Sei sulla pagina 1di 95

MSAN MA5600T

Basic Configuration

www.huawei.com

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved.


Objectives
Upon completion of this course, you will be able to:

Know how to setup configuration Terminal.

Know how to manage user and equipment.

Know how to configure Network Management
Know how to do Basic Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page3
Contents
1. Maintenance Environment

2. Command Line Feature

3. Basic System Operation

4. Network Management Configuration

5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page4
Management Entities
The MA5600T supports two OSS
management entities
CLI (command Line PC
EMS
Interface ) agent
SNMP (Simple Network
Management Protocol) CLI SNMP
agent Agent Agent

MIB
System Platform

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page5
Connect to the System
Command line interface

Serial port configuration mode

The maintenance information goes through the
maintenance COM port.

Telnet configuration mode
Outband: The maintenance information goes
through the maintenance Ethernet port.
Inband: The maintenance information goes through
the service channel.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page6
First Time Login -Serial Port Mode
SCU
Serial port
CON
RS-232 serial ETH
port cable
PC ESC

MA5600T
Run Hyper terminal in the computer and set the correct parameters

Hyper
Start All Programs Accessories Communication
Terminal
Hypertrm.exe
Bit per Second :9600
Data Bit:8
Parity: None
Stop Bit:1
Flow Control: None

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page7
Telnet Configuration Mode
SCU
Ethernet cable
Outband
LAN
LAN CON
PC ETH
ESC

MA5600T

SCU GICF

Inband 0/19/0
IP
IP 0/19/0
0/9/0
0/9/1 0/20/0
PC 0/9/2
0/20/1
0/9/3
MA5600T

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page8
Questions
Q: How many types of mode to configure the
MA5600T?
A:

Q: How to connect to the system?


A:

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page9
Contents
1. Maintenance Environment

2. Command Line Feature

3. Basic System Operation

4. Network Management Configuration

5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page10
Login to the System
The system has one default user account

Username: root

Password: admin

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page11
Command Line Modes
The MA500T provides multiple
command modes to implement
BTV mode
hierarchical protection for MA5600T(BTV)#

preventing any unauthorized


access. BTV quit

config Global config mode


User mode enable Privilege mode
Login MA5600T> MA5600T# MA5600T(config)#
quit disable quit

interface... quit

return
Port/Interface mode
MA5600T(config-if-...)#

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page12
Command Line Features
Obtain Help Information

MA5600T(config)#interface ?
{aiu<K>|scu<K>|giu<K>|opf<K>|eth<K>|adsl<K>|shl<K>|
gpon<K>|emu<K>|vdsl<K>|oam<K>|top<K>|tunnel<K>|
null<K>|meth<K>|vlanif<K>|loopback<K> }:

Intelligent matching

MA5600T>ena [space]
MA5600T>enable

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page13
Command Line Features
Display History Commands

MA5600T(config)#display history-command
--------------------------------------------------
No. Command
--------------------------------------------------
10 terminal
9 smart
8 interactive
7 interface Key Board
6 config
5 en
4 interface
3 quit
2 interface
1 interactive
--------------------------------------------------

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page14
CLI Command Control
Characters
Deletes the characters before the cursor
Press <Backspace >
Moves the cursor to the left / right of one character
Press <Left arrow key or Ctrl A>
Press <Right arrow key or Ctrl D>
Displays history commands
Press <Up/Down arrow key / >
Press < Ctrl P>
Enter display history command
Suspends the display and the running of commands
Press < Ctrl C>

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page15
Command Line Parameter
Meaning
Charact
Meaning
er
<K> Keyword

<E> Enumeration. Items following it are the available options.

<U> ULONG. Information following it is the range of the value to be entered

<L> LONG. Information following it is the range of the value to be entered.

<S> Character string. Information following it is the length of the character string to
be entered.

<I> IP address

<M> MASK, such as the mask of an IP address.

<PA> MAC address

<H> Hexadecimal number. The system supports the input of "0x".

<D> <yyyy-mm-dd> Date

<T> <hh:mm:ss> Time

<Cr> Enter. It means the end of the command.


Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page16
Command Syntax and Format
Format Description

Boldface The keywords of a command are in boldface.

[] Items in square brackets [ ] are optional.

{ x | y | ... } Alternative items are grouped in braces and separated by vertical bars.
One is selected.

[ x | y | ... ] Alternative items that are optional are grouped in square brackets and
separated by vertical bars. One or none is selected.

{ x | y | ... } Alternative items are grouped in braces and separated by vertical bars. A
* minimum of one or a maximum of all can be selected.

[ x | y | ... ] Optional alternative items are grouped in square brackets and separated
* by vertical bars. Multiple or none is selected.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page17
CLI Error Prompts

Error Message Cause

Unknown command The entered command or keyword is not found, the


parameter type is incorrect or the parameter value
exceeds the threshold.

Incomplete command The entered command is incomplete.

Too many You have entered too many parameters.


parameters
Ambiguous command The entered command is ambiguous.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page18
Contents
1. Maintenance Environment

2. Command Line Feature

3. Basic System Operation

4. Network Management Configuration

5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page19
Contents
3. Basic System Operation
3.1 User Account Management
3.2 Basic System Configuration
3.3 Hardware Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page20
User Profile and User
User A
All these users can login to the
User Profile 1
User B MA5600T from 8:00AM to 5:00PM,
and the user account validity is
three months
User C

User G
All these users can login to the
User Profile 2 MA5600T from 10:00AM to 3:00
User H PM, and the user account validity is
one month
User K

User profile is a group collection of control parameters:


length of the user name and password
Validity period of the user name and password
Permitted login time

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page21
User Authorities

Authority level Function

Common user Only query the basic settings of the MA5600T

Operator Configure the MA5600T and some services

Manage all the functions and services of the MA5600T, and


Administrator
can manage all the lower level users
The highest authority, manage all the functions and
Super User
services and for managing all the lower level users

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page22
User Management
Query all the user profiles
MA5600T(config)#display terminal user-profile
{all | online | name username}:all
------------------------------------------------
User profile name : root
Validity period of the user name : 0
Validity period of the password : 0
Permitted start time of logon by a user : 00:00
Permitted end time of logon by a user : 00:00

--------------------------------------------------

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page23
User Management
Add a new user-profile

MA5600T(config)#terminal user-profile add
User profile name(<=15 chars):huawei

Validity period of the user name(0--999 days)[0]: 30

Validity period of the password(0--999 days)[0]:30

Permitted start time of logon by a user(hh:mm)

[00:00]:9:00
Permitted end time of logon by a user(hh:mm)

[00:00]:17:00
Repeat this operation? (y/n)[n]:

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page24
User Management
Add a new user
MA5600T(config)#terminal user name
User profile name(<=15 chars)[root]:
User Name(<=15 chars): huawei
User Password(<=15 chars):
Confirm Password(<=15 chars):
User's Level:
1. Common User 2. Operator 3. Administrator:3
Permitted Reenter Number(0--4):4
User's Appended Info(<=30 chars): test_user
This user has been added
Repeat this operation? (y/n)[n]:

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page25
User Management
Query all the terminal user
MA5600T(config)#display terminal user
{all | online | name username}:all
-----------------------------------------------------
Name Level Status Reenter Profile Append
Num Info
------------------------------------------------------
root Super Online 1 root -----
huawei Admin Offline 4 root test_user
-------------------------------------------------------
Total record(s) number: 2

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page26
User Management
Modify the user password


MA5600T(config)#terminal user password
User name (<=15 chars):huawei

New password(<=15 chars):

Confirm Password(<=15 chars):

Information takes effect Repeat this operation?

(y/n)[n]: n

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page27
User Management
Modify the user other attribute
MA5600T(config)#terminal user user-profile

MA5600T(config)#terminal user level
MA5600T(config)#terminal user reenter

MA5600T(config)#terminal user apdinfo

We cant modify the current online user.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page28
User Management
Query the online terminal user
MA5600T(config)#display client
--------------------------------------------------
Client-ID Client-Name Client-Type IP Login Time
--------------------------------------------------
1 huawei Telnet 10.11.117.55 2007-09-02

10:03:09
--------------------------------------------------

Kick off the online user



MA5600T(config)#client kickoff
{clientID<U><1,22>}:1

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page29
User Management
Delete the user


MA5600T(config)#undo terminal
{hold<K>|user<K>|debugging<K>|monitor<K>}:user

{name<K>}:name
Command:
undo terminal user name
User Name(<=15 chars):huawei
Are you sure to delete the user?(y/n)[n]:

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page30
Questions
Q: How many authority levels provide by MA5600T?
A:

Q: How to add a new user?


A:

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page31
Contents
3. System Operation
3.1 User Account Management

3.2 Basic System Configuration

3.3 Hardware Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page32
Configure Miscellaneous Stuff
Set the system time
MA5600T(config)#time
{time<T><hh:mm:ss>|date<D><yyyy-mm-dd>}:11:15:59
2009-05-30
Query system time

MA5600T(config)#display time
{<cr>|dst<K>|time-stamp<K>}:
command: display time 2009-05-30 11:16:00 +08:00
Set the system identity
MA5600T(config)#sysname
{prompt<S><Length 1-50>}:DT_FAN1
DT_FAN1 (config)#

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page33
System Information
Query the detailed version
MA5600T(config)#display language
MA5600T(config)#display version 0/6

Query the system log information



MA5600T(config)#display log all

Set the NTP Server


MA5600T(config)#ntp-service unicast-server
10.10.10.1

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page34
Testing Network Connectivity
Check if the destination is reachable

MA5600T#ping 192.168.1.1
MA5600T(config)#ping 192.168.1.1

Locate the fault point on the network


MA5600T#tracert 10.11.106.133

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page35
Contents
3. System Operation
3.1 User Account Management

3.2 Basic System Configuration

3.3 Hardware Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page36
Board Management
Query all the boards in the frame
MA5600T(config)#display board 0
-----------------------------------------------------
SlotID BoardName Status SubType0 SubType1 Online/Offline
------------------------------------------------------
0
1 H801OPFA Normal
2 H801OPFA Normal
3
4 H801OPFA Failed Online
5
... ...
8
9 H801SCUN Standby_normal
10 H801SCUN Active_normal

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page37
Board Management
Query one board in the frame
MA5600T(config)#display board 0/1
----------------------------------------------
Board Name : H801OPFA
Board Status : Normal
-----------------------------------------------------------------------------------
Port Port Optic Native MDI Speed Duplex Flow- Active Link
Type Status VLAN (Mbps) Ctrl State
---------------------------------------------------------------------------------------
0 FE absence - - 100 full - active offline
1 FE absence - - 100 full - active offline
2 FE absence - - 100 full - active offline
3 FE absence - - 100 full - active offline
4 FE absence - - 100 full - active offline
5 FE absence - - 100 full - active offline
6 FE absence - - 100 full - active offline
7 FE absence - - 100 full - active offline

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page38
Board Management
Add a board

MA5600T(config)#board add
{ frameid/slotid<S><1,15> }:0/4
{H801MFGA<K>|H801ETHA<K>|H801X1CA<K>|
H801GPBC<K>|H801X2CA<K>|H801GICF<K>|H801GICG<K>|
H801TOPA<K>|ADI<K>|ADL<K>|SHD<K>|H801AIUG<K>|
VDL<K>|H801OPFA<K>|H801CITA<K>|H801PRTA<K>|
VDS<K>|VDT<K> }:H801OPFA

Confirm a board

MA5600T(config)#board confirm
{frameid[/slotid]<S><1,15>}: 0/4

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page39
Board Management
Reset board

MA5600T(config)#board reset
{ frameid/slotid<S><1,15> }:0/3
Command: board reset 0/3 Are you sure to reset board? (y/n)[n]: y
0 frame 3 slot reset board message sent successfully...

Confirm a board

MA5600T(config)#board prohibit
{ frameid/slotid<S><1,15> }:0/3
Command: board prohibit 0/3
Prohibiting board will interrupt all services on this board, are you sure
to prohibit board? (y/n)[n]:y

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page40
Board Statuses
Board Status
Main Active-Normal
Control
Standby-Normal
Board
11The
Theboard
boardcan
canbe
beautomatically
automaticallyfound
found
Auto_find after
after inserted
inserted into
into the
the slot
slot but
but not
not
registered in the system
registered in the system
Config (transition
Service status) 22 Confirm
Confirm the
the board,
board, the
the status
status
becomes
becomesnormal,
normal,the
theconfig
configstatus
statusisisaa
Board transitional
Normal transitionalstatus
status

33 Faults
Faults happen,
happen, the
the status
status becomes
Failed becomes
failed
failed

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page41
Contents
1. Maintenance Environment

2. Command Line Feature

3. Basic System Operation

4. Network Management Configuration

5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page42
Contents
4 . Network Management Configuration
4.1 Network Management Overview

4.2 Outband Network Management Configuration

4.3 Inband Network Management Configuration

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page43
Out-band and In-band
Networking CLI Terminal NMS

Telnet
message

ETH port on Outband


SCU SNMP
message

ETH port on Inband


uplink board

User Data Telnet

NMS Data NMS SNMP

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page44
Basic Concepts of SNMP
SNMP: Simple Network Management Protocol
Used to ensure the transmission of management information between
any two points
Its easy for the network administrator to retrieve and modify
information at any node in the network, detect faults, diagnose faults,
plan the capacity and generate reports.

NE: MA5600T
NMS: N2000
MIB
SNMP
Operation
Agent

There are three versions, SNMP V1, V2 and V3. Currently, SNMPV1 are
widely applied to the network.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page45
SNMP Message Format
Version Community SNMP PDU

Version
PDU type Message Name

The version number of SNMP
0 get-request
Community 1 get-next-
request

It is the collection of an SNMP
2 get-response
agent and a set of SNMP manager
3 set-request
which defines the authentication
4 trap
and access control. It is identified
by the community name.
SNMP PDU:

The PDU is the protocol data unit.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page46
SNMP V1
SNMPv1 is the original version, stated in 1988.
SNMPv1 use the Community Name to perform security
management.
SNMPv1 has defined 5 types of protocol message
GetRequest Get Getnext Set

GetNextRequest
SetRequest
MIB
GetResponse
Trap
GetResponse,
Trap

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page47
SNMPv2c
Compared to SNMPv1 SNMPv2c

Support more protocol messages
getBulkRequest
informRequest
Support more data types

Provide abundant error codes

SNMPv2c also use the security strategy based on


community names.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page48
SNMP V3
Stated in 1998,come into formal standards in 2002.

SNMPv3 increase the security mechanism than
SNMPv1/v2c

Limited security mechanism based on community name

The message cannot be encrypted
Based on SNMPv2c SNMPv3 provides:

USM authentication

USM encryption

VACM access control

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page49
Differences Between v1, v2 &
v3
SNMP v1 SNMP v2 SNMP v3

Get-Request Get-Request Basic functions of

Get-Next-Request Get-Next-Request SNMP v3 inherited from


SNMP v1 & v2.
Get-Bulk-Request
New extensible SNMP
Set-Request Set-Request
message format. For
Get-Response Get-Response future customisation

SNMP v1 Trap SNMP v2 Trap and extensions.


Provides better AAA
Inform-Request
and security for SNMP
messages and Access
Control.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page50
Contents
4 . Network Management Configuration
4.1 Network Management Overview

4.2 Outband Network Management Configuration

4.3 Inband Network Management Configuration

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page51
Configure Steps
Login to Outband Interface

Configure outband IP address

Network Management
Mode

No
NMS?
Yes

NMS Parameters

END

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page52
Outband Network
Management

SCU

CON

IP
IP
ETH

Cor
Cor ESC

10.10.1.1/24 ee
MA5600T
Gateway:10.10.1.10
255.255.255.0 Gateway:192.168.50.1
255.255.255.0
IP: 192.168.50.250
255.255.255.0

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page53
Outband Network
Management
Configure steps:
Login to the outband mode

Configure the IP address of the ETH
Configure the IP-route (In the different network)
SNMP Configuration (Optional)--For iManager N2000 BMS

Configure the community name

Enable sending Trap packets

Configure the IP address of the target host of the Trap packets

Configure the source of the Trap packets

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page54
Outband Network
Management
Step1:Login to the outband mode
MA5600T(config)#interface MEth 0

Step2:Configure the IP address of the ETH



MA5600T(config-if-MEth0)#ip address
{ip_address<I>}:192.168.50.250

{submask<M>}:255.255.255.0

Query the IP address and all interface info



MA5600T(config)#display ip interface meth 0
MA5600T(config)#display interface meth 0

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page55
Outband Network
Management
Step3: Configure the IP-route
MA5600T(config)#ip route-static
{ip_addr<I><X.X.X.X>|default-preference<K>}:
10.10.1.0
Destination Network
{ip_addr<I><X.X.X.X>|integer<U><0,32>}:
255.255.255.0
Subnet mask
{NULL<K>|MEth<K>|Vlanif<K>|LoopBack<K>|
ip_addr<I><X.X.X.X>}:192.168.50.1
{<cr>|preference<K>}:
Gateway

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page56
Outband Network

Management
Step4:SNMP Configuration (Optional)

Set the SNMP version
MA5600T(config)# snmp-agent sys-info
{contact<K>|location<K>|version<K>}:version
{all<K>|v1<K>|v2c<K>|v3<K>}:v1


Configure the community name and the access right
MA5600T(config)#snmp-agent community
{read<K>|write<K>}:read

{communityname<S><Length 1-32>}:public

{<cr>|mib-view<K>}:
MA5600T(config)#snmp-agent community write private

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page57
Outband Network
Management
Set the IP address of the target host for traps.

MA5600T(config)#snmp-agent target-host
{trap-hostname<K>|trap-paramsname<K>}:trap-paramsname
{paramsname<S><Length 1-32>}:huaweiNMS
{ v1<K>|v2c<K>|v3<K>}:v1
{securityname<K>}:securityname
{securityname<S><Length 1-32>}:private

MA5600T(config)#snmp-agent target-host
{trap-hostname<K>|trap-paramsname<K>}:trap-hostname
{hostname<S><Length 1-32>}:huawei
{address<K>}:address
{ip-addr<I><X.X.X.X>}:10.10.1.1
{trap-paramsname<K>|udp-port<K>}:trap-paramsname
{paramsname<S><Length 1-32>}:huaweiNMS

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page58
Outband Network
Management
Enable sending Trap packets
MA5600T(config)#snmp-agent trap enable standard

Configure the source of the Trap packets


MA5600T(config)#snmp-agent trap source
{loopback<K>|meth<K>|tunnel<K>|vlanif<K>}:meth

{<0-0>}:0

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page59
Contents
4 . Network Management Configuration
4.1 Network Management Overview

4.2 Outband Network Management Configuration

4.3 Inband Network Management Configuration

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page60
Inband Network Management GIU

10.10.1.1/24
IP
IP
Core
Core
Gateway:10.10.1.10 Gateway:10.50.1.10
255.255.255.0 255.255.255.0 MA5600T
Configure steps: Uplink Port: 0/19/0
VLAN 850:10.50.1.1/24

Create the management VLAN
Configure the uplink port of management VLAN

Configure the Layer3 address of management VLAN
Configure the IP-route (In the different network)

SNMP Configuration (Optional)--For iManager N2000 BMS

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page61
Inband Network Management
Step1:Create the management VLAN
MA5600T(config)#vlan
{vlanid<U><2,4000>|vlan-list<S><1,64>|attrib<K>|
car<K>}: 850
{vlantype<E><mux,standard,smart,super>|to<K>}:
Standard

Step2:Configure the uplink port of management


VLAN

MA5600T(config)#port vlan
{vlanid<U><1,4000>|vlan-list<S><1,64>}: 850
{frameid/slotid<S><1,15>}: 0/19
{portlist<S><1,64>}:0

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page62
Inband Network Management
Step3:Configure the Layer3 address of management VLAN

MA5600T(config)#interface vlanif 850

MA5600T(config-if-Vlanif850)#ip address
{ip_addr<I><X.X.X.X>}: 10.50.1.1

{ip_addr<I><X.X.X.X>|integer<U><0,32>}: 255.255.255.0

{<cr>|sub<K>}:

Step4: Configure the IP-route (In the different network)



MA5600T(config)#ip route-static 10.10.1.0 255.255.255.0
10.50.1.10

The management VLAN has the Layer 3 address as


the system IP address.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page63
Inband Network Management
Step5: SNMP Configuration (Optional)
Set the SNMP version
MA5600T(config)# snmp-agent sys-info version v3
Set the SNMP user
MA5600T(config)#snmp-agent usm-user v3
{username<S><Length 1-32>}:user1
{groupname<S><Length 1-32>}:group1
{<cr>|authentication-mode<K>}:authentication-mode
{md5<K>|sha<K>}:md5
{authkey<S><Length 1-64>}:authkey1
{<cr>|privacy-mode<K>}:privacy-mode
{aes128<K>|des56<K>}:Des56
{prikey<S><Length 8-64>}:2

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page64
Inband Network Management

Set the SNMP group

MA5600T(config)#snmp-agent group v3
{groupname<S><Length 1-32>}:group1

{authentication<K>|noauth<K>|

privacy<K>}:authentication
{<cr>|notify-view<K>|read-view<K>|write-

view<K>}:read-view

{viewname<S><Length 1-32>}:hardy

{<cr>|notify-view<K>|write-view<K>}: write-view

{viewname<S><Length 1-32>}:hardy

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page65
Inband Network Management

Set the SNMP view

MA5600T(config)#snmp-agent mib-view
{viewname<S><Length 1-32>}:hardy

{exclude<K>|include<K>}:include

{subtreename<S><Length 1-128>}:ip

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page66
Inband Network Management

Set the IP address of the target host for traps.
MA5600T(config)#snmp-agent target-host trap-
hostname huawei1 address 10.10.1.1 trap-
paramsname Swisscom

MA5600T(config)#snmp-agent target-host trap-


paramsname Swisscom v3 securityname user1
authentication

Enable the traps sending.


MA5600T(config)#snmp-agent trap enable standard

Configure the source of the Trap packets
MA5600T(config)#snmp-agent trap source vlanif 850

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page67
Contents
1. Maintenance Environment

2. Command Line Feature

3. Basic System Operation

4. Network Management Configuration

5. System Maintenance Operation

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page68
Contents
5. System Maintenance Operation
5.1 Managing Data

5.2 System Switchover

5.3 Setting Host Program Rollback

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page69
Managing the data
In order to maintain the MA5600T, it is necessary to

be aware of:

The system files

Storage media

System upgrade steps

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page70
Managing the data: Files
The control board manages the
following files:
BootRom program

Host program

System database

Language resource

Service board program

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page71
Managing the data: Storage
media
The main control board supports the below storage
media:

SDRAM SRAM Flash

Save the host


Save the Save the software
execute host operation log program,
software and alarm database file,
program information language
resource file
and BIOS files

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page72
Managing the data:operations
comparison
Operatio Data source Data destination Management contents
n
Save SDRAM Flash memory data
Duplicate Flash Flash memory program
memory data
(standby
(active language
board)
board)
Load Network Flash memory Program, data, BIOS
computer Language
Backup Flash Network program
memory computer data
language

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page73
Managing the data: Diagram
Active SCU Standby SCU

1:
1:Save
Save
SDRAM

SDRAM
FLASH

FLASH
1 2:
2 2:Duplicate
Duplicate

3:
3:Backup
Backup

3 4 4:
4:Load
Load

File Server

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page74
Managing the Data:Save
The MA5600T has the capability to save data
automatically, this feature can be:
Turned on or off
The time interval of when it saves data set
The time of day when to save data
View the above settings

As well as automatically saving data the system allows the user to


save data manually

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page75
Managing the Data:Save
Automatic saving on the SCU
Query the autosave configuration:
huawei# display autosave configuration

Configure the autosave interval function:


huawei# autosave intervlan on
huawei# autosave interval 2880
huawei# autosave interval configuration 30

Configure the autosave time function:


huawei# autosave time on
huawei# autosave time 04:20:00

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page76
Managing the Data:Save
Manual saving
huawei#save

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page77
Managing the Data:Duplicate
Duplicating data
Duplicating the data allows the user to copy the program,
packetfile,data or language files from the active flash to the
standby flash.

huawei(config)#duplicate
huawei(config)#duplicate{{configuration<K>|data<K>|language<K>|
configuration<K>|data<K>|language<K>|
packetfile<K>|program<K>
packetfile<K>|program<K>}:program}:program
Command:
Command:duplicate
duplicateprogram
program
After
Afterduplicating
duplicatinghost
hostprogram,
program,corresponding
correspondingdatabase
databaseshould
shouldbe
be
loaded
loadedRollback
Rollbackfunction
functionwill
willbe
bedisabled
disabled
Be
Besure
surethat
thatthe
thesystem
systemneedn't
needn'tthisthisfunction
function
Are
Areyou
yousure
suretotoduplicate
duplicatehosthostprogram?
program?(y/n)[n]:y
(y/n)[n]:y
Load(backup,duplicate,...)
Load(backup,duplicate,...)begins,
begins,please
pleasewait
waitand
andnotice
noticethe
therate
rateofof
progress
progressAny
Anyoperation
operationsuch
suchas asreboot
rebootororswitchover
switchoverwill
willcause
causefailure
failure
and
andunpredictable
unpredictableresult
result. .

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page78
Managing the Data:Backup
Back up the system data
It is possible to back up the system data to a server using ftp,
tftp,sftp or xmodem.The example shows a server with an IP
address of 192.168.1.66:

huawei(config)#
huawei(config)#backup
backup
{{bios<K>|configuration<K>|data<K>|language<K>|
bios<K>|configuration<K>|data<K>|language<K>|
program<K>
program<K>}:data
}:data
{{ftp<K>|sftp<K>|tftp<K>|xmodem<K>
ftp<K>|sftp<K>|tftp<K>|xmodem<K>}:tftp
}:tftp
{{ServerIpAddress<I><X.X.X.X>
ServerIpAddress<I><X.X.X.X>}:192.168.1.66
}:192.168.1.66
{{filename<S><Length
filename<S><Length1-128>
1-128>}:testlab
}:testlab

huawei(config)#
huawei(config)#display
displayprogress
progressbackup
backup

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page79
Loading the software: CLI
examples
As well as backing up data, it is possible to load data
from a server to the MA5600T.
Loading the program:

huawei#load
huawei#loadprogram
programtftp
tftp192.168.1.66
192.168.1.660/9
0/9
Board
Boardname[H801SCUB]:
name[H801SCUB]:
File
Filename
name[rom_scu.lma]:
[rom_scu.lma]:
Load the host database file:

huawei#
huawei#load
loaddata
datatftp
tftp192.168.1.66
192.168.1.66db_scu.dat
db_scu.datactive
active

CLI terminal MA5600T TFTP server

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page80
Upgrade Progress
Save the database file
huawei(config)#save data
Backup the database file to TFTP server

huawei(config)# backup data tftp 10.71.51.228 db_scu_old.dat

Update the database file to new version via the update tool
Load the packet file to both SCUN
huawei(config)#load packetfile tftp 10.71.51.228 scupacket.bin
Load the new version to both SCUN
huawei(config)# load data tftp 10.71.51.228 scu_new.dat all

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page81
Upgrade Progress
Reset the standby SCU
(config)#reboot standby
Check the synchronization between active and standby
SCUN
(config)#display data sync state
Switchover when synchronizing completely
(config)#system switch-over
Do the same operations on the initial SCUN
(config)#reboot standby
(config)#display data sync state
(config)#system switch-over

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page82
Managing the Data:Erase
Erase data

huawei#
huawei#erase
eraseflash
flashdata
dataactive
active
This
Thiscommand
commandwill
willclear
clearthe
theactive
activeboard
boarddata
datahas
hasbeen
been
loaded
loadedor
orsaved
saved
Please
Pleaseremember
remembertotobackup
backupthe
thesystem
systemconfiguration
configuration
data
data
Are Used
Usedtotorestore
restoreall
Areyou
yousure
sureto
tocontinue?
continue?(y/n)[n]:y
(y/n)[n]:y data to default
all
data to default
Command executes successfully, and will take effect aftervalues.
Command executes successfully, and will take effect aftervalues.
active
activeboard
boardrebooted.
rebooted. This
Thiscan
canfacilitate
facilitate
reconfiguring
reconfiguringthe
the
system.
system.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page83
Managing the Data:Reboot
Restart the system

After data has been loaded or the flash erased, it is


necessary to restart the system.

huawei(config)#
huawei(config)#reboot
reboot
{{Options<E><system,active,standby>
Options<E><system,active,standby>}:system
}:system
Command:
Command: reboot
rebootsystem
system

Data
Dataisisnot
notsaved,
saved,the
theunsaved
unsaveddata
datawill
willlose
loseififreboot
reboot
system,
system,areareyou
yousure
sureto
toreboot
rebootsystem?
system?(y/n)[n
(y/n)[n]:]:nn

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page84
Contents
5. System Maintenance Operation
5.1 Managing Data

5.2 System Switchover

5.3 Setting Host Program Rollback

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page85
System Switchover: Auto

Synchronizations
The MA5600T supports dual configuration of the control cards.

It auto synchronizes data between the active and standby SCU cards.

When the active card or its link becomes faulty, the system
automatically performs active/standby switchover

To query the data synchronization use the display data sync state
command

Active SCU
SCUN SCUN

Standby SCU
RUN
RUN
ALM
ALM
ACT
ACT

RESET
RESET

CON ETH ESC


CON ETH ESC

LINK ACT
LINK AC T
0
0
1
1
2
2
3
3

TX 0
TX 0 RX0
RX0

TX1
TX 1 RX1
R X1

TX2
TX 2 RX2
R X2

TX3
TX3 RX3
R X3

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page86
System Switchover
SCUN SCUN
RUN RUN
ALM ALM
ACT ACT

RESET RESET

huawei#
huawei#display
displaydata
datasync
syncstate
state
CON ETH ESC

CON ETH ESC


huawei#
huawei#system
systemswitch-over
switch-over

LINK ACT LINK ACT

Are
Areyou
yousure
suretotoswitch
switchover?
over?(y/n)[n]:y
0 0

(y/n)[n]:y
1 1
2 2
3 3

TX0
RX0 TX0
RX0

TX1
RX1 TX1
RX1

NOTE:
TX2
RX2 TX2
RX2
The active and standby SCU cards
must be configured with subcards of the
same type
TX3
RX3 TX3
RX3

When the data on the two SCU


Active SCU Standby SCU cards is not the same, the
active/standby switchover
operation is not allowed

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page87
Contents
5. System Maintenance Operation
5.1 Managing Data

5.2 System Switchover

5.3 Setting Host Program Rollback

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page88
Setting the Host Program Rollback
The MA5600T provides the host program
rollback.

The previous host program and data can be


rolled back within a certain period.

NOTE:After the host program and data are loaded


the system must be restarted.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page89
Setting the Host Program Rollback
By default, the upgraded system keeps the last host program and
data for two days. After that period, the rollback function is
disabled automatically.
Rollback to the previous host program

huawei#
huawei#rollback
rollback
<active,standby>:
<active,standby>:active
active

huawei#
huawei#undo
undorollback
rollback
To query the state of host program rollback

huawei#
huawei#display
displayrollback
rollbackstate
stateactive
active
Rollback
Rollbackfunction
functionisisenabled
enabledinincurrent
currentstate.
state.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page90
Setting the Host Program Rollback Time
You can use the command <set norollback time> to set the

period within which you can perform the rollback


The period ranges from five minutes to 30 days
Setting the time to disable the host program rollback:

huawei#
huawei#set
setnorollback
norollbacktime
time{{active
active| |standby
standby}}day
dayhour
hourminute
minute

huawei#
huawei#set
setnorollback
norollbacktime
timeactive
active10
100000 Example
Example
Displaying the time to disable the host program rollback

huawei#
huawei#display
displaynorollback
norollbacktime
timeactive
active
The
Thetotal
totaltime
timetotodisable
disablerollback
rollbackfunction
functionisis2days
2days0hours
0hours0minutes,
0minutes,the
the
remaining
remainingtime
timeisis1days
1days3hours
3hours34minutes
34minutes

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page91
Summary
MA5600T supports two logic management entities: CLI and GUI

Command line interface (CLI)
Serial port (First time login )
Remote Telnet (Inband and outband)


Graphic user interface (GUI)

iManager N2000 BMS
Remote manage through SNMP (Inband and outband)

MA5600T provides multiple command modes to implement


hierarchical protection for preventing any unauthorized access:
common user mode, privilege mode, global configure mode and
different interfaces mode
CLI user account specify four authority levels: super user,
administrator, operator and common user.

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page92
Summary
The hardware management includes the frame, board and
port.

The board status includes: Active_normal/ Standby_normal/
Standby_failed / Normal/ Failed/ Config/ Auto-find /Prohibited /
Unmanageable.

Set up the outband management mode



configure the IP address of Meth 0

Set up the outband management mode


Configure the management VLAN and uplink port
configure the IP address of management IP address

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page93
Summary
MA5600T data configuration:
Save (auto-save and manually save)
Backup (data file and configuration file)
Load (data file and configuration file)
Duplicate (copy data from active to standby board
)

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page94
Glossary
CLI: Command line interface
GUI: Graphic user interface
SNMP: Simple Network Management Protocol
MIB: Management Information Base
OSS: Operation Support System
EMS: Element Management Server
BTV: Broadband Television
EMS: Element Management Server
NMS: Network Management Server
UMS: User-based Security Model
VACM: View-Based Access Control Model

Copyright 2010 Huawei Technologies Co., Ltd. All rights reserved. Page95
Thank you
www.huawei.com

Potrebbero piacerti anche