5000 MiniMSAN_A Shelf/Slot of the control Control board: Configure an

board: 0/1 uplink port and a VLAN on
Shelf/Slot of the GP1A the control board. The packet
board: 0/3 is transmitted to the GP1A
board through the backplane.
GP1A board: The GP1A
board provides the GPON
port to interconnect with the
upper layer OLT.

Access rate: 10240 kbit/s priority, and priority policy in
The actual qualified rate of
the port may be lower than
96%. In this case, increase the
access rate to meet the
requirements of the user.
Line profile Index: 1002 (the default When you activate the ADSL
profile) port, the ADSL port
determines the actual
transmission parameters
according to the negotiation
between the line profile and
the customer premises
equipment (CPE).
Alarm profile Index: 1 The alarm thresholds of the

line parameters are
configured in the alarm
threshold to ports, you can
monitor the line conditions.
The default profile is used in
this example. All the alarm
thresholds are set to 0, which
indicates that line monitoring
is not performed.
VLAN ID: 10 They must be consistent with

VPI: 0; VCI: 35 those of the upper layer
device.
Encapsulation mode: PPPoE

GP1A Uplink port: 0/3/0 -
Figure 28-2 shows the flowchart for configuring the GPON upstream transmission.
Figure 28-2 Flowchart for configuring the GPON upstream transmission
Start
Add a GP1A board manually or the system

automatically finds and confirms the board
Configure the services
Save the data
End
Procedure
Step 1 Add a GP1A board manually or the system automatically finds and confirms the board.
l After the system query, if the state of the board is auto_find, the board is confirmed.
huawei(config)#board confirm 0/3
l After the system query, if no board exists, you need to add a GP1A board.
huawei(config)#board add 0/3 h601Gp1a
Step 2 Configure the services.

1. Query the traffic profile.
Command:
--------------------------------------------------------------------------
--------------------------------------------------------------------------
0 960 6 tag-pri
1 2496 6 tag-pri
2 512 0 tag-pri
3 576 2 tag-pri

4 64 4 tag-pri
5 2048 0 tag-pri
6 -- 0 tag-pri
7 3072 6 pvc-pri
--------------------------------------------------------------------------

--------------------------------------------------------------------------
--------------------------------------------------------------------------
0 cbr 2 1000 -- -- -- -- -- off/--
1 cbr 2 2500 -- -- -- -- -- off/--
2 ubr 2 512 -- -- -- -- -- on /--
3 nrt-vbr 5 1200 -- 600 -- 250 -- on /--
4 rt-vbr 15 128 -- -- 64 300 10000000 on /off
5 ubr 2 2048 -- -- -- -- -- on /--
6 ubr 1 -- -- -- -- -- -- off/--
7 ubr 2 3072 -- -- -- -- -- on /--
--------------------------------------------------------------------------
Total Num : 8
--------------------------------------------------------------------------
2. If no proper traffic profile exists after the query, you can run the traffic table command to
create a traffic profile with index 8 and access rate 10 Mbit/s. The configuration is as
follows:
huawei(config)#traffic table ip car 10240 priority 6 priority-policy tag-In-
Package
3. Create a VLAN and add the service port and the uplink port to the VLAN.
huawei(config)#service-port vlan 10 adsl 0/7/0 vpi 0 vci 35 multi-service user-
4. Configure the ADSL2+ line profile.

If no proper line profile exists in the system, you need to add a line profile. The default line
profile 1002 is used in this example.
5. Bind the line profile and activate ADSL2+ port 0/7/0.
6. Bind the default alarm profile 1.


huawei(config)#save
----End
Result
After the configuration, the user should be able to access the Internet through the GPON upstream
transmission in dialup mode.

28.3 Clearing GPON Port Statistics

This topic describes how to clear the original statistics of the port on the GPON board when you
need to collect the statistics of the port again.
Context
l The GP1A board provides nine ports: one PON port, one GE/FE auto-sensing electrical
port, one 100 M electrical port, two 100 M optical ports, and four E1 ports.
l In the case of the GPON board, ports 0-4 belong to the ETH port group and ports 5-8 belong
to the E1 port group. Clearing port statistics is based on the port groups.
Procedure
Step 1 Run the interface gpon command to enter the GPON mode.
Step 2 Run the display port statistics command to query the statistics of the GPON port.
Step 3 Run the reset port statistics command to clear the statistics of the GPON port so that the system
collects the statistics again.
Step 4 Run the display port statistics command to query the statistics of the GPON port again.
----End
Example
To query the traffic statistics of the ETH port group on the GPON board, do as follows:
huawei(config)#interface gpon 0/6
huawei(config-if-gpon-0/6)#display port statistics ethport-group
huawei(config-if-gpon-0/6)#
Port0(Pon):
Number of transmitted frames =0
Number of received frames =0
Number of discarded frames =0
Port1(Eth1):
Port2(Eth0):
Port3(Fe1):
Port4(Fe0):
To clear the statistics of the ETH port group on the GPON board, do as follows:
huawei(config-if-gpon-0/6)#reset port statistics ethport-group
Clear ethernet statistics successfully

To query the traffic statistics of the ETH port group on the GPON board again, do as follows:
huawei(config-if-gpon-0/6)#display port statistics ethport-group
Port0(Pon):
Port1(Eth1):
Port2(Eth0):
Port3(Fe1):
Port4(Fe0):
NOTE
The statistics of the ETH port group include the number of correctly received frames, the number of correctly
transmitted frames, and the number of discarded frames. The statistics of the E1 port group include the statistics
of the GEM frames on the E1 port, the number of E1 frames received by the TGMAC, and the number of E1
frames transmitted by the TGMAC.

Configuration Guide-IPM CLI 29 Configuring the Device Subtending
29 Configuring the Device Subtending
About This Chapter
This topic describes the Ethernet technology and how to configure the device subtending on the
UA5000.
29.1 Introduction to the Device Subtending

This topic describes the applications of Ethernet subtending technology and its applications on
the UA5000.
29.2 Configuration Example of Device Subtending
Two or more UA5000s can subtend with each other through the GE port. The subtending of
UA5000s does not require the transfer board.
29.3 Configuring the Physical Attributes of an Ethernet Port
This topic describes how to configure the physical attributes of an Ethernet port.
29.4 Enabling the Flow Control on an Ethernet Port
This topic describes how to enable the flow control on an Ethernet port. When the traffic exceeds
a certain level (> 1 Gbit/s for the GE port or > 100 Mbit/s for the FE port), the UA5000 sends
PAUSE frames to inform the remote PC to reduce the traffic, and thereby reduce the packet loss
rate. The process is called flow control.
29.5 Enabling the Traffic Suppression
This topic describes how to enable the traffic suppression on a port to ensure stable network
services.
29.6 Enabling the Ethernet Port Aggregation
This topic describes how to enable the Ethernet port aggregation. Port aggregation indicates
aggregation of multiple ports to expand the bandwidth. The input and output load can be
distributed among the member ports.
29.7 Mirroring an Ethernet Port
This topic describes how to enable the mirroring function of an Ethernet port. This helps analyze
the cause of a faulty port.
29.8 Adding an Ethernet Port to a VLAN
This topic describes how to add an Ethernet port to a VLAN.
29.9 Setting the Native VLAN of an Ethernet Port

29 Configuring the Device Subtending Configuration Guide-IPM CLI
This topic describes how to set the native VLAN of an Ethernet port.

29.1 Introduction to the Device Subtending

This topic describes the applications of Ethernet subtending technology and its applications on
the UA5000.
Service Description
The UA5000 supports subtending through Ethernet ports. Multiple DSLAMs at different tiers
can be subtended through the FE/GE port to extend the network coverage and meet the
requirements for a large network capacity.
For details on the subtended network, see "Subtended Network Configuration" in the UA5000
Universal Access Unit Feature Description.
The UA5000 provides Ethernet ports through the IPMB , ETH and OPFA boards.
The IPMB board provides four FE ports for subtending with slave shelves. Based on the attached
subboard, the IPMB board can provide one FE optical port, two FE electrical ports, two FE
optical ports or one GE optical port, to function as the uplink port.
The Ethernet ports provided by the IPMB board are used for upstream service transmission and
subtended network configuration.
The Ethernet ports provided by the OPFA board are used for service access.
l The Ethernet port is numbered according to these rules.
01: Indicates the port of the Ethernet subboard attached to the IPMB board, and it is
numbered as 0 or 1 from top to down. If the subboard has one FE port or one GE port,
the port number is 0.
25: Indicates the FE ports on the backplane, which can be used for upstream service
transmission or subtending.
67: Indicates the two interior FE ports connected to the PVM board.
Table 29-1 lists the Ethernet ports of the UA5000.
Table 29-1 Ethernet ports of the UA5000
Port Type Port Working Mode Rate
100 Base-FX 100M single/ Full duplex 100 Mbit/s

multiple-mode
optical port
100Base-TX 100M electrical Half duplex, full duplex, 10 Mbit/s

port auto-negotiation 100 Mbit/s
1000Base-SX 1000M multiple- Full duplex, auto- 1000 Mbit/s

mode optical negotiation
port

Port Type Port Working Mode Rate
1000 Base-LX 1000M single- Full duplex, auto- 1000 Mbit/s

mode optical negotiation
port
10GBase-L 10GE optical Full duplex, auto- 10000 Mbit/s

port negotiation
29.2 Configuration Example of Device Subtending

Two or more UA5000s can subtend with each other through the GE port. The subtending of
UA5000s does not require the transfer board.
Prerequisite
l All the control boards of the UA5000 work in the normal state.
l GE port 0/3/1 of UA5000_A and GE port 0/3/0 of UA5000_B are of the same port type.
GE port 0/3/1 of UA5000_A and GE port 0/3/0 of UA5000_B have the same rate and duplex
mode: auto-negotiation..
l The configuration on the user side must be complete.
Networking
Figure 29-1 shows an example network for configuring device subtending.
NOTE
The subtending of UA5000s can be implemented through the IPMB or the IPMD board. This section considers
the IPMB board as an example.

Figure 29-1 Example network for configuring device subtending
GE0/3/0
GE0/3/1
IPMB UA5000_A
GE0/3/0
IPMB UA5000_B
Figure 29-2 shows the flowchart for configuring device subtending.
NOTE
The following configurations are performed on UA5000_A. UA5000_B does not require a subtending port. The
other configurations are the same as the configurations of UA5000_A.

Figure 29-2 Flowchart for configuring device subtending
Start
Create a VLAN
Add an uplink port to it
Add a subtending port to it
End
Procedure
Step 1 Create a VLAN. The types of VLANs are MUX, standard, smart, and super. This section
considers the standard VLAN as an example.

Step 3 Add a subtending port to the VLAN.

----End
Result
After the configuration, the two subtended devices should be able to be configured with various
services.
29.3 Configuring the Physical Attributes of an Ethernet Port

This topic describes how to configure the physical attributes of an Ethernet port.
29.3.1 Configuring the Auto-negotiation Mode of an Ethernet Port

This topic describes how to configure the auto-negotiation mode of an Ethernet port.
29.3.2 Configuring the Duplex Mode of an Ethernet Port
This topic describes how to configure the duplex mode of an Ethernet port.
29.3.3 Setting the Rate of an Ethernet Port
This topic describes how to set the rate of an Ethernet port.
29.3.4 Configuring the Network Cable Type of an Ethernet Port

This topic describes how to configure the network cable type of an Ethernet port.
29.3.1 Configuring the Auto-negotiation Mode of an Ethernet Port

This topic describes how to configure the auto-negotiation mode of an Ethernet port.
Context
l By default, the auto-neg switch of the Ethernet electrical port is enabled.
l By default, the auto-neg switch of the Ethernet optical port is disabled.
Procedure
Step 1 Run the auto-neg command to configure the auto-negotiation mode of an Ethernet port.
Step 2 Run the display port state command to query the configuration of the Ethernet port.
----End
Example
To disable the auto-negotiation mode of Ethernet port 0/3/1 on the IPMB board, do as follows:
huawei(config-if-ipm-0/3)#auto-neg 1 disable
huawei(config-if-ipm-0/3)#display port state 1
The port is active
Native VLAN ID is 1
Ethernet port is offline
Ethernet port is full duplex
Ethernet port rate is 100M
Ethernet port does not support flow control
Ethernet port does not support jumbo frame
Line-adaptive function of the ethernet port is normal
Port mode is FE-Elec
29.3.2 Configuring the Duplex Mode of an Ethernet Port

This topic describes how to configure the duplex mode of an Ethernet port.
Context
l The duplex of an Ethernet port can be full duplex, half duplex, or auto-negotiation. When
configuring the duplex mode of an Ethernet port, ensure that the duplex mode of the
Ethernet port is the same as the duplex mode of the interconnected port on the peer device.
This prevents communication failure.
l When a port is in auto-negotiation mode, disable the auto-negotiation mode of the port to
change the duplex mode to the full duplex mode or the half duplex mode.
l By default, the FE electrical port is in auto-negotiation mode, and the FE optical port is in
full duplex mode.
l This configuration takes effect for only the Ethernet electrical port.
Procedure
Step 1 Run the interface ipm command to enter the IPM mode.
Step 2 Run the auto-neg command to disable the auto-negotiation mode of an Ethernet port.

Step 3 Run the duplex command to configure the duplex mode of the Ethernet port.
Step 4 Run the display port state command to query the duplex mode of the port.
----End
Example
To change the auto-negotiation mode of Ethernet electrical port 0/3/1 to the full duplex mode,
do as follows:
huawei(config-if-ipm-0/3)#duplex 1 full
The port is active
Native VLAN ID is 1
29.3.3 Setting the Rate of an Ethernet Port

This topic describes how to set the rate of an Ethernet port.
Context
When setting the rate of an Ethernet port, ensure that the rate of the Ethernet port is the same as
the rate of the interconnected port on the peer device. This prevents communication failure.
By default:
l The GE/FE electrical port is in auto-negotiation mode.

l The rate of the GE optical port is 1000 Mbit/s.
l The rate of the FE optical port is 100 Mbit/s.
l When a port is in auto-negotiation mode, disable the auto-negotiation mode to change the
port rate to a specific value.
l The rate of the 1000 Mbit/s electrical port is not compulsorily 1000 Mbit/s, but can be auto-
negotiated to 1000 Mbit/s.
Procedure
Step 2 Run the auto-neg command to disable the auto-negotiation mode of an Ethernet port.
Step 3 Run the speed command to set the rate of an Ethernet port.
Step 4 Run the display port state command to query the configuration information about an Ethernet
port.
----End

Example
To set the rate of a GE electrical port to 100 Mbit/s, do as follows:
huawei(config-if-ipm-0/3)#speed 1 100
The port is active
Native VLAN ID is 1
Ethernet port is online
Ethernet port supports flow control
Line-adaptive function of the ethernet port is auto-negotiation
29.3.4 Configuring the Network Cable Type of an Ethernet Port

This topic describes how to configure the network cable type of an Ethernet port.
Context
l The Ethernet electrical port uses a straight-through cable or a crossover cable. The type of
the network cable of the Ethernet electrical port can be configured to straight-through cable,
crossover cable, or auto (auto-adaptive).
l The default network cable type is auto (auto-adaptive).
l Such configuration applies to only the Ethernet electrical port.
l When the Ethernet electrical port is not in auto-negotiation mode, the network cable type
cannot be configured as auto.
Procedure
Step 2 Run the mdi command to configure the network cable type of an Ethernet port.
Step 3 Run the display port state command to query the configured network cable type of an Ethernet
port.
----End
Example
To configure the network cable type of Ethernet electrical port 0/3/0 as straight-through cable,
do as follows:
huawei(config-if-ipm-0/3)#mdi 1 normal
The port is active
Native VLAN ID is 1
Ethernet port is online

29.4 Enabling the Flow Control on an Ethernet Port

This topic describes how to enable the flow control on an Ethernet port. When the traffic exceeds
a certain level (> 1 Gbit/s for the GE port or > 100 Mbit/s for the FE port), the UA5000 sends
PAUSE frames to inform the remote PC to reduce the traffic, and thereby reduce the packet loss
rate. The process is called flow control.
Context
l The control function requires the support from the UA5000 and the peer device. If the peer
device supports flow control, enable the flow control of the UA5000. If the peer device
does not support the flow control, disable the flow control of the UA5000.
l By default, the port flow control is disabled.
Procedure
Step 2 Run the flow-control command to configure the flow control on the port.
Step 3 Run the display port state command to query the set flow control.
----End
Example
To enable the flow control on port 0/3/2, do as follows:
huawei(config-if-ipm-0/3)#flow-control 2
The port is active
Native VLAN ID is 1
Related Operation
Table 29-2 lists the related operation for enabling the flow control of an Ethernet port.
Table 29-2 Related operation for enabling the flow control of an Ethernet port
Disable the flow control on the Ethernet undo flow-control

port

29.5 Enabling the Traffic Suppression

This topic describes how to enable the traffic suppression on a port to ensure stable network
services.
Context
The are three traffic suppression modes available on a port are as follows:
l Broadcast traffic suppression
When the broadcast traffic exceeds a preset threshold, the system discards certain
broadcast packets until the broadcast traffic is in the acceptable range. This ensures the
normal network services. This process is called broadcast traffic suppression.
l Unknown unicast traffic suppression
l Unknown multicast traffic suppression
By default, the level of broadcast traffic suppression and unknown unicast traffic suppression
is 12.
l It is recommended that you enable broadcast traffic suppression according to network
conditions.
l When IGMP Proxy or IGMP snooping is enabled, unknown multicast packets are not
suppressed. When IGMP proxy and IGMP snooping are disabled (by running the igmp
mode off command), unknown multicast packets are suppressed. By default, the level of
unknown multicast traffic suppression is 12.
Procedure
Step 2 Run the traffic-suppress command to enable the traffic suppression on a port.
Step 3 Run the display traffic-suppress command to query the configuration of the traffic suppression.
----End
Example
To set the broadcast traffic suppression to level 1, do as follows:
huawei(config-if-ipm-0/3)#traffic-suppress all broadcast value 1
huawei(config-if-ipm-0/3)#display traffic-suppress 0
Traffic suppression ID definition:
---------------------------------------------------------------------
NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps)
/Jumbo frame enable(kbps)
---------------------------------------------------------------------
1 6 145 / 884 12
2 12 291 / 1769 24
3 24 582 / 3538 48
4 48 1153 / 7004 95
5 97 2319 / 14082 191
6 195 4639 / 28164 382
7 390 9265 / 56254 763

8 781 18531 / 112508 1526

9 1562 37063 / 225017 3052
10 3125 74126 / 450035 6104
11 6249 148241 / 899997 12207
12 12499 296483 / 1799995 24414
13 0 0 / 0 0
---------------------------------------------------------------------
Current traffic suppression ID of broadcast : 1
Current traffic suppression ID of multicast : 7
Current traffic suppression ID of unicast : 7
To set the unknown unicast traffic suppression for port 0/3/0 to level 1, do as follows:
huawei(config-if-ipm-0/3)#traffic-suppress 0 unicast value 1
huawei(config-if-ipm-0/3)#display traffic-suppress 0
Traffic suppression ID definition:
---------------------------------------------------------------------
NO. Min bandwidth(kbps) Max bandwidth(kbps) Package number(pps)
/Jumbo frame enable(kbps)
---------------------------------------------------------------------
1 6 145 / 884 12
2 12 291 / 1769 24
3 24 582 / 3538 48
4 48 1153 / 7004 95
5 97 2319 / 14082 191
6 195 4639 / 28164 382
7 390 9265 / 56254 763
8 781 18531 / 112508 1526
9 1562 37063 / 225017 3052
10 3125 74126 / 450035 6104
11 6249 148241 / 899997 12207
12 12499 296483 / 1799995 24414
13 0 0 / 0 0
---------------------------------------------------------------------
Current traffic suppression ID of broadcast : 1
Current traffic suppression ID of multicast : 7
Current traffic suppression ID of unicast : 1
Related Operation
Table 29-3 lists the related operations for enabling traffic suppression.
Table 29-3 Related operations for enabling traffic suppression
Disable unknown unicast traffic undo traffic-suppress unicast

suppression
Disable unknown multicast traffic undo traffic-suppress multicast

suppression
Disable broadcast traffic suppression undo traffic-suppress broadcast
29.6 Enabling the Ethernet Port Aggregation

This topic describes how to enable the Ethernet port aggregation. Port aggregation indicates
aggregation of multiple ports to expand the bandwidth. The input and output load can be
distributed among the member ports.

Context
l The IPMB board supports up to four port aggregation groups.
l One aggregation group supports the aggregation of up to eight Ethernet ports.
l Multiple physical ports can be aggregated only if they meet the following conditions:
All the ports must work in full duplex mode.
The rates of all the ports must be the same, and cannot be configured as auto-negotiation.
The default VLAN (PVID) and VLAN attributes of all the ports must be the same.
One port belongs to only one port aggregation group.
No mirror destination port is included.
All physical ports are in the same slot.
The port cannot be in the auto-negotiation state.
The start port number must be smaller than the end port number.
Procedure
Step 1 Run the duplex command to set the full duplex mode for all the ports.
Step 2 Run the speed command to set the same port rate.
Step 3 Run the link-aggregation command to set the Ethernet port aggregation.
Step 4 Run the display link-aggregation command to query the related information about the
aggregated ports.
----End
Example
To set the Ethernet port aggregation, do as follows:
huawei(config-if-ipm-0/3)#link-aggregation 2-3 ingress
huawei(config-if-ipm-0/3)#display link-aggregation
-------------------------------------------------------------
Master port Sub-ports Mode WorkMode
-------------------------------------------------------------
2 3 ingress manual
-------------------------------------------------------------
Total: 1 link-aggregation(s)
Related Operation
Table 29-4 lists the related operation for enabling the Ethernet port aggregation.
Table 29-4 Related operation for enabling the Ethernet port aggregation
Cancel the Ethernet port undo link-aggregation

aggregation

29.7 Mirroring an Ethernet Port

This topic describes how to enable the mirroring function of an Ethernet port. This helps analyze
the cause of a faulty port.
Context
l One IPMB board supports the mirroring of only one destination port.
l You can mirror multiple ports to one destination port.
l The mirroring destination port cannot be the aggregated port.
l The mirroring configuration is automatically cancelled after the system reset.
Procedure
Step 1 Run the mirror port command to enable the mirroring function of an Ethernet port.
Step 2 Run the display mirror command to query the mirroring configuration of the Ethernet port.
----End
Example
To mirror the transmit and receive packets of port 0 to port 1, do as follows:
huawei(config-if-ipm-0/3)#mirror port 0 1 all
huawei(config-if-ipm-0/3)#display mirror
------------------------------------------------
Source port Direction Destination port
------------------------------------------------
0 all 1
------------------------------------------------
29.8 Adding an Ethernet Port to a VLAN

This topic describes how to add an Ethernet port to a VLAN.
Procedure
Step 2 Run the port vlan command to add an Ethernet port to a VLAN.
Step 3 Run the display vlan command to query the uplink port of a VLAN.
----End
Example
To add Ethernet port 0/3/0 to MUX VLAN 2, do as follows:

VLAN ID: 2
VLAN type: MUX
VLAN description:
VLAN up direction CAR ID : CAR off
------------------------------
F/ S/ P Native VLAN State
------------------------------
0/ 3/ 0 1 up
------------------------------
Service virtual port number: 0
Related Operation
Table 29-5 lists the related operation for adding an Ethernet port to a VLAN.
Table 29-5 Related operation for adding an Ethernet port to a VLAN
Delete a port from a VLAN undo port vlan
29.9 Setting the Native VLAN of an Ethernet Port

This topic describes how to set the native VLAN of an Ethernet port.
Context
l The default native VLAN of the Ethernet ports is VLAN 1.
l When the Ethernet port is used as the uplink port, there are two cases:
If the native VLAN of the Ethernet port is the same as the VLAN to which this Ethernet
port belongs, the Ethernet port removes the VLAN tag of the upstream packets.
If the native VLAN of the Ethernet port is different from the VLAN to which this
Ethernet port belongs, the Ethernet port retains the VLAN tag of the upstream packets.
l Before specifying the native VLAN of an Ethernet port, ensure that the port must be
included in the native VLAN.
l Whether the native VLAN is set for the uplink port depends on whether the upper layer
device that is connected to the port supports the packets with VLAN tags. The configuration
on the UA5000 should be consistent with the configuration on the upper layer device.
If the upper layer device supports the packets with VLAN tags, the native VLAN of the
uplink port of the UA5000 must be different from the VLAN to which the uplink port
belongs.
If the upper layer device does not support the packets with VLAN tags, the native VLAN
of the uplink port of the UA5000 must be the same as the VLAN to which the uplink
port belongs.

Procedure
Step 2 Run the native-vlan command to set the native VLAN of an Ethernet port.
Step 3 Run the display port state command to query the configuration of a native VLAN.
----End
Example
To set the native VLAN of Ethernet port 0/3/0 to VLAN 10, do as follows:
The port is active
Native VLAN ID is 10
Ethernet port duplex is auto-negotiation
Ethernet port rate is auto-negotiation

Configuration Guide-IPM CLI 30 Configuring the VLAN Stacking Wholesale Service
30 Configuring the VLAN Stacking

Wholesale Service
About This Chapter
This topic describes the VLAN stacking wholesale service and how to configure the service on
the UA5000.
30.1 Introduction to the VLAN Stacking Wholesale Service

This topic describes the feature of multi-ISP wholesale service and its application on the
UA5000.
30.2 Configuration Example of VLAN Stacking Multi-ISP Wholesale Access
This topic describes how to enable different users to access the services provided by different
ISPs.
30.3 Setting the Inner and Outer Ethernet Protocol Types of a Stacking VLAN
This topic describes how to set the inner and outer Ethernet protocol types of a stacking VLAN.
30.4 Configuring an Inner Label of a Stacking VLAN
This topic describes how to configure an inner label of a stacking VLAN.

30 Configuring the VLAN Stacking Wholesale Service Configuration Guide-IPM CLI
30.1 Introduction to the VLAN Stacking Wholesale Service

This topic describes the feature of multi-ISP wholesale service and its application on the
UA5000.
Service Description
Multiple Internet service providers (ISPs) may exist in a layer 2 metropolitan area network
(MAN). With the wholesale service function, users can be connected to different ISPs in batches
based on certain rules.
The UA5000 offers the VLAN stacking function to realize the multi-ISP wholesale access. The
UA5000 adds two layers of VLAN tags to the user packets. The outer VLAN tag identifies ISP,
and the inner VLAN tag identifies the user.
In the wholesale service, the upper layer device must work in layer 2 mode, and forward packets
based on the VLAN and the MAC address.
30.2 Configuration Example of VLAN Stacking Multi-ISP

Wholesale Access
This topic describes how to enable different users to access the services provided by different
ISPs.
Prerequisite
l Network devices and lines must be normal.
l The upper layer network must be in L2 mode, and forwards packets based on the VLAN
and the MAC address.
Networking
Figure 30-1 shows an example network for configuring the VLAN stacking multi-ISP wholesale
access.

Figure 30-1 Example network for configuring the VLAN stacking multi-ISP wholesale access
ISP1 ISP2
BRAS BRAS
0/3/0 UA5000-1 0/3/0 UA5000-2

I C I C
P S P S
M R M R
B B B B
0/7/0 0/7/0
Enterprise A Enterprise B
Data Plan
Table 30-1 provides the data plan for configuring the VLAN stacking multi-ISP wholesale
access.
Table 30-1 Data plan for configuring the VLAN stacking multi-ISP wholesale access
Item Data Remarks
Enterprise A Service provider: ISP 1 -
Access device: UA5000-1
Access port:0/7/0
Uplink port:0/3/0 Connects to the IP network.
Outer VLAN ID: 60 Identifies ISP 1.
Protocol type of the outer tag Uses the default 0x8100.
Inner VLAN ID: 10 Identifies the enterprise internal

users.
Protocol type of the inner tag Uses the default 0x8100.
Enterprise B Whole-sale user: ISP 2 -
Access device: UA5000-2
Access port:0/7/0
Uplink port:0/3/0 Connects to the IP network.

Item Data Remarks
Outer VLAN ID: 61 Identifies ISP 2.
Protocol type of the outer tag Uses the default 0x8100.
Inner VLAN ID: 11 Identifies the enterprise internal

users.
Protocol type of the inner tag Uses the default 0x8100.
Notes
l The default VLAN cannot be configured as the stacking VLAN.
l The VLAN stacking does not support the configuration of an L3 interface.
Figure 30-2 shows the flowchart for configuring the VLAN stacking multi-ISP wholesale
access.
Figure 30-2 Flowchart for configuring the VLAN stacking multi-ISP wholesale access
Start
Create a VLAN
Set the VLAN attribute as Stacking
Add the uplink port to the VLAN
Add the service port to the VLAN
Set the inner label of the service port
Save the data
End

NOTE
The procedure for configuring enterprise user A is the same as the procedure for configuring enterprise
user B. This section considers only the procedure for configuring enterprise user A as an example. For the
information about how to configure enterprise user B, see the following configuration procedure based on
the data plan of enterprise user B.
Procedure
Step 2 Set the VLAN attribute.

huawei(config)#vlan attrib 60 stacking


Step 5 Set the inner tag (VLAN ID) of the service port.
huawei(config)#stacking label vlan 60 baselabel 10
Are you sure to continue? (y/n)[n]:y
The total of service virtual port(s) in this operation: 1
The total of service virtual port(s) which could be labeled: 1
Now begin to label these service virtual port(s), please wait ...

The total of service virtual port(s) which have been labeled successfully: 1

huawei(config)#save
----End
Result
Enterprise user A and enterprise user B should be able to connect to ISP1 and ISP2 in the normal
state.
30.3 Setting the Inner and Outer Ethernet Protocol Types of

a Stacking VLAN
This topic describes how to set the inner and outer Ethernet protocol types of a stacking VLAN.
Context
l By default, the inner and outer Ethernet protocol type of a stacking VLAN is 0x8100. That
is, the Ethernet frame has a 802.1q VLAN Tag.
l The protocol type to be set cannot be set as a value for other protocols, such as 0x0800 (IP
packets) or 0x0806 (ARP packets).

Procedure
Step 1 Run the stacking inner-ethertype command to set the inner Ethernet protocol type of a stacking
VLAN.
Step 2 Run the display stacking inner-ethertype command to query the inner Ethernet protocol type
of a stacking VLAN.
----End
Example
To set the inner Ethernet protocol type supported by a stacking VLAN as 0x8100, do as follows:
huawei(config)#stacking inner-ethertype 0x8100
huawei(config)#display stacking inner-ethertype
The inner Ethernet type in the system: 0x8100
30.4 Configuring an Inner Label of a Stacking VLAN

This topic describes how to configure an inner label of a stacking VLAN.
Prerequisite
l The service board must work in the normal state, and the service port must exist.
l You can configure only the VLAN with the stacking attribute. Before the configuration,
you must run the service-port command to create the service port.
l By default, the values of the inner labels of the stacking VLAN of all the service ports are
1.
Context
l When the inner labels of the stacking VLAN of the service ports on a certain board are
configured in batches, configure the value of the label of the first service port to baselabel,
and the second to baselabel + 1. The value of the label of the Nth service port is baselabel
+ (n - 1). The value of the label increases by this rule.
l When the inner labels of the stacking VLAN of the service ports in the entire system are
configured in batches, configure the value of the label of the first service port to baselabel,
and the second to baselabel + 1. The value of the label of the Nth service port is baselabel
+ (n - 1). The value of the label increases by this rule.
Procedure
Step 1 Run the stacking label command to configure the value of the inner label of the stacking VLAN
of the service port on a certain board or in the entire system.
Step 2 Run the display service-port command to query the value of the inner label of the stacking
VLAN of the service port.
----End

Example
Assume that a service port corresponds to the physical location 0/7/0. The VPI of the service
port is 0 and the VCI of the service port is 32. To configure the label of the port to 3000, do as
follows:
huawei(config)#stacking label 0/7/0 vpi 0 vci 32 3000
------------------------------------------------------------------------------
ID TYPE PARA
------------------------------------------------------------------------------
10 stacking adl 0/7/0 0 35 - - 6 6 act/dn 3000 -
------------------------------------------------------------------------------
To set the labels of all the service ports of VLAN11 and provide label values according to the
default settings, do as follows:
huawei(config)#stacking label vlan 11 baselabel 1000
Are you sure to continue? (y/n)[n]:y
The total of service virtual port(s) in this operation: 4
Now begin to label these service virtual port(s), please wait ...

The total of service virtual port(s) which have been labeled successfully: 4
huawei(config)#display service-port vlan 11
------------------------------------------------------------------------------
ID TYPE PARA
------------------------------------------------------------------------------
11 stacking adl 0/ 8/ 1 0 35 - - 6 6 act/dn 1000 -
------------------------------------------------------------------------------

Configuration Guide-IPM CLI 31 Configuring the QinQ VLAN Leased Line Access
31 Configuring the QinQ VLAN Leased

Line Access
About This Chapter
This topic describes the QinQ VLAN leased line service and how to configure the service on
the UA5000.
31.1 Introduction to the QinQ VLAN Leased Line Access

This topic describes the leased line access service and its specifications.
31.2 Configuration Example of the QinQ VLAN Leased Line Service
This topic describes how to implement private VLANs and the transparent transmission of
services to the peer end.
31.3 Enabling Transparent Transmission of BPDUs
This topic describes how to enable the transparent transmission of bridge protocol data units
(BPDUs).

31 Configuring the QinQ VLAN Leased Line Access Configuration Guide-IPM CLI
31.1 Introduction to the QinQ VLAN Leased Line Access

This topic describes the leased line access service and its specifications.
Service Description
Leased line access meets the requirements for the transparent transmission of service data and
VLANs of private networks to the peer end in a secure manner.
The leased line access service is realized through the QinQ feature.
l After receiving a packet with a private VLAN tag, the UA5000 adds an additional VLAN
tag (QinQ VLAN tag) to the packet.
l The packet is forwarded by its outer VLAN tag in the public network.
l When the packet reaches the peer UA5000, the UA5000 extracts the outer VLAN tag, thus
realizing the transparent transmission of the VLAN in a private network.
NOTE
l In the case of the QinQ feature application, the modem at the access side must support the Ethernet
packets with the VLAN tags.
l For details on the QinQ feature, see "VLAN" in the UA5000 Universal Access Unit Feature
Description.
31.2 Configuration Example of the QinQ VLAN Leased Line

Service
This topic describes how to implement private VLANs and the transparent transmission of
services to the peer end.
Prerequisite
l The upper layer network must work in L2 mode and forward packets according to the
VLAN ID and MAC address.
Networking
Figure 31-1 shows an example network for configuring the leased line service.

Figure 31-1 Example network for configuring the leased line service
0/3/0 UA5000_A 0/3/0 UA5000_B

I C
C I C
C
P S P S
S S
M R M R
R R
B B B B
0/7/0 0/7/0
Modem Modem
LANSwitch LANSwitch
Company A Company B
Data Plan
Table 31-1 provides the data plan for configuring the leased line service.
Table 31-1 Data plan for configuring the leased line service
Item Data
UA5000_A Port of the CSRB board: 0/7/0
Uplink port: 0/3/0
SP VLAN ID: 50
UA5000_B Port of the CSRB board: 0/7/0
Uplink port: 0/3/0
SP VLAN ID: 50
Figure 31-2 shows the flowchart for configuring the leased line service.

31 Configuring the QinQ VLAN Leased Line Access Configuration Guide-IPM CLI
Figure 31-2 Flowchart for configuring the leased line service
Start
Create a VLAN
Set the VLAN attribute as QinQ
Add the uplink port
Add the service port
Save the data
End
Procedure
Step 2 Set the attribute of VLAN 50.

huawei(config)#vlan attrib 50 q-in-q
Step 3 Add an uplink port to VLAN 50.



huawei(config)#save
----End
Result
After the configuration, enterprise users A and B should be able to communicate with each other
31.3 Enabling Transparent Transmission of BPDUs

This topic describes how to enable the transparent transmission of bridge protocol data units
(BPDUs).

Context
l When the transparent transmission of BPDUs is enabled, the layer 2 BPDUs under the
QinQ VLAN can be transparently transmitted.
l When the transparent transmission of BPDUs is disabled, these BPDUs cannot be
transparently transmitted.
Procedure
Step 1 Run the bpdu tunnel enable command to enable the transparent transmission of BPDUs.
Step 2 Run the display bpdu tunnel config command to query the transparent transmission status of
BPDUs.
----End
Example
To enable the transparent transmission of BPDUs, do as follows:
huawei(config)#bpdu tunnel enable
huawei(config)#display bpdu tunnel config
BPDU tunnel function is enabled
Related Operation
Table 31-2 lists the related operation for enabling the transparent transmission of BPDUs.
Table 31-2 Related operation for enabling the transparent transmission of BPDUs
Disable the transparent transmission of bpdu tunnel disable

BPDUs

Configuration Guide-IPM CLI 32 Configuring the Multicast Service
32 Configuring the Multicast Service
About This Chapter
This topic describes the multicast service and how to configure the service on the UA5000.
32.1 Introduction to the Multicast Service

This topic describes the multicast service and related service specifications.
32.2 Configuration Example of IGMP Proxy Multicast Service
This topic describes how to realize the IGMP proxy multicast service.
32.3 Configuration Example of the IGMP Snooping Multicast Service
This topic describes how to configure the multicast service by using the IGMP snooping protocol.
32.4 Configuration Example of Multicast Service in Subtending Mode
This topic describes how to configure the multicast service in the subtending networking mode.
32.5 Configuring the Multicast Service in RSTP Networking
This topic describes how to configure the multicast service in the RSTP networking.
32.6 Setting the IGMP Mode
This topic describes how to set the IGMP mode, including IGMP proxy and IGMP snooping.
32.7 Configuring an IGMP Uplink Port
This topic describes how to add an IGMP uplink port and set the working mode and the
bandwidth of the uplink port.
32.8 Specifying a Subtending Port
This topic describes how to specify a subtending port. When the UA5000 has a subtended shelf
and there are multicast users on the subtended shelf, you need to define the port that connects
to the subtended shelf as a subtending port.
32.9 Adding a Program for a Static Subtending Port
This topic describes how to add a program for a static subtending port.
32.10 Configuring IGMP Global Parameters
This topic describes how to configure the IGMP global parameters.
32.11 Adding a Program
This topic describes how to add one program or multiple programs in batches to the program
library.

32 Configuring the Multicast Service Configuration Guide-IPM CLI
32.12 Managing Multicast Bandwidths

This topic describes how to manage multicast bandwidths.
32.13 Configuring a Rights Profile
This topic describes how to configure a rights profile.
32.14 Configuring Multicast Users
This topic describes how to configure multicast users.
32.15 Configuring the Preview Function
This topic describes how to configure the preview function.
32.16 Configuring the Logging Function
This topic describes how to configure the logging function.
32.17 Configuring Active CDR Reporting
After the charging data record (CDR) function is enabled, the system automatically saves the
multicast CDR and actively reports the CDR to the server.
32.18 Configuring Manual CDR Reporting
When you do not need to wait for the system to periodically report the CDR, or when you need
to query the CDR that fails to be automatically reported, deliver a command on the device to
enable the system to report the CDR. By configuring manual CDR reporting, you can choose to
transmit specific multicast logs according to your requirements.

32.1 Introduction to the Multicast Service

This topic describes the multicast service and related service specifications.
Service Description
With the advent of multimedia, video, and data warehouse in the Internet, the multicast service
is becoming increasingly popular in service applications. It is widely applied in streaming,
remote learning, video conferencing, video on demand (VOD), network gaming, Internet data
center (IDC), and other point-to-multipoint fields. For details on the multicast service, see "
Multicast" in the UA5000 Universal Access Unit Feature Description.
Designed with carrier-class multicast operability, the UA5000 supports multicast protocols
(from user to network). This ensures provisioning value-added broadband multicast services.
The UA5000 supports controllable multicast services, supports IGMP V1/V2, IGMP proxy, and
IGMP snooping.
l Up to 1024 multicast groups are supported.
l Program preview is supported. Preview count, preview time, and preview interval are
configurable.
l Audience statistics is supported.
l Controllable multicast is supported to control the multicast groups that a user can join. The
rights of rights profiles are watch, preview, forbidden, and idle. The priority is configurable,
thus meeting the requirements for different multicast operations.
32.2 Configuration Example of IGMP Proxy Multicast

Service
This topic describes how to realize the IGMP proxy multicast service.
Prerequisite
l Network devices and lines are normal.
l The multicast source exists in the network and its IP address is known.
l The service boards are in the normal state.
Networking
Figure 32-1 shows the example network of the IGMP proxy multicast service.

Figure 32-1 Example network of the IGMP proxy multicast service
Multicast server
0/3/1 UA5000
I C
P S
M R
B B
0/7
ADSL modem ADSL modem
STB STB
TV TV
Data Plan
Table 32-1 provides the data plan for configuring IGMP proxy.
Table 32-1 Data plan for configuring IGMP proxy

Item Data
Uplink port 0/3/1
Program The multicast server provides three programs. Uplink port 0/3/1 and VLAN
library 2 are bound.
The IP address of program1 is 224.1.1.1.
Rights profile Profile 0: In rights profile 0, the user is allowed to access program1 and
program2 in the program library.

Item Data
Multicast users Multicast user 1, with service port of 0/7/0, VPI/VCI of 0/35, and bound
with rights profile 0.
Multicast user 2, with service port of 0/7/1, VPI/VCI of 0/35, with no
authentication.
Port of the IP address: 10.0.0.254

upper layer
router
connected to
UA5000
Modem VPI/VCI of the modem connected to the port: 0/35
Figure 32-2 shows the flowchart for configuring IGMP proxy.
Figure 32-2 Flowchart for configuring IGMP proxy
Configure the multicast servic
Start Set the IGMP mode
Configure the xDSL port Configure the IGMP

uplink port
Create a VLAN Configure the global

parameters (optional)
Add an uplink port

tothe VLAN Configure the program
library
Configure the native VLAN
of the port (optional)
Configure the preview
attributes (optional)
Add service ports
to the VLAN
Configure the rights profile
Configure a VLAN
Configure multicast users
End

Procedure
Step 1 Configure the xDSL port.
In this example, the default line profile (line profile 1002) for ADSL2+ is used. Therefore, you
do not have to configure a line profile.
Step 2 Configure a VLAN.

1. Create a smart VLAN.
2. Add an uplink port to the VLAN.

3. Set the native VLAN of the uplink port.


Step 3 Configure the multicast service.

1. Set the multicast mode.
huawei(config)#btv
huawei(config-btv)#igmp mode proxy
NOTE
Proxy is the default. In general, it does not need to be configured.
2. Configure the uplink port of IGMP.
huawei(config-btv)#igmp uplink-port-mode program
huawei(config-btv)#igmp uplink-port 0/3/1 100
3. Configure the global parameters.
For how to configure the global parameters, see "Configuring IGMP Global
Parameters."
4. Configure the program library.
huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 2 bind
0/3/1 hostip 10.0.0.254
0/3/1 hostip 10.0.0.254
0/3/1 hostip 10.0.0.254
5. Configure the rights profile.

huawei(config-btv)#igmp profile profile-name profile0 program-name program1
watch
watch
6. Configure multicast users.

huawei(config-btv)#igmp user add port 0/7/1 adsl 0 35 no-auth max-program 8
huawei(config-btv)#igmp user add port 0/7/0 adsl 0 35 auth max-program 8
huawei(config-btv)#igmp user bind-profile port 0/7/0 profile-name profile0
huawei(config-btv)#quit

huawei(config)#save
----End

Result
l User 1 can watch program1 and program2 but cannot watch program3.
l User 2 can watch program1, program2 and program3.
32.3 Configuration Example of the IGMP Snooping

Multicast Service
This topic describes how to configure the multicast service by using the IGMP snooping protocol.
Prerequisite
l The multicast source must exist in the network and its IP address must be known.
Networking
Figure 32-3 shows the example network of the IGMP snooping multicast service.
Figure 32-3 Example network of the IGMP snooping multicast service
Multicast server
0/3/1 UA5000
I C
P S
M R
B B
0/7
ADSL modem ADSL modem
STB STB
TV TV

Data Plan
Table 32-2 provides the data plan for configuring the IGMP snooping multicast service.
Table 32-2 Data plan for configuring the IGMP snooping multicast service
Item Data
Uplink port 0/3/1
Program library The video server provides three programs. Uplink port 0/3/1 and VLAN 2
are bound.
Rights profile In rights profile 0, the user is allowed to access program1 and program2 in
the program library.
Multicast users Multicast user 1, with service port of 0/7/0, VPI/VCI of 0/35, and bound
with rights profile 0.
Multicast user 2, with service port of 0/7/1, VPI/VCI of 0/35, with no
authentication.
Port of the IP address: 10.0.0.254

upper layer
router
connected to
UA5000
Modem VPI/VCI of modem connected to the port: 0/35
Figure 32-4 shows the flowchart for configuring the IGMP snooping multicast service.

Figure 32-4 Flowchart for configuring the IGMP snooping multicast service
Multicast service configuration
Configure IGMP
Configure the xDSL port uplink port
Configure the global

Create a Smart VLAN parameters (optional)
Add the uplink port

Configure the
to the VLAN
program library
Set native VLAN for the

port (optional) Configure preview
attributes (optional)
Configure the service port

Configure the
rights profile
VLAN configuration
End
Procedure
Step 1 Configure the xDSL port.
In this example, the default line profile (line profile 1002) for ADSL2+ is used. Therefore, you
do not need to configure a line profile.
Step 2 Configure a VLAN.

1. Create a smart VLAN.
2. Add an uplink port to the VLAN.

3. Set the native VLAN of the uplink port.



1. Select the multicast mode.

huawei(config)#btv
huawei(config-btv)#igmp mode snooping
2. Configure the uplink port of IGMP.

3. Configure the global parameters.

For how to configure the global parameters, see "32.10 Configuring IGMP Global
Parameters."
4. Configure the program library.
0/3/1 hostip 10.0.0.254
0/3/1 hostip 10.0.0.254
0/3/1 hostip 10.0.0.254
5. Configure the rights profile.

watch
watch
6. Configure multicast users.

huawei(config-btv)#igmp user add port 0/7/1 no-auth max-program 8
huawei(config-btv)#igmp user add port 0/7/0 auth max-program 8

huawei(config)#save
----End
Result
l User 1 should be able to watch program1 and program2 but cannot watch program3.
l User 2 should be able to watch program1, program2 and program3.
32.4 Configuration Example of Multicast Service in

Subtending Mode
This topic describes how to configure the multicast service in the subtending networking mode.
Networking
Figure 32-5 shows an example network for configuring the multicast service in subtending
mode.

Figure 32-5 Networking for configuring the multicast service in subtending mode
Multicast source
Router
I
P C
M S
B R
0/3/0 B
0/3/1 UA5000_A
I
P C
M S
B R
0/3/0 B
0/3/1 UA5000_B
0/15
Modem Modem
PC PC
Data Plan
Table 32-3 provides the data plan for configuring the multicast service in subtending mode.
Table 32-3 Data plan for configuring the multicast service in subtending mode
Item Data
UA5000_A The IPMB board:

l Provides an uplink port 0/3/0 to connect to the upper layer multicast
router (with IP address of 10.0.0.254).
l Provides a subtending port 0/3/1 to connect to the UA5000_B.
VLAN:
l Adds port 0/3/0 on the IPMB to VLAN 100 as the uplink port of this
VLAN.
l Adds port 0/3/1 on the IPMB to VLAN 100 as the subtending port

Item Data
The multicast server provides three programs. Uplink port 0/3/0 and
VLAN 100 are bound.
l The IP address of program1 is 224.1.1.1.
The IP address of the port of the upper layer router that is interconnected
to the UA5000 is 10.0.0.254.
UA5000_B VLAN: Add port 0/3/0 on the IPMB to VLAN 100 as the uplink port of
this VLAN.
The multicast server provides three programs. Uplink port 0/3/0 and
VLAN 100 are bound.
Rights profile: Profile0 allows the users to watch program1 and program2
in the program library.
Modem: The VPI/VCI of the modem connected to the port is 0/35.
Multicast users:
l Multicast user 1: The service port is 0/15/0 and the VPI/VCI is 0/35.
Rights profile0 is bound.
l Multicast user 2: The service port is 0/15/1 and the VPI/VCI is 0/35. No
authentication is needed.
Figure 32-6 and Figure 32-7 show the flowchart for configuring the multicast service in
subtending mode.

Figure 32-6 Flowchart for configuring the multicast service in subtending mode on
UA5000_A
Multicast service configuration
Set the IGMP mode
Configure the IGMP

Start uplink port
Configure the global

Create a Smart VLAN parameters (optional)
Add the uplink port Configure the program

library
Set the native VLAN for

the port (optional) Configure the multicast
subtending port
VLAN configuration
End
Figure 32-7 Flowchart for configuring the multicast service in subtending mode on
UA5000_B
Multicastserviceconfiguration
Configure the xDSL port Configure the IGMP

uplink port
Create a VLAN Configure the global

parameters(optional)
Add an uplink
port to the VLAN Configure the
program library
Configure the native VLAN
of the port (optional)
attributes(optional)
Add service ports
to the VLAN
Configure the rights profile
VLAN configuration
Configuremulticast users
End

Procedure
l Procedure for configuring UA5000_A
1. Configure a VLAN.
Create a VLAN.
Add uplink ports.

Set the native VLAN of the uplink port.

2. Configure the multicast service.

Set the multicast mode.
huawei(config)#btv
Configure the uplink port of IGMP.

Configure the program library.

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 100
bind 0/3/0 hostip 10.0.0.254
bind 0/3/0 hostip 10.0.0.254
bind 0/3/0 hostip 10.0.0.254
Configure the multicast subtending port.

huawei(config-btv)#igmp cascade-port 0/3/1 static enable
3. Save the data.

huawei(config)#save
l Procedure for configuring UA5000_B

1. Configure the xDSL port.
In this example, the ADSL2+ port uses the default line profile (line profile 1002).
Therefore, you need not configure a line profile.
Create a VLAN.
Add an uplink port.


Add a service port to the VLAN.

huawei(config)#service-port vlan 100 adsl 0/15/0 vpi 0 vci 35 rx-cttr
6 tx-cttr 6
6 tx-cttr 6


huawei(config)#btv


bind 0/3/0
bind 0/3/0
bind 0/3/0
Configure the rights profile.

huawei(config-btv)#igmp profile profile-name profile0 program-name
program1 watch
program2 watch
Configure multicast users.

huawei(config-btv)#igmp user add port 0/15/1 no-auth
huawei(config-btv)#igmp user add port 0/15/0 auth
huawei(config-btv)#igmp user bind-profile port 0/15/0 profile-name
profile0
4. Save the data.

huawei(config)#save
----End
Result
l User 1 can watch program1 and program2 but cannot watch program3.
l User 2 can watch program1, program2, and program3.
32.5 Configuring the Multicast Service in RSTP Networking

This topic describes how to configure the multicast service in the RSTP networking.
Prerequisite
l The multicast source must exist in the network and its IP address must be known.
Networking
Figure 32-8 shows the example network for the multicast service in RSTP networking.
Three UA5000s (UA5000_A, UA5000_B and UA5000_C) form an RSTP ring network. All
services are transmitted upstream to the IP network through UA5000_A. UA5000_C subtends
UA5000_D through the GE port.

Figure 32-8 Example network of the multicast service in RSTP networking
Multicast
Server
Router
1
3 5
C
0 S
1 R
2 B
3
IPMB UA5000_A
1 1
3 3
5 5
C C
0 S S
0
1 R 1 R
2 B 2 B
3 3
IPMB IPMB UA5000_C

UA5000_B
1
3
5
C
0 S
R
B
IPMB UA5000_D
Modem
PC
Data Plan
Table 32-4 provides the data plan for the multicast service in RSTP networking.

Table 32-4 Data plan for the multicast service in RSTP networking
Item Data
UA5000_A IPMB board:

l Provides an uplink port 0/3/0 to connect to the upper layer multicast
router (with IP address 10.0.0.254).
l Provides port 0/3/1 to connect to UA5000_B.
l Provides port 0/3/2 to connect to UA5000_C.
VLAN:
Adds ports 0/3/0, 0/3/1, and 0/3/2 on the IPMB board to VLAN 100 as uplink
ports of the VLAN.
The native VLAN of the ports is set to 100.
The video server provides the following three programs. Uplink port
0/3/0 is bound to VLAN 100. The source IP address of the programs is
10.10.10.10. The following three programs use the default preview profile.
UA5000_B IPMB board:

l Provides port 0/3/0 to connect to UA5000_A.
l Provides port 0/3/1 to connect to UA5000_C.
VLAN:
l Adds ports 0/3/0 and 0/3/1 on the IPMB board to VLAN 100 as uplink
ports of the VLAN.
l The native VLAN of the ports is set to 100.
The video server provides the following three programs. VLAN 100 is
bound.
UA5000_C IPMB board:

l Provides port 0/3/0 to connect to UA5000_A.
l Provides port 0/3/1 to connect to UA5000_B.
l Provides port 0/3/2 to connect to UA5000_D.
VLAN:
l Adds ports 0/3/0, 0/3/1, and 0/3/2 on the IPMB board to VLAN 100 as
uplink ports of the VLAN.
l Provides port 0/3/2 to connect to UA5000_D.
l The native VLAN of the ports is set to 100.

Item Data
The video server provides the following three programs. VLAN 100 is
bound. The source IP address of the programs is 10.10.10.10. The following
three programs use the default preview profile.
UA5000_D VLAN:
Adds port 0/3/0 on the IPMB board to VLAN 100 as uplink port of the
VLAN.
The video server provides the following three programs. Uplink port
0/3/0 is bound to VLAN 100. The source IP address of the programs is
10.10.10.10. The following three programs use the default preview profile.
Rights profile: Profile0 allows the user to watch program1 and program2
and to preview program3.
Modem: The VPI/VCI of the modem connected to the port is 0/35.
Multicast users:
l Multicast user 1: The service port is 0/15/0 and the VPI/VCI is 0/35.
Rights profile0 is bound.
l Multicast user 2: The service port is 0/15/1 and the VPI/VCI is 0/35. No
authentication is needed.
Figure 32-9 and Figure 32-10 list the data plan for the multicast service in RSTP networking.

Figure 32-9 Flowchart for configuring the multicast service in RSTP networking on
UA5000_A, UA5000_B and UA5000_C
Configure the
multicast service
Start
Select the IGMP mode
Configure the
RSTP function Configure the IGMP
uplink port
Create a VALN Configure the IGMP global

parameters (optional)
Add the uplink port Configure the

program library
Set the native VLAN Configure the IGMP

of the uplink port subtending port
Configure the VLAN
End

Figure 32-10 Flowchart for configuring the multicast service in RSTP networking on
UA5000_D
Configure the
multicast service
Set the IGMP proxy mode
Configure the IGMP

Start uplink port
Configure the IGMP global

Configure the xDSL port parameters (optional)
Configure the
program library
Create a VLAN

Add the uplink port attributes (optional)
Set the native VLAN of Configure the rights profile

the uplink port

Add the virtual port
Configure the VLAN End
Procedure
l Procedure for configuring UA5000_A
Create a VLAN.
Add uplink ports to the VLAN.


2. Configure RSTP.

huawei(config)#btv

huawei(config-btv)#igmp uplink-port-mode rstp


bind 0/3/0 hostip 10.0.0.254
bind 0/3/0 hostip 10.0.0.254
bind 0/3/0 hostip 10.0.0.254

4. Save the data.

huawei(config)#save
l Procedure for configuring UA5000_B

Create a VLAN.


2. Configure RSTP.

huawei(config)#btv

huawei(config-btv)#igmp uplink-port-mode rstp

huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan
100
100

huawei(config-btv)#igmp cascade-port 0/3/1 quickleave enable
4. Save the data.

huawei(config)#save
l Process of configuring UA5000_C

Create a VLAN.





huawei(config)#btv

huawei(config-btv)#igmp uplink-port-moderstp


100
100
3. Save the data.

huawei(config)#save
l Process of configuring UA5000_D

1. Configure the xDSL port.
In this example, the xDSL2+ port is used. The xDSL2+ port uses the default line
profile (line profile 1002). Therefore, you need not configure a line profile.
Create a VLAN.
Add an uplink port to the VLAN.


Add service ports to the VLAN.

6 tx-cttr 6
6 tx-cttr 6

huawei(config)#btv

huawei(config-btv)#igmp uplink-port-moderstp

bind 0/3/0
bind 0/3/0
bind 0/3/0
Configure the rights profile.

program1 watch


program2 watch
program3 preview
Configure the preview parameter.

NOTE
l Configure the preview parameter of the program according to the requirements. In this
example, the preview time of program3 is configured to 150s, preview times to 6, and
allowable preview interval to 60s.
l Run the igmp preview auto-reset-time command to configure the time for automatically
resetting the preview times. In this example, the preview times are reset at 00:00:00 every
day.
huawei(config-btv)#igmp preview program name program3 preview-duration
150
huawei(config-btv)#igmp preview program name program3 preview-times 6
huawei(config-btv)#igmp preview program name program3 preview-interval
60
huawei(config-btv)#igmp preview auto-reset-time 00:00:00
Configuring multicast users.

huawei(config-btv)#igmp user bind-profile port 0/15/0 profile-name
profile0
4. Save the data.

huawei(config)#save
----End
Result
l User 1 can watch program1 and program2 and can preview program3.
l User 2 can watch program1, program2, and program3.
32.6 Setting the IGMP Mode

This topic describes how to set the IGMP mode, including IGMP proxy and IGMP snooping.
Context
l The configuration in IGMP snooping mode is the same as the configuration in IGMP proxy
mode. The difference is only in the internal protocol processing.
l In IGMP snooping mode, the host function, prejoin function, unsolicited report function,
and the function of adding program statically are unavailable.
Procedure
Step 1 Run the btv command to enter the BTV mode.
Step 2 Run the igmp mode command to set the IGMP mode.
Step 3 Run the display igmp config command to query the current multicast mode.
----End

Example
To set the IGMP mode as IGMP proxy, do as follows:
huawei(config)#btv
Are you sure to change IGMP mode?(y/n)[n]: y
huawei(config-btv)#display igmp config
--------------------------------------------------------
Parameter of proxy&snooping mode
--------------------------------------------------------
Program number of license : 1024
IGMP mode : proxy
Authorization : enable
Default video VPI : 0
Default video VCI : 35
Default type of encapsulation : ipoe
Default user's VLAN : 1
Robustness variable : 2
General query interval(s) : 125
General query response time(0.1s) : 100
Specific query interval(0.1s) : 10
Specific query response time(0.1s) : 8
Specific query number : 2
V1 router present timeout(s) : 400
Unsolicited report interval(s) : 10
Uplink port mode : program
Log switch : enable
User action report switch : disable
Preview switch : enable
Recognition time(s) : 30
The time of reset preview-count : 04:00:00
Auto create log interval(h) : 2
Right mode : profile mode
Bandwidth management switch : enable
Bandwidth assigned for user(%) : 100
--------------------------------------------------------
Parameter of snooping mode
--------------------------------------------------------
Report proxy switch : disable
Leave proxy switch : disable
Querier switch : disable
User aging time(s) : 150
----------------------------------------------------------
32.7 Configuring an IGMP Uplink Port

This topic describes how to add an IGMP uplink port and set the working mode and the
bandwidth of the uplink port.
Context
The IGMP uplink port works in program, RSTP, or RRPP mode:
l In program mode, the IGMP uplink port is the port that is specified when you configure
the program.
l In RSTP mode, the IGMP uplink port is the root port used by RSTP.
l In RRPP mode, the IGMP uplink port is the primary node used by RRPP.
By default, the IGMP uplink port works in program mode.
If you set a port as a subtending port, then the port cannot be used as an uplink port that works
in program mode, but it can work in RSTP or RRPP mode.

Procedure
Step 2 Run the igmp uplink-port-mode command to set the working mode of the uplink port.
Step 3 Run the igmp uplink-port command to add an IGMP uplink port.
Step 4 Run the display igmp uplink-port command to query the details of the IGMP uplink port.
Step 5 Run the display igmp config command to query the configuration information about the IGMP
uplink port.
----End
Example
To set the IGMP uplink port to work in program mode, specify port 0/3/0 as the uplink port, and
set the assigned bandwidth rate to 100%, do as follows:
huawei(config)#btv
huawei(config-btv)#display igmp uplink-port 0/3/0
----------------------------------------
IGMP version : IGMP V2
Program number : 2
V1 router present timer(s) : 0
Assigned bandwidth(%) : 100
Used bandwidth(%) : 0.5000
----------------------------------------
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : disable
CDR auto report interval(s) : 600
CDR auto report number : 200
--------------------------------------------------------

--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-5 lists the related operations for configuring an IGMP uplink port.
Table 32-5 Related operations for configuring an IGMP uplink port

Delete an IGMP uplink port undo igmp uplink-port
Modify an IGMP uplink port igmp uplink-port modify
32.8 Specifying a Subtending Port

This topic describes how to specify a subtending port. When the UA5000 has a subtended shelf
and there are multicast users on the subtended shelf, you need to define the port that connects
to the subtended shelf as a subtending port.
Context
l If a subtending port is configured with the static attribute and the programs added to the
port are not subject to aging, the UA5000 does not process any leave packet, unless the
subtending port or the program is deleted manually.
l If a subtending port is configured with the quick leave attribute, when receiving leave
packets, the UA5000 stops the video stream, instead of sending group-specific queries.
l The priority of the static attribute is higher than the priority of the quick leave attribute.
That is, if the subtending port has the static attribute and the fast leave attribute, the fast
leave does not take effect.
Procedure
Step 2 Run the igmp cascade-port command to configure a static subtending port.
Step 3 Run the display igmp cascade-port command to query an IGMP subtending port.
----End
Example
To specify port 0/3/1 as a subtending port, do as follows:
huawei(config)#btv
huawei(config-btv)#display igmp cascade-port 0/3/1
-------------------------------------------

Port : 0/3/1
V1 router present timer(0.1s) : 0
Static join : enable
Quick leave : disable
Port Mode : snooping
-------------------------------------------
Related Operation
Table 32-6 lists the related operation for specifying an IGMP subtending port.
Table 32-6 Related operation for specifying an IGMP subtending port

Delete an IGMP subtending port undo igmp cascade-port
32.9 Adding a Program for a Static Subtending Port

This topic describes how to add a program for a static subtending port.
Context
l The program can be added for a subtending port or deleted from a subtending port through
the command line only if the subtending port is configured with the static attribute.
l The configuration of adding a program for a static subtending port takes effect only in
IGMP proxy mode.
Procedure
Step 2 Run the igmp static-join cascade-port command to add a program for a static subtending port.
Step 3 Run the display igmp cascade-port command to query the IGMP subtending port and the
forwarding program list of the port.
----End
Example
To add the multicast program with IP address 239.255.0.1 for static subtending port 0/3/1, do
as follows:
huawei(config)#btv
huawei(config-btv)#igmp static-join cascade-port 0/3/1 ip 239.255.0.1
huawei(config-btv)#display igmp cascade-port 0/3/1
-------------------------------------------
Port : 0/3/1
V1 router present timer(0.1s) : 0
Static join : enable
Quick leave : disable
Port Mode : snooping
-------------------------------------------
Active program list:

Index Program Name IP

-------------------------------------------
0 PROGRAM-0 239.255.0.1
-------------------------------------------
Total: 1
Related Operation
Table 32-7 lists the related operation for adding a program for a static subtending port.
Table 32-7 Related operation for adding a program for a static subtending port
Delete a program from a static undo igmp static-join cascade-port

subtending port
32.10 Configuring IGMP Global Parameters

This topic describes how to configure the IGMP global parameters.
32.10.1 Enabling the IGMP Proxy Authorization

This topic describes how to enable the IGMP proxy authorization.
32.10.2 Configuring the Robustness Variable
This topic describes how to configure the robustness variable.
32.10.3 Configuring the General Query Interval
This topic describes how to configure the interval of the general query sent by the querier.
32.10.4 Configuring the Maximum Response Time to the General Query
This topic describes how to configure the maximum response time to the general query. The
maximum response time determines the time taken by a multicast user in responding to a query
packet. By increasing the maximum response time, you can reduce the burst of response packet
traffic.
32.10.5 Configuring the Group-Specific Query Count
This topic describes how to configure the group-specific query count. After receiving a leave
packet from a user, if the attribute of such a leave packet is not "fast leave", the querier sends a
group-specific query to the user. After the querier sends the configured group-specific query
count and the maximum response time to the group-specific query is up, if there is no response
packet, the UA5000 considers that the user has left.
32.10.6 Configuring the Group-Specific Query Interval
This topic describes how to configure the group-specific query interval.
32.10.7 Configuring the Maximum Response Time to the Group-Specific Query
This topic describes how to configure the maximum response time to the group-specific query.
After the system delivers a group-specific query, the user must respond to the query within the
maximum response time.
32.10.8 Configuring the Unsolicited Report Interval
This topic describes how to configure the unsolicited report interval. When the IGMP proxy
works in unsolicited report mode, the report packet is sent to the upper layer router at the preset
interval.

32.10.9 Configuring the TTL of a V1 Router

This topic describes how to configure the TTL of a V1 router.
32.10.10 Configuring the Default VPI/VCI
This topic describes how to configure the default VPI/VCI on the user side.
32.10.11 Configuring the Preview Recognition Time
This topic describes how to configure the preview recognition time. When the preview
recognition time is configured, any preview tome that is shorter than the configured recognition
time is considered to be invalid, and is not logged.
32.10.12 Enabling the User Action Report Function
This topic describes how to enable the user action report function.
32.10.13 Configuring the Priority for the User Rights
This topic describes how to configure the priority for the user rights.
32.10.14 Enabling the Proxy of the IGMP Report Packet
This topic describes how to enable the proxy of the IGMP report packet.
32.10.15 Enabling the Proxy of the IGMP Leave Packet
This topic describes how to enable the proxy of the IGMP leave packet.
32.10.16 Enabling the Dual Sending Function for IGMP Packets
This topic describes how to enable the dual sending function for IGMP packets.
32.10.17 Enabling the Querier
This topic describes how to enable the querier.
32.10.18 Configuring the Aging Time of All Users
This topic describes how to configure the aging time of all the users in IGMP snooping mode.
32.10.1 Enabling the IGMP Proxy Authorization

This topic describes how to enable the IGMP proxy authorization.
Context
By default, the IGMP proxy authorization is enabled.
The auth users can be authenticated only when the IGMP proxy authorization is enabled.
Procedure
Step 2 Run the igmp proxy authorization enable command to enable the IGMP proxy authorization.
Step 3 Run the command to query the settings of the IGMP proxy authorization.
----End
Example
To enable the IGMP proxy authorization, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy authorization enable
--------------------------------------------------------


--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
Right mode : user mode
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-8 lists the related operation for enabling the IGMP proxy authorization.
Table 32-8 Related operation for enabling the IGMP proxy authorization
Disable the IGMP proxy authentication igmp proxy authorization disable
32.10.2 Configuring the Robustness Variable

This topic describes how to configure the robustness variable.
Context
l The robustness variable defines the reliability of a system. It determines the aging time of
a member and the packet retransmit count. If a subnet is unstable, and prone to packet loss,
you need to enhance the robustness.
l By default, the robustness variable is 2.

Procedure
Step 2 Run the igmp proxy router robustness command to configure the robustness variable of the
system.
Step 3 Run the display igmp config command to query the robustness variable.
----End
Example
To configure the robustness variable of the system to 5, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router robustness 5
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-9 lists the related operation for configuring the robustness variable.

Table 32-9 Related operation for configuring the robustness variable

Restore the default robustness variable undo igmp proxy router robustness
32.10.3 Configuring the General Query Interval

This topic describes how to configure the interval of the general query sent by the querier.
Context
By default, the general query interval is 125s.
Procedure
Step 2 Run the igmp proxy router gen-query-interval command to configure the interval of the
general query sent by the querier.
Step 3 Run the display igmp config command to query the interval of the general query sent by the
querier.
----End
Example
To configure the query interval to 200s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router gen-query-interval 200
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable


CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-10 lists the related operation for configuring the general query interval.
Table 32-10 Related operation for configuring the general query interval
Restore the default general query interval undo igmp proxy router gen-query-interval
32.10.4 Configuring the Maximum Response Time to the General

Query
This topic describes how to configure the maximum response time to the general query. The
maximum response time determines the time taken by a multicast user in responding to a query
packet. By increasing the maximum response time, you can reduce the burst of response packet
traffic.
Context
l The default maximum response time is 100 with the unit of 0.1s, that is, 10s.
l The maximum response time to the general query must be smaller than the general query
interval.
Procedure
Step 2 Run the igmp proxy router gen-response-time command to configure the maximum response
time to the general query.
Step 3 Run the display igmp config command to query the maximum response time to the general
query.
----End
Example
To configure the maximum response time to 20s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router gen-response-time 200


--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-11 lists the related operation for configuring the maximum response time to the general
query.
Table 32-11 Related operation for configuring the maximum response time to the general query
Restore the default maximum response undo igmp proxy router gen-response-time
time to the general query
32.10.5 Configuring the Group-Specific Query Count

This topic describes how to configure the group-specific query count. After receiving a leave
packet from a user, if the attribute of such a leave packet is not "fast leave", the querier sends a
group-specific query to the user. After the querier sends the configured group-specific query
count and the maximum response time to the group-specific query is up, if there is no response
packet, the UA5000 considers that the user has left.

Context
By default, the group-specific query count is 2.
Procedure
Step 2 Run the igmp proxy router sp-query-number command to configure the group-specific query
count.
Step 3 Run the display igmp config command to query the group-specific query count.
----End
Example
To configure the group-specific query count to 5, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router sp-query-number 5
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------

Related Operation
Table 32-12 lists the related operation for configuring the group-specific query count.
Table 32-12 Related operation for configuring the group-specific query count
Restore the default group-specific query undo igmp proxy router sp-query-number
count
32.10.6 Configuring the Group-Specific Query Interval

This topic describes how to configure the group-specific query interval.
Context
The default group-specific query interval is 10 with the unit of 0.1s, that is, 1s.
Procedure
Step 2 Run the igmp proxy router sp-query-interval command to configure the group-specific query
interval.
Step 3 Run the display igmp config command to query the group-specific query interval.
----End
Example
To configure the group-specific query interval to 2s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router sp-query-interval 20
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable


CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-13 lists the related operation for configuring the group-specific query interval.
Table 32-13 Related operation for configuring the group-specific query interval
Restore the default group-specific query undo igmp proxy router sp-query-interval
interval
32.10.7 Configuring the Maximum Response Time to the Group-

Specific Query
This topic describes how to configure the maximum response time to the group-specific query.
After the system delivers a group-specific query, the user must respond to the query within the
maximum response time.
Context
l The default maximum response time to the group-specific query is 8 with the unit of 0.1s,
that is, 0.8s.
l The maximum response time to the group-specific query must be shorter than the group-
specific query interval.
Procedure
Step 2 Run the igmp proxy router sp-response-time command to configure the maximum response
time to the group-specific query.
Step 3 Run the display igmp config command to query the maximum response time to the group-
specific query.
----End

Example
To configure the maximum response time to the group-specific query to 0.5s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router sp-response-time 5
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-14 lists the related operation for configuring the maximum response time to the group-
specific query.
Table 32-14 Related operation for configuring the maximum response time to the group-specific
query
Restore the default maximum response undo igmp proxy router sp-response-time
time to the group-specific query

32.10.8 Configuring the Unsolicited Report Interval

This topic describes how to configure the unsolicited report interval. When the IGMP proxy
works in unsolicited report mode, the report packet is sent to the upper layer router at the preset
interval.
Context
By default, the unsolicited report interval is 10s.
Procedure
Step 1 Run the igmp proxy router report-interval command to configure the unsolicited report
interval.
Step 2 Run the display igmp config command to query the unsolicited report interval.
----End
Example
To configure the unsolicited report interval to 200s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router report-interval 200
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------


--------------------------------------------------------
Related Operation
Table 32-15 lists the related operation for configuring the unsolicited report interval.
Table 32-15 Related operation for configuring the unsolicited report interval
Restore the default unsolicited report undo igmp proxy router report-interval
interval
32.10.9 Configuring the TTL of a V1 Router

This topic describes how to configure the TTL of a V1 router.
Context
By default, the TTL of a V1 router is 400s.
Procedure
Step 2 Run the igmp proxy router time-to-live command to configure the TTL of a V1 router.
Step 3 Run the display igmp config command to query the TTL of a V1 router.
----End
Example
To configure the TTL of a V1 router to 200s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy router time-to-live 200
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6


Log switch : enable
CDR switch : disable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-16 lists the related operation for configuring the TTL of a V1 router.
Table 32-16 Related operation for configuring the TTL of a V1 router

Restore the default TTL of a V1 undo igmp proxy router time-to-live

router
32.10.10 Configuring the Default VPI/VCI

This topic describes how to configure the default VPI/VCI on the user side.
Context
The default multicast PVC is used to transmit the multicast video stream. When a user is added
but no PVC is specified, the system uses the default multicast PVC to transmit the IGMP packets.
Procedure
Step 1 Run the igmp video-port command to configure the default VPI/VCI.
Step 2 Run the display igmp config command to query the default VPI/VCI.
----End
Example
To configure the default VPI/VCI to 0/37, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp video-port vpi 0 vci 37
--------------------------------------------------------


--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
32.10.11 Configuring the Preview Recognition Time

This topic describes how to configure the preview recognition time. When the preview
recognition time is configured, any preview tome that is shorter than the configured recognition
time is considered to be invalid, and is not logged.
Context
By default, the recognition time is 30s.
Procedure
Step 2 Run the igmp proxy recognition-time command to configure the preview recognition time.
Step 3 Run the display igmp config command to query the preview recognition time.
----End
Example
To configure the preview recognition time to 20s, do as follows:

huawei(config)#btv
huawei(config-btv)#igmp proxy recognition-time 20
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-17 lists the related operation for configuring the preview recognition time.
Table 32-17 Related operation for configuring the preview recognition time
Restore the default preview recognition undo igmp proxy recognition-time

time
32.10.12 Enabling the User Action Report Function

This topic describes how to enable the user action report function.
Context
By default, the action report function for the BTV user is disabled.

Procedure
Step 2 Run the igmp user-action-report command to configure the user action report function.
Step 3 Run the display igmp config command to query the status of the user action report function.
----End
Example
To enable the action report function for a BTV user, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp user-action-report enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
User action report switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-18 lists the related operation for enabling the user action report function.

Table 32-18 Related operation for enabling the user action report function
Disable the user action report function for igmp user-action-report disable
a BTV user
32.10.13 Configuring the Priority for the User Rights

This topic describes how to configure the priority for the user rights.
Specification
A user has four rights for a program.
l watch
l forbidden
l preview
l idle
Up to six priorities can be set for the user rights.
l Forbidden > Preview > Watch > Idle (default priority)

l Forbidden > Watch > Preview > Idle
l Preview > Forbidden > Watch > Idle
l Preview > Watch > Forbidden > Idle
l Watch > Forbidden > Preview > Idle
l Watch > Preview > Forbidden > Idle
When a user has various rights for a program, the final right is determined by the set priority.
Example
To set the priority for the user rights as Watch > Forbidden > Preview > Idle, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp right-priority watch-forbidden-preview-idle
huawei(config-btv)#display igmp right-priority
Current right priority: watch>forbidden>preview>idle
32.10.14 Enabling the Proxy of the IGMP Report Packet

This topic describes how to enable the proxy of the IGMP report packet.
Prerequisite
The proxy of the IGMP report packet takes effect only in IGMP snooping mode.

Context
When the proxy of the IGMP report packet is enabled and the report packet of the user is sent,
the system checks whether this user is the first to order the program. If yes, the packet is
forwarded to the upstream direction. If no, the packet is discarded.
l When the proxy is enabled, the proxy substitutes the user to create and forward the IGMP
report packet in response to the query packet of the upper layer device, and the joining
packet of the first user is forwarded.
l When the proxy is disabled, the IGMP report packets of all legal users are forwarded to the
upstream direction.
The proxy can only create and forward the IGMP report packet that is the IPoE encapsulation
type.
Procedure
Step 1 Run the igmp report-proxy command to enable the proxy of the IGMP report packet.
Step 2 Run the display igmp config command to query the status of the proxy of the IGMP report
packet.
----End
Example
To enable the proxy of the IGMP report packet, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp report-proxy enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable

--------------------------------------------------------
--------------------------------------------------------
Report proxy switch : enable
--------------------------------------------------------
Related Operation
Table 32-19 lists the related operation for enabling the proxy of the IGMP report packet.
Table 32-19 Related operation for enabling the proxy of the IGMP report packet
Disable the proxy of the IGMP report igmp report-proxy disable

packet
32.10.15 Enabling the Proxy of the IGMP Leave Packet

This topic describes how to enable the proxy of the IGMP leave packet.
Context
By default, the proxy of the IGMP leave packets is disabled.
l When the proxy of the IGMP leave packets is enabled, the UA5000 performs the proxy of
the IGMP leave packets of the BTV user. That is, when multiple BTV users watch a same
program, the UA5000 sends the IGMP leave packets to the upper layer device only when
the last online BTV user sends the IGMP leave packets.
l When the proxy of the IGMP leave packets is disabled, the UA5000 transparently transmits
all the IGMP leave packets of the BTV user.
NOTE
l When the proxy of the IGMP leave packets is enabled, the system sends the IGMP leave packets that
are encapsulated in only IPoE mode to the upper layer device.
l The proxy of the IGMP leave packets is valid in only the IGMP snooping mode.
Procedure
Step 1 Run the igmp leave-proxy command to enable the proxy of the IGMP leave packet.
Step 2 Run the display igmp config command to query the status of the proxy of the IGMP leave
packet.
----End
Example
To enable the proxy of the IGMP leave packet, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp leave-proxy enable


--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
Leave proxy switch : enable
--------------------------------------------------------
Related Operation
Table 32-20 lists the related operation for enabling the proxy of the IGMP leave packet.
Table 32-20 Related operation for enabling the proxy of the IGMP leave packet
Disable the proxy of the IGMP leave igmp leave-proxy disable

packet
32.10.16 Enabling the Dual Sending Function for IGMP Packets

This topic describes how to enable the dual sending function for IGMP packets.
Context
l The dual sending function for IGMP packets is controlled by the restriction function
(system parameters 0) to determine whether the IGMP packets are sent to one or two
uplink ports at the same time.

If system parameters 0 is set to 1, the restriction function is enabled. In this case, the
system sends the IGMP packets to two uplink ports at the same time.
If system parameters 0 is set to 0, the restriction function is disabled. In this case, the
system sends the IGMP packets to the bound uplink port.
l Only the IPMB control board supports the dual sending function for IGMP packets. The
IPMD control board does not support this function.
Procedure
Step 1 Run the system parameters command to set the dual sending function for IGMP packets.
Step 2 Run the display system parameters command to query the status of the dual sending function
for IGMP packets.
----End
Example
To enable the dual sending function for IGMP packets, do as follows:
huawei(config)#system parameters 0 1
huawei(config)#display system parameters 0
-----------------------------------------------------------------------------
Parameter name index: 0 Parameter value: 1
Mean: 0: IGMP dual sending function is disabled, 1: IGMP dual sending function
is enabled
-----------------------------------------------------------------------------
Related Operation
Table 32-21 lists the related operation for enabling the dual sending function for IGMP packets.
Table 32-21 Related operation for enabling the dual sending function for IGMP packets
Disable the dual sending function system parameters 0 0

for IGMP packets
32.10.17 Enabling the Querier

This topic describes how to enable the querier.
Context
l When the querier is enabled, the system actively sends the IPoE query packets to the user
or the subtending port.
l When the querier is disabled, the system forwards the IPoE query packets from the upper
layer device to the user or the subtending port.

Procedure
Step 1 Run the igmp querier command to enable the querier.
Step 2 Run the display igmp config command to query the status of the querier.
----End
Example
To enable the querier, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp querier enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
Querier switch : enable
--------------------------------------------------------
Related Operation
Table 32-22 lists the related operation for enabling the querier.

Table 32-22 Related operation for enabling the querier

Disable the querier igmp querier disable
32.10.18 Configuring the Aging Time of All Users

This topic describes how to configure the aging time of all the users in IGMP snooping mode.
Context
The configured aging time are applied to all the users, and the aging time is valid only when the
querier is disabled.
Procedure
Step 1 Run the igmp snooping user-aging-time command to configure the aging time of all the users.
Step 2 Run the command to query the aging time.
----End
Example
To configure the aging time to 10s, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp snooping user-aging-time 10
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable


--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
32.11 Adding a Program

This topic describes how to add one program or multiple programs in batches to the program
library.
Context
l When adding programs, you should configure the attributes of the programs, such as the
program name, multicast IP address, uplink port bound to the program and program VLAN.
l A program name consists of up to 16 characters without Chinese characters.
l The uplink port of a specific program must be consistent with the actual networking.
l The multicast IP address segments from 224.0.0.1 to 224.0.0.255 are used as the private
addresses for transmitting the protocol packets of the local network segments. The IP
addresses in this segment cannot be assigned to the multicast programs.
l The last 23 bits of the multicast IP address cannot be the same for different multicast
programs. Otherwise, the multicast MAC addresses mapping to the IP addresses conflicts.
l When PVC priority scheduling is enabled, the priorities of the multicast programs delivered
over the PVC do not take effect.
Procedure
Step 1 Run the igmp program add command to add a program.
Step 2 Run the display igmp program command to display the program.
----End
Example
l Program name: BTV-100.
l IP address of the program: 224.1.1.2.
l VLAN ID of the program: 1.
l Uplink port bound: 0/3/0
l Bandwidth of the program: 2 Mbit/s.
l Host function: enabled.
l Prejoin function: enabled.
l Unsolicited report: disabled.

l Logging function: enabled.

l Cross-VLAN forwarding: enabled.
l Other parameters: default settings.
To add such a program to the program library, do as follows:
huawei(config-btv)#igmp program add name BTV-100 ip 224.1.1.2 vlan 1 bind 0/3/0
bandwidth 2048 host enable prejoin enable unsolicited disable log enable across-
vlan enable
huawei(config-btv)#display igmp program ip 224.1.1.2
---------------------------------------------
Program index : 2
Validity : valid
Program name : BTV-100
IP address : 224.1.1.2
Uplink port : 0/3/0
VLAN ID : 1
Host attribute : enable
Log attribute : enable
Prejoin attribute : enable
Across VLAN attribute : enable
Unsolicited attribute : disable
Preview duration(s) : 120
Preview times : 8
Preview interval(s) : 120
Priority : 7
Host IP : 0.0.0.0
Bandwidth(kbps) : 2048
Numbers of watching : 0
---------------------------------------------
Related Operation
Table 32-23 lists the related operations for adding a program.
Table 32-23 Related operations for adding a program
Rename a program igmp program rename A program name uniquely

identifies a program in the
program library.
Delete a program from the igmp program delete Deleting a program that a user
program library. is watching forces the user to
go offline.
Modify the program igmp program modify l You can modify only one
attributes. program attribute at a time.
l Batch modification of the
program name and the
modification of the program
IP address are not allowed.
l Modifying the VLAN,
uplink port or priority bound
with a program make the
associated go offline.

32.12 Managing Multicast Bandwidths

This topic describes how to manage multicast bandwidths.
32.12.1 Enabling Bandwidth Management

This topic describes how to enable multicast bandwidth management.
32.12.2 Configuring Uplink Port Bandwidth
This topic describes how to configure the bandwidth of an uplink port. For details, see
"Configuring an IGMP Uplink Port."
32.12.3 Configuring the User Bandwidth
This topic describes how to configure the ratio of the bandwidth allocated for the multicast users.
32.12.4 Configuring the Multicast Program Bandwidth
This topic describes how to configure the multicast program bandwidth. For details, see "Adding
a Program."
32.12.1 Enabling Bandwidth Management

This topic describes how to enable multicast bandwidth management.
Context
l Multicast bandwidth management involves:
Uplink port bandwidth
User bandwidth
l When multicast bandwidth management is disabled, the system does not check the uplink
port bandwidth and user bandwidth.
If the number of the programs being watched is smaller than the maximum number of
the programs that can be watched, the user can get online even if the user bandwidth
exceeds the limited value.
If the number of programs being watched exceeds the maximum number of the programs
that can be watched, the user cannot get online.
l When multicast bandwidth management is enabled, the system checks only the uplink port
bandwidth. When the user gets online and the CAC function is enabled, the system checks
the user bandwidth.
If the bandwidth used by the uplink port exceeds the allocated value, the programs are
suspended in descending order based on the program index. After the bandwidth used
by the uplink port is equal to the allocated bandwidth, the suspended program can be
replayed.
If the bandwidth used by the uplink port does not exceed the allocated value, the system
checks the user bandwidth when the user gets online. The user can get online only when
the used bandwidth is smaller than the allocated bandwidth.
l If the used bandwidth exceeds the allocated bandwidth, the following operations are
performed:
If the number of programs being watched exceeds the maximum value, the system
delivers the group-specific query message to all the programs being watched. If there
are certain programs, which are not being watched although the UA5000 considers them

as being watched, the system deletes them from the user program list. In this case, the
number of programs being watched can be reduced.
If the residual bandwidth of a user is not sufficient, the system delivers the group-
specific query message to all the programs being watched. If there are some programs
which are not being watched, although the UA5000 considers them as being watched,
the system deletes them from the user program list. In this case, certain occupied
bandwidth can be released.
Procedure
Step 2 Run the igmp bandwidthcac command to enable bandwidth management.
Step 3 Run the display igmp config command to query bandwidth management.
----End
Example
To enable bandwidth management of IGMP proxy, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp bandwidthcac enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------

Related Operation
Table 32-24 lists the related operation for enabling bandwidth management.
Table 32-24 Related operation for enabling bandwidth management

Disable bandwidth management of igmp bandwidthCAC disable

IGMP proxy
32.12.2 Configuring Uplink Port Bandwidth

This topic describes how to configure the bandwidth of an uplink port. For details, see
"Configuring an IGMP Uplink Port."
32.12.3 Configuring the User Bandwidth

This topic describes how to configure the ratio of the bandwidth allocated for the multicast users.
Context
This function takes effect when the multicast CAC function is enabled. The utilization is the
ratio of the multicast CAC bandwidth to the physical port line rate.
l In the case of an ADSL user, the utilization is the ratio of the multicast CAC bandwidth to
the activation rate of the ADSL port.
l In the case of an SHDSL user, the utilization is the ratio of the multicast CAC bandwidth
to the maximum downstream rate specified in the line profile of the SHDSL port.
Procedure
Step 2 Run the igmp user-bandwidth-utilization command to configrue the user bandwidth.
Step 3 Run the command to query the user bandwidth.
----End
Example
To configure user bandwidth utilization to 50%, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp user-bandwidth-utilization 50
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6


Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
32.12.4 Configuring the Multicast Program Bandwidth

This topic describes how to configure the multicast program bandwidth. For details, see "Adding
a Program."
32.13 Configuring a Rights Profile

This topic describes how to configure a rights profile.
32.13.1 Configuring the Rights Mode

This topic describes how to configure the rights mode.
32.13.2 Modifying the Program Rights of a Rights Profile
This topic describes how to add a program with certain rights to the rights profile or modify the
rights of the existing programs.
32.13.3 Renaming a Rights Profile
This topic describes how to rename a rights profile.
32.13.1 Configuring the Rights Mode

This topic describes how to configure the rights mode.
Context
The UA5000 supports two rights modes:
l User mode: used for multicast user management.

l Profile mode: used for multicast profile management.
The default is the profile mode.

Certain multicast configuration commands must be run in the related rights mode when you
configure the multicast service.
For example: the igmp profile rename, igmp profile, and igmp user bind-profile commands
must be run in rights mode. The igmp user grant-program command must be run in user mode.
Procedure
Step 2 Run the igmp right-mode command to configure the rights mode.
Step 3 Run the display igmp config command to query the rights mode.
----End
Example
To configure the rights mode to profile mode, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp right-mode profilemode
The user's right data will lose after this operation,
and the online users will be offline,
are you sure to change the right mode?(y/n)[n]: y
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------


--------------------------------------------------------
32.13.2 Modifying the Program Rights of a Rights Profile

This topic describes how to add a program with certain rights to the rights profile or modify the
rights of the existing programs.
Context
l By default, the system names the 1024 profiles as profile1, profile2, , and profileN.
l The program rights can be forbidden, preview, watch, and idle. When a user is bound
with multiple profiles and the rights over the same program in those profiles are different,
the right with the highest priority is selected.
l By default, the priority mode is forbidden > preview > watch > idle. You can run the igmp
right-priority command to set the priority.
l When modifying the program rights of a rights profile, ensure that the rights mode is the
profile mode.
Procedure
Step 2 Run the igmp profile command to add the rights to watch program "BTV-1" to profile1.
Step 3 Run the display igmp profile command to display the rights profile.
----End
Example
To add program "BTV-1" with right of watch to profile1, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp profile profile-name profile1 program-name BTV-1 watch
huawei(config-btv)#display igmp profile profile-name profile1
-----------------------------------------------
Profile index : 0
Profile name : Profile1
Program number : 1
-----------------------------------------------
Program name IP address Right
-----------------------------------------------
BTV-1 224.1.1.1 watch
-----------------------------------------------
Total:1
Related Operation
Table 32-25 lists the related operations for modifying a rights profile.

Table 32-25 Related operations for modifying a rights profile
Rename the multicast rights profile igmp profile rename
Modify the priority of the user right igmp right-priority
32.13.3 Renaming a Rights Profile

This topic describes how to rename a rights profile.
Context
l When renaming a rights profile, ensure that the rights mode is the profile mode.
l The new rights profile name must be unique.
l The rights profile name is not case sensitive.
Procedure
Step 1 Run the igmp profile rename command to rename a rights profile.
Step 2 Run the display igmp profile command to query the configuration of a rights profile.
----End
Example
To rename profile 1 "VIP-channel", do as follows:
huawei(config-btv)#igmp profile rename profile1 VIP-channel
huawei(config-btv)#display igmp profile all
-------------------------------------------
index Profile name Program number
-------------------------------------------
0 Profile0 0
1 VIP-channel 0
2 Profile2 0
3 Profile3 0
4 Profile4 0
5 Profile5 0
6 Profile6 0
7 Profile7 0
8 Profile8 0
9 Profile9 0
10 Profile10 0
11 Profile11 0
12 Profile12 0
13 Profile13 0
14 Profile14 0
15 Profile15 0
16 Profile16 0
17 Profile17 0
18 Profile18 0
19 Profile19 0

32.14 Configuring Multicast Users

This topic describes how to configure multicast users.
32.14.1 Adding a BTV user

This topic describes how to add a BTV user.
32.14.2 Modifying the Attributes of a User
This topic describes how to modify the attributes of a user when the parameters of the current
multicast user cannot meet the requirement or the user attributes need to be modified.
32.14.3 Blocking a BTV User
This topic describes how to block a BTV user. When you need to temporarily prevent a user
from watching the program, perform this operation to block the user.
32.14.4 Binding a User with a Rights Profile
This topic describes how to bind an auth user with a rights profile. An auth user can watch
programs configured in a rights profile only when the user is bound with the profile in rights
profile mode.
32.14.5 Granting Program Rights to a User
This topic describes how to grant program rights to a BTV user or to modify the granted program
rights.
32.14.6 Enabling the Function of Monitoring BTV Users
This topic describes how to enable the function of monitoring BTV users.
32.14.1 Adding a BTV user

This topic describes how to add a BTV user.
Context
l An authentication (auth) user must be bound with certain rights profiles in rights profile
mode to watch the programs. The user who needs not authentication (no-auth) can watch
all programs in the multicast server. In this case, no rights need to be configured for the
user.
l You can add a user only when both the PVC for bearing IGMP packets and the PVC for
bearing the program stream exist.
l Supports the quick leave function based on the MAC address for the added multicast user.
Each channel records up to eight MAC addresses.
l The device records each MAC address in the video channels. After receiving the packets
indicating that the user leaves a group, the device determines whether to delete the entry
to enable the user offline according to the MAC addresses recorded in the video channels.
The preceding process is the multicast quick leave function based on the MAC address. In
this manner, when multiple STBs of a user receive the same program, the other STBs are
not affected if one STB gets offline.
Procedure

Step 2 Run the igmp user add command to add a BTV user.
Step 3 Run the display igmp user command to query a BTV user.
----End
Example
To add a user under port 0/7/0 as a BTV user (no-auth user), do as follows:
huawei(config)#btv
huawei(config-btv)#igmp user add port 0/7/0 adsl 0 35 no-auth
huawei(config-btv)#display igmp user all
This operation may take several minutes, please wait...
----------------------------------------------------------------------------
User Bind State Auth Quick IGMP Log Available
profiles leave Interface switch programs
----------------------------------------------------------------------------
0/8/0 - offline no-auth mac-based 0/35 enable 8
0/7/0 - offline no-auth mac-based 0/35 enable 1
----------------------------------------------------------------------------
Total: 2
Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID
Related Operation
Table 32-26 lists the related operations for adding a BTV user.
Table 32-26 Related operations for adding a BTV user

Delete a BTV user igmp user delete
Modify a BTV user igmp user modify
32.14.2 Modifying the Attributes of a User

This topic describes how to modify the attributes of a user when the parameters of the current
multicast user cannot meet the requirement or the user attributes need to be modified.
Context
l The user attributes include PVC, authorization, quick leave, log switch, user mode, packet
processing mode after the authentication failure, and maximum number of programs to be
watched simultaneously.
l You can modify only one attribute of a user at a time.
Procedure
Step 2 Run the igmp user modify command to modify the attributes of a user.
Step 3 Run the display igmp user command to query the information about a multicast user.
----End

Example
To modify the user on port 0/7/0 as the user who needs authorization, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp user modify port 0/7/0 auth
Are you sure to modify user by port?(y/n)[n]:y
huawei(config-btv)#display igmp user all
-----------------------------------------------------------------------------
User Bind State Auth Quick IGMP Log Available
profiles leave Interface switch programs
-----------------------------------------------------------------------------
0/7/0 0 offline auth mac-based 0/35 enable 1
----------------------------------------------------------------------------
Total: 1
Note : IGMP Interface--VPI/VCI or VLAN ID or EPON ID
Related Operation
Table 32-27 lists the related operations for modifying the attributes of a user.
Table 32-27 Related operations for modifying the attributes of a user

Add a BTV user igmp user add
Delete a BTV user igmp user delete
32.14.3 Blocking a BTV User

This topic describes how to block a BTV user. When you need to temporarily prevent a user
from watching the program, perform this operation to block the user.
Context
After a BTV user is blocked, the user is disconnected from the program that is being watched.
l If the IP address or index of the program that is being watched is not specified, the system
blocks the port to which the user is connected. After the port is blocked, the user connected
to this port goes offline from the current program and cannot request for any program until
the port is unblocked.
l If the IP address or index of the program that is being watched is specified, the system
blocks only the specified program. After the user goes offline, the user can still request for
any program except the blocked program.
Procedure
Step 2 Run the igmp user block command to block a BTV user.
Step 3 Run the display igmp user command to query the information about a BTV user.
----End

Example
To block the user on port 0/7/0, do as follows:
huawei(config-btv)#igmp user block port 0/7/0
Are you sure to block user by port?(y/n)[n]:y
huawei(config-btv)#display igmp user port 0/7/0
User : 0/7/0
Desc :
State : block
Authentication : no-auth
Quick leave : mac-based
IGMP interface : 0/35
Type of service port : -
Parameter of service port: -
Log switch : enable
Bind profiles : -
IGMP version : -
Available programs : 1
Mode : snooping
Process after auth fail : forward
Used bandwidth(kbps) : 0
Used bandwidth
to assigned bandwidth(%) : 0
Note : IGMP interface--VPI/VCI or VLAN ID or EPON ID
Related Operation
Table 32-28 lists the related operation for blocking a BTV user.
Table 32-28 Related operation for blocking a BTV user
Unblock a BTV user undo igmp user block
32.14.4 Binding a User with a Rights Profile

This topic describes how to bind an auth user with a rights profile. An auth user can watch
programs configured in a rights profile only when the user is bound with the profile in rights
profile mode.
Context
l A user can be bound with multiple profiles. A "no-auth" user, however, cannot be bound
with any profile.
l Up to 128 profiles can be bound with a user.
l When binding a rights profile with a BTV user, ensure that the rights mode is the profile
mode.
Procedure
Step 2 Run the igmp user bind-profile command to bind a rights profile.

Step 3 Run the display igmp user command to query the information about the rights profile bound
with a user.
----End
Example
To bind the user on port 0/7/0 with profile0, do as follows:
huawei(config)#btv
huawei(config-btv)#display igmp user port 0/7/0
{ <cr>|grant-program-list<K> }:
Command:
display igmp user port 0/7/0
User : 0/7/0
Desc :
State : offline
Authentication : auth
Quick leave : enable
IGMP interface : 0/35
Type of service port : -
Parameter of service port: -
Log switch : enable
Bind profiles : 1
IGMP version : -
Available programs : 1
Mode : snooping
Process after auth fail : forward
Used bandwidth(kbps) : 0
Used bandwidth
to assigned bandwidth(%) : 0
Bind profile list
---------------------------------------------
index Profile name Program number
---------------------------------------------
0 Profile0
0
---------------------------------------------
Total: 1
Note : IGMP interface--VPI/VCI or VLAN ID or EPON ID
Related Operation
Table 32-29 lists the related operation for binding a user with a rights profile.
Table 32-29 Related operation for binding a user with a rights profile
Unbind a user from a rights profile undo igmp user bind-profile
32.14.5 Granting Program Rights to a User

This topic describes how to grant program rights to a BTV user or to modify the granted program
rights.

Context
l You can grant program rights to a user based on the port, slot, or smart VLAN. You can
also grant program rights to all the users by running the igmp user grant-program all
command.
l The program rights can be classified into watch, preview, forbidden, and idle.
l When a user is bound to multiple profiles and the rights of the same program in the profiles
are different, the system configures the program with the highest priority for the user
according to the priorities of the program rights.
l The program rights can be granted to the user or modified only when the rights mode is the
user mode.
Procedure
Step 2 Run the igmp user grant-program command to grant program rights to a user.
Step 3 Run the display igmp user command to query the program rights of a user.
----End
Example
To grant the rights to watch programs from 224.1.1.1 to 224.1.2.1 to the user on port 0/7/0, do
as follows:
huawei(config-btv)#igmp user grant-program port 0/7/0 ip 224.1.1.1 to-ip 224.1.2.1
watch
huawei(config-btv)#igmp proxy authorization enable
huawei(config-btv)#display igmp user port 0/7/0 grant-program-list
---------------------------------------------
Program name IP address Right
---------------------------------------------
PROGRAM-0 224.1.1.1 watch
PROGRAM-1 224.1.2.1 watch
---------------------------------------------
Total:2
32.14.6 Enabling the Function of Monitoring BTV Users

This topic describes how to enable the function of monitoring BTV users.
Context
Before enabling the function of monitoring BTV users, you must perform the following
operations:
l Run the terminal debugging command to enable the debugging information output
function.
l Run the debugging igmp all command to enable all the debugging switches in the system.
Procedure
Run the debugging igmp command to enable the function of monitoring BTV users.
----End

Example
To enable IGMP proxy authentication, do as follows:
huawei(config)#debugging igmp port 0/7/0
Related Operation
Table 32-30 lists the related operation for enabling the function of monitoring BTV users.
Table 32-30 Related operation for enabling the function of monitoring BTV users
Disable the function of monitoring BTV undo debugging igmp

users
32.15 Configuring the Preview Function

This topic describes how to configure the preview function.
32.15.1 Enabling the Preview Function

This topic describes how to enable the preview function.
32.15.2 Configuring the Preview Parameters
This topic describes how to configure the preview parameters, including the preview duration,
preview count, and preview interval.
32.15.3 Configuring the Preview Auto Reset Time
This topic describes how to configure the preview auto reset time. When the preview auto reset
time is set, the system automatically changes the preview count to zero at the specified time.
32.15.4 Clearing the Preview Records Manually
This topic describes how to clear all the preview records manually, including the records of the
preview logout time and preview count.
32.15.1 Enabling the Preview Function

This topic describes how to enable the preview function.
Context
With the preview function disabled, the multicast user with the preview rights cannot preview
any program. At the same time, the parameters configured for the preview rights profile is
invalid. The multicast user who has view rights is not affected and can still watch programs.
Procedure
Step 2 Run the igmp preview enable command to enable the IGMP preview function.

Step 3 Run the display igmp config command to query the status of the preview function.
----End
Example
To enable the IGMP preview function, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp preview enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-31 lists the related operation for enabling the preview function.
Table 32-31 Related operation for enabling the preview function
Disable the IGMP preview function igmp preview disable

32.15.2 Configuring the Preview Parameters

This topic describes how to configure the preview parameters, including the preview duration,
preview count, and preview interval.
Context
l When the preview function is disabled, all the users with the preview rights cannot watch
any program.
l By default, the preview duration is 120s, the preview count is eight, and the preview interval
is 120s.
Procedure
Step 1 Run the igmp preview program command to configure the preview parameters.
Step 2 Run the display igmp program command to query the configuration of the preview parameters.
----End
Example
Assume that the preview time is 150s, the preview count is 5, and the allowable preview interval
is 100s. To configure such preview parameters for program 1, do as follows:
huawei(config-btv)#igmp preview program index 1 preview-duration 150
huawei(config-btv)#igmp preview program index 1 preview-times 5
huawei(config-btv)#igmp preview program index 1 preview-interval 100
huawei(config-btv)#display igmp program index 1
---------------------------------------------
Program index : 1
Validity : valid
Program name : cctv-1
IP address : 224.1.1.1
Uplink Port : 0/3/0
VLAN ID : 1
Host attribute : enable
Log attribute : enable
Prejion attribute : disable
Across VLAN attribute : enable
Unsolicited attribute : disable
Preivew duration(s) : 150
Preivew times : 5
Preivew interval(s) : 100
Priority : 0
Host IP : 0.0.0.0
Bandwidth(kbps) : 1000
Numbers of watching : 0
---------------------------------------------
Watching IGMP cascade port :
0/3/1
---------------------------------------------
32.15.3 Configuring the Preview Auto Reset Time

This topic describes how to configure the preview auto reset time. When the preview auto reset
time is set, the system automatically changes the preview count to zero at the specified time.
Context
By default, the preview auto reset time is 04:00:00 a.m. each day.

Procedure
Step 2 Run the igmp preview auto-reset-time command to configure the program preview parameters.
Step 3 Run the display igmp config command to query the configuration of the preview parameters.
----End
Example
To configure the preview auto reset time to 05:00:00 a.m. each day, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp preview auto-reset-time 05:00:00
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-32 lists the related operations for configuring the preview auto reset time.

Table 32-32 Related operations for configuring the preview auto reset time
Restore the default preview auto reset undo igmp preview auto-reset-time
time
Clear the record of the preview logout igmp preview reset record
time manually
Clear the record of the preview logout igmp preview reset count
count manually
32.15.4 Clearing the Preview Records Manually

This topic describes how to clear all the preview records manually, including the records of the
preview logout time and preview count.
Context
The system records the previous preview logout time automatically. If a user previews a program
at an interval smaller than the preset value configured by running the igmp preview program
command, the user is not allowed to preview the program again.
Procedure
l Clear the record of the preview logout time manually.
1. Run the btv command to enter the BTV mode.
2. Run the igmp preview reset record command to clear all the records of the preview
logout time manually.
l Clear the record of the preview logout count manually.
1. Run the btv command to enter the BTV mode.
2. Run the igmp preview reset count command to clear all the records of the preview
logout count manually.
----End
Example
To clear the records of the preview logout time of all users manually, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp preview reset record
To clear the records of the preview logout count of all users manually, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp preview reset count
Related Operation
Table 32-33 lists the related operation for clearing the preview records.

Table 32-33 Related operation for clearing the preview records

Configure the preview auto igmp preview auto-reset-time

reset time
32.16 Configuring the Logging Function

This topic describes how to configure the logging function.
32.16.1 Enabling the Logging Function

This topic describes how to enable the logging function. After the logging function is enabled,
the system can record the operations of multicast users to collect and query the information about
the user operations later.
32.16.2 Configuring the Logging Interval
This topic describes how to configure the automatic log generation interval for a user who is
online for a long time.
32.16.3 Configuring Log Reporting
This topic describes how to configure the log reporting function.
32.16.4 Collecting Log Statistics
This topic describes how to query the history of the on-demand information. The log statistics
mainly include the ordered programs and related time parameters. The statistics can be
considered as the dynamic on-demand information for research in the viewership statistics.
32.16.1 Enabling the Logging Function

This topic describes how to enable the logging function. After the logging function is enabled,
the system can record the operations of multicast users to collect and query the information about
the user operations later.
Context
By default, the logging function is enabled.
Procedure
Step 1 Run the igmp proxy log enable command to enable the logging function.
Step 2 Run the display igmp config command to query the status of the logging function.
----End
Example
To enable the IGMP proxy logging function, do as follows:
huawei(config-btv)#igmp proxy log enable
--------------------------------------------------------

--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-34 lists the related operations for enabling the logging function.
Table 32-34 Related operations for enabling the logging function
Disable the IGMP proxy logging function igmp proxy log disable
Query the logs of IGMP users display igmp log
32.16.2 Configuring the Logging Interval

This topic describes how to configure the automatic log generation interval for a user who is
online for a long time.
Context
l The UA5000 can generate logs automatically. When a user watches a program for a long
time, and the time exceeds the time interval for generating the log, the system generates a

log automatically. This log can be used for billing if no other log is generated when a user
goes offline abnormally after watching a program for a long time.
l By default, the logging interval is two hours.
Procedure
Step 2 Run the igmp proxy log-interval command to configure the logging interval.
Step 3 Run the display igmp config command to query the configured logging interval.
----End
Example
To configure the logging interval to one hour, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp proxy log-interval 1
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-35 lists the related operation for configuring the logging interval.

Table 32-35 Related operation for configuring the logging interval

Restore the default logging interval undo igmp proxy log-interval
32.16.3 Configuring Log Reporting

This topic describes how to configure the log reporting function.
Context
The logs are reported based on the conditions of port, program IP address, and time range.
Procedure
Step 2 Run the igmp log report command to configure the log report function.
----End
Example
To report the logs of program 225.1.1.1 generated during the period from 2006-1-10 9:00:00 to
2006-1-10 18:30:00, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp log report ip 225.1.1.1 time 2006-1-10 9:00:00 end
2006-1-10 18:30:00
Reporting log has finished
Reported log number: 50
Related Operation
Table 32-36 lists the related operations for configuring log reporting.
Table 32-36 Related operations for configuring log reporting

Stop log reporting igmp log stop-report If the system is reporting the
user log, the command stops
the log reporting. If the system
is not reporting the user log,
errors are displayed.
Clear user logs igmp log reset -
Display the log statistics display igmp log statistic -

based on the conditions of
port, program IP, and the
duration

32.16.4 Collecting Log Statistics

This topic describes how to query the history of the on-demand information. The log statistics
mainly include the ordered programs and related time parameters. The statistics can be
considered as the dynamic on-demand information for research in the viewership statistics.
Context
The logs can be queried based on the port, the IP address, or all the users.
Procedure
Step 2 Run the display igmp log command to query the history of the on-demand information.
----End
Example
To collect statistics about all the user logs, do as follows:
huawei(config-btv)#display igmp log all
-----------------------------------------------------------------------------
Port Program-IP Mode Join-time Leave-time
-----------------------------------------------------------------------------
0/7/0 224.0.1.10 watch 2006-04-15 19:29:48 2006-04-15 20:39:32
0/7/0 224.0.1.10 watch 2006-04-16 19:26:25 2006-04-16 20:29:46
0/7/0 224.0.1.10 watch 2006-04-17 18:51:58 2006-04-17 20:26:24
0/7/0 224.0.1.10 watch 2006-04-18 18:43:14 2006-04-18 19:51:57
-----------------------------------------------------------------------------
Total: 4
Note: P(Mode) indicates preview, W(Mode) indicates watch
32.17 Configuring Active CDR Reporting

After the charging data record (CDR) function is enabled, the system automatically saves the
multicast CDR and actively reports the CDR to the server.
Context
l Enabling or disabling the CDR function takes effect in IGMP snooping and IGMP proxy
modes.
l By default, the CDR function is disabled. When the CDR function is disabled, the multicast
CDR is not generated and the CDR file is not transmitted.
Procedure
Step 2 Run the igmp cdr enable command to enable the CDR function.
Step 3 Run the display igmp config command to query the status of the CDR function.
----End

Example
To enable the CDR function, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp cdr enable
--------------------------------------------------------
--------------------------------------------------------
IGMP mode : proxy
Default 802.1p : 6
Log switch : enable
CDR switch : enable
--------------------------------------------------------
--------------------------------------------------------
--------------------------------------------------------
Related Operation
Table 32-37 lists the related operations for configuring active CDR reporting.
Table 32-37 Related operations for configuring active CDR reporting

Disable the CDR function igmp cdr disable
Query the configuration of the IGMP display igmp config

global parameters
Configure manual CDR reporting igmp cdr-report

32.18 Configuring Manual CDR Reporting

When you do not need to wait for the system to periodically report the CDR, or when you need
to query the CDR that fails to be automatically reported, deliver a command on the device to
enable the system to report the CDR. By configuring manual CDR reporting, you can choose to
transmit specific multicast logs according to your requirements.
Context
l If you choose the parameter failed, the system transmits the multicast logs that fails to be
transmitted for three times in the current system.
l If you choose the parameter all, the system retransmits all the multicast logs in the current
system.
Procedure
Step 2 Run the igmp cdr-report command to configure manual CDR reporting.
Step 3 Run the display igmp config command to query the status of the CDR function.
----End
Example
To enable the CDR function, do as follows:
huawei(config)#btv
huawei(config-btv)#igmp cdr-report all
Command:
igmp cdr-report all
Related Operation
Table 32-38 lists the related operations for configuring manual CDR reporting.
Table 32-38 Related operations for configuring manual CDR reporting

Configuring active CDR reporting igmp cdr enable
Query the configuration of the IGMP display igmp config

global parameters

Configuration Guide-IPM CLI 33 Configuring the Triple Play Service
33 Configuring the Triple Play Service
About This Chapter
This topic describes the triple play service and how to configure the service on the UA5000.
33.1 Introduction to the Triple Play Service

This topic describes the triple play service and its specifications.
33.2 Configuration Example of Triple Play - Single PVC for Multiple Services
This topic describes how to configure the triple play service - single PVC for multiple services
(based on the user-side VLAN). A user can connect to multiple terminals through a home
gateway to access multiple services such as the Internet, VoIP, and IPTV services.
33.3 Configuration Example of Triple Play - Multiple PVCs for Multiple Services
This topic describes how to configure the triple play service - multiple PVCs for multiple
services.

33 Configuring the Triple Play Service Configuration Guide-IPM CLI
33.1 Introduction to the Triple Play Service

This topic describes the triple play service and its specifications.
Service Description
With the rapid development of the broadband services, a lot of users demand a high bandwidth
for different services such as the video service and voice service.
For details of the triple play service, see "Triple Play" in the UA5000 Universal Access Unit
Feature Description.
The UA5000 supports the triple play service.
In the triple play application, the VoIP, IPTV, and Internet services are transmitted over one
cable to the UA5000 through a home gateway (HG) in a centralized manner.
l The VoIP and IPTV services use the DHCP mode. The DHCP option60 domain is used to
identify different terminals. The UA5000 can identify different DHCP option60 domains,
and transmit packets of different terminals to different DHCP servers. In this manner, the
terminals can obtain IP addresses from the corresponding DHCP servers.
l The Internet service uses the Point-to-Point over Ethernet (PPPoE) for access.
Table 33-1 shows the modes supported by the UA5000 to provide the triple play service.
Table 33-1 Modes to provide the triple play service

Mode Description
Single PVC for multiple It needs to re-configure the existing modem to save the PVC
services resources.
l When it differentiates the service traffic based on user-side
VLANs:
It differentiates the service traffic based on the VLAN

ID contained in the packets sent from the user port PVC.
The user packets are labeled with different upstream
VLAN IDs, and the original VLAN IDs in the user
packets are removed.
l When it differentiates the service traffic based on the user-
side encapsulation types:
It differentiates the service traffic based on the

encapsulation types (IPoE/PPPoE) of the user packets
sent from the user port PVC. The user packets are labeled
with different upstream VLAN IDs.
Multiple PVCs for multiple It needs to re-configure the existing modem.

services It uses different PVCs to differentiate the service traffic.

Table 33-2 shows the modes supported by the UA5000 to provide the triple play service.
Table 33-2 Modes to provide the triple play service
Mode Description
Multiple PVCs for multiple It needs to re-configure the existing modem.

services It uses different PVCs to differentiate the service traffic.
Single PVC for multiple It needs to re-configure the existing modem to save the PVC
services resources.
l When it differentiates the service traffic based on user-side
VLANs:
It differentiates the service traffic based on the VLAN

ID contained in the packets sent from the user port PVC.
The user packets are labeled with different upstream
VLAN IDs, and the original VLAN IDs in the user
packets are removed.
l When it differentiates the service traffic based on the user-
side encapsulation types:
It differentiates the service traffic based on the

encapsulation types (IPoE/PPPoE) of the user packets
sent from the user port PVC. The user packets are labeled
with different upstream VLAN IDs.
33.2 Configuration Example of Triple Play - Single PVC for

Multiple Services
This topic describes how to configure the triple play service - single PVC for multiple services
(based on the user-side VLAN). A user can connect to multiple terminals through a home
gateway to access multiple services such as the Internet, VoIP, and IPTV services.
Prerequisite
Before configuring the triple play service, ensure that the following conditions are met:

l All the boards of the device run in the normal state.
Networking
Figure 33-1 shows an example network for configuring the triple play service.
In this figure, user 1 (home gateway 1) and user 2 (home gateway 2) use the triple play
networking. The service streams of the Internet, VoIP, and IPTV services are carried in the same
PVC. After different service streams access the UA5000, the UA5000 differentiates the services
according to the user-side VLAN IDs. In addition, the UA5000 provides different QoS for
different service streams according to the traffic priorities in the PVC. The Internet service uses

the PPPoE mode. The VoIP and IPTV services use the DHCP mode and obtain IP addresses
from the DHCP server in DHCP standard mode.
Figure 33-1 Example network for configuring the triple play service
OSS & RADIUS server/
Multicast sever RADIUS proxy
NMS
TG
IPTV DHCP server
Softswitch
Router VoIP DHCP server
BRAS
LAN switch
0/8/0
I C C
P S S
M R R
B B B
0/3/0 0/7/0 UA5000
HG1 HG 2
DHCP PPPoE DHCP DHCP PPPoE DHCP

STB STB
IP phone PC TV IP phone PC TV
Data Plan
Table 33-3 provides the data plan for configuring the triple play service.
Table 33-3 Data plan for configuring the triple play service by the single PVC for multiple
services (based on VLANs)
Item Data
CSRB Ports 0/7/0 and 0/8/0 use the default line profile.
VPI/VCI: 0/35

Item Data
Traffic profile parameters Internet service

l Downstream: 2 Mbit/s
l Upstream: 1 Mbit/s
l Priority: 0
VoIP service
l Downstream: 128 kbit/s
l Upstream: 128 kbit/s
l Priority: 5
IPTV service
l Priority: 4
Uplink port 0/3/0
Upstream VLAN Internet service: smart VLAN 102

VoIP service: smart VLAN 103
IPTV service: smart VLAN 104
User-side VLAN Internet service: smart VLAN 2

VoIP service: smart VLAN 3
IPTV service: smart VLAN 4
DHCP VoIP: The VoIP service obtains IP addresses in

standard DHCP mode. The IP address of the
gateway is 10.1.1.1.
IP addresses of DHCP server group 1 are 20.1.1.2
and 20.1.1.3.
IPTV: The IPTV service obtains IP addresses in

standard DHCP mode. The IP address of the
gateway is 10.2.2.1.
IP addresses of DHCP server group 2 are 20.2.2.2
and 20.2.2.3.
Program library The multicast address of program BTV-1 is

224.1.1.1. The source IP address of program BTV-1
is 10.10.10.10.
The multicast address of program BTV-2 is

224.1.1.2. The source IP address of program BTV-2
is 10.10.10.10.
Rights profile Profile 0 is configured with the rights to watch

program BTV-1.
IGMP user User 1 (port 0/7/0) can watch all the programs.

Item Data
User 2 (port 0/8/0) can watch only BTV-1.
Context
l DHCP option60 domain values of the set top box (STB) and the Ethernet phone (Ephone)
vary with the terminals. In the actual application, see the instructions of the STB and the
Ephone.
l Before configuring the triple play service, ensure that the service boards are added correctly.
NOTE
The following configuration uses the single PVC solution and differentiates services according to user-side
VLANs.
Figure 33-2 shows the flowchart for configuring the triple play service.
Figure 33-2 Flowchart for configuring the triple play service
Start
Internet IPTV
VoIP
Create a VLAN and add an Create a VLAN and add Create a VLAN and add
uplink port an uplink port an uplink port
Configure the traffic profile Configure the traffic profile Configure the traffic profile
Add a service port Add a service port Add a service port
Configure DHCP relay Configure DHCP relay
Configure IGMP proxy
End
Procedure
l Configure the Internet service.

1. Configure a VLAN and add an uplink port to it.

2. Configure the traffic profile.

Because the VoIP, IPTV, and Internet services are transmitted through the same port,
it is necessary to set the scheduling priority for each service.
In general, the VoIP service has the highest scheduling priority, and the Internet
service has the lowest scheduling priority. In this example, set the scheduling priority
of the Internet service to 0.
huawei(config)#traffic table index 110 ip car 1024 priority 0 priority-
policy tag-In-Package
3. Create a service port.

Add the service port to the VLAN, and use the traffic profile created in the previous
steps.
huawei(config)#service-port vlan 102 adsl 0/7/0 vpi 0 vci 35 multi-service
user-vlan 2 rx-cttr 10 tx-cttr 110
4. Save the data.

huawei(config)#save
l Configure the VoIP service.


Set the scheduling priority of the VoIP service to 5.

steps.
4. Configure DHCP relay.

5. Save the data.

huawei(config)#save
l Configure the IPTV service.


Set the scheduling p priority of the IPTV service to 4




5. Configure the multicast data.

huawei(config)#btv
huawei(config-btv))#igmp mode proxy
huawei(config-btv)#igmp program add name BTV-1 ip 224.1.1.1 vlan 4 bind
0/3/0
0/3/0
huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1
watch
huawei(config-btv)#igmp user add port 0/7/0 no-auth max-program 8
huawei(config-btv)#igmp user add port 0/8/0 auth max-program 8
CAUTION
On the UA5000, if the PVC is configured with a priority, the priority of the multicast
packets carried by the PVC does not take effect.
6. Save the data.

huawei(config)#save
----End
Result
After the configuration of the upstream and downstream devices, the triple play service (Internet,
VoIP and IPTV services) is available.
l The Internet user should be able to access the Internet in PPPoE dialup mode.
l The VoIP user should be able to make and receive phone calls.
l IPTV users: User 1 should be able to watch all the programs, and user 2 should be able to
watch only program BTV-1.

33.3 Configuration Example of Triple Play - Multiple PVCs

for Multiple Services
This topic describes how to configure the triple play service - multiple PVCs for multiple
services.
Prerequisite
Before configuring the triple play service, ensure the following:
l All the boards of the device must work in the normal state.
Networking
Figure 33-3 shows an example network for configuring the triple play service - multiple PVCs
for multiple services.

Figure 33-3 Example network for configuring the triple play service - multiple PVCs for
multiple services
OSS & RADIUS server/
Multicast sever RADIUS proxy
NMS
TG
IPTV DHCP server
Softswitch
Router VoIP DHCP server
BRAS
LAN switch
0/8/0
I C C
P S S
M R R
B B B
0/3/0 0/7/0 UA5000
HG1 HG 2
DHCP PPPoE DHCP DHCP PPPoE DHCP

STB STB
IP phone PC TV IP phone PC TV
In this figure, user 1 (home gateway 1) and user 2 (home gateway 2) use the triple play
networking.
Data Plan
Table 33-4 provides the data plan for configuring the triple play service - multiple PVCs for
multiple services.
Table 33-4 Data plan for configuring the triple play service - multiple PVCs for multiple services
Item Data
CSRB board Downstream ports: 0/7/0 and 0/8/0. The ports use the default line profile.
Internet: VPI/VCI 0/37

Item Data
VoIP: VPI/VCI 0/36
IPTV: VPI/VCI 0/35
Traffic Internet service

profile l Downstream: 2 Mbit/s
parameters
l Upstream: 1 Mbit/s
l Priority: 0
VoIP service
l Downstream: 128 kbit/s
l Priority: 5
IPTV service
l Priority: 4
Uplink port 0/3/0
VLAN Internet: smart VLAN 2
VoIP: smart VLAN 3
IPTV: smart VLAN 4
DHCP VoIP: DHCP option60 domain of "voice", gateway 10.1.1.1

IP addresses of DHCP server group 1: 20.1.1.2 and 20.1.1.3
IPTV: DHCP option60 domain of "video" for the set top box (STB), gateway
10.2.2.1
IP addresses of DHCP server group 2: 20.2.2.2 and 20.2.2.3
Program Program BTV-1, with the multicast address of 224.1.1.1. It is bound with
library uplink port 0/3/0 and VLAN 4.
Program BTV-1: multicast address 224.1.1.1, program source IP address
10.10.10.10
Program BTV-2, with the multicast address of 224.1.1.2. It is bound with

uplink port 0/3/0 and VLAN 4.
Program BTV-2: multicast address 224.1.1.2, program source IP address
10.10.10.10
Rights Configures profile 0 with the rights to watch program BTV-1.

profile
IGMP user User 1 connected to port 0/7/0 can watch all the programs.
User 2 connected to port 0/8/0 can watch only program BTV-1.

Item Data
Priority 802.1p priority:

l VoIP: 6
l IPTV: 5
l Internet: 1
Context
l The DHCP option60 domains of the STB and the Ethernet phone (Ephone) vary according
to the terminal type. In practice, see the operation instruction of the STB and the Ephone.
l Run the dhcp domain command to configure the DHCP domain name. The configured
domain name is a sub-string without a space that maps to the option60 domain of the
terminal.
l Before configuring the triple play service, ensure that the service board and the uplink board
have been added correctly.
Figure 33-4 shows the flowchart for configuring the triple play service - multiple PVCs for
multiple services.
Figure 33-4 Flowchart for configuring the triple play service-multiple PVCs for multiple
services
Start
Internet IPTV
Select service
type
VoIP
Configure the VLAN and Configure the VLAN and Configure the VLAN and
its uplink port its uplink port its uplink port
Configure the traffic profile Configure the traffic profile Configure the traffic profile
Configure the service port Configure the service port Configure the service port
Configure DHCP Relay Configure DHCP Relay
Configure IGMP Proxy
End

Procedure
l Configure the Internet service.
1. Create a VLAN and add an uplink port to the VLAN.

Because the VoIP, IPTV, and Internet services are transmitted through the same port,
it is necessary to set the scheduling priority for each service.
In general, the VoIP service has the highest scheduling priority, and the Internet
service has the lowest scheduling priority. In this example, set the scheduling priority
of the Internet service to 0.

step.
cttr 110
cttr 110
4. Save the data.

huawei(config)#save
l Configure the VoIP service.


Configure the priority of the VoIP service to 5.

step.
cttr 11
cttr 11

The voice and the video services use the DHCP access mode, and use the DHCP
option60 domain to classify different service types. In this example, configure the
DHCP domain of the VoIP service to voice.
huawei(config)#dhcp mode layer-3 option-60

huawei(config)#dhcp domain voice //Refer to the actual DHCP option 60

threshold.
huawei(config-dhcp-domain-voice)#dhcp-server 1
huawei(config-dhcp-domain-voice)#quit
huawei(config-if-vlanif3)#dhcp domain voice gateway 10.1.1.1
5. Save the data.

huawei(config)#save
l Configure the IPTV service.


In this example, configure the priority of IPTV service to 4.

Add the service port to the VLAN and use traffic profile 9.
cttr 109
cttr 109

Configure the DHCP relay data of the video service and configure the DHCP option60
domain to video.
huawei(config)#dhcp domain video //Refer to the actual DHCP option 60
threshold.
huawei(config-dhcp-domain-video)#dhcp-server 2
huawei(config-dhcp-domain-video)#quit
huawei(config-if-vlanif4)#dhcp domain video gateway 10.2.2.1
5. Configure the multicast data.

To commission video services, you need to configure the multicast proxy and
programs.
huawei(config)#btv
0/3/0
0/3/0
huawei(config-btv)#igmp profile profile-name profile0 program-name BTV-1
watch


6. Save the data.

huawei(config)#save
----End
Result
After the configuration for related upstream and downstream devices is complete, the triple play
service is available.
l Internet users should be able to access the Internet through PPPoE dialup.
l VoIP users should be able to make calls.
l IPTV users: The user connected to port 0/7/0 should be able to watch all the programs, and
the user connected to 0/8/0 should be able to watch only program 1.

Configuration Guide-IPM CLI 34 Configuring the BFD
34 Configuring the BFD
About This Chapter
This topic describes the BFD supported by the UA5000 and how to configure the BFD.
34.1 Introduction to the BFD

The section describes the BFD service and its service specifications.
34.2 Configuration Example of the BFD Route
This topic describes how to configure the BFD route. BFD is used to quickly detect and monitor
the forwarding/connecting status of the network links or IP routes. When the BFD detects that
the active route fails, the fault can be quickly located and the services are automatically switched
to the standby route.
34.3 Enabling the BFD Function
This topic describes how to enable the BFD function.
34.4 Creating a BFD Session
This topic describes how to create a BFD session to bind the peer IP address with the local L3
interface.
34.5 Configuring the BFD Session Parameters
This topic describes how to configure the BFD session parameters to control the detection time.

34 Configuring the BFD Configuration Guide-IPM CLI
34.1 Introduction to the BFD

The section describes the BFD service and its service specifications.
Service Description
Bidirectional forwarding detection (BFD) is used to check the channel state between two devices.
If the active channel is detected to be faulty, services are rapidly switched to the standby channel.
In this case, the services and inband maintenance channel are more reliable.
On the UA5000, BFD is used to bind the active routing channel with the standby routing channel.
In this case, the active/standby protection mechanism of the route is set up.
l Up to 32 BFD sessions can be set up.
l When a route is bound with the BFD, the BFD state and the route priority are necessary
for routing. When the route is not bound with the BFD, the routing is executed based on
the route priority.
l Prevent the route from switching to the route that has a higher priority and is not bound
with the BFD. If another route bound with the BFD reaches the same destination when you
unbind the BFD from the route, lower the priority of the route that is not bound with the
BFD, and cancel the binding to prevent incorrect route switchover.
NOTE
l Deleting either a VLAN interface or the BFD unbinds the route from the BFD.
l When you delete a VLAN interface, if the egress interface of the route is on the VLAN interface, the
route changes into a non-active route. After the interface is added, the route may change into an active
route.
34.2 Configuration Example of the BFD Route

This topic describes how to configure the BFD route. BFD is used to quickly detect and monitor
the forwarding/connecting status of the network links or IP routes. When the BFD detects that
the active route fails, the fault can be quickly located and the services are automatically switched
to the standby route.
Prerequisite
The peer supports the BFD function.
Networking
Figure 34-1 shows an example network for the BFD route application.

Figure 34-1 Example network of the BFD route application
Router A Router B
VLAN ID: 100 VLAN ID: 200

10.10.10.1/24 20.10.10.1/24
LAN Switch
0/3/0 UA5000
I
P
M
B
Data Plan
Table 34-1 provides the data plan for configuring the BFD route.
Table 34-1 Data plan for configuring the BFD route
Item Data Remarks
Uplink port IPMB uplink port:0/3/0 -
Active route BFD session name: bfd001 -
Route priority: 30 -
IP address of the layer 3 interface The L3 interface IP address of the

of VLAN 100: 10.10.10.2/24 upper layer router A: 10.10.10.1/24
Standby route BFD session name: bfd002 -
Route priority: 50 -
IP address of the layer 3 interface The L3 interface IP address of the

of VLAN 200: 20.10.10.2/24 upper layer router B: 20.10.10.1/24
NOTE
l The active router corresponds to router A, and the standby router responds to router B.
l The default parameters are used for the BFD session.

Procedure
Step 1 Enable the BFD globally.
huawei(config)#bfd

Step 3 Bind the uplink port to the VLAN.

hhuawei(config)#port vlan 100 0/3 0
Step 4 Configure the IP address of the layer 3 interface of the VLAN and enable the BFD of the interface.
huawei(config-if-vlanif100)#bfd
Step 5 Configure the BFD session.

huawei(config)#bfd bfd001 bind peer-ip 10.10.10.1 interface vlanif 100
huawei(config-bfd-session-bfd001)#quit
Step 6 Configure the static route.

1. Configure the active static route.
huawei(config)#ip route-static 0.0.0.0 0.0.0.0 10.10.10.1 preference 30 track
bfd-session bfd001
2. Configure the standby static route.

huawei(config)#ip route-static 0.0.0.0 0.0.0.0 20.10.10.1 preference 50 track
bfd-session bfd002
Step 7 Query the configuration.

1. Query the configuration of BFD.
huawei(config)#display bfd configuration all
------------------------------------------------------------------------------
--
CFG Name Local Discr MIndex Session Count Commit Flag Admin Flag
------------------------------------------------------------------------------
--
bfd001 8194 33 1 True False
------------------------------------------------------------------------------
--
Total Commit/Uncommit CFG Number : 2/0
2. Query the BFD session.

huawei(config)#display bfd session all
------------------------------------------------------------------------------
--
Local Discr Remote Discr Peer IP Address Interface Name Cur
State
------------------------------------------------------------------------------
--
8194 0 10.10.10.1 vlanif100
Down
8195 0 20.10.10.1 vlanif200

Down
------------------------------------------------------------------------------
--
Total UP/DOWN Session Number : 0/2
3. Query the binding between the static route of the uplink port of the IPMB board and the
BFD session.
huawei(config)#display current-configuration section post-
system
[UA5000IPMBV100R017:
11102]
#
[post-
system]
<post-
system>
ip route-static 0.0.0.0 0.0.0.0 10.10.10.1 preference 30 track bfd-
session
bfd001
ip route-static 0.0.0.0 0.0.0.0 20.10.10.1 preference 50 track bfd-
session
bfd002
ip route-static 10.70.35.0 255.255.255.0
10.144.78.1
ip route-static 10.71.47.0 255.255.255.0
10.144.78.1
ip route-static 10.144.78.0 255.255.255.0
10.20.2.1
#
return

huawei(config)#save
----End
Verification
When the BFD detects that the link of the active route fails, the services are automatically
switched to the link of the standby route.
34.3 Enabling the BFD Function

This topic describes how to enable the BFD function.
Context
The BFD can be enabled for an interface or for the system globally:
l Enabling the BFD function in global config mode: You can perform other configurations
for the BFD function only after the BFD function is enabled globally. If you disable the
BFD function, all the BFD configurations are deleted.
l Enabling the BFD function in interface mode.
Procedure
Step 1 In global config mode, run the bfd command to enable the BFD function globally.
Step 2 In interface mode, run the bfd command to enable the BFD function of the interface.
----End

Example
To enable the BFD function globally and enable it on VLAN interface 2, do as follows:
huawei(config)#bfd
Related Operation
Table 34-2 lists the related operation for enabling the BFD function.
Table 34-2 Related operation for enabling the BFD function

Disable the BFD undo bfd In global config mode, the

function command disables the BFD
function globally; in interface
mode, the command only disables
the BFD function of the interface.
34.4 Creating a BFD Session

This topic describes how to create a BFD session to bind the peer IP address with the local L3
interface.
Prerequisite
l The BFD function must be enabled globally.
l The layer 3 interface must already be set up.
Context
The three BFD session parameters are as follows:
l Interval of sending and receiving the packets. It ranges from 250 ms to 300000 ms. By
default, it is 1000 ms, that is 1s.
l Detection multiple of the BFD session. It ranges from 3 to 50. By default, it is 3.
Procedure
Step 1 Run the bfd bind peer-ip command to create a BFD session.
Step 2 Run the display bfd configuration command to query the configured BFD session.
----End
Example
To create a BFD session with the peer IP address as 10.10.10.1 and the local interface as the
layer 3 interface of VLAN 100, do as follows:


huawei(config)#display bfd configuration all
--------------------------------------------------------------------------------
CFG Name Local Discr MIndex Session Count Commit Flag Admin Flag
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Total Commit/Uncommit CFG Number : 2/0
Related Operation
Table 34-3 list the related operation for creating a BFD session.
Table 34-3 Related operation for creating a BFD session
Set the interval of sending the packets min-tx-interval
Set the interval of receiving the packets min-rx-interval
Set the detection multiple of a BFD detect-multiplier

session
34.5 Configuring the BFD Session Parameters

This topic describes how to configure the BFD session parameters to control the detection time.
Prerequisite
The BFD must be enabled globally and the BFD session must already be created.
Context
The three BFD session parameters are as follows:
l Interval of sending and receiving the packets. It ranges from 250 ms to 300000 ms. By
default, it is 1000 ms, that is 1s.
l Detection multiple of the BFD session. It ranges from 3 to 50. By default, it is 3.
NOTE
l After you run the commit command, the configured parameters can take effect.
l After you modify the parameters, you need to run the commit command so that the parameters take effect.
Procedure
Step 1 Run the min-tx-interval command to set the interval of sending the packets.
Step 2 Run the min-rx-interval command to set the interval of receiving the packets.
Step 3 Run the detect-multiplier command to set the detection multiple of the BFD session.

Step 4 Run the commit command to enable the BFD session.
----End
Example
To set the interval of sending the packets as 30s and validate it, do as follows:
huawei(config)#bfd 1000
huawei(config-bfd-session-1000)#min-tx-interval 30000
huawei(config-bfd-session-1000)#commit
Related Operation
Table 34-4 lists the related operation for configuring the BFD session parameters.
Table 34-4 Related operation for configuring the BFD session parameters
Query a BFD session display bfd session

Configuration Guide-IPM CLI 35 Configuring the Environment Monitoring
35 Configuring the Environment

Monitoring
About This Chapter
This topic describes the environment monitoring unit (EMU) supported by the UA5000 and how
to configure the EMU.
35.1 Introduction to Environment Monitoring

This topic describes the environment monitoring configuration on the UA5000.
35.2 Configuration Example of ESC
This topic describes how to configure the built-in analogue parameters and digital parameters
of the H303ESC/H304ESC.
35.3 Configuration Example of FAN Monitoring
This topic describers how to configure a FAN monitoring unit.
35.4 Configuration Example of Power Monitoring
The UA5000 supports the power monitoring unit such as the POWER4845. This topic considers
the POWER4845 as an example to describe how to configure the power monitoring unit.
35.5 Configuration Example of the Universal Power Monitoring
This topic describes how to monitor the universal power through the ESC by using the
configuration example of the PSM-A power monitoring through the H303ESC. (The PSM-A is
one type of Emerson power and is displayed as PSMA on the CLI.)
35.6 Adding an EMU
This topic describes how to add an EMU.
35.7 Configuring the ESC Analogue Parameters
This topic describes how to configure the upper and lower alarm threshold of the analogue
parameters, such as temperature, humidity, voltage, and current, or set the customized analogue
alarm.
35.8 Configuring the ESC digital Parameters
This topic describes how to configure the alarm level of the digital parameters such as the door
status censor or to configure the customized alarm of digital parameters.
35.9 Configuring the FAN Alarm Report

35 Configuring the Environment Monitoring Configuration Guide-IPM CLI
This topic describes how to configure the report of the FAN running alarms to the EMU.
35.10 Setting the FAN Speed Adjustment Mode
This topic describes how to set the fan speed adjustment mode. If the fan is not in automatic
adjustment mode, the air flow increases to a great extent in the case of low or normal temperature.
35.11 Configuring the FAN Speed
This topic describes how to configure the FAN speed.
35.12 Configuring a POWER4845 EMU
This topic describes how to configure a POWER4845 EMU.

35.1 Introduction to Environment Monitoring

This topic describes the environment monitoring configuration on the UA5000.
Service Description
The device provides an environment monitoring serial port to connect the serial port on a
monitored device. By running the master-slave node protocol or the access network protocol
between the two serial ports, you can monitor the environment of the device from a remote end.
The environment parameters such as temperature, humidity, and power supply can be monitored
to ensure that the UA5000 can work properly in a suitable environment.
To perform environment monitoring on a device, the environment monitoring functional
modules, such as H303ESC or H304ESC must be provided. Certain devices to be monitored
have a built-in monitoring unit, such as POWER4845. These functional modules are referred to
as environment monitor unit (EMU), regardless of whether they are built in or not.
The environment monitor module of the UA5000 comprises multiple EMUs, including:
l Environment monitoring board H303ESC or H304ESC: It monitors the environment
parameters such as the ambient temperature, humidity, smog, water penetration, fire,
voltage, and power supply alarms through various sensors.
l AC power module EMU (POWER4845): It monitors the environmental parameters such
as temperature, humidity, voltage, and power.
l FAN EMU (FAN): It monitors the running of the fans, and adjusts the running speed of
the fans.
NOTE
The configuration of the fan tray varies with the type of the shelf. The details are as follows:
l The HABA shelf does not support the configuration of the fan tray. The fan monitoring port is unavailable,
and the fan can be controlled through only the dual in-line package (DIP) switch.
l The HABD shelf supports the configuration of the fan tray through software.
l The fan tray can be added to the H612HABD, H602HABD, H612HABL, or H601HABM shelf and can
run in the normal state.
l The fan tray can be added to the H601HABD or H601HABA shelf but cannot run in the normal state.
35.2 Configuration Example of ESC

This topic describes how to configure the built-in analogue parameters and digital parameters
of the H303ESC/H304ESC.
Prerequisite
l The ESC board must communicate with the host successfully through the RS232 serial port
cable.
l The DIP switch settings of the H303ESC/H304ESC are not related to the settings of the
slave node of the EMU. The baud rate is set to 9600 bit/s.

Data Plan
Table 35-1 provides the data plan for configuring the H303ESC/H304ESC.
Table 35-1 Data plan for configuring the H303ESC/H304ESC

Item Data Remarks
EMU Type: H303ESC/H304ESC -
Number: 0 -
Slave node: 30 The settings of the slave node

are not related to the DIP
switch settings of the
H303ESC/H304ESC. The
settings of the slave node,
however, cannot be the same
as the settings of the slave
node of the fan or the
POWER4845.
Analogue parameters Analogue ID: 0 Built-in analogue parameters

monitor the environment
temperature of the device.
Alarm threshold (upper -

limit): 54
Alarm threshold (lower Other parameters of the built-

limit): 6 in analogue use the default
values.
Digital parameters Digital ID: 1 The built-in digital

parameters monitor the
access control of the device.
Effective level: high level Other built-in digital

parameters use the default
values.
Figure 35-1 shows the flowchart for configuring the H303ESC/H304ESC.

Figure 35-1 Flowchart for configuring the H303ESC/H304ESC
Start
Create an EMU
Configure the analogue parameters
Configure the digital parameters
Query the environment information after

configuration
Save the data
End
Procedure
Step 1 Create an EMU.
Add the EMU and set its type to h303esc.
huawei(config)#emu add 0 h303ESC 0 30 RS232
Step 2 Configure the analogue parameters.

huawei(config)#interface emu 0
huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 54 alarm-lower-limit 6
Step 3 Configure the digital parameters.

huawei(config-if-h303esc-0)#esc digital 1 available-level high-level
Step 4 Query the environment information after the configuration.

huawei(config-if-h303esc-0)#display esc environment info
EMU ID: 0 ESC environment state
---------------------------Analog environment info--------------------------
ID Name State Value AlmUpper AlmLower Unit
0 Temperature Normal 27.00 54 6 C
1 Input_-48V_0 Normal 38.00 57 38 Volt
5 - Normal -128.00 127 -128 -
6 - Normal -128.00 127 -128 -
7 - Normal -128.00 127 -128 -

8 - Normal -128.00 127 -128 -

---------------------------Digital environment info---------------------------
ID Name State Value |ID Name State Value
0 Wiring Normal 1 |1 Door0 Normal 1
2 - Normal 1 |3 - Normal 1
8 - Normal 1 |9 Water_Alarm Normal 1
10 Arrester 0 Normal 0 |11 Arrester 1 Normal 0
12 Arrester 2 Normal 0 |13 Arrester 3 Normal 0
14 SW_A1 Normal 0 |15 SW_A2 Normal 0
16 SW_B1 Normal 0 |17 SW_B2 Normal 0
18 SW_C1 Normal 0 |19 SW_C2 Normal 0
20 SW_D1 Normal 0 |21 SW_D2 Normal 0
22 Outer Sensor Power Normal 0
----------------------------------------------------------------------------

huawei(config-if-h303esc-0)#quit
huawei(config)#save
----End
Result
After the configuration, the h303esc should be able to work in the normal state.
35.3 Configuration Example of FAN Monitoring

This topic describers how to configure a FAN monitoring unit.
Prerequisite
The DIP switch setting of FAN is consistent with the settings of the slave node of EMU. The
baud rate is set as 19200 bit/s.
Data Plan
Table 35-2 provides the data plan for configuring the FAN.
Table 35-2 Data plan for configuring the FAN
Item Data Remarks
EMU Type: FAN -
Serial number: 1 -
Subnode: 6 Corresponds to the DIP

switch setting of the FAN.
But it cannot repeat the slave
nodes which are on the same
bus.
Name: test -
FAN FAN speed adjustment -

mode: automatic

Item Data Remarks
FAN alarm: permit By default, the alarms are

reported.
Figure 35-2 shows the flowchart for configuring the FAN.
Figure 35-2 shows the flowchart for configuring the FAN.
Start
Add a FAN EMU
Automatic
Set the FAN speed
adjustment mode
Manual
Set the fan speed
Configure the FAN alarm

switch
Save the data
End
Procedure
Step 1 Add an EMU.
huawei(config)#emu add 1 fan 0 6 RS485 test
Step 2 Configure the speed adjustment mode of the fan.

huawei(config-if-fan-1)#fan speed mode automatic
Step 3 Configure the alarm switch of the fan.

huawei(config-if-fan-1)#fan alarmset block permit
huawei(config-if-fan-1)#fan alarmset read-tem-fault permit
huawei(config-if-fan-1)#fan alarmset tem-high permit
huawei(config-if-fan-1)#fan alarmset fault permit
Step 4 Query the parameters configured for a fan tray.

huawei(config-if-fan-1)#display fan system parameter
EMU ID: 1
FAN configration parameter:

----------------------------------------------------------------
FAN timing mode: Auto timing
----------------------------------------------------------------
Alarm_name Permit/Forbid
Read temperature fault Permit
Fan block Permit
Temperature high Permit
Power fault Permit
----------------------------------------------------------------

huawei(config-if-fan-1)#quit
huawei(config)#save
----End
Result
After the configuration, the fan should be able to work in the normal state.
35.4 Configuration Example of Power Monitoring

The UA5000 supports the power monitoring unit such as the POWER4845. This topic considers
the POWER4845 as an example to describe how to configure the power monitoring unit.
Prerequisite
The ESC board and the host must be connected with an environment monitoring cable.
The DIP switches on the POWER4845 are set to 00000.
Data Plan
Table 35-3 provides the data plan for configuring the POWER4845.
Table 35-3 Data plan for configuring the POWER4845

Item Data Remarks
EMU Type: POWER4845 -
Number: 1 -
Shelf number: 0 -
Subnode: 15 It corresponds to the DIP

switches of the ESC, but it
cannot be the same as the
subnode of the fan.
Name: test -
Parameter Upper alarm threshold of the For other parameters, use the
configuration ambient temperature: 55C default values.
Lower alarm threshold of the

ambient temperature: 5C

Item Data Remarks
Upper measurement threshold

of the ambient temperature:
100C
Lower measurement threshold

of the ambient temperature: 0C
Figure 35-3 shows the flowchart for configuring the POWER4845.
Figure 35-3 Flowchart for configuring the POWER4845
Start
Create an EMU
Configure the environment monitoring

parameters of the POWER4845
Query the environment monitoring

parameters of the POWER4845
Save the data
End
Procedure
Step 1 Create an EMU.
huawei(config)#emu add 1 POWER4845 0 15 RS232 test
Step 2 Configure the environment monitoring parameters of the POWER4845.

huawei(config-if-power4845-1)#power environment humidity 55 5 100 5
This command is invalid unless in the contition of install the sensor, would
you continue? (y/n)[n]:y
Step 3 Query the environment monitoring parameters of the POWER4845.

huawei(config-if-power4845-1)#display power environment parameter
EMU ID: 1 power environment configration parameter
----------------------------------------------------------------------------
AnalogID Name AlmUpper AlmLower TestHigh TestLow Unit type
0 Temperature 55 5 100 0 C Current

1 Humidity 80 10 100 0 %R.H. Current

----------------------------------------------------------------------------
DigitalID Name Available Level|DigitalID Name Available Level
0 - 1 | 1 - 1
2 - 1 | 3 - 1
4 - 1 | 5 - 1
6 - 1
----------------------------------------------------------------------------

huawei(config-if-power4845-1)#quit
huawei(config)#save
----End
Result
After the configuration, the POWER4845 should be able to work in the normal state.
35.5 Configuration Example of the Universal Power

Monitoring
This topic describes how to monitor the universal power through the ESC by using the
configuration example of the PSM-A power monitoring through the H303ESC. (The PSM-A is
one type of Emerson power and is displayed as PSMA on the CLI.)
Prerequisite
The settings of the H303ESC DIP switch must be consistent with the slave node of the EMU.
Data Plan
Table 35-4 provides the data plan for configuring the universal power monitoring.
Table 35-4 Data plan for configuring the universal power monitoring
Item Data Remarks
EMU Type: H303ESC -
Number: 0 -
Slave node: 30 -
Universal power Type: PSM-A (displayed as PSMA -

on the CLI)
Name of the protocol file: Use the name of the actual loaded
power.pwr protocol file.
Context
The UA5000 mainly uses the following types of the universal power:

l Zhujiang power
l Emerson power
l Beijing dynamic power
l Eltek power
l Delta-cimic power
l Zhongheng power
Figure 35-4 shows the flowchart for configuring the universal power monitoring.
Figure 35-4 Flowchart for configuring the universal power monitoring

Start
Add an EMU
Load the protocol file of

the universal power
Configure the type of the

universal power
Query the ESC

environment information
Save the data
End
Procedure
Step 1 Add an EMU.
Add the EMU with ID 0, the type H303ESC, the slave node 30, and the serial port type RS232.
huawei(config)#emu add 0 H303ESC 0 30 rs232 H303ESC
Step 2 Load the protocol file of the universal power.

Obtain the protocol file of the universal power through the TFTP server. Then, run the following
command on the CLI with using the IP address of the actual server.
huawei(config)#load universal-power-protocol tftp 10.144.78.132 power.pwr
Step 3 Configure the type of the universal power.

huawei(config-if-h303esc-0)#esc power powertype universal-power PSM-A

Step 4 Query the ESC environment information.

huawei(config-if-h303esc-0)#display esc universal-power run info
huawei(config-if-h303esc-0)#display esc 4810 state

huawei(config-if-h303esc-0)#quit
huawei(config)#save
----End
Result
After the configuration, the H303ESC should be able to work in the normal state and monitor
the universal power used by the UA5000. When the monitored parameter exceeds the normal
range, the host reports an alarm.
35.6 Adding an EMU

This topic describes how to add an EMU.
Context
The types of EMUs include H303ESC/H304ESC, POWER4845, and fan.
l The slave nodes of the fan range from 0 to 29 and 31.

l The slave node of H303ESC/H304ESC cannot be the same as the slave node of the fan.
l The slave nodes of POWER4845 range from 0 to 15.
l The slave node of the H303ESC/H304ESC EMU is always 30.
l The serial port of H303ESC/H304ESC and fan is RS232.
l The serial port of POWER4845 is RS232.
Procedure
Step 1 Run the emu add command to add an EMU.
Step 2 Run the display emu command to query the EMU status.
----End
Example
To add an H303ESC, do as follows:
huawei(config)#emu add 0 H303ESC 0 30 rs232 mdpower
huawei(config)#dispaly emu 0
EMU ID: 0
--------------------------------------------------------------------
EMU name : mdpower
EMU type : H303ESC
Used or not : Used
EMU state : Normal
Frame ID : 0
Subnode : 30
COM Port : rs232

NOTE
If the EMU is faulty, do as follows:

l Ensure that the EMU works in the normal state.
l Ensure that the physical connection is correct.
l Ensure that the EMU type, shelf ID, slave node, and the serial port are correct.
Related Operation
Table 35-5 lists the related operation for adding an EMU.
Table 35-5 Related operation for adding an EMU
Delete an EMU emu del l The EMU type cannot be

changed after you configure
it. If you need to change the
EMU type, delete the EMU,
and then add a new EMU.
l If an EMU in the shelf is
replaced, delete the EMU,
and then add a new EMU.
35.7 Configuring the ESC Analogue Parameters

This topic describes how to configure the upper and lower alarm threshold of the analogue
parameters, such as temperature, humidity, voltage, and current, or set the customized analogue
alarm.
Prerequisite
The H303ESC,H304ESC EMU is in the position and works in the normal state.
Procedure
Step 1 Run the interface emu command to enter the H303ESC,H304ESC mode.
Step 2 Run the esc analog command to configure the H303ESC,H304ESC analogue parameters.
Step 3 Run the display esc system parameter command to query the ESC system analogue parameters.
----End
Example
To set the upper and lower temperature thresholds as 55 and 5, do as follows:
Enter the H303ESC,H304ESC mode.


Configure the H303ESC,H304ESC analogue parameters: the analogue ID is 0, the upper

temperature threshold is 55, and the lower temperature threshold is 55.
huawei(config-if-h303esc-0)#esc analog 0 alarm-upper-limit 55 alarm-lower-limit 5
Query the ESC system analogue parameters.

huawei(config-if-h303esc-0)#display esc system parameter
EMU ID: 0 ESC system parameter

----------------------------------------------------------------------------
AnalogID Name AlmUpper AlmLower TestUpper TestLower Unit Type
0 Temperature 55 5 127 -128 C Voltage
1 Input_-48V_0 72 38 127 -128 Volt Voltage
5 - 127 -128 127 -128 - Voltage
6 - 127 -128 127 -128 - Voltage
7 - 127 -128 127 -128 - Voltage
8 - 127 -128 127 -128 - Voltage
----------------------------------------------------------------------------
DigitalID Name Level |DigitalID Name Level
0 Wiring 1 | 1 Door0 0
2 - 1 | 3 - 1
4 - 1 | 5 - 1
6 - 1 | 7 - 1
8 - 1 | 9 Water_Alarm 1
10 Arrester 0 0 | 11 Arrester 1 0
14 SW_A1 0 | 15 SW_A2 0
16 SW_B1 0 | 17 SW_B2 0
18 SW_C1 0 | 19 SW_C2 0
20 SW_D1 0 | 21 SW_D2 0
22 Outer Sensor Power 0
----------------------------------------------------------------------------
Related Operation
Table 35-6 shows the related operation for configuring H303ESC,H304ESC analogue
parameters.
Table 35-6 Related operation for configuring H303ESC,H304ESC analogue parameters

Query the environment display esc environment H303ESC,H304ESC

information info environment monitoring
mode
Query alarm information display esc alarm H303ESC,H304ESC

environment monitoring
mode
Query customized analogue display outside-analog H303ESC,H304ESC

alarms private-alarm environment monitoring
mode
Query H303ESC,H304ESC display version H303ESC,H304ESC

version number environment monitoring
mode

35.8 Configuring the ESC digital Parameters

This topic describes how to configure the alarm level of the digital parameters such as the door
status censor or to configure the customized alarm of digital parameters.
Prerequisite
The H303ESC or the H304ESC EMU is in the position and works in the normal state.
Procedure
Step 1 Run the interface emu command to enter the H303ESC or the H304ESC mode.
Step 2 Run the esc digital command to configure the H303ESC or the H304ESC digital parameters.
Step 3 Run the display esc system parameter command to query the ESC system digital parameters.
----End
Example
To set the alarm of the door status sensor to high level, do as follows:
Enter the EMU mode.

Configure the H303ESC/H304ESC digital parameters.

huawei(config-if-h303esc-0)#esc digital 2 available-level high-level digital-alarm
9
Query the settings of the digital parameters.

huawei(config-if-h303esc-0)#display esc system parameter
EMU ID: 0 ESC system parameter

--------------------------------------------------------------------------------
AnalogID Name AlmUpper AlmLower TestUpper TestLower Unit Type
0 Temperature 35 5 127 -128 C Voltage
5 - 127 -128 127 -128 - Voltage
6 - 127 -128 127 -128 - Voltage
7 - 127 -128 127 -128 - Voltage
8 - 127 -128 127 -128 - Voltage
--------------------------------------------------------------------------------
DigitalID Name Level |DigitalID Name Level
0 Wiring 1 | 1 Door0 0
2 - 1 | 3 - 1
4 - 1 | 5 - 1
6 - 1 | 7 - 1
8 - 1 | 9 Water_Alarm 1
14 SW_A1 0 | 15 SW_A2 0
16 SW_B1 0 | 17 SW_B2 0
18 SW_C1 0 | 19 SW_C2 0
20 SW_D1 0 | 21 SW_D2 0

22 Outer Sensor Power 0

--------------------------------------------------------------------------------
Related Operation
Table 35-7 lists the related operations for configuring H303ESC or the H304ESC digital
parameters.
Table 35-7 Related operations for configuring H303ESC or the H304ESC digital parameters
Query the environment display esc environment H303ESC or H304ESC

information info environment monitoring
mode
Query the alarm information display esc alarm H303ESC or H304ESC

environment monitoring
mode
Query the customized digital display outside-digital H303ESC or H304ESC

alarms private-alarm environment monitoring
mode
Query the H303ESC or display version H303ESC or H304ESC

H304ESC version number environment monitoring
mode
35.9 Configuring the FAN Alarm Report

This topic describes how to configure the report of the FAN running alarms to the EMU.
Prerequisite
The FAN EMU must exist and must work in the normal state.
Procedure
Step 1 Run the interface emu command to enter the FAN mode.
Step 2 Run the fan alarmset command to configure the FAN alarm report.
Step 3 Run the display fan system parameter command to query the information about the FAN alarm.
----End
Example
To disable the report of the FAN block alarm, do as follows:
huawei(config-if-fan-1)#fan alarmset block forbid
EMU ID: 0


--------------------------------------------------------
FAN timing mode: Manual timing
FAN speed level: 4
--------------------------------------------------------
Fan block Forbid
Power fault Permit
--------------------------------------------------------
Related Operation
Table 35-8 lists the related operations for configuring the FAN alarm report.
Table 35-8 Related operations for configuring the FAN alarm report
Query the running display fan environment FAN environment

information about a fan tray info monitoring mode
Query the alarm information display fan alarm FAN environment

about a fan tray monitoring mode
35.10 Setting the FAN Speed Adjustment Mode

This topic describes how to set the fan speed adjustment mode. If the fan is not in automatic
adjustment mode, the air flow increases to a great extent in the case of low or normal temperature.
Prerequisite
Context
The two fan speed adjustment modes are as follows:
l Automatic
l Manual
By default, the mode is automatic with the fan speed level of 5. It is recommended that you
change the mode to automatic.
If the mode is not set to automatic, the air flow increases to a great extent in the case of low or
normal temperature.
Procedure
Step 2 Run the fan speed command to set the fan speed adjustment mode.

Step 3 Run the display fan system parameter command to query the parameter setting.
----End
Example
To set the fan speed adjustment mode as automatic, do as follows:
huawei(config-if-fan-0)#fan speed mode automatic
EMU ID: 0
--------------------------------------------------------
FAN timing mode: Auto timing
FAN speed level: 4
--------------------------------------------------------
Fan block Forbid
Power fault Permit
--------------------------------------------------------
Related Operation
Table 35-9 lists the related operations for setting the fan speed adjustment mode.
Table 35-9 Related operations for setting the fan speed adjustment mode
Set the fan speed fan speed adjust You can set the fan speed in
the manual fan speed
adjustment mode.
Set the fan to report alarm fan alarmset -

information to the control
unit
Query the alarm information display fan alarm -

about a fan tray
35.11 Configuring the FAN Speed

This topic describes how to configure the FAN speed.
Prerequisite
Context
FAN speed level ranges from 0 to 5. Level 0 refers to the lowest fan speed level and level 5
refers to the highest fan speed level.

l The nominated fan speed is enough for heat dissipation when the system works in the
permitted highest temperature.
l Running at a low speed can reduce the wearout of a fan and prolong its life.
l When abnormality occurs or one of the fans fails, other fans can run at high speed to
compensate the air flow.
l Reduction of the fan speed relieves the dust absorption and prevents the air filter from a
block.
l You can set the fan speed in the manual fan speed adaptation mode.
Procedure
Step 2 Run the fan speed command to configure the FAN speed.
Step 3 Run the display fan system parameter command to query the setting of the FAN speed.
----End
Example
To set the FAN speed as 3, do as follows:
huawei(config-if-fan-0)#fan speed adjust 3
EMU ID: 0
--------------------------------------------------------
FAN timing mode: Manual timing
FAN speed level: 3
--------------------------------------------------------
Fan block Forbid
Power fault Permit
-------------------------------------------------------
Related Operation
Table 35-10 lists the related operations for setting the FAN speed.
Table 35-10 Related operations for setting the FAN speed
Set the fan speed adjustment mode fan speed mode
Set the fan to report alarm information to the fan alarmset

control unit
Query the alarm information about a fan tray display fan alarm

35.12 Configuring a POWER4845 EMU

This topic describes how to configure a POWER4845 EMU.
Context
Table 35-11 lists the commands for configuring a POWER4845 EMU.
Table 35-11 Commands for configuring a POWER4845 EMU

Function Run the Command... Remarks
Set the POWER4845 power battery parameter This command is used to set
battery parameters the battery charging current-
limit coefficient, equalized-
charging time, the number of
the battery group, and the
battery capacity.
Set the POWER4845 power environment This command is used to set

environment parameters the upper/lower alarm
thresholds and upper/lower
test limits for the environment
humidity or temperature. This
ensures the power to generate
an alarm when it works in an
environment that does not
match the set conditions.
Set the number of the power module-num Power 4845 supports up to 3

POWER4845 modules rectifier modules.
Set the POWER4845 power module-parameter This command is used to set

module parameters the switch-on and switch-off
control of the POWER4845
module. By default, the
power modules are switched
on, which means that the
modules supply power for the
system.

Set the POWER4845 power off Power off occurs in two cases:
power-off parameters load power off and battery
power off.
l When the mains input
stops working, the
batteries provide power for
the system.
l When the output voltage
from the batteries drops
below the load power off
voltage, the power supply
for service load is
disconnected.
l When the output voltage
from the batteries drops
below the battery power
off voltage, the batteries
stop working.
l When the voltage of the
battery group reaches the
battery group power-off
threshold, the system stops
supplying the power for the
battery group.
Set the POWER4845 power supply-parameter This command is used to set

supply parameters the AC over-voltage, AC
under-voltage, DC over-
voltage and DC under-
voltage alarm thresholds for a
power, to enable the rectifier
module to power off
automatically when the AC
voltage or DC voltage is
abnormal.
Set the backup parameters power outside_digital This command is used to set
of the POWER4845 such extended digital
parameters such as valid
level, name to identify the
digit and self-defined alarm to
monitor the device digits in
time.
Set the battery charging power charge This command is used to set
parameters the charging mode and
charging voltage for batteries
connected to POWER4845.

Set the power4845 test power battery-test This command is used to set
parameters the battery auto-test period
parameters and the
discharging end-voltage to
implement the battery auto-
discharging test.
Set the high temperature power temperature-off This command is used to set
power-off parameters the load or battery high
temperature power-off
parameters and to protect the
load or battery.
Ensure that the following conditions are met in the configuration:
l DC over-voltage > battery even charging voltage > battery float charging voltage > DC
under-voltage > load power-off voltage > battery power-off voltage
l DC over-voltage > (float charging voltage + 2 V)
l Float charging voltage > (DC under-voltage + 2 V)
NOTE
You can run the following commands to configure the parameters:

l Run the power charge command to set the battery equalized-charging voltage or the battery float
charging voltage.
l Run the power battery parameter command to set the DC undervoltage or the DC overvoltage.
l Run the power temperature-off command to set the battery power-off voltage or the battery group
power-off voltage.
Procedure
Run the commands listed in Table 35-11 to configure a POWER4845 EMU.
----End
Example
To run the power battery parameter command to set the battery charging current-limit
coefficient as 0.2, the equalized-charging time as 60d, the number of the battery group as 1, and
the battery capacity as 130 AH, do as follows:
huawei(config-if-power4845-3)#power battery parameter 0.2 60 1 130
Related Operation
Table 35-12 lists the related operations for configuring a POWER4845 EMU.

Table 35-12 Related operations for configuring a POWER4845 EMU

Function Run the Command...
Query the power alarms display power alarm
Query the power environment display power environment info

information
Query the power environment display power environment parameter

configuration
Query the power running display power run info

information
Query the power configuration display power system parameter
Query the POWER4845 battery display power battery-test info

test parameters

UA5000 Universal Access Unit 36 Configuration Example of the Integrated Data and Voice
Configuration Guide-IPM CLI Networking
36 Configuration Example of the Integrated

Data and Voice Networking
About This Chapter
The following lists the contents of this chapter.

36.1 Networking
This topic describes a typical integrated networking of the UA5000.
36.2 Prerequisites
This topic describes the prerequisites for the integrated data and voice networking of the
UA5000.
36.3 Data Plan (IPMB)
This topic describes the data plan for the integrated data and voice networking of the UA5000.
36.4 Configuration Procedure (IPM)
This topic describes how to configure the broadband service of the UA5000 IPM through a serial
port or a network port (Telnet) based on the planned broadband data.
36.5 Verification
This topic describes how to verify the integrated data and voice networking of the UA5000

36 Configuration Example of the Integrated Data and Voice UA5000 Universal Access Unit
Networking Configuration Guide-IPM CLI
36.1 Networking
This topic describes a typical integrated networking of the UA5000.
This topic describes the integrated networking of the AMSAN and the CMSAN. After reading
the configuration flow of the main services supported by the UA5000, you will have an overall
understanding about the integrated networking.
l CMSAN: The IPMB board provides the data service and the PVMB board provides the
voice service. The packets of the voice service, and the management packets of the data
and voice services are directly transmitted upstream through the FMSAN. The bidirectional
forwarding detection (BFD) is used to improve the reliability of the services and the inband
channel.
l AMSAN: The packets of the data service transmitted upstream by the CMSAN are
converged on the AMSAN. The BFD is also used to improve the reliability of the
management packets on the AMSAN.
NOTE
The BFD is a mechanism that quickly detects the status of the link between two devices. The BFD ensures
that the services are quickly switched to the standby channel when the active channel is found faulty. In
this manner, the BFD can improve the reliability of the services and the inband maintenance channel.
Figure 36-1 shows the integrated networking of the UA5000.

Figure 36-1 Integrated networking of the UA5000
iMangager N2000
MGC Multicast server DHCP server
Router C
Router A Router B
(Active) (Standby)
FMSAN
I I G G
P P A A
M M U U AMSAN
B B A A
P P I I P P C C D E
W W P P V V S S S D
X X M M M M R R L T CMSAN
B B B B B B B B D B
Modem Phone
PC ISDN ISDN
Phone Phone
phone phone

36.2 Prerequisites
This topic describes the prerequisites for the integrated data and voice networking of the
UA5000.
l The hardware commissioning must be complete, and the system must be available for
service configuration.
l The modem must be connected and must be in the normal state.
l The upper layer devices, including the BRAS, DHCP sever, multicast sever, MGC, and
BMS workstation must work in the normal state.
36.3 Data Plan (IPMB)

This topic describes the data plan for the integrated data and voice networking of the UA5000.
Table 36-1 provides the data plan for configuring the integrated data and voice networking of
the UA5000.
Table 36-1 Data plan for configuring the integrated data and voice networking
Item Data Remarks
Uplink port Port number: 0/2/0; Rate: 100 Mbit/s; Flow If the uplink port is a GE
control switch state: enabled port, use the default
configuration.
Inband BMS NM VLAN ID: 31; type: standard -
IP address of the L3 interface: 133.5.24.3
IP address of the next hop router:

133.5.24.2
IP address of the BMS host: 134.140.5.79
l Community name: public, with the read- -

only right.
l Community name: private, with the
read-write right.
l Enable the standard SNMP trap
message.
ADSL service Subscriber access port number: 0/7/0 -

0/7/31
VPI: 8; VCI: 35
VLAN ID: 32-63; type: Mux
Traffic profile: Upstream bandwidth 512

kbit/s, downstream bandwidth 1 Mbit/s
Uplink port: 0/2/0

Item Data Remarks
Traffic entry priority: 1
SHDSL service Subscriber access port number: 0/8/0 -

0/8/15
VPI: 8; VCI: 35
VLAN ID: 64-79; type: Mux
Traffic profile: 1 Mbit/s
Uplink port: 0/2/0
Multicast service VLAN ID: 104; type: Smart The multicast service
uses the DHCP mode to
Subscriber access port number: 0/7/0 obtain the IP address.
0/7/31 The priority of the
VPI: 0; VCI: 35 multicast traffic entry is
higher than the priority
Uplink port: 0/2/0 of the Internet access
subscriber.
IP address of the L3 interface: 10.2.2.1
IP addresses of the DHCP server: 10.2.2.2,

10.2.2.3
IP address of the multicast program:

224.1.1.1
Right profile name: profile0
Program name: program1
Traffic entry priority: 5
Internet access mode xDSL service: VPI 8, VCI 35, PPPoE The xDSL services use
mode, set the modem to the bridge mode. the PC dialing method.
If the modem dialing
Multicast service: VPI 0, VCI 35, IPoE method is needed, set
mode, set the modem to the bridge mode. the modem to the
bridged PPPoE mode.
36.4 Configuration Procedure (IPM)

This topic describes how to configure the broadband service of the UA5000 IPM through a serial
port or a network port (Telnet) based on the planned broadband data.
Procedure
Step 1 Query the host software version.
huawei(config)#display language

NOTE
If the version does not match the planned version, see the version upgrade guide to update the host software
to the planned host software version.
Step 2 Query and confirm the board.

huawei(config)#display board 0
huawei(config)#board confirm 0
Step 3 Configure the uplink port of the UA5000.

huawei(config-if-ipm-0/2)#flow-control 0
Step 4 Configure the log host.

huawei(config)#loghost add 217.188.56.40 syslog-1
huawei(config)#loghost activate ip 217.188.56.40
huawei(config)#loghost add 217.188.57.40 syslog-2
huawei(config)#loghost activate ip 217.188.57.40
Step 5 Add a standard VLAN, and assign FE ports 6 and 7 and IP uplink port 0 to the VLAN.
Step 6 Configure the inband BMS.

huawei(conffig-if-vlanif31)#ip address 133.5.24.3 255.255.255.0
huawei(conffig-if-vlanif31)#quit
huawei(config)#snmp-agent target-host trap address 134.140.5.79 securityname
private
Step 7 Configure the ADSL service.

huawei(config)#vlan 32 to 63 mux
huawei(config)#port vlan 32 to 63 0/2 0
huawei(config)#traffic table index 7 ip car 10240 priority 1 priority-policy tag-In-
Package


Command:
adsl line-profile add
3
Start adding
profile
neglected
>Do you want to name the profile (y/n)
[n]:
> Please choose default value type 0-adsl 1-adsl2+ (0~1)
[0]:
> Will you set interleaved delay? (y/n)
[n]:
> Target SNR margin in downstream(0~15 dB) [6]:
> Minimum SNR margin in downstream (0~6 dB) [0]:
> Target SNR margin in upstream (0~15 dB) [6]:
> Minimum SNR margin in upstream (0~6 dB)
[0]:
> Will you set parameters for rate? (y/n)[n]:y
> Minimum transmit rate in downstream (32~8160 Kbps) [32]:
> Maximum transmit rate in downstream (32~8160 Kbps) [6144]:1024
> Minimum transmit rate in upstream (32~896 Kbps)
[32]:
> Maximum transmit rate in upstream (32~896 Kbps) [640]:512
huawei(config-if-adsl-0/7)#alarm-config all 1
huawei(config-if-adsl-0/7)#deactivate all
huawei(config-if-adsl-0/7)#activate all profile-index 3
Step 8 Configure the SHDSL service.

huawei(config)#vlan 64 to 79 mux
huawei(config)#port vlan 64 to 79 0/2 0
huawei(config)#service-port vlan 64 shdsl 0/8/0 vpi 8 vci 35 rx-cttr 6 tx-cttr 6



Command:
shdsl line-profile add
Start adding profile 2
> G.SHDSL interface mode of line (1--two wire;2--four wire)
[1]:
> Do you use the default data to create a line profile?(y/n)
[y]:n
> G.SHDSL minimum line
rate
> G.SHDSL maximum line
rate
1024
> Power Spectral Density mode (1--symmetric;2--asymmetric)
[1]:
> Transmission mode (1--G.991.2 Annex A;2--G.991.2 Annex
B;
3--support Annex A)
[3]:
> Remote enable (1--enabled;2--disabled)
[1]:
> Probe enable (1--disabled;2--enabled)
[1]:
> Do you config the target SNR margin?(y/n)
[n]:
huawei(config-if-sdl-0/8)#alarm-config all 1
huawei(config-if-sdl-0/8)#deactivate all
huawei(config-if-sdl-0/8)#activate all 2

huawei(config)#traffic table index 8 ip car 10240 priority 5 priority-policy tag-In-
Package


huawei(config)#dhcp domain video //Refer to the actual DHCP option 60 threshold.
huawei(config-dhcp-domain-video)#dhcp-server 2
huawei(config-if-vlanif104)#dhcp domain video gateway 10.2.2.1
huawei(config)#btv
huawei(config-btv)#igmp uplink-port 0/2/0
huawei(config-btv)#igmp video-port vpi 0 vci 35
huawei(config-btv)#igmp program add name program1 ip 224.1.1.1 vlan 104 bind 0/2/0
huawei(config-btv)#igmp profile profile0 program-name program1 watch
huawei(config-btv)#igmp user add slot 0/7 auth
huawei(config-btv)#igmp user bind-profile slot 0/7 profile-name profile0
Step 10 Configure the Internet access mode (configure the modem).

l PPPoE mode
Set the modem to be in the bridge mode.
Set the VPI/VCI of the WAN port on the modem to 8/35.
Install the PPPoE dialup software on the computer terminal, and set the user name and
password.
l IPoE mode
Set the modem to be in the bridge mode.
Set the VPI/VCI of the WAN port on the modem to 0/35.
----End
36.5 Verification
This topic describes how to verify the integrated data and voice networking of the UA5000
Context
All the services configured on each UA5000 should be provisioned successfully.

Configuration Guide-IPM CLI A FAQ
A FAQ
A.1 How to prevent the system breakdown or the service interruption of the UA5000 caused by
the network attacks through the proper configuration?
A.2 How Many PVCs are Supported by Each xDSL Port?
A.3 Does the PVC Have Priority?
A.4 How to Configure the Static User?
A.5 How to Configure the BMS VLAN?
A.6 How to Change the BMS VLAN?
A.7 How to Change the Service VLAN to Which the xDSL Port Belongs?
A.8 How to Delete the VLAN to Which the Uplink Port Is Bound?
A.9 How to Transparently Transmit the VLAN on the IPM Board?
A.10 Why Is the Actual Rate of the User Lower Than the Rate of the Bound Line Profile?
A.11 How to Query MAC Addresses of Online Users and Query the Ports that Provide the Access
for the Users According to the MAC Addresses?
A.12 How to Delete the Service Board?
Issue 05 (2009-04-30) Huawei Proprietary and Confidential A-1

A FAQ Configuration Guide-IPM CLI
A.1 How to prevent the system breakdown or the service

interruption of the UA5000 caused by the network attacks
through the proper configuration?
A: The common improper configurations that affect the system security are as follows:
l The ring network detection function and the anti-MAC address-spoofing function are
disabled. When the anti-MAC address-spoofing function is disabled, the illegal user sends
the PPPoE and DHCP control packets by forging the MAC address of a legal user. In this
case, the security of the system is affected.
Run the ring check command to enable the ring network detection function on the user
side. For details, see "21.6 Enabling the Ring Network Detection on the User Side."
Run the security anti-macspoofing enable command to enable the anti-MAC address-
spoofing function. For details, see "20.7 Enabling the Anti MAC Spoofing Function."
l Manage the device by using the IP addresses of the public network, and the access
authorities are not limited strictly when the ACL rule is configured. In this case, the network
is attacked.
To ensure the security of the device, manage the device by using the IP addresses of the
private network. When configuring the ACL rule, you must comply with the principle of
the minimum authorization to configure the accessible address segment. The accessible
address segment can contain only the mandatory IP addresses of the management network
segment. Other IP addresses cannot access the device management interface. For details,
see "21.9 Configuring an Accessible Address Segment."
l The packets that access the device management interface are not controlled so that the
device is attacked by the packets. In this case, the system is caused to be busy and the
services are affected.
Run the firewall packet-filter command to apply the packet filtering rules of the firewall
to the interface to filter the packets that access the interface. In this case, the packet attack
is prevented. For details, see "21.8 Configuring the Firewall Function."
A.2 How Many PVCs are Supported by Each xDSL Port?

A: If the control board is the IPMB board, each xDSL port supports six PVCs. If the control
board is the IPMD board (including the H601IPMD and H612IPMD boards), each xDSL port
supports eight PVCs.
A.3 Does the PVC Have Priority?

A: The PVC has priority. Run the traffic table command to create the traffic entry and set the
priority policy to Pvc-Setting. Then, reference the corresponding traffic index when creating
the service virtual port to configure the priority of the PVC.
A.4 How to Configure the Static User?
A-2 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

A: "Static" and "dynamic" refer to the modes in which the user obtains the IP address. In the
static mode, the IP address of the user is manually added on PC. Therefore, the static user is also
called the user with the fixed IP address. The user should be specified as the static user on the
BRAS. In the dynamic mode, the IP address is allocated by the BRAS and automatically obtained
on PC.
The static user is a type of user on the BRAS. The data of the static user is configured on the
BRAS. The procedure for adding a static user on the UA5000 is the same as the procedure for
adding a dynamic user on the UA5000. You need only to create a VLAN, and add the uplink
port and service port to the VLAN.
A.5 How to Configure the BMS VLAN?

A: The procedure for configuring the BMS VLAN is the same as the procedure for configuring
the service VLAN. It is recommended that you use the standard VLAN for the BMS VLAN.
The procedure for configuring the BMS VLAN is as follows:

1. Run the vlan command to add the standard VLAN as the BMS VLAN.
2. Run the port vlan command to add the uplink port to this VLAN.
3. Run the interface vlanif command to create the VLAN interface in the global config mode
and enter the corresponding VLANIF mode. Run the ip address command to configure
the IP address of the layer 3 interface for the BMS VLAN.
NOTE
For information about the configuration, see "4.7 Configuring the IP Address of the Inband BMS." On
the devices of early versions, the "BMS VLAN" is called "management VLAN". The name is unified as
"BMS VLAN" on the UA5000. The configuration of the "BMS VLAN" is different from the configuration
of the previous "management VLAN".
A.6 How to Change the BMS VLAN?

A: If you need to change the BMS VLAN, use the new BMS VLAN when reconfiguring the
BMS service by using the method of configuring the BMS service.
CAUTION
Changing the BMS VLAN interrupts the BMS service temporarily until the configuration of the
new BMS service is complete.
A.7 How to Change the Service VLAN to Which the xDSL

Port Belongs?
A: Modifying the service VLAN is modifying the service virtual port because the port is bound
to the service VLAN through the service virtual port. On the devices of early versions, the service
virtual port is called PVC.

A FAQ Configuration Guide-IPM CLI
To modify the service VLAN, do as follows:

1. Run the undo service-port command to delete the service virtual port (PVC).
2. Reconfigure the VLAN to which the xDSL belongs.
NOTE
For information about the restriction on deleting the service virtual port, see the usage guidelines in the
undo service-port command.
A.8 How to Delete the VLAN to Which the Uplink Port Is

Bound?
A: To delete the VLAN to which the uplink port is bound, do as follows:
1. Run the undo port vlan command to delete the uplink port of the VLAN.
2. Run the undo vlan command to delete the VLAN.
A.9 How to Transparently Transmit the VLAN on the IPM

Board?
A: To transparently transmit the VLAN on the IPM board, ensure that the native VLAN of the
uplink port is different from the VLAN on the user side.
A.10 Why Is the Actual Rate of the User Lower Than the Rate
of the Bound Line Profile?
A: The UA5000 can limit the user rate through the line profile or through the traffic table. When
the user rate is limited through both the line profile and the traffic table, the actual rate of the
user is the lower rate limited by the two items. Therefore, when the actual rate of the user is
lower than the rate of the bound line profile, check the rate of the traffic table to which the
corresponding service virtual port (PVC) of the user is bound. Then, change the traffic table or
the rate of the traffic table to which the service virtual port is bound according to the requirement.
A.11 How to Query MAC Addresses of Online Users and

Query the Ports that Provide the Access for the Users
According to the MAC Addresses?
A: Run the display mac-address all command to query the MAC addresses of all the online
users, and then run the display location command to query the ports that provide the access for
the users according to the specified MAC addresses.
A.12 How to Delete the Service Board?
A-4 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

A: Delete the PVC (namely, the created service virtual port) allocated for the board, and then
delete the board. In the case of the board that is prohibited on site, it is recommended that you
delete the board after unprohibiting the board.

Configuration Guide-IPM CLI B Acronyms & Abbreviations
B Acronyms & Abbreviations
A
AAA Authentication, Authorization and Accounting
ABR Area Border Router
ACL Access Control List
ARP Address Resolution Protocol
AS Autonomous System
ASBR Autonomous System Border Router
B
BDR Backup Designated Router
BMS HUAWEI iManager N2000 Broadband
Integrated Network Management System
BPDU Bridge Protocol Data Unit
BTV Broadcast TV
C
CAR Committed Access Rate
CC Connection Confirm
CFM Connectivity Fault Management
CIDR Classless Inter-Domain Routing
CLI Command Line Interface
CRC Cyclic Redundancy Code
D
DHCP Dynamic Host Configuration Protocol
Issue 05 (2009-04-30) Huawei Proprietary and Confidential B-1

B Acronyms & Abbreviations Configuration Guide-IPM CLI
DHCP option82 DHCP relay agent option 82

DoD Downstream on Demand
DoS Denial of Service
DR Designated Router
DSLAM Digital Subscriber Line Access Multiplexer
DU Downstream Unsolicited
E
EMU Environment Monitoring Unit
F
FE Fast Ethernet
FEC Forward Error Correction
FTP File Transfer Protocol
FIFO First In First Out
G
GE Gigabit Ethernet
GEM GPON Encapsulation Method
I
Internet Control Message Protocol Label
ICMP
Distribution Protocol
IGMP Internet Group Management Protocol
IGP Interior Gateway Protocol
IP Internet Protocol
IPoA Internet Protocol Over ATM
IPoE IP over Ethernet
ISP Internet Service Provider
L
LAN Local Area Network
LDP Label Distribution Protocol
LSA Link State Advertisement
LSDB Link State Database
LSP Label Switched Path
B-2 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Configuration Guide-IPM CLI B Acronyms & Abbreviations
M
MA Maintenance Association
MAC Medium Access Control
MBS Maximum Burst Size
MD Maintenance Domain
MDU Multi-dwelling unit
MEP Maintenance association End Point
MIB Management Information Base
MIP Maintenance association Interspace Point
MTU Maximum Transmission Unit
N
NBMA Non Broadcast MultiAccess
NHLFE Next Hop Label Forwarding Entry
NIC Network Information Center
NMS Network Management System
O
OSPF Open Shortest Path First
P
PITP Policy Information Transfer Protocol
PON Passive Optical Network
PPPoA Point-to-Point Protocol Over ATM
PPPoE Point-to-Point Protocol Over Ethernet
PQ Priority Queuing
PPP Peer-Peer Protocol
PSN Packet Switched Network
Q
QoS Quality of Service
R
RADIUS Remote Authentication Dial in User Service
RARP Reverse Address Resolution Protocol
Issue 05 (2009-04-30) Huawei Proprietary and Confidential B-3

B Acronyms & Abbreviations Configuration Guide-IPM CLI
RFC Remote Feature Control

RIP Routing Information Protocol
RMON Remote Network Monitoring
S
SNMP Simple Network Management Protocol
SSH Secure Shell
STB Set Top Box
STP Spanning Tree Protocol
T
TCP/IP Transmission Control Protocol/Internet Protocol
TFTP Trivial File Transfer Protocol
TOS Type of Service
TTL Time To Live
U
UDP User Datagram Protocol
V
VLAN Virtual LAN
VOD Video On Demand
VT Virtual Terminal
VTP VLAN Trunk Protocol
VTY Virtual Type Terminal
W
WRR Weighted Round Robin
B-4 Huawei Proprietary and Confidential Issue 05 (2009-04-30)

Configuration Guide-IPM CLI (V100R017 - 05)

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Configuration Guide-IPM CLI (V100R017 - 05)

Uploaded by

Copyright:

Available Formats

UA5000 Universal Access Unit

Configuration Guide-IPM CLI

Huawei Proprietary and Confidential

Huawei Technologies Co., Ltd.

Copyright Huawei Technologies Co., Ltd. 2009. All rights reserved.

Trademarks and Permissions

Huawei Proprietary and Confidential

About This Document.....................................................................................................................1

2 Configuring the Maintenance Terminal................................................................................2-1

3 CLI Operation Basics.................................................................................................................3-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential i

3.3.7 Setting the Terminal Type....................................................................................................................3-15

4 Configuring the BMS................................................................................................................4-1

5 Configuring the Log Host.........................................................................................................5-1

6 User Management...................................................................................................................... 6-1

ii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

7.3 Setting the Description of a Shelf...................................................................................................................7-3

8 Configuring Remote User Authentication............................................................................8-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential iii

9.9 Configuring the Upstream CAR for a VLAN...............................................................................................9-15

10 Configuring DHCP Relay.....................................................................................................10-1

11 Configuring the ARP/ARP Proxy........................................................................................11-1

12 Configuring a Routing Protocol..........................................................................................12-1

iv Huawei Proprietary and Confidential Issue 05 (2009-04-30)

12.7.10 Configuring the Route Filtering Policy..........................................................................................12-28

Issue 05 (2009-04-30) Huawei Proprietary and Confidential v

12.13 Configuring the Route Filtering Policy...................................................................................................12-59

vi Huawei Proprietary and Confidential Issue 05 (2009-04-30)

15.3 Configuration Example of the NTP Multicast Mode..................................................................................15-8

16 Managing the MAC Address ..............................................................................................16-1

17 Configuring the TCP/IP Connection..................................................................................17-1

18 Configuring the ACL.............................................................................................................18-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential vii

18.13 Activating an ACL..................................................................................................................................18-21

19 Configuring the QoS.............................................................................................................19-1

20 Configuring the User Security.............................................................................................20-1

21 Configuring the System Security........................................................................................21-1

22 Configuring the ADSL2+ Service.......................................................................................22-1

viii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

22.8 Activating an ADSL2+ Port......................................................................................................................22-35

23 Configuring the SHDSL Service.........................................................................................23-1

24 Configuring the VDSL2 Service..........................................................................................24-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential ix

25 Protection Configuration for an Upstream Link..............................................................25-1

26 Configuring the LAN Access ..............................................................................................26-1

27 Configuring the EPON Upstream Transmission.............................................................27-1

28 Configuring the GPON Upstream Transmission............................................................28-1

29 Configuring the Device Subtending..................................................................................29-1

30 Configuring the VLAN Stacking Wholesale Service......................................................30-1

31 Configuring the QinQ VLAN Leased Line Access..........................................................31-1

x Huawei Proprietary and Confidential Issue 05 (2009-04-30)

31.2 Configuration Example of the QinQ VLAN Leased Line Service.............................................................31-2

32 Configuring the Multicast Service......................................................................................32-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential xi

32.14.1 Adding a BTV user........................................................................................................................32-61

33 Configuring the Triple Play Service...................................................................................33-1

34 Configuring the BFD.............................................................................................................34-1

35 Configuring the Environment Monitoring.......................................................................35-1

xii Huawei Proprietary and Confidential Issue 05 (2009-04-30)

36 Configuration Example of the Integrated Data and Voice Networking..................... 36-1

B Acronyms & Abbreviations....................................................................................................B-1

Issue 05 (2009-04-30) Huawei Proprietary and Confidential xiii

Figure 1-1 Example network for configuring the license application..................................................................1-4