Manuale DSLAM Nokia

SURPASS hiX 5622/25/30/35 R2.8

IP-DSLAM

Operate CLI

2

Operate CLI

Id:0900d805805d3c82

The information in this document is subject to change without notice and describes only the product defined in the introduction of this documentation. This documentation is intended for the use of Nokia Siemens Networks customers only for the purposes of the agreement under which the document is submitted, and no part of it may be used, reproduced, modified or transmitted in any form or means without the prior written permission of Nokia Siemens Networks. The documentation has been prepared to be used by professional and properly trained personnel, and the customer assumes full responsibility when using it. Nokia Siemens Networks welcomes customer comments as part of the process of continuous development and improvement of the documentation.

The information or statements given in this documentation concerning the suitability, capacity, or performance of the mentioned hardware or software products are given "as is" and all liability arising in connection with such hardware or software products shall be defined conclusively and finally in a separate agreement between Nokia Siemens Networks and the customer. However, Nokia Siemens Networks has made all reasonable efforts to ensure that the instructions contained in the document are adequate and free of material errors and omissions. Nokia Siemens Networks will, if deemed necessary by Nokia Siemens Networks, explain issues which may not be covered by the document.

Nokia Siemens Networks will correct errors in this documentation as soon as possible. IN NO EVENT WILL Nokia Siemens Networks BE LIABLE FOR ERRORS IN THIS DOCUMENTA-TION OR FOR ANY DAMAGES, INCLUDING BUT NOT LIMITED TO SPECIAL, DIRECT, INDI-RECT, INCIDENTAL OR CONSEQUENTIAL OR ANY LOSSES, SUCH AS BUT NOT LIMITED TO LOSS OF PROFIT, REVENUE, BUSINESS INTERRUPTION, BUSINESS OPPORTUNITY OR DATA,THAT MAY ARISE FROM THE USE OF THIS DOCUMENT OR THE INFORMATION IN IT.

This documentation and the product it describes are considered protected by copyrights and other intellectual property rights according to the applicable laws.

The wave logo is a trademark of Nokia Siemens Networks Oy. Nokia is a registered trademark of Nokia Corporation. Siemens is a registered trademark of Siemens AG.

Other product names mentioned in this document may be trademarks of their respective owners, and they are mentioned for identification purposes only.

Copyright © Nokia Siemens Networks 2008-2009. All rights reserved

f Important Notice on Product Safety Elevated voltages are inevitably present at specific points in this electrical equipment. Some of the parts may also have elevated operating temperatures.

Non-observance of these conditions and the safety instructions can result in personal injury or in property damage.

Therefore, only trained and qualified personnel may install and maintain the system.

The system complies with the standard EN 60950 / IEC 60950. All equipment connected has to comply with the applicable safety standards.

The same text in German:

Wichtiger Hinweis zur Produktsicherheit

In elektrischen Anlagen stehen zwangsläufig bestimmte Teile der Geräte unter Span-nung. Einige Teile können auch eine hohe Betriebstemperatur aufweisen.

Eine Nichtbeachtung dieser Situation und der Warnungshinweise kann zu Körperverlet-zungen und Sachschäden führen.

Deshalb wird vorausgesetzt, dass nur geschultes und qualifiziertes Personal die Anlagen installiert und wartet.

Das System entspricht den Anforderungen der EN 60950 / IEC 60950. Angeschlossene Geräte müssen die zutreffenden Sicherheitsbestimmungen erfüllen.

3

Operate CLI

Id:0900d805805d3c82

Table of ContentsThis document has 531 pages.

Change History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191.1 Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191.2 Document convention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191.3 Document notation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191.4 CE declaration of conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201.5 GPL/LGPL warranty and liability exclusion . . . . . . . . . . . . . . . . . . . . . . 20

2 System overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212.1 System features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

3 Configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243.1 Configuration mode overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243.2 User EXEC mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263.3 Privileged EXEC mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263.4 Global configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273.4.1 Bridge configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283.4.2 Interface configuration in configuration mode . . . . . . . . . . . . . . . . . . . . 293.4.3 Rule configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303.4.4 DHCP Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303.4.5 PPPoE configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313.4.6 RMON configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313.4.7 Router configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313.4.8 Route-map configuration mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323.4.9 Configuration mode example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333.5 Useful tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333.5.1 Telnet access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333.5.2 Listing available commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343.5.3 Calling command history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363.5.4 Using abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373.5.5 Privileged EXEC Mode at other configuration mode . . . . . . . . . . . . . . . 373.5.6 Leaving current command mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373.5.7 Use of the system diagnostic tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4 System basic configuration and operation . . . . . . . . . . . . . . . . . . . . . . . 394.1 Basic configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394.1.1 Prerequisite tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394.1.2 System login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414.1.3 Configuring system login information. . . . . . . . . . . . . . . . . . . . . . . . . . . 414.1.3.1 Changing superuser password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414.1.3.2 Creating a new account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 424.1.3.3 Login banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434.1.3.4 Setting auto log-out time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444.1.3.5 Setting password for privileged EXEC mode. . . . . . . . . . . . . . . . . . . . . 454.1.4 Assigning an IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

4

Operate CLI

Id:0900d805805d3c82

4.1.4.1 Enabling and configuring interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464.1.4.2 Displaying interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 484.1.4.3 Setting static route and default gateway . . . . . . . . . . . . . . . . . . . . . . . . . 484.1.4.4 Example of assigning IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494.1.5 Configuring host name and time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504.1.5.1 Setting host name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504.1.5.2 Setting time zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514.1.5.3 Setting time and date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 534.1.5.4 Clock synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 534.1.5.5 Enabling network time protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554.1.5.6 Example of setting hostname & time . . . . . . . . . . . . . . . . . . . . . . . . . . . 554.1.6 Setting DNS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564.1.7 Example of configuring inband management interface. . . . . . . . . . . . . . 574.1.8 Example of configuring outband management interface. . . . . . . . . . . . . 574.1.9 Routing between inband and outband management interfaces . . . . . . . 574.1.10 Switching between inband and outband management interfaces. . . . . . 604.1.10.1 SW configuration of the inband-outband switching feature. . . . . . . . . . . 604.1.10.2 HW configuration of the inband-outband switching feature . . . . . . . . . . 614.2 System status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624.2.1 Displaying network status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624.2.2 Tracing packet route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624.2.3 Displaying user connecting to system. . . . . . . . . . . . . . . . . . . . . . . . . . . 634.2.4 Displaying running time of system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 634.2.5 Displaying system information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 644.2.6 Displaying system memory information . . . . . . . . . . . . . . . . . . . . . . . . . 644.2.7 Setting memory overload threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654.2.8 Setting CPU overload threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654.2.9 Displaying running process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654.3 Managing system configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 664.3.1 Understanding configuration file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 664.3.2 Displaying system configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 664.3.3 Writing system configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684.4 Backing up the system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694.4.1 Save configuration file to flash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694.4.2 Startup behavior for CXU starting in different systems . . . . . . . . . . . . . . 704.5 Restoring the system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714.6 Upgrading the system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714.6.1 Manually upgrading the CXU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714.6.2 Manually upgrading the IU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 724.6.3 Manually data uploading for CXU/ IU . . . . . . . . . . . . . . . . . . . . . . . . . . . 734.6.4 Automatic system upgrade / S-APS upgrade . . . . . . . . . . . . . . . . . . . . . 754.6.5 Displaying upgrade information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764.6.6 Auto backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774.7 Mobile backhaul services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 804.7.1 Overview of mobile backhauling serivce. . . . . . . . . . . . . . . . . . . . . . . . . 804.7.2 Clock synchronization on CXU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

5 Equipment management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

5

Operate CLI

Id:0900d805805d3c82

5.1 Shelf overview for hiX 5622/25/30/35 R2.8 . . . . . . . . . . . . . . . . . . . . . . 825.2 Configure the admin state of modules . . . . . . . . . . . . . . . . . . . . . . . . . . 835.3 Select alarm severities. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895.4 Configure external alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905.5 Define temperature and humidity thresholds . . . . . . . . . . . . . . . . . . . . . 915.6 Configure CXU redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925.7 Configure MTA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

6 Port configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 946.1 Port assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 946.2 Configuring ethernet port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026.2.1 Basic configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026.2.1.1 Activating port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026.2.1.2 Specifying port type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026.2.1.3 Configuring flow control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036.2.1.4 Configuration of an GBond interface . . . . . . . . . . . . . . . . . . . . . . . . . . 1036.2.1.5 Displaying traffic statistic of port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1096.2.1.6 Displaying port status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1106.2.1.7 Example of configuring Ethernet port. . . . . . . . . . . . . . . . . . . . . . . . . . 1116.2.2 Link Aggregation Group (LAG) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1126.2.2.1 Fix trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136.2.2.2 LACP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1156.2.3 STP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1236.2.3.1 STP operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1246.2.3.2 RSTP operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1276.2.3.3 MSTP operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1326.2.3.4 Configuring STP/RSTP/MSTP mode. . . . . . . . . . . . . . . . . . . . . . . . . . 1346.2.3.5 Configuring STP/RSTP/MSTP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1346.2.3.6 BPDU configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1426.2.3.7 Sample configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1456.2.4 ERP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1466.3 Configuring DSL port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1496.3.1 Understanding modulation of DSL signal. . . . . . . . . . . . . . . . . . . . . . . 1496.3.1.1 QAM modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1496.3.1.2 DMT modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1526.3.2 Configuring ADSL port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1546.3.2.1 Enabling LRE on ADSL port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1546.3.2.2 ADSL DELT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1576.3.2.3 SELT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1626.3.2.4 Configuring ADSL line-config profile . . . . . . . . . . . . . . . . . . . . . . . . . . 1636.3.2.5 Configuring ADSL alarm-config profile. . . . . . . . . . . . . . . . . . . . . . . . . 1796.3.2.6 Configuring hiX 5622/25/30/35 R2.8 to operate under ATM environment .

1876.3.2.7 Virtual channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1876.3.2.8 DSL channel use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1906.3.2.9 VC rate limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1906.3.2.10 OAM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1906.3.2.11 ATM service category . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

6

Operate CLI

Id:0900d805805d3c82

6.3.2.12 Rate limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1936.3.2.13 IRL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1936.3.2.14 Profile configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1946.3.2.15 Converting bridgeport notation in index and vice versa . . . . . . . . . . . . 1976.3.2.16 Port mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1976.3.2.17 Displaying IRL configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2026.3.2.18 IRL configuration example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2026.3.2.19 ORL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2046.3.3 Configuring SHDSL port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2046.3.3.1 Configuring SHDSL line-config profile . . . . . . . . . . . . . . . . . . . . . . . . . 2046.3.3.2 Configuring SHDSL alarm-config profile . . . . . . . . . . . . . . . . . . . . . . . . 2096.3.3.3 Configuring SHDSL span-config profile . . . . . . . . . . . . . . . . . . . . . . . . 2116.3.3.4 SHDSL bis tcpam mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2166.3.4 Configuring xDSL port of Convergate-D based DSL cards. . . . . . . . . . 2166.3.4.1 Configuring xDSL line-config profile . . . . . . . . . . . . . . . . . . . . . . . . . . . 2166.3.4.2 Verifying line-config profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2306.3.4.3 Verifying physical status information. . . . . . . . . . . . . . . . . . . . . . . . . . . 2316.3.4.4 Verifying channel status information . . . . . . . . . . . . . . . . . . . . . . . . . . . 2316.3.4.5 Displaying line band table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2316.3.4.6 Assigning the configured line-config profile to a port . . . . . . . . . . . . . . 2316.3.4.7 xDSL notch profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2326.3.4.8 xDSL channel profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2346.3.4.9 xDSL PSD mask profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2376.3.4.10 xDSL DELT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2396.3.4.11 Configuring xDSL alarm-config profile . . . . . . . . . . . . . . . . . . . . . . . . . 2436.3.4.12 Example of configuring VDSL profile . . . . . . . . . . . . . . . . . . . . . . . . . . 2456.3.4.13 Example of configuring IU_VDSL24 to ADSL mode . . . . . . . . . . . . . . . 245

7 Bridge and VLAN configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2467.1 Bridge configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2467.1.1 Configuring of bridge base . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2467.1.2 Configuring bridge port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2547.2 VLAN configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2687.2.1 Assigning port to VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2697.2.2 VLAN port priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2697.2.3 VLAN translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2697.2.4 VLAN IP routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2707.2.5 VLAN multicast permission . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2707.2.6 Maximum of IP adresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2707.2.7 VLAN multicast-flooding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2717.2.8 VLAN default gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2717.2.9 Changing common VLAN to management VLAN . . . . . . . . . . . . . . . . . 2727.2.10 Configuring slot limited-rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2727.2.11 Configuring VLAN service type/cross-connect . . . . . . . . . . . . . . . . . . . 2737.2.12 Displaying VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2747.2.13 Deleting VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2747.2.14 VLAN settings of single tagged scenarios . . . . . . . . . . . . . . . . . . . . . . 2747.2.15 VLAN settings of double tagged scenarios . . . . . . . . . . . . . . . . . . . . . . 275

7

Operate CLI

Id:0900d805805d3c82

7.2.16 Example of configuring VLAN & bridge properties. . . . . . . . . . . . . . . . 276

8 Setting IPoA mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

9 IGMP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2809.1 IGMP provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2889.2 IGMP queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2919.3 IGMP host parameter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2919.4 IGMP multicast package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2929.4.1 Configuration of IGMP leavemode and ehtmode. . . . . . . . . . . . . . . . . 2969.5 IGMP subscriber . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2979.6 Max number of active channels on CXU . . . . . . . . . . . . . . . . . . . . . . . 2989.7 Enabling/disabling IGMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2989.8 Displaying IGMP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2989.9 IGMP settings in single tagged scenarios . . . . . . . . . . . . . . . . . . . . . . 3009.10 IGMP settings in double tagged scenarios . . . . . . . . . . . . . . . . . . . . . 301

10 DHCP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30210.1 DHCP/PPPoE provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30210.1.1 IP address for DHCP provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30410.1.2 DHCP server for DHCP provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30510.1.3 DHCP providers access node ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30510.1.4 Simplified DHCP provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30510.1.5 Activating the relay agent for a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . 30610.1.6 Displaying DHCP provider configuration . . . . . . . . . . . . . . . . . . . . . . . 30710.2 Showing DHCP provider of VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30710.3 DHCP relay agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30710.4 DHCP flood . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30910.5 PPPoE flood . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31010.6 DHCP/PPPoE option 82/option 105 . . . . . . . . . . . . . . . . . . . . . . . . . . 31110.6.1 Enabling option 82/option 105 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31210.6.2 Option 82 packet policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31310.7 Verifying DHCP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31310.8 DHCP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31410.9 Displaying DHCP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31410.10 Changing destination MAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31410.11 DHCP settings in single tagged scenarios. . . . . . . . . . . . . . . . . . . . . . 31510.12 DHCP settings in double tagged scenarios . . . . . . . . . . . . . . . . . . . . . 31710.13 Example of PPPoA configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318

11 CEBS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32011.1 CEBS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32011.2 CEBS MAC address translation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321

12 L2CP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322

13 IP routing protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32513.1 BGP routing protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32513.1.1 Basic configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32513.1.1.1 Activating BGP routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32513.1.1.2 Configuring BGP neighbor router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326

8

Operate CLI

Id:0900d805805d3c82

13.1.1.3 Changing routing policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33513.1.1.4 Configuring BGP weights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33613.1.1.5 BGP route filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33613.1.1.6 AS route filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33613.1.1.7 BGP filtering through prefix lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33713.1.1.8 Blocking information transmission to next destination . . . . . . . . . . . . . 34013.1.1.9 Configuring BGP version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34013.1.2 Advanced configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34013.1.2.1 Configuring BGP community filtering . . . . . . . . . . . . . . . . . . . . . . . . . . 34013.1.2.2 Checking and managing BGP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34113.2 IS-IS routing management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34313.2.1 Router configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34413.2.2 Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34513.2.3 Packet type parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34513.2.4 Metrics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35113.2.5 Mesh groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35113.2.6 Checking current configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351

14 Scenarios and configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . 35314.1 Global single tagged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35314.1.1 Global single tagged-untagged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35414.1.2 Global single tagged-tagged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35514.1.3 Global single tagged-tagged replace . . . . . . . . . . . . . . . . . . . . . . . . . . 35614.1.4 Global single tagged-special:

Multicast handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35714.1.5 Global single tagged-untagged

Multiple PVC’s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35814.1.6 Global single tagged-tagged

Multiple PVC’s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36014.1.7 Global single tagged-tagged

Replace multiple PVC’s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36214.2 Global Double Tagged . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36214.2.1 Global Double Tagged-Double tagged untagged . . . . . . . . . . . . . . . . . 36414.2.2 Global double tagged double tagged untagged cross connect . . . . . . . 36614.2.3 Global double tagged-stacked tagged . . . . . . . . . . . . . . . . . . . . . . . . . 36614.2.4 Global double tagged stacked tagged cross connect . . . . . . . . . . . . . . 36614.2.5 Global double tagged-stacked untagged . . . . . . . . . . . . . . . . . . . . . . . 36714.2.6 Global double tagged stacked untagged cross connect . . . . . . . . . . . . 36714.3 Use cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36814.3.1 Use case: ADSL configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36814.3.1.1 Configure ADSL port using profile copy . . . . . . . . . . . . . . . . . . . . . . . . 36814.3.1.2 Configure ADSL J port using profile copy . . . . . . . . . . . . . . . . . . . . . . . 36914.3.1.3 Configure specific ADSL line profile . . . . . . . . . . . . . . . . . . . . . . . . . . . 37014.3.1.4 Configure dynamic ADSL line profile . . . . . . . . . . . . . . . . . . . . . . . . . . 37114.3.2 Use case: DELT for ADSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37214.3.3 Use case: Ethernet Ring Protection (ERP) . . . . . . . . . . . . . . . . . . . . . . 37314.3.4 Use case: EtherType-based forwarding . . . . . . . . . . . . . . . . . . . . . . . . 37314.3.5 Use case: Port in IPoA mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374

9

Operate CLI

Id:0900d805805d3c82

14.3.5.1 Double-tagged VLAN scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37414.3.5.2 Single-tagged VLAN scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37514.3.6 Use case: Rate limiting for port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37614.3.7 Use case: IRL with .1p priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37714.3.8 Use case: L2CP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37814.3.9 Use case: Search for MAC address. . . . . . . . . . . . . . . . . . . . . . . . . . . 37914.3.10 Use case: MAC Address Translation (MAT) . . . . . . . . . . . . . . . . . . . . 38014.3.10.1 MAT per port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38014.3.10.2 MAT per VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38014.3.10.3 MAT any-L2-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38014.3.11 Use case: Metallic Test Access (MTA) . . . . . . . . . . . . . . . . . . . . . . . . 38114.3.12 Use case: PMDR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38214.3.13 Use case: Inner and outer priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38314.3.13.1 Map outer priority to DSCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38314.3.13.2 Default/pre-configured outer priority . . . . . . . . . . . . . . . . . . . . . . . . . . 38414.3.13.3 Default/pre-configured inner and outer priority . . . . . . . . . . . . . . . . . . 38414.3.13.4 Copy inner priority to outer priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . 38514.3.14 Use case: Global queue-priority mapping . . . . . . . . . . . . . . . . . . . . . . 38614.3.15 Use case: Global QoS queue configuration. . . . . . . . . . . . . . . . . . . . . 38714.3.16 Use case: Card specific QOS queue configuration . . . . . . . . . . . . . . . 38914.3.17 Use case: Card-specific QoS configuration . . . . . . . . . . . . . . . . . . . . . 39214.3.18 Use case: QoS shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39514.3.19 Use case: Shaping and policing on port . . . . . . . . . . . . . . . . . . . . . . . 39614.3.20 Use case: SHDSL port configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 39614.3.20.1 Ethernet over SHDSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39614.3.20.2 Wire mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39714.3.20.3 Clock synchronization with reference clock from CXU . . . . . . . . . . . . 39914.3.21 Use case: TSSM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39914.3.21.1 TSSM data transfer to FTP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40014.3.21.2 Port configuration for TSSM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40014.3.22 Use case: Dynamic UMAS for PPPoE. . . . . . . . . . . . . . . . . . . . . . . . . 40114.3.23 Use case: VDSL2 to ADSL2+ fallback. . . . . . . . . . . . . . . . . . . . . . . . . 40114.3.24 Use case: IGMP multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40214.3.24.1 Double-tagged multicast stream . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40214.3.24.2 Global- and port parameters of multicast channel . . . . . . . . . . . . . . . . 40414.3.24.3 IGMP log files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40614.3.24.4 Modify IGMP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40714.3.24.5 Static/non-static multicast channel. . . . . . . . . . . . . . . . . . . . . . . . . . . . 40714.3.24.6 IGMP leave delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40814.3.24.7 Multicast admission limit of a bridge port . . . . . . . . . . . . . . . . . . . . . . . 40814.3.24.8 Maximum value of IGMP provider’s multicast bandwidth . . . . . . . . . . 41014.3.24.9 IGMP packet limitation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41014.3.24.10 Associate all provided multicast streams with VLAN . . . . . . . . . . . . . . 41014.3.24.11 IGMPv2 multicast stream with any source address . . . . . . . . . . . . . . . 41114.3.24.12 Disable/enable CXU snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41214.3.24.13 Mixed IGMPv2 and IGMPv3 multicast streams . . . . . . . . . . . . . . . . . . 41314.3.24.14 IGMPv3 multicast stream from a certain source address . . . . . . . . . . 414

10

Operate CLI

Id:0900d805805d3c82

14.3.24.15 IGMPv3 - multicast stream from any source address . . . . . . . . . . . . . . 41514.3.24.16 IGMPv3 - preview function for multicast channel . . . . . . . . . . . . . . . . . 41614.3.25 Use case: IP-anti-spoofing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41714.3.26 Use case: Fix trunk setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41814.3.27 Use case:

LACP configuration (normal mode). . . . . . . . . . . . . . . . . . . . . . . . . . . . 42114.3.28 Use case: LACP configuration (trunk-like mode) . . . . . . . . . . . . . . . . . 427

15 Rule and QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43215.1 General aspects and restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43215.2 How to operate rule and QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43315.2.1 How to operate rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43315.2.2 How to operate QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43415.3 Rule configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43615.3.1 Creating rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43615.3.2 Rule type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43715.3.3 Rule priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43915.3.4 Rule match . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43915.3.5 Rule action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44515.3.6 Applying a rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44815.3.7 Displaying a rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44915.3.8 Deleting a rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45015.3.9 Example of configuring telnet blocking if SSH is preferred . . . . . . . . . . 45015.3.10 IRL profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45115.3.11 IRL port mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45315.4 QoS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45515.4.1 QueueMode configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45515.4.2 802.1p priory-to-queue mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45615.4.3 Scheduling algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45715.4.4 Weights and watermarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46015.4.5 QoS packet counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46215.4.6 QoS shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46315.4.7 Displaying QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465

16 System security management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46616.1 ARP introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46616.1.1 Configuring ARP table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46616.2 Setting MAC address limitation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46716.3 MAC table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46916.4 System authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47216.4.1 Authentication method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47216.4.2 Authentication interface to access RADIUS or TACACS server . . . . . . 47316.4.3 Primary authentication method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47416.4.4 RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47416.4.4.1 Setting timeout of authentication request . . . . . . . . . . . . . . . . . . . . . . . 47616.4.4.2 Setting frequency of retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47616.4.4.3 Example of setting RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47616.4.5 TACACS+ server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477

11

Operate CLI

Id:0900d805805d3c82

16.4.5.1 Timeout of authentication request . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47716.4.6 Accounting mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47916.4.7 Displaying system authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47916.5 Displaying max host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48016.6 IP anti-spoofing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48016.7 Uplink MAC address anti-spoofing. . . . . . . . . . . . . . . . . . . . . . . . . . . . 48116.8 Storm control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48216.9 Bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48316.10 MTU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48316.11 Enabling/blocking static IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . 483

17 Performance data management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48617.1 Performance data of ADSL ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48617.1.1 15 minutes performance interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48617.1.2 Performance data of ATU-C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48817.1.3 Performance data of ATU-R . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48917.1.4 Channel performance data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48917.1.5 Clearing performance data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49017.2 Performance data of xDSL port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49117.2.1 Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49117.2.2 15 Minutes performance interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49117.2.3 1 day performance interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49217.2.4 Performance data of XTU-C/XTU-R . . . . . . . . . . . . . . . . . . . . . . . . . . 49317.2.5 Performance data of xDSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49417.2.6 TSSM feature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49617.2.7 PMDR feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498

18 Network management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49918.1 SNMP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49918.1.1 SNMP community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49918.1.2 Information of SNMP agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50018.1.3 SNMP com2sec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50118.1.4 SNMP group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50218.1.5 SNMP view record . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50318.1.6 Permission to access SNMP view record . . . . . . . . . . . . . . . . . . . . . . 50318.1.7 SNMP version 3 user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50418.1.8 SNMP trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50518.1.9 Displaying SNMP configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50718.1.10 Setting SNMP aging time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50718.1.11 Disabling SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50718.2 RMON configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50718.2.1 RMON history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50818.2.1.1 Source port of statistical data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50818.2.1.2 Subject of RMON history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50918.2.1.3 Number of sample data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50918.2.1.4 Interval of sample inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50918.2.1.5 Activating RMON history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50918.2.1.6 Deleting configuration of RMON history. . . . . . . . . . . . . . . . . . . . . . . . 509

12

Operate CLI

Id:0900d805805d3c82

18.2.1.7 Displaying RMON history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50918.2.2 RMON alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51118.2.2.1 Subject of RMON alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51118.2.2.2 Object of sample inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51118.2.2.3 Absolute and delta comparison. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51218.2.2.4 Upper bound of threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51318.2.2.5 Lower bound of threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51318.2.2.6 Standard of the first alarm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51318.2.2.7 Interval of sample inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51418.2.2.8 Activating RMON alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51418.2.2.9 Deleting configuration of RMON alarm . . . . . . . . . . . . . . . . . . . . . . . . . 51418.2.2.10 Displaying RMON alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51418.2.3 RMON event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51518.2.3.1 Event community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51518.2.3.2 Event description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51518.2.3.3 Subject of RMON event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51518.2.3.4 Event type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51618.2.3.5 Activating RMON event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51618.2.3.6 Deleting configuration of RMON event . . . . . . . . . . . . . . . . . . . . . . . . . 51618.2.3.7 Displaying RMON event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51618.2.3.8 Showing RMON log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51618.3 Syslog configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51718.3.1 Syslog output level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51718.3.2 Facility code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52518.3.3 Syslog bind address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52518.3.4 Debug message for remote terminal. . . . . . . . . . . . . . . . . . . . . . . . . . . 52518.3.5 Enabling/disabling syslog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52718.3.6 Displaying syslog message. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52718.3.7 Displaying syslog configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 527

19 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 528

13

Operate CLI

Id:0900d805805d3c82

List of FiguresFigure 1 Overview of configuration modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Figure 2 Configuration example for inband-outband routing feature . . . . . . . . . . 59Figure 3 Configuration example for inband-outband switching feature . . . . . . . . 61Figure 4 Mobile backhauling - subtended DSLAM. . . . . . . . . . . . . . . . . . . . . . . . 81Figure 5 Overview clock synchronisation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81Figure 6 M1200 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94Figure 7 M1100/G1100 Slot Allocation for CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . 95Figure 8 G600 2G Slot Allocation for CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96Figure 9 G600R 2G Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96Figure 10 M600 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97Figure 11 M400 Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98Figure 12 G400 Slot Allocation for CLI (Example: for ETSI application) . . . . . . . . 98Figure 13 G400R Slot Allocation for CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99Figure 14 G200 2G Slot Allocation for CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100Figure 15 Example of Loop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123Figure 16 Principle of Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . 123Figure 17 Root switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124Figure 18 Designated switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125Figure 19 Port Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126Figure 20 Port states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126Figure 21 Alternate Port and Backup Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128Figure 22 Example receiving of low BPDU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128Figure 23 Network convergence of 802.1d . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129Figure 24 Network convergence of 802.1w (1) . . . . . . . . . . . . . . . . . . . . . . . . . . 129Figure 25 Network convergence of 802.1w (2) . . . . . . . . . . . . . . . . . . . . . . . . . . 130Figure 26 Network convergence of 802.1w (3) . . . . . . . . . . . . . . . . . . . . . . . . . . 131Figure 27 Compatibility with 802.1d (1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131Figure 28 Compatibility with 802.1d (2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132Figure 29 CST and IST of MSTP (1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133Figure 30 CST and IST of MSTP (2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133Figure 31 Transmission in DSL system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149Figure 32 4-Bit QAM and 16-Bit QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150Figure 33 4-Bit QAM modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150Figure 34 2-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151Figure 35 3-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151Figure 36 4-Band QAM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152Figure 37 DMT modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153Figure 38 Single-Ended Line Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162Figure 39 Transmit Rate according to SNR Margin . . . . . . . . . . . . . . . . . . . . . . . 168Figure 40 DHCP option 82 operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312Figure 41 The packet based round robin scheduler. . . . . . . . . . . . . . . . . . . . . . . 459Figure 42 Counting times of error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486

14

Operate CLI

Id:0900d805805d3c82

List of TablesTable 1 Command Notation of Guide Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Table 2 Main commands of User EXEC mode . . . . . . . . . . . . . . . . . . . . . . . . . . 26Table 3 Main commands of Privileged EXEC mode . . . . . . . . . . . . . . . . . . . . . . 26Table 4 Main commands of Global Configuration mode . . . . . . . . . . . . . . . . . . 27Table 5 Main commands of Bridge Configuration mode . . . . . . . . . . . . . . . . . . . 28Table 6 Interface Commands in Configuration Mode . . . . . . . . . . . . . . . . . . . . . 29Table 7 Main commands of Rule Configuration mode . . . . . . . . . . . . . . . . . . . . 30Table 8 Command abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37Table 9 Overview of the HW components and LC’s . . . . . . . . . . . . . . . . . . . . . . 82Table 10 Creating new modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83Table 11 Converting a configured module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85Table 12 Resetting equipped module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86Table 13 Changing administrative state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87Table 14 Deleting existing module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87Table 15 Displaying physical tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88Table 16 Changing alarm severity profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89Table 17 Changing external alarm configuration . . . . . . . . . . . . . . . . . . . . . . . . . 90Table 18 Changing temperature warning thresholds . . . . . . . . . . . . . . . . . . . . . . 91Table 19 Changing humidity alarm thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . 91Table 20 Port information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110Table 21 STP path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135Table 22 RSTP path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136Table 23 DELT measurements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158Table 24 SELT measurements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163Table 25 Information of ADSL line-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177Table 26 IRL value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193Table 27 VLAN priority configuration options . . . . . . . . . . . . . . . . . . . . . . . . . . . 260Table 28 Setting the priority bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260Table 29 Restrictions for card specific configuration . . . . . . . . . . . . . . . . . . . . . 432Table 30 Rule type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 437Table 31 Rule type with allowed rule match . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438Table 32 Default 802.1p priory-to-queue mapping . . . . . . . . . . . . . . . . . . . . . . . 456Table 33 Watermark default value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 460Table 34 Setting authentication method and password checking . . . . . . . . . . . . 473Table 35 Setting authentication interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 473Table 36 Setting primary authentication method . . . . . . . . . . . . . . . . . . . . . . . . 474Table 37 Adding RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475Table 38 Deleting RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475Table 39 Setting timeout of authentication request . . . . . . . . . . . . . . . . . . . . . . . 476Table 40 Setting frequency of retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476Table 41 Adding TACACS+ server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477Table 42 Deleting TACACS+ server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477Table 43 TCP Port for authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478Table 44 Selecting authentication type for TACACS+ . . . . . . . . . . . . . . . . . . . . 478Table 45 Defining user’s priority level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478

15

Operate CLI

Id:0900d805805d3c82

Table 46 Setting Accounting Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479Table 47 Displaying system authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479Table 48 Displaying configured max host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480Table 49 Displaying 15 min performance interval . . . . . . . . . . . . . . . . . . . . . . . 486Table 50 Displaying performance data of ATU-C . . . . . . . . . . . . . . . . . . . . . . . 488Table 51 Displaying ADSL-performance data of ATU-R . . . . . . . . . . . . . . . . . . 489Table 52 Displaying channel performance data of ATU-C/R . . . . . . . . . . . . . . . 489Table 53 Clearing all performance data of ADSL port . . . . . . . . . . . . . . . . . . . . 490Table 54 Shows Number of Valid Intervals . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491Table 55 Displaying 15 minutes-performance data of ATU-R . . . . . . . . . . . . . . 491Table 56 Displaying 1-Day Performance Data of ATU-R . . . . . . . . . . . . . . . . . . 492Table 57 Displaying performance data of XTU-C and XTU-R . . . . . . . . . . . . . . 493Table 58 Configuring performance data of xDSL . . . . . . . . . . . . . . . . . . . . . . . . 494Table 59 Displaying performance data of xDSL . . . . . . . . . . . . . . . . . . . . . . . . 495

16

Operate CLI

Id:0900d805805d3cae

Change History

Change History5. Update (BFR 3.0, 31.08.2009)

Introduction (1)

– Applied NSN documentation guideline.

System overview (2)


Configuration mode (3)

– Added commands for the system diagnostic tool.– Applied NSN documentation guideline.

System basic configuration and operation (4)


Equipment management (5)


Port configuration (6)

– Added chapter “Converting Bridgeport Notation in Index and Vice Versa”. – Changed notes in chapter “Configuring ADSL Port”. – Added notes for mapping bandplan/VDSL2-profile. – Added examples for xDSL DELT. – Added review comments from version 2.8M. – Applied NSN documentation guideline.

Bridge and VLAN configuration (7)

– Changed comments of command bridgebase multicast-filter (dis-able|upstream|downstream|updownstream)

– Added new command: bridgeport PORTS mode default.– Restriction for comments to max-host commands is only valid for Convergate D-IUs.– Added review comments from version 2.8M. – Applied NSN documentation guideline.

Setting IPoA mode (8)

– Added review comments from version 2.8M. – Applied NSN documentation guideline.

IGMP configuration (9)

– Added comment according to IGMP CXU-snooping.– Added review comments from version 2.8M.

DHCP configuration (10)

– Added review comments from version 2.8M.

17

Operate CLI Change History

Id:0900d805805d3cae

CEBS configuration (11)


L2CP configuration (12)


IP routing protocols (13)


IS-IS routing management (13.2)


Scenarios and configuration examples (14)


Rule and QoS (15)


System security management (16)


Performance data management (17)


Network management (18)


4. Update (BFR 2.0, 30.05.2009)

3. Update (BFR 1.5, 30.04.2009)

2. Update (28.02.2009)

1. Update (16.12.2008)

Initial release (28.11.2008)

18

Operate CLI

Id:0900d805805d3cae

Change History

19

Operate CLI Introduction

Id:0900d805805de1be

1 Introduction

1.1 AudienceThis manual is intended for SURPASS hiX 5622/25/30/35 R2.8 Ethernet/IP-DSLAM operators and maintenance personnel for providers of digital subscriber line (DSL) and voice over internet protocol(VoIP) services. This manual assumes that you are familiar with the following:

• Ethernet networking technology and standards • Internet topologies and protocols • DSL technology and standards • VoIP technology and standards • ATM technology and standards • Usage and functions of command line interface.

1.2 Document conventionThis guide uses the following conventions to convey instructions and information.

Information

g This information symbol provides useful information when using commands to con-figure and means reader take note. Notes contain helpful suggestions or references.

In examples the “-->“ symol is used to explain certain commands.

Warning

1.3 Document notationThe following table shows commands used in guide book. Please be aware of each command to use them correctly.

!This warning symbol means danger. You are in a situation that could cause bodily injury or broke the equipment. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents by making quick guide based on this guide.

Notation Description

show Command (example) you should enter as it is.

NAME, PROFILE, VALUE, … Variables for which you supply values.

PORTS For entry this variable, see Section 6.1

[ ] Commands or variables that appear within square brackets [ ] are optional.

< > Range of number that you can use.

{ } A choice of required keywords appears in braces { }. You have to select one.

Table 1 Command Notation of Guide Book

20

Operate CLI

Id:0900d805805de1be

Introduction

1.4 CE declaration of conformityThe CE declaration of the product will be fulfilled if the construction and cabling is under-taken in accordance with the manual and the documents listed there in, e.g. mounting instructions, cable lists where necessary account should be taken of project-specific documents.

Deviations from the specifications or unstipulated changes during construction, e.g. the use of cable types with lower screening values can lead to violation of the CE require-ments. In such case the conformity declaration is invalidated and the responsibility passes to those who have caused the deviations.

1.5 GPL/LGPL warranty and liability exclusionThe Nokia Siemens Networks product, SURPASS hiX 5622/25/30/35 R2.8, contains both proprietary software and “Open Source Software”. The Open Source Software is licensed to you at no charge under the GNU General Public License (GPL) and the GNU Lesser General Public License (LGPL). This Open Source Software was written by third parties and enjoys copyright protection. You are entitled to use this Open Source Software under the conditions set out in the GPL and LGPL licenses indicated above. In the event of conflicts between Nokia Siemens Networks license conditions and the GPL or LGPL license conditions, the GPL and LGPL conditions shall prevail with respect to the Open Source portions of the software.

The GPL can be found under the following URL:

http://www.gnu.org/copyleft/gpl.html

The LGPL can be found under the following URL:

http://www.gnu.org/copyleft/lgpl.html

The use of Open Source Software contained in this product in any manner other than the simple running of the program occurs at your own risk, that is, without any warranty claims against Nokia Siemens Networks. For more information about the warranties provided by the authors of the Open Source Software contained in this product, please consult the GPL and LGPL.

You have no warranty claims against Nokia Siemens Networks when a defect in the product is or could have been caused by changes made by you in any part of the software or its configuration. In addition, you have no warranty claims against Nokia Siemens Networks when the Open Source Software infringes the intellectual property rights of a third party.

Nokia Siemens Networks provides no technical support for either the software or the Open Source Software contained therein if either has been changed.

| OR function of possible variables separated by vertical bars.

Notation Description

Table 1 Command Notation of Guide Book (Cont.)

21

Operate CLI System overview

Id:0900d805805d8f3f

2 System overviewThe hiX 5622/25/30/35 R2.8 is a shelf based modular Ethernet/IP-DSLAM that termi-nates the ATM and Ethernet traffic coming from the subscriber lines and consolidates it on one or more Fast/Gigabit Ethernet interfaces towards the Metropolitan Area. For DSL, the ATM layer (PVCs – Permanent Virtual Connections) is terminated on the inter-face unit and translated to Ethernet to be transported through an Ethernet/IP environ-ment.

DSL is the ideal solution for the bottleneck of the last mile, providing voice, data, and video solutions.

The following DSL technologies are used:

– ADSL2+– VDSL2– SHDSL

Its high speed interfaces are suitable for asymmetrical and symmetrical applications such as High-speed Internet access, teleworking, video conferences, virtual private net-working and streaming multimedia content and video.

The CXU is the central unit of hiX 5622/25/30/35 R2.8, it has the leading part at switch-ing the traffic, managing all components and providing the network interfaces.

The supported CXU types of the hiX 5622/25/30/35 R2.8 are to find in the System Description.

A maximum number of four physical uplinks of the eight possible uplinks (only on several CXU types) can be used. The uplinks can be used as uplink towards the core network or they are used either to cascade other DSLAMs or to connect to a collocated switch.

A typical configuration can be e. g.: 2 optical GB uplinks and 2 electrical GB links towards a cascaded/collocated DSLAM/switch. In order to be able to use the optical uplinks separate pluggable modules (SFPs) have to be used in these slots.

There are various types of central units for different shelves, see the overview in System Description of the hiX 5622/25/30/35 R2.8. The maximum line capacity dependent on the equipment configuration of the shelves is also to find there.

The following different network scenarios with and without subtending of network elements are possible:

• Point-to-point networks • Ring networks or Meshed networks. • Meshed networks.

The network topology at the subtending interfaces can be point-to-point tree.

22

Operate CLI

Id:0900d805805d8f3f

System overview

2.1 System featuresSURPASS hiX 5622/25/30/35 R2.8 provides the following features:

VLANVirtual Local Area Network (VLAN) is made by dividing one network into several logical networks. Packets can not be transmitted and received between different VLANs. Therefore it can prevent undesired broadcasting. The hiX 5622/25/30/35 R2.8 recog-nizes 802.1q tagged frame and supports maximum of 4096 VLANs.

Quality of Service (QoS)For the hiX 5622/25/30/35 R2.8, QoS-based forwarding sorts traffic into a number of classes and marks the packets accordingly. Each class has its own quality of service and packets.

The rich QoS capabilities enable network operators to protect applications require high transmission quality and support differentiated levels of bandwidth for managing traffic congestion. The hiX 5622/25/30/35 R2.8 supports packet delay priority based on the IEEE 802.1p class of services (CoS) standard.

IP multicastThe hiX 5622/25/30/35 R2.8 provides IGMP snooping and IGMP proxy functionality. It allows users selectively to receive the multicast traffic. It means that it reduces the amount of multicast traffic in network effectively.

SNMP/RMONIn simple network management protocol (SNMP) mode, the DSLAM can be managed and monitored by switches are mounted at remote places.

The hiX 5622/25/30/35 R2.8 supports SNMP version 1, 2 and and 3 for remote monitor-ing (RMON) so that the operator can check static data at anytime.

Dynamic Host Configuration Protocol (DHCP)The hiX 5622/25/30/35 R2.8 supports dynamic host configuration protocol (DHCP) which automatically assigns IP address to clients accessed to the network. You can effectively utilize limited IP source and lower cost to manage network because DHCP server manages all IP addresses from center.

Spanning Tree Protocol (STP)To prevent loop and preserve backup route in Layer 2 network, the hiX 5622/25/30/35 R2.8 supports spanning tree protocol (STP) defined in IEEE 802.1d and also supports STP evolutions: RSTP and MSTP. Between STP enabled switches, a root bridge is automatically selected and the network remains in tree topology. Rapid spanning tree protocol (RSTP, IEEE 802.1w) provides faster spanning tree conver-gence after a topology change. Multiple spanning tree protocol (MSTP; IEEE 802.1s) allows several VLANs to be mapped to a reduced number of spanning tree instances. STP could not work each VLAN, but in MSTP each instance handles multiple VLANs that have the same Layer 2 topology.

Rate-limitThe hiX 5622/25/30/35 R2.8 provides graded bandwidth to all ports. Through providing bandwidth graded by user’s configuration, ISP can charge a service bill to subscribers according to their rate-limit grade. It also can plan and manage subscriber's lines in the most efficient and economized way.

23

Operate CLI System overview

Id:0900d805805d8f3f

Port trunkThe hiX 5622/25/30/35 R2.8 aggregates several physical interfaces into one logical port (aggregate port). The port trunk aggregates interfaces into one that have the same speed, duplex mode and VLAN settings.

According to IEEE 802.3ad, the hiX 5622/25/30/35 R2.8 can combine up to four ports as an aggregate port and can create a maximum of two aggregated ports.

Link Aggregation Control Protocol (LACP)The hiX 5622/25/30/35 R2.8 supports Link Aggregation Control Protocol (LACP), com-plying with IEEE 802.3ad, which aggregates multiple links to devices to broaden the available bandwidth.

Layer 2 Control Protocol (L2CP)L2CP is used in product to deliver information about the type of DSL subscriber line as well as upstream and downstream bit rates to the Broadband Remote Access Server (BRAS).

Without this information, BRAS has to adjust its shaping functions to the maximum con-figured rate values. However, traffic losses can occur in the DSLAM and incorrect billing may ensue if the actual rate is lower than the maximum rate.

The name of the L2CP is changed now to Access Node Control Protocol (ANCP).

System management based on CLIIt is easy for system administrators to configure system functions by using Command Line Interface (CLI) through telnet, SSH or console port. They also can search available CLI commands through the help menu conveniently and configure functions accord-ingly.

Broadcast storm controlBroadcast storm may happen when constant broadcast or multicast traffic are flooded on the network and it eventually leads to a complete loss of network connectivity as the traffic occupies most of the transmit capacities. The hiX 5622/25/30/35 R2.8 implements broadcast storm control function which throws away flooding packets that exceed the limit during a period of time.

Secure shell (SSH)Network security is getting more important because the access network has been gen-eralized among numerous users. Secure shell (SSH) is a network protocol that allows establishing a secure channel between a local and a remote computer. SSH is sup-ported to configure the network by entering CLi commands.

24

Operate CLI

Id:0900d805805d903a

Configuration mode

3 Configuration modeThe hiX 5622/25/30/35 R2.8 enables system administrators to manage the hiX 5622/25/30/35 R2.8 by providing the command line interface (CLI).

To manage the system with the CLI, a management network is required. The hiX 5622/25/30/35 R2.8 can be connected to the management network directly (out-band) or through the access network (inband). It can even connect using a combination of the two; for example, a cascaded hiX 5622/25/30/35 R2.8 connects inband to the cas-cading switch, and then from the cascading switch to the management network through the outband interface.

The hiX 5622/25/30/35 R2.8 also provides the RS232 console interface to enable easy access to the system through a provided RJ45-to-DB9 cable that connects the RS232 console to the system.

You can configure and manage the hiX 5622/25/30/35 R2.8 with the CLI via a manage-ment network or the console interface.

The CLI provides the following command modes:

• User EXEC mode • Privileged EXEC mode • Global configuration mode • Bridge configuration mode • Interface configuration in configuration mode • Rule configuration mode • DHCP Configuration Mode • PPPoE configuration mode • RMON configuration mode • Router configuration mode • Route-map configuration mode

3.1 Configuration mode overviewFigure 1 shows the overview of the configuration modes for the hiX 5622/25/30/35 R2.8.

25

Operate CLI Configuration mode

Id:0900d805805d903a

Figure 1 Overview of configuration modes

Console Interface

Bits per second: 38400Data bits: 8Parity: noneStop bits: 1Flow control: none

Telnet/SSH

User EXEC ModeSWITCH>

Privileged EXEC ModeSWITCH#

enable

configure terminal

Login:Password:

Global Configuration ModeSWITCH(config)#

rule NAME create

(NAME: rule name)

Rule Configuration ModeSWITCH(config-rule[NAME])#

ip pppoe provider NAME(NAME: provider name)

DHCP Configuration ModeSWITCH(dhcp-provider)#

PPPoE Configuration ModeSWITCH(pppoe-provider)#

Bridge Configuration ModeSWITCH(bridge)#

rmon-history<1-65535>

RMON Configuration ModeSWITCH(config-rmonhistory[N])#

ip dhcp provider NAME(NAME:provider name)

bridge

Router-map Configuration ModeSWITCH(config-route-map)#

route-map NAME permit N

(NAME: WORD Route map tag)(N: <1-65535>Sequence to insert to/delete from existing route-map entry)

exit

Back to logout

endBack to start current mode

Commands for all modes:

Router configuration modeSWITCH(config-router)#

router XXXbgp Border Gateway Protocol (BGP)ospf Open Shortest Path First (OSPF)rip Routing Information Protocol (RIP))

26

Operate CLI

Id:0900d805805d903a

Configuration mode

3.2 User EXEC modeWhen you log in to the system (see 4.1.2 System login), the CLI will start with User EXEC mode as a configuration mode. In this mode, you can see a system configuration and information with several commands.

Table 2 shows main commands of User EXEC mode.

3.3 Privileged EXEC modeTo configure the system, you need to open Privileged EXEC mode with the enable command, then the system prompt will change from SWITCH> to SWITCH#.

You can set a password to Privileged EXEC mode to enhance security. Once setting a password, you have to enter a configured password, when you open Privileged EXEC mode. For detailed information setting password for Privileged EXEC mode, refer to 4.1.3.5 Setting password for privileged EXEC mode.

Table 3 shows main commands of Privileged EXEC mode.

Command Description

adsl ADSL configuration.

bluesclues Bluesclues trace tool collect clues for search of errors.

clear Reset functions.

debug Debugging functions (see also 'undebug').

enable Turn on privileged EXEC mode command.

exit End current mode and down to previous mode.

help Description of the interactive help system.

lre LRE port information.

no Negate a command or set its defaults.

show Show running system information.

terminal Set terminal line parameters.

Table 2 Main commands of User EXEC mode

Command Mode Description

enable User Changes to Privileged EXEC mode.

Command Description


bluesclues Bluesclues trace tool collect clues for search of errors.

clear Reset functions.

clock Sets a system time and date.

configure terminal Enter Global Configuration mode.

copy Copy from one file to another.

debug Debugging functions (see also 'undebug').

Table 3 Main commands of Privileged EXEC mode

27


Id:0900d805805d903a

3.4 Global configuration modeIn Global Configuration mode, you can configure general functions of the system. You can also open another configuration mode from this mode.

To open Global Configuration mode, enter the configure terminal command, and then the system prompt changes from SWITCH# to SWITCH(config)#.

Table 4 shows main commands of Global Configuration mode.

enable Turn on privileged mode command.


help Shows a description of the interactive help system.



ping Send echo messages.


slot Slot rate configuration.

telnet Connect to a remote host through telnet.

terminal length Configures the number of line of the current terminal.

traceroute Trace a packet route.

where Display users accessing the system via telnet or console.

write Write running configuration to memory or terminal.

Command Description

Table 3 Main commands of Privileged EXEC mode (Cont.)


configure terminal Privileged Open Configuration mode from Privileged EXEC mode

Command Description

access-list Configures an access list.


al-mgr Sets all severities for a choosen alarm - first is default and could not be overwritten.

ancp L2CP (ANCP) configuration.

arp Sets a static ARP entry.

auto-backup Cofigure the automatic save of the configuration data.

banner Set login banner.

bgp BGP information.

bluesclues Trace tool collect clues for search of errors.

bridge Turns on Bridge Configuration mode.

cebs Carrer Ethernet Border Switch.

dns-server Sets a DNS server.

Table 4 Main commands of Global Configuration mode

28

Operate CLI

Id:0900d805805d903a

Configuration mode

3.4.1 Bridge configuration modeIn Bridge Configuration mode, you can configure various Layer 2 functions such as VLAN, STP, LACP, etc.

To open Bridge Configuration mode, enter the bridge command, then the system prompt will change from SWITCH(config)# to SWITCH(bridge)#.

To open Bridge Configuration mode, enter the bridge command, then the system prompt will change from SWITCH(config)# to SWITCH(bridge)#.

Table 5 shows main commands of Bridge Configuration mode.

exec-timeout Sets an auto log-out timer.

help Shows a description of the interactive help system.

hostname Sets a host name of the system.


netdevice Configures a specified interface.

ntp-client Configures NTP Client.

passwd Changes password.

qos Configures QoS.

rmon-history Open RMON Configuration mode to configure RMON history.

rule Open Rule Configuration mode to configure a rule.

snmp Configures SNMP.

syslog Configures a syslog.

time-zone Specifies the time zone.

tssm TSSM Configuration mode.

upload Upload main board configuration(stored)|errlog|inventory|performance|alarm-log|uptimelog data.

user User management.

voip Voip Configuration.

where Lists active user connections.

write Writes running configuration to memory or terminal.

Command Description

Table 4 Main commands of Global Configuration mode (Cont.)


bridge Global Opens Bridge Configuration mode.

Command Description

lacp Configures LACP.

mac Configures a MAC table.

bridgebase mirror Configures a port mirroring.

port Configures Ethernet port.

Table 5 Main commands of Bridge Configuration mode

29


Id:0900d805805d903a

3.4.2 Interface configuration in configuration modeIn Configuration Mode, you can configure a specified interface by entering one of the following netdevice commands, the system prompt remains in SWITCH(config)#.

Table 6 shows commands for Interfaces in Configuration mode.

stp Configures STP.

trunk Configures a trunk port.

vlan Configures VLAN.

Command Description

Table 5 Main commands of Bridge Configuration mode (Cont.)


netdevice (A.B.C.D/M | dhcp) DESCR <2-4093> (<2-4093> | )

Global Configures network interface.

A.B.C.D/M IP address with subnet mask.

dhcp DHCP is used.

DESCR Description.

<2-4093> Outer VLAN.

<2-4093> Inner VLAN.

netdevice mod descr INTERFACE DESCR

Configures network interface.– Modifies network interface.

mod Modifies network interface.

descr Modifies description.

INTERFACE Index or interface name.

DESCR Description.

netdevice mod ipaddr INTERFACE (A.B.C.D/M)


mod Modifies network interface.

ipaddr Modifies IP address.



netdevice mod vlan INTERFACE <2-4093> (<2-4093> | )


vlan Inner and outer vlan.


<2-4093> Outer VLAN.

<2-4093> Inner VLAN.

Command Description

bandwidth BANDWIDTH Configures a bandwidth.

description LINE Specifies a description.

Table 6 Interface Commands in Configuration Mode

30

Operate CLI

Id:0900d805805d903a

Configuration mode

3.4.3 Rule configuration modeIn Rule Configuration mode, you can configure a rule for incoming packets. The rule classifies incoming traffic, and then processes the traffic according to defined policies.

To open Rule Configuration mode, enter the rule command, then the system prompt changes from SWITCH(config)# to SWITCH(config-rule[NAME])#.

Table 7 shows main commands of Rule Configuration mode.

3.4.4 DHCP Configuration ModeIn DHCP Configuration mode, you can configure general functions of DHCP per each DHCP pool.

To open DHCP Configuration mode, enter the ip dhcp provider command, then the system prompt changes from SWITCH(config)# to SWITCH(dhcp-provider)#.

ip address A.B.C.D/M Assign IP address.

shutdown Deactivate an interface.

no shutdown Negate a command or set its defaults,- Shutdown the selected interface.

mtu Sets MTU value.

Command Description

Table 6 Interface Commands in Configuration Mode (Cont.)


rule NAME create Global Open Rule Configuration mode.

Command Description

action Match action.

apply Save and apply a configured rule.

do Run exec commands in config mode.


help Description of the interactive help system.

match Classify packets according to a given condition.

no Negates a command or set its defaults.

no-action Configure a rule action for packets which do not meet a given condition.

prio Rule priority (precedence to other rules).


type Configure rule of a certain rule type

Table 7 Main commands of Rule Configuration mode


ip dhcp provider NAME Global Open DHCP Configuration mode to configure DHCP.

31


Id:0900d805805d903a

3.4.5 PPPoE configuration modeIn PPPoE configuration mode, you can configure PPPoE provider’s VLAN ID, option105 flags . To open PPPoE Configuration mode, enter the ip pppoe provider command, then the system prompt changes from SWITCH(config)# to SWITCH(pppoe-provider)#.

3.4.6 RMON configuration modeThe hiX 5622/25/30/35 R2.8 supports SNMP version 1, 2 and and 3 for remote monitor-ing (RMON) so that the operator can check static data at anytime.

In RMON Configuration mode, you can configure RMON alarm, RMON event and RMON history. The hiX 5622/25/30/35 R2.8 provides three different configuration modes to configure each type of RMON.

To activate RMON and assign an owner use the following commands:

3.4.7 Router configuration modeIn Router Configuration mode, you can configure profiles for Router functions.

To open Router Configuration mode, enter the router XXX command, then the system prompt changes from SWITCH(config)# to SWITCH(config-router)#.


ip pppoe provider NAME Global Open PPPoE Configuration mode.


rmon-alarm <1-65535> Global Configure RMON alarm/eveny/history.

rmon-event <1-65535> 1-65535 Index number.

rmon-history <1-65535>


active RMON Activate RMON alarm/event/history.

owner Assign the owner who defines and is using the history ressources.

32

Operate CLI

Id:0900d805805d903a

Configuration mode

To negate the commands of the previous table, use following commands:

3.4.8 Route-map configuration modeIn Route-map Configuration mode, you can configure Route-map profiles such as mgcprofile, mgprofile.

To open Route-map Configuration mode, enter the route-map NAME permit N command, then the system prompt changes from SWITCH(config)# to SWITCH(config-route-map)#.


router bgp<1-65535>

Global Enables a routing process, Border Gateway Protocol (BGP).

<1-65535> AS number

router bgp<1-65535> view WORD

Enables a routing process, Border Gateway Protocol (BGP).

<1-65535> AS number.

view BGP view.

WORD View name.

router isis(WORD | )

Enables a routing process;- Intermediate System (IS-IS).

WORD ISO routing area tag.

router ospf Enables a routing process, Start OSPF configuration.

router ospf<1-65535>

Enables a routing process, Start OSPF configuration.

<1-65535> OSPF process ID.

router rip Enables a routing process, Routing Information Protocol (RIP).


no router bgp<1-65535>

Global Disables a routing process, Border Gateway Protocol (BGP).

<1-65535> AS number

no router bgp<1-65535> view WORD

Disables a routing process, Border Gateway Protocol (BGP).

<1-65535> AS number.

view BGP view.

WORD View name.

no router isis(WORD | )

Disables a routing process;- Intermediate System (IS-IS).

WORD ISO routing area tag.

no router ospf Disables a routing process, Start OSPF configuration.

no router ospf<1-65535>

Disables a routing process, Start OSPF configuration.

<1-65535> OSPF process ID.

no router rip Disables a routing process, Routing Information Protocol (RIP).

33


Id:0900d805805d903a

3.4.9 Configuration mode exampleFollowing example shows how to enter various types of configuration modes.

SWITCH>enable

SWITCH# configure terminal

SWITCH(config)# bridge

SWITCH(bridge)# exit

SWITCH(config)# rule test_rule create

SWITCH(config-rule[test_rule])# exit

SWITCH(config)# netdevice mod 2 TO_BRAS

SWITCH(config)# end

SWITCH#

3.5 Useful tipsThis Section describes useful tips for operating the hiX 5622/25/30/35 R2.8 with a CLI.

• Telnet access • Listing available commands • Calling command history • Using abbreviation • Privileged EXEC Mode at other configuration mode • Leaving current command mode

3.5.1 Telnet accessTo disconnect a user connected through telnet, use the following command.


route-map WORD (deny|permit) <1-65535>

Global Opens the Route-map Configuration mode.

WORD Route map tag.

deny Route map denys set operations.

permit Route map permits set operations.

<1-65535> Sequence to insert to/delete from existing route-map entry.

no route-map WORD((deny|permit) <1-65535>|)

Negate the command or set its defaults of;- Create route-map or enter route-map command mode.

WORD Route map tag.

deny Route map denys set operations.

permit Route map permits set operations.

<1-65535> Sequence to insert to/delete from existing route-map entry.


disconnect TTY-NUMBER Global Disconnect a user connected through telnet.

34

Operate CLI

Id:0900d805805d903a

Configuration mode

The following is an example of disconnecting a user connected from a remote place.

(‘where‘ command is used for listing active user connections)SWITCH(config)# whereadmin at from console for 4 days 22 hours 15 minutes 24.88 secondsadmin at ttyp0 from 10.0.1.4:1670 for 4 days 17 hours 53 minutes 28.76 secondsadmin at ttyp1 from 147.54.140.133:49538 for 6 minutes 34.12 secondsSWITCH(config)# disconnect ttyp0SWITCH(config)# whereadmin at from console for 4 days 22 hours 15 minutes 34.88 secondsadmin at ttyp1 from 147.54.140.133:49538 for 6 minutes 44.12 secondsSWITCH(config)#

g To prevent access via Telnet protocol, the specific rule should be set if SSH is pre-ferred. Please refer to 15.3.9 Example of configuring telnet blocking if SSH is pre-ferred

To show a running management session and the session command history, use the fol-lowing commands:

3.5.2 Listing available commandsTo list the available commands, one way is to input question mark <?>. When you input the question mark <?>, you can see some available commands used in this mode and the explanation following after the commands.

The following are the available commands on Privileged EXEC mode of the hiX 5622/25/30/35 R2.8.

New command list of Privileged EXEC mode is:SWITCH# ?Exec commands: adsl ADSL configuration bluesclues trace tool collect clues for search of errors clear Reset functions clock Manually set the system clock configure Enter configuration mode copy Copy from one file to another debug Debugging functions (see also 'undebug') enable Turn on privileged mode command exit End current mode and down to previous mode help Description of the interactive help system lre LRE port information no Negate a command or set its defaults ping Send echo messages show Show running system information slot slot rate configuration telnet Open a telnet connection terminal Set terminal line parameters traceroute Trace route to destination where List active user connections write Write running configuration to memory, network, or terminalSWITCH#


show management-session Global Show running system information;- Management Session (Telnet, SSH, SNMP).

show history-session Priviledged Show running system information;- Display the session command history.

35


Id:0900d805805d903a

g Question mark <?> will not be seen in the screen and you do not need to press <ENTER> key to display the command list.

To list the available commands in the current mode, another way is to use the following commands. Not only the commands’ first word but its parameters and variables followed were displayed on the screen.

The following is an example of displaying the list of available commands of Privileged EXEC mode:SWITCH# show list adsl rfi-band create BANDNAME <1-512> <1-512> adsl rfi-band delete <1-32> bluesclues [help|help-debug|help-show] bluesclues snapshot (OPTIONS (PACKAGE_FILENAME|) |) bluesclues start (OPTIONS|) bluesclues status bluesclues stop (PACKAGE_FILENAME|) clear ip prefix-list clear ip prefix-list WORD clear ip prefix-list WORD A.B.C.D/M clear ip route kernel clock .DATETIME configure terminal copy CONFIG CONFIG copy CONFIG startup-config copy running-config CONFIG copy running-config startup-config copy startup-config CONFIG debug nsm (all|) debug nsm events debug nsm kernel debug nsm packet (recv|send|) (detail|) enable exit help lre PORTS xdsl delt (force|inhibit) no debug all no debug all nsm no debug nsm (all|) no debug nsm events no debug nsm kernel no debug nsm packet (recv|send|) (detail|) ping ping WORD show access-list show acl global show acl global MACADDR show acl port show acl port PORT show acl port PORT MACADDR show adsl alarm-config-info show adsl alarm-config-info PROFILE show adsl alarm-config-info-long show adsl alarm-config-info-long PROFILE show adsl alarm-config-profile show adsl alarm-config-profile PROFILE


show list All Shows all of available commands in the current mode followed by the corre-sponding parameters and variables.

show cli Shows all of available commands in current mode as a hierarchical tree.

36

Operate CLI

Id:0900d805805d903a

Configuration mode

show adsl dpbo-config-info--More--

g Press the <ENTER> key to skip to the next list.

Press the <Ctrl> + <C> key to terminate the list.

You can find out commands starting with a specific alphabet. Input the first letter and question mark without space. The following is an example of finding out the commands starting “s” in Privileged EXEC mode of hiX 5622/25/30/35 R2.8.

SWITCH# s?show Show running system informationslot slot rate configuration SWITCH# s

You also can view the specific command’s variables. After inputting the command, make one space and input a question mark. The following is an example of viewing variables after the command, write.

g Please note, that you have to enter one space between the command and question mark.

SWITCH# write ?memory Write to NV memoryterminal Write to terminalSWITCH# write

3.5.3 Calling command historyYou don’t have to enter the command you entered before. When you need to repeat the commands, just use the upward direction key. Every time you press the key, the commands will be displayed one by one beginning from the latest one.

The following is an example of calling command history after using several commands. After using these commands in order: show clock -> configure terminal -> exit, press the upward direction key and then you will see the commands from latest one: exit -> configure terminal -> show clock.

SWITCH(config)# exitSWITCH# show clockMon, 5 Jan 1970 23:50:12 +0000SWITCH# configure terminalSWITCH(config)# netdevice mod descr INTERFACE DESCRSWITCH(config)# exitSWITCH# --> (press the upward arrow key)SWITCH# exit--> (press the upward arrow key)SWITCH# netdevice mod descr INTERFACE DESCR --> (press the upward arrow key)SWITCH# configure terminal--> (press the upward arrow key)SWITCH# show clock--> (press the upward arrow key)

37


Id:0900d805805d903a

The hiX 5622/25/30/35 R2.8 also provides the command that shows the commands used before up to 100 lines.

To set the number of the buffer line for the commands used before, use the following command.

3.5.4 Using abbreviationYou can just input the abbreviated form to replace the whole command. The following table shows some examples of abbreviated commands.

3.5.5 Privileged EXEC Mode at other configuration modeYou can execute the commands of Privileged EXEC mode as show,ping, telnet, traceroute, and so on regardless of which mode you are located on (except User EXEC mode and Privileged EXEC mode).

To execute the commands of Privileged EXEC mode on different mode, use the follow-ing command.

3.5.6 Leaving current command modeTo leave the current command mode and return to the previous mode, use the following command.


show history Privileged Shows a command history.


history log <0-1000> Global Sets the number of the lines for the commands used before. (default is 100).

Command Abbreviation

show running-config sho run

configure terminal con te

Table 8 Command abbreviation


do COMMAND Except Privileged EXEC mode and User EXEC mode

Execute the commands of Privileged EXEC mode.


exit All Return to the previous command mode.

end Except Privileged EXEC mode and User EXEC mode

End current mode and change to Privileged EXEC mode.

38

Operate CLI

Id:0900d805805d903a

Configuration mode

3.5.7 Use of the system diagnostic toolg The following commands are only to use after a detailed instruction from product

support!

To monitor the system, use the following commands after a detailed instruction from product support.

!If you use the exit command in Privileged EXEC mode or User EXEC mode, you will be logged out!

!Use the following commands only in the way given by the product support.

The abusive use of these commands can lead to instability of the system!


bluesclues [help|help-debug|help-show]

GlobalExec

Configuring the trace tool for for search of errors.


help Show the general usage help for bluesclues.

help-debug Print sub-system names available for debug switching (purpose is to increase debug level).

help-show Print sub-system names available for cli-show commands (purpose to show cli show commands).

bluesclues snapshot (OPTIONS (PACKAGE_FILENAME|) |)

Configuring options for the trace tool.


snapshot Make a snapshout of the current system state.

OPTIONS Options for trace types (e.g. 'default-comddebug').

PACKAGE_FILENAME

Package filename (located under /tftpboot).

bluesclues start (OPTIONS|)

Starts the system monitoring with the trace tool.


start Starts the system monitoring.

OPTIONS Options for trace types (e.g. 'default-comddebug').

bluesclues status Prints the current status of the trace tool.


status Prints the current status.

bluesclues stop (PACKAGE_FILENAME|)

Stops the system monitoring with the trace tool.


stop Stops the system monitoring.

PACKAGE_FILENAME

Package filename (located under /tftp-boot/<package_filename>.tgz).

39

Operate CLI System basic configuration and operation

Id:0900d805805d83d6

4 System basic configuration and operationThe hiX 5622/25/30/35 R2.8 default configuration is suitable for operation with most net-works. By using text-based command-line interface (CLI), you can configure and cus-tomize all aspects of DSLAM operation to according to your requirements.

You can use one of the following methods for configuring the hiX 5622/25/30/35 R2.8:

• From a local console or workstation—Connect to the console port or connect to the Ethernet port of the DSLAM. This connection allows you to enter CLI commands directly to the DSLAM.

• From a remote console or workstation—Initiate a Telnet connection to a target DSLAM. With telnet you can remotely enter CLI commands to the DSLAM.

4.1 Basic configurationBefore configure the system, you need to connect to the hiX 5622/25/30/35 R2.8 and login the system.

4.1.1 Prerequisite tasksPerforming following tasks before configuring the system:

• Check if all cards and cables are well installed. • Make sure you have one multimeter on hand. • Prepare one console cable. (RJ45-9 pins serial port), following diagram shows the

detailed connection.

• Make sure you have one PC or a laptop with an Ethernet card and a Serial Port. • You should have a terminal simulator such as Hyper Terminal provided by MS

Windows • You should have the correct hiX 5622/25/30/35 R2.8 system files, including loading

files of CXU and LIU.

Feeding power to hiX 5622/25/30/35 R2.8 DSLAM:

• Since the power of hiX 5622/25/30/35 R2.8 is -48V DC, please check every power cable before connecting them.You should check the circuitry from power by a mul-timeter.

• Check voltage range. It’s from 48V to 54V. • Label anode or cathode mark for every power cable. • Power safety supplied by exchange must be above 40A.

RJ45 Plug to Console Interface

3 4 5 6 7 8

9-pin SUB-D Connector to Com Port:

Pin 1Pin 2Pin 3: TXDPin 4: GNDPin 5: GNDPin 6: RXDPin 7Pin 8

Pin 1:Pin 2:Pin 3:Pin 4:Pin 5:Pin 6:

Pin 7:

Pin 8:

Pin 9:

1 2

6789

12345

40

Operate CLI

Id:0900d805805d83d6

System basic configuration and operation

• Check if the internal power cable in the subrack is correctly connected.(Based on standard, blue cable is negative)

• For hiX 5622/25/30/35 R2.8 power socket, the middle terminal is negative. For detailed information, please refer to Installation manual.

• After performing above tasks, set power cables. When you make sure everything is normal, feed power to hiX 5622/25/30/35 R2.8.

Connect to hiX 5622/25/30/35 R2.8 system by serial Cable via Console portAttach the RJ45 connector of serial cable to the Console port of CXU, attach DB9 con-nector to Serial port of personal computer or laptop. After connecting serial cable, run simulator such as HyperTerminal.

Modify connection configuration to 38400/8/N/1 (Baud rate: 38400; Data bit: 8; Parity: none; Stop bit:1).

Operations under boot modeAfter feeding power or restarting the system, press ‘s’ key to go to Boot mode. Key in ‘?’ to get command list:

g The IP address of outband interface which is set under boot mode is valid under boot mode only. If the system was started in the right way, this management IP address becomes invalid.

Press 's' key to go to Boot Mode: 0

cxu_x2> ?

? - alias for 'help'

base - print or set address offset

bdinfo - print Board Info structure

boot - boot default, i.e., run 'bootcmd'

bootm - boot application image from memory

bootp - boot image via network using BootP/TFTP protocol

coninfo - print console devices and information

date - get/set/reset date & time

echo - echo args to console

go - start application at address 'addr'

help - print online help

iminfo - print header information for application image

imls - list all images found in flash

irdsys - read all type label data via backplane

load - Download OS Image or Configuration file from File Server

pci - list and access PCI Configuration Space

ping - send ICMP ECHO_REQUEST to network host

printenv- print environment variables

reset - Perform RESET of the CPU

run - run commands in an environment variable

selimg - sets osaddr environment variable

setenv - set environment variables

setpw - set password for more commands

tftpboot- boot image via network using TFTP protocol

version - print monitor version

cxu_x2>

41


Id:0900d805805d83d6

After the system starts normally, you can configure your system by following steps.

4.1.2 System loginTo login into sytem, do the following steps:

Step 1After feeding power or restarting the system, booting will be automatically started and login prompt will be displayed.

Step 2Enter a login ID at the login prompt, the password prompt will be displayed, and then enter the proper password to log in the system. By default, the login ID is configured as root with password vertex25.

Step 3In User EXEC mode, you only can check the configuration of the switch. To configure and manage the switch, you should begin Privileged EXEC mode. The following is an example for opening the Privileged EXEC mode.

4.1.3 Configuring system login informationThe user can change the password, create a new account, set the login banner, set auto log-out time and set password for privileged EXEC mode.

4.1.3.1 Changing superuser passwordBy default, the superuser’s username of hiX 5622/25/30/35 R2.8 system is root, password is vertex25. To modify the superuser password, use the following command:

Example of changing superuser password:

SWITCH login

SWITCH login: rootPassword:SWITCH>

SWITCH> enableSWITCH#


passwd Global Modifies superuser password.

42

Operate CLI

Id:0900d805805d83d6


4.1.3.2 Creating a new accountTo create a new account, use the following command.

To display a created account, use the following command.

g The password you enter is not shown on the screen, so please be careful to make no mistakes.

The following is an example of creating a new account, NSN. The password is set to vertex25@%.

The following is an example of logging in the system with a new account.

The following is an example of listing available commands for a person who logs in the system with a normal account by entering a question mark<?>.

SWITCH(config)# passwd

Changing password for root

Old password:

Enter the new password (minimum of 8, maximum of 16 characters)

Please use a combination of upper and lower case letters and numbers.

Please input at least one number, alphabet and special character

Enter new password:

Re-enter new password:

Password changed.

SWITCH(config)#


user add NAME DESCRIPTION Global Create a new account.

user del NAME Deletes an account.


show user PrivilegedGlobal

Shows a created account.

SWITCH>enable


SWITCH(config)# user add NSN jkleeChanging password for NSNEnter the new password (minimum of 8, maximum of 16 characters)Please use a combination of upper and lower case letters and numbers. Please input at least one number, alphabet and special characterEnter new password:vertex25@%Re-enter new password:vertex25@%Password changed.SWITCH(config)#

SWITCH login: NSNPassword: vertex25@%SWITCH>

43


Id:0900d805805d83d6

SWITCH# ?Exec commands: adsl ADSL configuration bluesclues trace tool collect clues for search of errors clear Reset functions clock Manually set the system clock configure Enter configuration mode copy Copy from one file to another debug Debugging functions (see also 'undebug') enable Turn on privileged mode command exit End current mode and down to previous mode help Description of the interactive help system lre LRE port information no Negate a command or set its defaults ping Send echo messages show Show running system information slot slot rate configuration telnet Open a telnet connection terminal Set terminal line parameters traceroute Trace route to destination where List active user connections write Write running configuration to memory, network, or terminalSWITCH#

To configure a password for created account, use the following command.

The following is an example of changing the current password.

4.1.3.3 Login bannerIt is possible to set a system login and log-out banner. Administrator can leave a message to other users with this banner.

To set a system login and log-out banner, use the following command.

!Information such as ID and description of created account cannot be changed!


passwd USER Global Configures a password for created account.

USER Change the user's password.

SWITCH(config)# passwd NSN

Changing password for NSNEnter the new password (minimum of 8, maximum of 16 characters)Please use a combination of upper and lower case letters and numbers. Please input at least one number, alphabet and special characterEnter new password:asdf123!@#Re-enter new password:asdf123!@#Password changed.

SWITCH(config)#

44

Operate CLI

Id:0900d805805d83d6


To delete a configured banner, use the following command.

To display a current login banner, use the following command.

Following example shows how to set a banner which is displayed before login, after suc-cessful login, after failed login respectively:

You can check your settings:

4.1.3.4 Setting auto log-out timeFor security reasons of the hiX 5622/25/30/35 R2.8, if no command is entered within the configured inactivity time, the user is automatically logged out of the system. Adminis-trator can configure the inactivity timer.

To enable auto-logout function, use the following command.


banner Global Sets a banner before login the system.

banner login Sets a banner when successfully log in the system.

banner login-fail Sets a banner when failing to login the system.


no banner Global Deletes a configured banner.

no banner login

no banner login-fail


show banner PrivilegedGlobal

Shows a current login banner.

SWITCH(config)# banner loginSave & Exit : CTRL-D hello, NSN guys! SWITCH(config)# banner Save & Exit : CTRL-D hi, how are you? SWITCH(config)# banner login-failSave & Exit : CTRL-Dtry again:)

SWITCH(config)# endSWITCH# exit hi,how are you? SWITCH login: rootPassword: Login incorrect try again:) SWITCH login: root Password: hello,NSN guys! SWITCH> enable SWITCH#

45


Id:0900d805805d83d6

To display a configuration of auto-logout function, use the following command.

The following is an example of configuring auto-logout function as 59 minutes and viewing the configuration.

4.1.3.5 Setting password for privileged EXEC modeYou can configure a password to enhance the security for Privileged EXEC mode. To configure a password for Privileged EXEC mode, use the following command.

The following is an example of configuring the password for Privileged EXEC mode as “testpassword”.

The following is an example of accessing after configuring the password.

To delete the configured password, use the following command.


exec-timeout <1-35791> [<0-59>] Global Enables auto log-out.

1-35791 Time unit in minutes (by default 10 min-utes).

0-59 Time unit in seconds.

exec-timeout 0 Disables auto log-out.


show exec-timeout PrivilegedGlobal

Shows a configuration of auto-logout function.

SWITCH(config)# exec-timeout 59SWITCH(config)# show exec-timeoutLog-out time : 59 minSWITCH(config)#


passwd enable {8 | } LINE Global Configures a password to begin Privileged EXEC mode.

8 specifies an encrypted password in LINE.

LINE The 'enable' password string.

SWITCH# configure terminalSWITCH(config)# passwd enable testpasswordSWITCH(config)#

SWITCH login: root

Password:SWITCH > enablePassword:

SWITCH#


no passwd enable Global Deletes the password.

46

Operate CLI

Id:0900d805805d83d6


The created password can be displayed with the show running-config command. To encrypt the password not to be displayed, use the following command.

To disable password encryption, use the following command.

4.1.4 Assigning an IP addressInternet addresses are 32-bit values assigned to hosts that use the IP protocols. The term "host" means any computer that has full two-way access to other computers on the Internet. A host has a specific "local or host number" that, together with the network number, forms its unique IP address. These addresses are in dotted decimal format (four decimal numbers separated by periods), such as 192.17.5.100. Each number is an 8-bit value between 0 and 255.

A mask is used to determine what subnet an IP address belongs to. An IP address has two components, the network address and the host address. Subnetting enables the network administrator to divide the host part of the address into two or more subnets.

The DSLAM sees only the MAC address in an incoming packet to determine where the packet needs to come from/to and which ports should receive the packet. Layer 2 switches do not need IP addresses to transmit packets. However, if you want to access to the hiX 5622/25/30/35 R2.8 from a remote place with TCP/IP through SNMP or telnet, it requires an IP address.

g The default interface of the hiX 5622/25/30/35 R2.8 is mgmt.mgmt is the outband interface of the CXU that can be accessed via the mgmt FastEthernet-Port on the CXU.

You can enable the interface to communicate with another network device on the network by assigning an IP address as follows:

• Enabling and configuring interfaces • Displaying interfaces • Setting static route and default gateway • Example of assigning IP address

4.1.4.1 Enabling and configuring interfacesTo assign an IP address to an interface (here interface means host), you need to enable the interface first. If the interface is not enabled, you cannot access it from a remote place, even though an IP address has been assigned.

An Interface will be created and assigned with an IP with command 'netdevice'.

To modify/delete an Interface in Global Configuration mode, use the following com-mands:


service password-encryption Global Encrypt the system password.


no service password-encryption Global Disables password encryption.

47


Id:0900d805805d83d6

g For multiple interfaces, use “-“ or “,” at INTERFACES.

The following is an example of enabling the interface mgmt in Global Configuration mode.

SWITCH> enableSWITCH# configure terminalSWITCH(config)# netdevice mod ipaddr mgmt 10.0.0.100/24SWITCH(config)# show netdevice

Index | Admin | IP/Netmask | Outer | Inner | Name | Description | State | VID/.1p | VID/.1p |

----------+--------------------+--------+-------+-------+-------------+-------+-------------------+1 | ena | 10.0.0.100/24 | | | mgmt | 2 | ena | 127.0.0.1/ 8 | | | lo | 3 | ena | 10.1.1.100/24 | 2/7 | | br2

SWITCH(config)# netdevice 10.1.1.100/24 bridge-interface 2


netdevice mod descrINTERFACE DESCR

Global Configures a network interface;- Modifies network interface,- Modifies description.


DESCR Description of the Interface.

netdevice mod ipaddrINTERFACE (A.B.C.D/M)

Configures network interface;- Modifies network interface- Modifies IP address.



netdevice mod vlanINTERFACE <2-4093> (<2-4093>|)

Configures a network interface;- Modifies network interface,- Inner and outer VLAN.


2-4093 Outer VLAN.

2-4093 Inner VLAN.

netdevice (A.B.C.D/M | dhcp) DESCR <2-4093> (<2-4093>|)

Configures a network interface.


dhcp DHCP is used.

DESCR Description.

2-4093 Outer VLAN.

2-4093 Inner VLAN.

no netdevice INTERFACE Deletes the network interface.


48

Operate CLI

Id:0900d805805d83d6


4.1.4.2 Displaying interfacesTo display an interface status and configuration, use the following commands.

g To display an enabled interface use the show netdevice command.

SWITCH(config)# show netdevice 1

Index | Admin | IP/Netmask | Outer | Inner | Name | Description | State | VID/.1p | VID/.1p |

----------+--------------------+--------+-------+-------+-------------+-------+-------------------+1 | ena | 172.18.158.100/24 | | | mgmt |

SWITCH(config)# netdevice 10.1.1.100/24 bridge-interface 2

4.1.4.3 Setting static route and default gatewayThe static route is a predefined route to a specific network and/or device such as a host. Packets are transmitted to destination through static route. Static route includes desti-nation address, neighbor router to receive packet, number of routes that packets have to go through.

To configure a static route, use the following commands.


show netdevice (INDEX | ) Global Shows network interface configuraiton.


netdevice Show network interface configuraiton.

INDEX Index of the interface.

49


Id:0900d805805d83d6

The following is an example of configuring a static route to reach three destinations, which are not directly connected.

To display a configured static route, use the following command.

4.1.4.4 Example of assigning IP addressThis example shows how to configure the interface mgmt with IP address 10.1.1.100/24:


netif-route mod destination INDEX A.B.C.D/M

Global Configures network route.

mod Modifies route.

destination Replace destination.

INDEX Index.

A.B.C.D/M Destination address and subnet mask.

netif-route mod gateway INDEX A.B.C.D

Configures network route.

mod Modifies route.

gateway Replace nexthop.

INDEX Index.

A.B.C.D Gateway address.

netif-route mod name INDEX NAME

Configures network route.

mod Modifies route.

name Replace name.

INDEX Index.

NAME Route name.

netif-route NAME A.B.C.D/M A.B.C.D (<1-255> | )

Configures a route.

NAME Route name.

A.B.C.D/M Destination IP address with subnet mask.

A.B.C.D Gateway address.

<1-255> Distance value for this route.

no netif-route INDEX Global Deletes a static route or all routes.

INDEX Index of a route.

show running-config netif-cfg Shows running system information;- Network interface and route configuration.

SWITCH(config)# netif-route route1 100.1.1.0/24 10.1.1.2SWITCH(config)# netif-route route2 200.1.1.0/24 20.1.1.2SWITCH(config)# netif-route route3 172.16.1.0/24 30.1.1.2


show netif-route (INDEX | ) Global Shows the configured network route.

show Show running system information .

netif-route Show configured network route.

INDEX Index of the route.

50

Operate CLI

Id:0900d805805d83d6


SWITCH(config) # netdevice mod ipaddr mgmt 10.1.1.100/24SWITCH(config) # show netdevice 1

Index |Admin State| IP/Netmask |Outer VID/.1p | Inner VID/.1p | Name | Description |------------------+---------------+--------------+---------------+--------------------------+1 | ena | 10.1.1.100/24 | | | mgmt | Interface_to_MGMT |

SWITCH(config)#

Display all interface settings:

SWITCH(config) # show netdevice

Index |Admin State| IP/Netmask |Outer VID/.1p | Inner VID/.1p | Name | Description |------------------+---------------+--------------+---------------+--------------------------+1 | ena | 10.1.1.100/24 | | | mgmt | Interface_to_MGMT |2 | ena | 127.0.0.1/ 8 | | | lo | TO_BRAS |

SWITCH(config)#

4.1.5 Configuring host name and timeThis section provides the following configurations:

• Setting host name • Setting time zone • Setting time and date • Clock synchronization • Enabling network time protocol • Example of setting hostname & time

4.1.5.1 Setting host nameA host name displayed on prompt is necessary to distinguish each device connected to network.

To set a new host name, use the following command in global configuration mode.

The following is an example of changing a host name to “TEST”.

You can see the default name “SWITCH” has been changed into "TEST”.


no hostname (WORD|) Global,Imish_mode

Negates a command or set its defaults;- Sets system's network name- This system's network name.

hostname NAME Global Create a host name of the switch, enter the name.

no hostname Deletes a configured host name.

SWITCH(config)# hostname TEST

TEST(config)#

51


Id:0900d805805d83d6

4.1.5.2 Setting time zoneThe hiX 5622/25/30/35 R2.8 provides three kinds of time zone, GMT, UCT and UTC. The time zone of the DSLAM is predefined as UTC (Universal Time Coordinated). You can also set the time zone where the network element belongs to.

To set/show the time zone, use the following commands.


time-zone (utc |utc+1 | utc+2 |utc+3 | utc+3:30 | utc+4 | utc+4:30 |utc+5 | utc+5:30 |utc+5:45 | utc+6 |utc+6:30 | utc+7 |utc+8 | utc+8:45 |utc+9 | utc+9:30 |

Global Sets the time zone.

utc London, Dublin, Edingburgh, Lisbon, Casablanca, Monrovia, Reykjavik

utc+1 Amsterdam, Berlin, Greifswald, Bern, Rome, Stockholm, Vienna, Belgrade, Bratislava, Budapest, Ljubljana, Pargue, Brussels, Copenhagen, Madrid, Paris, Sarajevo, Skopje, Warsaw, Zagreb, West Central Africa

utc+2 Amman, Athens, Bucharest, Istanbul, Beirut, Cairo, Harare, Pretoria, Helsinki, Kyiv, Riga, Sofia, Tallin, Vilnus, Jerusalem, Minsk, Windhoek

utc+3 Baghdad, Kuwait, Riyadh, Moscow, St. Petersburg, Volgograd, Nairobi, Tbilisi

utc+3:30 Tehran

utc+4 Abu Dhabi, Muscat, Baku, Caucasus Standard Time, Yerevan

utc+4:30 Kabul

utc+5 Ekaterinburg, Islamabad, Karachi, Tashkent

utc+5:30 Chennai, Kolkata, Mumbai, New Delhi, Sri Jayawardenepura

utc+5:45 Kathmandu

utc+6 Almaty, Novosibirsk, Astana, Dhaka

utc+6:30 Yangon

utc+7 Bangkok, Hanai, Jakarta, Krasnoyarsk

utc+8 Beijing, Chongqing, Hong Kong, Urumqi, Irkutsk, Ulaan Bataar, Luala Lumpur, Singapore, Perth, Taipei

utc+8:45 Western Australia

utc+9 Osaka, Sapporo, Tokyo, Seoul, Yakutsk

utc+9:30 Adeleide, Darwin

52

Operate CLI

Id:0900d805805d83d6


Following example shows how to set time-zone to utc+8 and the configured time zone.

g To get a list of all time zones with corresponding cities, you have to enter the command: "SWITCH(config)# time-zone ?"

time-zoneutc+10 | utc+10:30 |utc+11 | utc+11:30 |utc+12 | utc+12:45 |utc+13 | utc+14 |utc-1 | utc-2 |utc-2:30 | utc-3 |utc-3:30 | utc-4 |utc-4:30 | utc-5 |utc-6 | utc-7 | utc-8 | utc-9 | utc-9:30 | utc-10 | utc-11 | utc-12

Global utc+10 Brisbane, Canberra, Melbourne, Sydney, Guam, Port Moresby, Hobart, Vladivostok

utc+10:30 New South Wales

utc+11 Magadan, Solomon Is., New Caledonia

utc+11:30 Norfolk Island

utc+12 Auckland, Wellignton, Fiji, Kamchatka, Marshall Is.

utc+12:45 New Zealand

utc+13 Nuku'alofa

utc+14 Kiribati

utc-1 Azores, Cape Verde Is.

utc-2 Mid-Atlantic

utc-2:30

utc-3 Brasilia, Buenos Aires, Georgetwon, Greenland, Montevideo

utc-3:30 Newfoundland

utc-4 Atlantic Time, Caracas, La Paz, Manaus, Santiago

utc-4:30 Venezuela

utc-5 Bogota, Lima, Quinto, Ria Branco, Eastern Time,Indiana

utc-6 Central America, Central Time, Guadalajara, Mexico Cty., Monterrey, Saskatchewan

utc-7 Arizona, Chihuahua, La Paz, Mazatlan, Mountain Time

utc-8 Pacific Time, Tijuana, Baja California

utc-9 Alaska

utc-9:30 Marquesas Islands

utc-10 Hawaii

utc-11 Midway Island, Samoa

utc-12 International Date Line West

show time-zone PrivilegedGlobal

The command shows the configurated time-zone.

SWITCH(config)# time-zone utc+8SWITCH(config)# show time-zoneutc+8SWITCH(config)#


53


Id:0900d805805d83d6

4.1.5.3 Setting time and dateTo set a system time and date, use the following command.

The following is an example of setting a system time-zone as utc +0000, time and date as 10:20pm, August 4th, 2008.

4.1.5.4 Clock synchronizationTo show all clock sync sources, use the following commands.

To modify config of clock sync source, use the following command.

To modify clock sync wait time for switching back to a higher source when error happens, use the following commands.


clock .DATETIME PrivilegedGlobal

Sets a system time and date.

show clock Shows a system time and date.

SWITCH# clock 04 aug 2008 22:20Mon, 4 Aug 2008 22:20:00 utc+0000SWITCH# show clockMon, 4 Aug 2008 22:20:37 utc+0000SWITCH#


show clock-sync GlobalPrivileged

Shows all clock sync data.

show clock-sync sources available Shows clock sync. source table of available sources.

show clock-sync sources used Shows clock sync. source table of used sources.


delete clock-sync source <1-2>

Global Deleting a clock sync source.

1-2 Table index to delete.

modify clock-sync source <1-2> availability AINDEX ssm <0-15>

Modifies config of clock sync source, use source from availability table.

1-2 Table index to modify.

AINDEX Use source from availability table, table index value.

0-15 Internal clock quality level, value.

modify clock-sync source <1-2> severity INDEX

Modifies config of clock sync source.

1-2 Table index to modify.

INDEX The alarm severity profile index, value.

54

Operate CLI

Id:0900d805805d83d6



modify clock-sync waittimeTIME

Global Modifies clock sync wait time to restore.

TIME Time that has to expire before switch back to a higher clock source after error condition (unit is 100 ms).

modify clock-sync ssm-uplink-handling (on|off)

Modifies clock sync ssm-uplink-handling to retore.

modify Modify

clock-sync Clock sync

ssm-uplink-handling

Send SSM level PDU on CXU uplink

on yes, send

off no SSM PDU output on uplinks

modify clock-sync waittime TIME syncmode (revertive | nonrevertive)ssm <0-15>

Modifies config of clock-sync wait time to restore.

TIME Time that has to expire before switch back to a higher clock source after error condition (unit is 100 ms).

revertive Source handling - revertive mode.

nonrevertive Source handling - non-revertive mode.

ssm Internal clock quality level.

0-15 Value of internal clock quality level.

modify clock-sync configuration (t3|e1|bits)

Modifies configuration of clock-sync source.

clock-sync Clock syncronization.

configuration Select new type of source.

t3 Use T3 as available now, if hardware supports a clock source switch.

e1 Use E1 as available now, if hardware supports a clock source switch.

bits Use BITS as available now, if hardware supports a clock source switch.

55


Id:0900d805805d83d6

4.1.5.5 Enabling network time protocolThe Network Time Protocol (NTP) provides a mechanism to synchronize time on com-puters across an internet. The specification for NTP is defined in RFC 1119. To enable/disable the NTP function, use the following commands.

To display a configured NTP, use the following commands.

Following example shows how to enable NTP and set the interval of synchronization time to 120 hours, and set ntp-server:

4.1.5.6 Example of setting hostname & timeFollowing example shows the procedures of setting device hostname and time related parameters:


ntp-client Global Enables the NTP function.

ntp-client interval <1-2160> Sets the interval to synchronize time from NTP server.

1-2160 Interval (unit: hours).

ntp-client server SERVER Specifies NTP server.

SERVER Server IP address.

no ntp-client Disables the NTP function.

no ntp-client server SERVER Deletes a specified NTP server.

SERVER Server IP address.


show ntp-client PrivilegedGlobal

Shows a configured NTP function.

show running-config ntp-client Global

SWITCH(config)# ntp-client

SWITCH(config)# ntp-client interval 120

SWITCH(config)# ntp-client server 30.30.50.51

SWITCH(config)# show ntp-client

SWITCH # configure terminal

SWITCH(config)# hostname hiX5635

hiX5635(config)# time-zone utc+8

hiX5635(config)# clock 15:40 Aug 23 2005

Tue, 23 Aug 2005 15:40:00 +0800 hiX5635(config)# show clock

Tue, 23 Aug 2005 15:40:05 +0800

56

Operate CLI

Id:0900d805805d83d6


4.1.6 Setting DNS serverThe Domain Name System (DNS) associates various information with domain names; most important, it serves as the "phone book" for the Internet by translating human readable computer hostnames, e.g. www.example.com, into the IP addresses, e.g. 208.77.188.166, that networking equipment needs to deliver information. It also stores other information such as the list of mail exchange servers that accept email for a given domain. In providing a worldwide keyword-based redirection service, the Domain Name System is an essential component of contemporary Internet use.

To set a DNS server, use the following command.


dns-server A.B.C.D Global Configures Domain Name Servers (DNS) IP-addresses.

A.B.C.D DNS server IP address.

no dns-server A.B.C.D Configures Domain Name Servers (DNS) IP-addresses. Negates a command or set its defaults.


dns-server Remove configured Domain Name Server (DNS) IP-addresses.

A.B.C.D DNS Server IP Address.

show dns-server PrivilegedGlobal

Shows running system information;- DNS Server Addresses.

57


Id:0900d805805d83d6

4.1.7 Example of configuring inband management interfaceg Login via serial interface

4.1.8 Example of configuring outband management interfaceg Login via serial interface

4.1.9 Routing between inband and outband management interfacesThe inband-outband routing feature makes it possible to transmit data via management interface to the network.

The configuration example is made for the shelf G400R.

Following preconditions are necessary for this feature:

• HW configuration according to Figure 2. • Interlinks for redundancy should be cabled, if required. • For inband-outband routing feature different IP Subnets have to be used. • Configuration of the connected equipment with static IPs.

SW configuration of the Inband-Outband Routing Feature

Configuration of the mgmt interface

SWITCH> enable



SWITCH(bridge)# vlan create 10

SWITCH(bridge)# vlan add 10 0/4 tagged


SWITCH(bridge)# netdevice 172.18.104.10/24 inband 10

SWITCH(config)# snmp trap2-host 172.18.104.9

SWITCH(config)# write memory

SWITCH> enable


SWITCH(config)# netdevice mod ipaddr 1 192.168.10.10/24

SWITCH(config)# netif-route r1 192.168.30.0/24 192.168.10.254

SWITCH(config)# snmp user TMN md5 12345678

SWITCH(config)# snmp group myGrp v3 TMN

SWITCH(config)# snmp view myView included 1.3.6.1

SWITCH(config)# snmp access myGrp v3auth myView myView

SWITCH(config)# snmp trap3-host 192.168.30.10 TMN



58

Operate CLI

Id:0900d805805d83d6


Configuration of a VLAN at the uplink

Configuration of LACP (is not mandatory for inband/outband routing)

Configuration of a testroute

Save the configuration



SWITCH(bridge)# vlan add 3846 0/1-0/4 t

SWITCH(bridge)# show vlan 3846

SWITCH(bridge)# lacp aggregator 0

SWITCH(bridge)# lacp port 0/1-0/4


SWITCH(config)# netdevice 10.2.1.63/24 Inband 3846

SWITCH(config)# netif-route Testroute 10.2.2.0/24 10.2.1.232



Vlan ID | Ports (u: untagged port, t: tagged port) |----------------------------------------- 3846 | 0/1t,0/2t,0/3t,0/4t

59


Id:0900d805805d83d6

Figure 2 Configuration example for inband-outband routing feature

Slot 203 0/1eSlot 203 0/2eSlot 203 0/3eSlot 203 0/4e

Slot 204 0/1eSlot 204 0/2eSlot 204 0/3eSlot 204 0/4e

4GBLACP

Slot 203(MGMT)

Client_2

Client_3

hiX 5625G400E

Inband:10.2.1.63 (Uplink 1)

Outband:10.2.3.63/24

Route:netdevice 10.2.1.63/24 Inband 3846netif-route 10.2.2.0/24 10.2.1.232

Switch

hiX 5625G400E

Switch

Example:

Route:netdevice 10.2.1.232/24 Inband 3846netif-route 10.2.3.63/24 10.2.1.63

10.2.2.0

Client_2

Client_1

10.2.3.215/24

Example configuration

CXU active

IP of Subnet 2Precondition: IP of Subnet 1

Subnet 2Subnet 1

10.2.3.63/2410.2.1.63/24

10.2.3.125/24

Client_1 and client_2 are to be connected via HUB by using

Client_1

Slot 204(MGMT)

(10.2.3.125 /24) 10.2.3.215 /24 Gateway 10.2.3.63

the inband-outband routing feature with CXU redundancy and LACP.

60

Operate CLI

Id:0900d805805d83d6


4.1.10 Switching between inband and outband management interfacesThe inband-outband switching feature can be used for switching all packets between the mgmt Interface and a VLAN configured on the uplink interface(s).

The configuration example is made for the shelf G400R.

Following preconditions are necessary for this feature:

• G400R Shelf (ANSI) with:– CXU-C (M:CXUCGE:4E:E); (S50028-Q2030-A1)– PM-R (M:PM:R:A); (S50028-Q2110-A1)– SW hix56xxr28.00.020 or later

• HW configuration according to Figure 3(The IP adresses of both subnets can be equal, they are only switched).

• Interlink cabling for redundancy should be done, if required. • Configuration of connected equipment with static IPs.

4.1.10.1 SW configuration of the inband-outband switching feature

Configuration of a tagged VLAN at the uplink

Configuration of LACP (is not mandatory for inband/outband switching)

Configuration of the interfaces

– Switch-on the mgmt interface with a dummy address (It is necessary to assign an IP-address to the mgmt interface even though this IP-address itself is not used for the inband/outband switching feature).

– Create an Inband Interface

Configuration of inband-outband-switching



SWITCH(bridge)# vlan add 101 0/1-0/4 t

SWITCH(bridge)# lacp aggregator 0

SWITCH(bridge)# lacp port 0/1-0/4



SWITCH(config)# netdevice 192.179.1.23/24 inband 101


SWITCH(bridge)# bridgebase inband-outband-switching 101


SWITCH(config)# rule inband_outband_switching create

SWITCH(config-rule[inband_outband_switching])# type cxu-generic

SWITCH(config-rule[inband_outband_switching])# match flow downstream

SWITCH(config-rule[inband_outband_switching])# match vlan 101

SWITCH(config-rule[inband_outband_switching])# action copy-to-cpu

SWITCH(config-rule[inband_outband_switching])# apply

SWITCH(config-rule[inband_outband_switching])# exit

61


Id:0900d805805d83d6

Save the configuration

g With Inband-Outband-Switching feature, it is not possible to configure more than one VLAN.

4.1.10.2 HW configuration of the inband-outband switching feature

Figure 3 Configuration example for inband-outband switching feature

SWITCH(config)# write mem

Uplink

GE-MATRIX GE-MATRIX

Eth. Switch Eth. Switch

active CXU standby CXU

GE SFP optical

GE 1000Base-T

ROUTERCXU_C

Uplink #1Uplink #2

Interlink

PM_R1 2 3 4

Client 1 Client 2

Uplink

Uplink #3Uplink #4

CXU MGMT

FE 10/100Base-T FE 10/100Base-T

FE 10/100 Base-T

(TMN) - EthernetCXU MGMT(TMN) - Ethernet

Ethernet10/100bT

Client 2

Client 1 192.179.1.166

Example configuration

CXU active

FE 10/100Base-T

Subnet 1Subnet 1

192.179.1.23

VLAN ID: 101

192.179.1.1Inband

192.179.1.167

62

Operate CLI

Id:0900d805805d83d6


4.2 System statusWhen there is any problem in the system, you must find out what the problem is and what the solution for the problem is. Therefore you should not only be aware of a status of the system but also check if the system is correctly configured.

This Section includes the following functions with CLI commands.

• Displaying network status • Tracing packet route • Displaying user connecting to system • Displaying running time of system • Displaying system information • Displaying system memory information • Setting memory overload threshold • Setting CPU overload threshold • Displaying running process

4.2.1 Displaying network statusTo check if your system is correctly connected to the network, use the ping command. For IP network, this command transmits a message to internet control message protocol (ICMP). ICMP is an internet protocol that notifies fault situation and provides information on the location where IP packet is received. When the ICMP echo message is received at the location, its replying message is returned to the place where it came from.

To perform a ping test to display network status, use the following command.

The following is an example of pinging one IP address.

SWITCH# ping 10.1.158.158

4.2.2 Tracing packet routeYou can discover the routes that packets will actually take when traveling to their desti-nations. To do this, the traceroute command sends probe datagrams and displays the round-trip time for each node.

If the timer goes off before a response comes in, an asterisk (*) is printed on the screen.


ping [ADDRESS] Privileged Perform a ping test to display network status.

ADDRESS IP address.

PING 10.1.158.158 (10.1.158.158) from 10.2.2.128: 56(84) bytes of data.64 bytes from 10.1.158.158: icmp_seq=0 ttl=127 time=1.0 ms64 bytes from 10.1.158.158: icmp_seq=1 ttl=127 time=0.5 ms64 bytes from 10.1.158.158: icmp_seq=2 ttl=127 time=0.5 ms

63


Id:0900d805805d83d6

The following is an example of tracing a packet route sent to 10.1.158.158.

4.2.3 Displaying user connecting to systemTo display current users connected to the system from a remote place or via console interface, use the following command.

The following is an example of displaying current users connecting to the system.

4.2.4 Displaying running time of systemTo display running time of the system, use the following command.


traceroute Privileged Trace route to destination

traceroute [DESTINATION] Trace packet routes through the network.

DESTINATION IP address.

traceroute ip [DESTINATION] Trace packet routes through the network.

DESTINATION IP address.

traceroute WORD Trace route to destination.

WORD address or hostname

traceroute ip WORD Trace route to destination- IP Trace.

WORD Trace route to destination address or hostname

SWITCH# traceroute 10.1.158.158traceroute to 10.1.158.158 (10.1.158.158), 30 hops max, 38 byte packets1 10.27.41.254 (10.27.41.254) 0.478 ms 0.428 ms 0.415 ms2 10.27. 1.254 (10.27. 1.254) 0.473 ms 0.466 ms 0.437 ms

SWITCH#


where PrivilegedGlobal

Shows current users connecting to the system from a remote place or via console interface.

SWITCH(config)# where

admin at ttyp0 from 10.20.1.32:2196 for 30 minutes 35.56 secondsadmin at ttyS0 from console for 28 minutes 10.90 seconds

SWITCH(config)#


show uptime PrivilegedGlobal

Shows running time of the system.

64

Operate CLI

Id:0900d805805d83d6


4.2.5 Displaying system informationTo display the system information, use the following commands.

The following is an example of displaying memory status:

SWITCH(config)# show status memory

4.2.6 Displaying system memory informationTo display a system memory status, use the following command.


show system-version PrivilegedGlobal

Shows the system information.

show startup-type Shows the type of the last startup.

show startup-result Shows the result of startup.

show tmn-connect Shows whether a TMN is connected to the system.

show lct-connect Shows whether an LCT is connected to the system.

show system-feature-list Shows a feature list of the system.

show status fan Shows fan status.

show status memory Global Shows memory information such as total capacity, used capacity etc..

show status cpuload Shows CPU load.

total: used: free: shared: buffers: cached:Mem: 528142336 212709376 315432960 0 54304768 38232064Swap: 0 0 0MemTotal: 515764 kBMemFree: 308040 kBMemShared: 0 kBBuffers: 53032 kBCached: 37336 kBSwapCached: 0 kBActive: 75124 kBInactive: 64152 kBHighTotal: 0 kBHighFree: 0 kBLowTotal: 515764 kBLowFree: 308040 kBSwapTotal: 0 kBSwapFree: 0 kB------------------------------Memory threshold: 225280 kBTimer interval: 60SWITCH(config)#


show memory {bgp | dhcp | igmp |imi | isis | lib | nsm |ospf | rip}

PrivilegedGlobal

Shows system memory information with a specific option.

65


Id:0900d805805d83d6

4.2.7 Setting memory overload thresholdTo set memory overload threshold, use the following command.

4.2.8 Setting CPU overload thresholdTo set CPU overload threshold, use the following command.

4.2.9 Displaying running processThe hiX 5622/25/30/35 R2.8 provides a function that shows information of the running processes. The information with this command can be very useful to manage the DSLAM.

To display the information of the running processes, use the following command.

The following is an example of displaying the status of the running processes.

SWITCH# show process

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMANDadmin 1 0.2 0.2 1448 592 ? S 20:12 0:05 init [3]admin 2 0.0 0.0 0 0 ? S 20:12 0:00 [keventd]admin 3 0.0 0.0 0 0 ? SN 20:12 0:00 [ksoftirqd_CPU0]admin 4 0.0 0.0 0 0 ? S 20:12 0:00 [kswapd]admin 5 0.0 0.0 0 0 ? S 20:12 0:00 [bdflush]admin 6 0.0 0.0 0 0 ? S 20:12 0:00 [kupdated]admin 7 0.0 0.0 0 0 ? S 20:12 0:00 [mtdblockd]admin 8 0.0 0.0 0 0 ? SW< 20:12 0:00 [bcmDPC]admin 9 1.4 0.0 0 0 ? SW< 20:12 0:29 [bcmCNTR.0]admin 10 1.4 0.0 0 0 ? SW< 20:12 0:29 [bcmCNTR.1]admin 17 0.0 0.0 0 0 ? SWN 20:12 0:00 [jffs2_gcd_mtd3]admin 149 0.0 0.3 1784 776 ? S Jan01 0:00 /sbin/syslogd nmadmin 151 0.0 0.2 1428 544 ? S Jan01 0:00 /sbin/klogd -c 1admin 103 2.6 2.0 20552 5100 ? S 20:12 0:53 /usr/sbin/swchd(Omitted)


threshold memoryTHRESHOLD (5 | 60 | 600)

Global Memory Overload Threshold.


threshold cpuload <20-100> (5 | 60 | 600)

Global Configures CPU overload threshold.

20-100 Threshold in percent

5, 60, 600 Time interval in sec.


show process PrivilegedGlobal

Shows information of the running processes.

66

Operate CLI

Id:0900d805805d83d6


4.3 Managing system configuration

4.3.1 Understanding configuration fileSystem Configuration file contains the configuration values of system environment , when you configure your system via CLI, the values such as Host Name, Timezone and Login Banner will be stored in a “running-config” file with which you can display, save, copy, restore current system environment settings.

Following tasks can be performed to manage configuration file for system environment. User can check if user’s configurations are correct and save them in the system.

• Displaying system configuration • Writing system configuration

4.3.2 Displaying system configurationTo display a current running configuration of the system, use the following command.


show running-config All Shows a current operating configuration of the system.

show running-config l2cp Global Shows running configuration of L2CP

show running-config adsl (alarm-profile | rfi_band | dpbo-profile | line-profile)

GlobalPrivileged

Shows running system information of the current operating configuration.

adsl ADSL information.

alarm-profile ADSL alarm_profile information.

rfi_band Rfi-Band information.

dpbo-profile ADSL dpbo-profile information.

line-profile ADSL line-profile information.

show lre PORTS adsl dpbo-config-info

GlobalBridge

Show running system information;- Long Reach Ethernet configuration- ADSL configuration- ADSL line dpbo profile information.

PORTS LRE slot or slot/port number ;(1/1 | 1/1-1/8 | s1)

show adsl dpbo-config-profile

PrivilegedGlobalBridge

Show running system information;- ADSL configuration- ADSL dpbo config profile.

show adsl dpbo-config-profile PROFILE

Show running system information;- ADSL configuration- ADSL dpbo config profile

PROFILE Enter profile-name.

show running-config shdsl(alarm-profile | line | span-profile)

GlobalPrivileged

Shows running system information of the current operating configuration.

shdsl SHDSL information.

alarm-profile SHDSL alarm_profile information.

line SHDSL line information.

span-profile SHDSL span-profile information.

67


Id:0900d805805d83d6

show running-config xdsl (alarm-profile | all-profiles | chan-profile | line-profile | notch-profile | psd-profile | vcc)

Global Shows running system information of the current operating configuration.

xdsl Xdsl information.

alarm-profile Xdsl alarm profile information.

all-profiles Xdsl all profile information.

Privileged chan-profile xDSL channel profile information.

line-profile xDSL line profile information.

notch-profile xDSL notch profile information.

psd-profile xDSL psd profile information.

vcc xDSL VCC information.

show running-config atm (policing | shaping | vccTp)

Global Shows running system information, current operating config-uration.

atm ATM information.

policing ATM policing information.

shaping ATM shaping information.

vccTp ATM vccTp information.

show running-config router (pim |)

Global Shows running system information, current operating config-uration.

router Router configuration.

pim Protocol Independent Multicast (PIM).

show running-config umas GlobalBridge

Shows running system information current operating config-uration gateway MAC anti-spoofing

show running-config (dhcp | ntp-client | pm | snmp)

Global Shows the configuration of the system with the specific option.

dhcp Dynamic Host Configuration Protocol

ntp-client NTP client Information

pm Protocol Module.

Snmp SNMP information


68

Operate CLI

Id:0900d805805d83d6


Example:

4.3.3 Writing system configurationAfter you change the configuration of the system, you need to save the changes in the system flash memory.

To write a current running configuration, use the following command.

show running-config (arp | bridging | dns | full | gbond | hostname | igmp | interface IFNAME | login | maxhosts | port | qos | rmon | switch | syslog | time-out | trunk | bcsc | mfdb | lacp | rule | erp | mac | stp

Privileged Shows the configuration of the system with the specific option.

stp Stp information

mac Mac information

erp Erp information

rule Rule information

lacp Lacp information

mfdb Mfdb information

bcsc Bcsc information.

time-out Time-out information

syslog Syslog information

switch Switch information

login Login information

interface IFNAME

Shows interface configuration- Interface name

igmp Internet Group Management Protocol

hostname Host name information

full Full configuration

dns DNS information

arp ARP information

show running-configswitch | gbond | maxhosts | bridging | trunk | port | qos | rmon

GlobalPrivileged

Shows the configuration of the system with the specific option.

switch Switch information

gbond Gbond information

maxhosts Maxhosts information

bridging Bridging information

Trunk Trunk information

port Port information

qos Qos information

rmon Rmon information

SWITCH(config)# show running-config hostname

hostname SWITCH


69


Id:0900d805805d83d6

Following example shows how to write current running configuration in the system flash memory:

4.4 Backing up the systemYou can realize system backup by saving system configuration file as a copy. The con-figuration file saved in Flash can be transferred to a remote FTP SERVER as well.

4.4.1 Save configuration file to flashTo copy or erase a system configuration file, use the following command.

To display a system configuration file, use the following command.


write memory(|DESTINATION)

All Write a current running configuration in the system flash memory.

DESTINATION Name of the configuration file.

write terminal Privileged Write a current running configuration to the system flash memory.

file System configuration file.

terminal Write to terminal.

SWITCH# write memory config_test

Building configuration...

[OK]

SWITCH#

!When you use the write memory command, make sure there is no key input until [OK] message appears.


copy running-config

{FILENAME | startup-config}

PrivilegedGlobal

Copy a running configuration file.

FILENAME configuration file name

startup-config startup configuration file

copy startup-config FILENAME PrivilegedGlobal

Copy a startup configuration file.

copy FILENAME startup-config Copy a specified configuration file to the startup configuration file.

copy FILENAME1 FILENAME2 Copy a specified configuration file to another configuration file.

erase FILENAME Global Deletes a specified configuration file.


show startup-config Privileged Shows a current startup configuration.

70

Operate CLI

Id:0900d805805d83d6


The following example shows how to copy a running-config:

4.4.2 Startup behavior for CXU starting in different systemsTo set the startup behavior for a pre-configured CXU with a configuration created in another system, use the following commands. It can be used for pre-configuration of a CXU in one system to be used in an other system.

Example:

show config-list PrivilegedGlobal

Shows a list of configuration files.

SWITCH(config)# copy running-config backup-1

SWITCH(config)# show config-list========================= CONFIG-LIST=========================backup-1SURPASS hiX 5635SWITCH(config)#



check-mac-config Global Enables the check of the MAC address stored in the backup against the MAC address of the system during startup. If they do not match, the backup is deleted and the system starts with the default settings. This is the default behavior and guarantees that a system does not start with a wrong configuration when a CXU is plugged-in which has still stored a configuration from another system.

no check-mac-config Disables the check of the MAC address stored in the backup against the MAC address of the system during startup. This allows to plug-in a pre-configured CXU with a configuration created in another system.


show check-mac-config Shows whether the check of the MAC address in the backup against the MAC address of system during startup is enabled or not.


SWITCH(config)# show check-mac-config

The MAC address check is enabled.

SWITCH(config)#

71


Id:0900d805805d83d6

4.5 Restoring the systemTo restore the default configuration of the system, use the following command.

Following example shows how to restore the factory default configuration:

g After restoring the default configuration, you need to restart the system to initiate.

4.6 Upgrading the systemYou should perform following download steps to upgrade DSLAM.

The user can make a choice between manual or S-APS upgrade.

4.6.1 Manually upgrading the CXUTo upgrade CXU OS image or board configuration, use following command:

To download CXU OS, use following command:

g User should get information about the two OS images on board with the command show upgrade before carrying out this step.

After the command was used, a RESET on the board is accomplished.

– the command can not be used if S-APS is on– the command is not expedient at redundancy because the active CXU will

correct the changing immediately.


restore factory-defaults Global Restore a factory default configuration.

SWITCH(config)# restore factory-defaultsYou have to restart the system to apply the changes.SWITCH(config)# reset allProceed reboot? [y/n] ySWITCH(config)#


download cxu{load | config} ADDRESS FILE

Global Upgrade OS image or board configuration.

load Uses software load.

config Uses configuration data.

ADDRESS Server IP address or host name.

FILE Source file name.

download cxu patch ADDRESS FILE Upgrade OS image or board configuration; - for upgrade main board - for software patch.



72

Operate CLI

Id:0900d805805d83d6


Example of upgrading CXU OS image:

g If the command will return immediately with:

“.. access denied, system startup not reached!"

You have to wait until system startup is done completely!

“.. access denied, S-APS upgrade enabled!"

You have to disable S-APS upgrade via "download disable sapshandling" before!

g In case of an redundant system, both CXU boards are updated with the same load, for load activation, the user should use the switchover command (NOT "reset all"), otherwise the user connections will be interrupted.

4.6.2 Manually upgrading the IUTo upgrade IU OS image or IU configuration, use the following commands.


download cxu reset os <1-2> Global Upgrades OS image or board configuration, set trial OS pointer for reboot with reset.

1-2 Number of the operating system.

default-os (os1 | os2) Select default OS.

os1 OS1.

os2 OS2.

SWITCH(config)# download cxu load 172.18.107.12 r2.8/she_r2.8_cxu-b_o.109

FTP User Name:usera

FTP Password :

timeout (1200 seconds) active


download iu{load | config} ADDRESS FILE

Global Upgrade IU image or configuration for upgrade a line card.

load Software load.

config Configuration data.

ADDRESS Server IP address or host name

FILE Source file name

Note: Command “download iu config ADDRESS FILE“ is applied to VPLU card only.

download iu load alloftypeADDRESS FILE

Global Upgrade IU image for all cards of the same typefor upgrade line card- for software load.

ADDRESS Server IP address or host name


Note The download to all cards with same mnemo code in nearly same time, parallel.

73


Id:0900d805805d83d6

g Load names must have an extension in the form of “.XXX” like she_r2.8_cxu-b_o.112 or she_r2.8_iu-adsl72-ifxa_o.112. All other given names could damage the internal upgrade system.

Following example shows how to upgrade IU image.






4.6.3 Manually data uploading for CXU/ IUTo upload CXU information and configuration, use the following commands:

download card (load|config) ADDRESS FILE

Global Upgrade IU Image or configuration.

card For upgrade card.

load For software load.

config For configuration data.



download card load alloftype ADDRESS FILE

Upgrade IU Image for all cards of same type.

card For upgrade card.

load For software load.

alloftype For software load download to all cards with same mnemo code in nearly same time, par-allel.



SWITCH(config)# download iu load 172.18.107.12 r2.8/she_r2.8_iu-adsl72-

ifxa_o.112

FTP User Name:usera

FTP Password :

timeout (600 seconds) active


74

Operate CLI

Id:0900d805805d83d6


Following example shows how to upload a CXU errorlog.

g The uploaded error log file of CXU has tar-gzip (tgz) format.

To upload IU informations, use the following commands:


upload cxu(config | errlog | inventory | perfdata | alarmlog | uptimelog) ADDRESS FILE

Global Uploads CXU data.

config for configuration data

errlog for error log file (file format: *.tgz)

inventory for inventory data

perfdata for performance data

alarmlog for alarm log data

uptimelog for board uptime log data

ADDRESS IP address of FTP server

FILE Path/source name of destination file on FTP server acc. to the selected command

SWITCH(config)# upload cxu errlog 172.18.107.12 /LOGFILE/r2.8/errorlog.tgz.

FTP User Name:useraFTP Password :timeout (120 seconds) active

upload cxu errlog file errlog to server 172.18.107.12 complete


upload iu{config I errlog I inventory I perfdata} ADDRESS FILE

Global Uploads IU data for slot number 1..x).

config Uses configuration data upload.(not supported yet)

errlog Uses error log upload (not supported yet)

inventory Uses inventory data upload.

perfdata For performance data (not supported yet).

ADDRESS FTP server IP address.

FILE Path/source name of destination file on FTP server acc. to the selected command.

After confirmation of the command, please enter the slot number of the IU:slot number: Plug-in slot of the unit the data are requested from.

upload iu inventory alloftype ADDRESS FILE

Global Uploads IU inventory data for all IUs of same type.

ADDRESS FTP server IP address.

FILE Destination file name (inventory file).

file format: *.tgz

After confirmation of the command, please enter the slot number of one IU referencing the requested type (mnemo code):Slot number: Plug-in slot of the unit the data are requested from.

75


Id:0900d805805d83d6

Following example shows how to upload IU image (in lines beginning with “description:”, the command lines are commented).

g Possibly by selecting the CXU slot you can get the extra information:“this is the main board slot, upload main board inventory data"






4.6.4 Automatic system upgrade / S-APS upgradeFor S-APS upgrade, the user needs a S-APS configuration file containing load informa-tions for possibly plugged units, based on their unique mnemo codes.

If S-APS is enabled, most manual up- or download commands are blocked.

Exceptions are "upload cxu errorlog", "upload cxu/iu inventory".

In order to download SAPS, use one of the following commands.

SWITCH(config)# upload iu inventory 172.18.107.12 r2.8/testinv.txtSlot number(1..10, no):2 --> Enter the slot numberFTP User Name:usera --> Enter the user nameFTP Password : --> Enter the passwordtimeout (120 seconds) active...upload iu inventory file r2.8/testinv.txt to server 172.18.107.12 complete

=======================================================================================S/P MEDIUM PLUGGED TRANSCEIVER VENDOR-NAME VENDOR-NUMBER REV. SERIAL-NUMBER DATE=======================================================================================0/1 Elect no unknown - - - - - 0/2 unknown no unknown - - - - - 0/3 unknown no unknown - - - - - 0/4 unknown no unknown - - - - -

SWITCH(config)# upload iu inventory alloftype 172.18.107.12 R2.8/testinv.txtReference slot number(1..10, no):5this is the main board slot, upload main board inventory dataFTP User Name:useraFTP Password :timeout (120 seconds) active...upload iu inventory file R2.8/testinv.txt to server 172.18.107.12 complete

76

Operate CLI

Id:0900d805805d83d6


Following example shows how to display upgrade S-APS:

4.6.5 Displaying upgrade informationTo display upgrade information of CXU and IU, use the following commands.


download create sapsserver-info ADDRESS USER PASSWORD SAPSFILE

Global Configures S-APS upgrade.

ADDRESS S-APS server IP address

USER S-APS server user name

PASSWORD S-APS server password

SAPSFILE S-APS file on S-APS server with complete file path. e.g. /SAPS/hix56xxr28.00/saps.hix56xxr28.00.003

download (enable | disable | restart-reset | restart-noreset | reload) sapshandling

Global Configures S-APS handling, S-APS use of SAPS data from now on.

download S-APS handling.

enable S-APS handling enable.

disable S-APS handling disable.

restart-reset S-APS handling restart (if status active).

restart-noreset S-APS handling restart without board reset (if status active).

reload S-APS file reload (if status passive).

sapshandling S-APS use of SAPS data from now on .

Switch(config)# download create sapsserverinfo 172.18.104.252 usera asdf

/SAPS/hix56xxr28.00/saps.hix56xxr28.00.004timeout (20 seconds) active

command complete

SWITCH(config)# download enable sapshandlingstart upgrade script: PID(4731) now command complete

SWITCH(config)# download restart-reset sapshandlingsaps handling restarted with resettimeout (7200 seconds) activestart upgrade script: PID(4867) now..


show upgrade PrivilegedGlobal

Shows APS upgrade information.

show upgrade table Shows an upgrade file information table for whole system: (equipped slots

show upgrade table mnemocode Shows slot based mnemo codes

show upgrade table sapsjobs Shows table of S-APS upgrade jobs information for whole system.

show upgrade sapsserverinfo Shows S-APS server data known by upgrade.

show flash Shows information of the system flash memory.

77


Id:0900d805805d83d6




Following example shows how to display upgrade information:

g If the command "show upgrade table sapsjobs" will return immediately with an empty table, this means, that S-APS upgrade is disabled.

Following example shows how to display S-APS server data:

g The command "show upgrade sapsserverinfo" will differ if the command is executed on a single CXU or a CXU after switch over with started (not finished) S-APS upgrade before switchover.

4.6.6 Auto backupIn order to configure auto backup on a FTP server, use one of the following commands.

show upgrade integrity(os1 | os2 | stored)

Global Shows upgrade image integrity checking.

os1 OS1

os2 OS2

stored Stored (downloaded).

SWITCH(config)# show upgrade

load informations:OS1: she_r2.8_cxu-b_o.109length=12414976 Bytes OS2: she_r2.8_cxu-b_o.109length=12414976 Bytes ->Default OS ->Trial OS, used for rebootrunning: she_r2.8_cxu-b_o.109 # build=# Mon Apr 23 16:48:55 CEST 2007(running is OS2)

SWITCH(config)# show upgrade sapsserverinfoS-APS server data known by upgrade:S-APS handling : disabledS-APS status : disabledS-APS server address: 10.0.1.16S-APS user name : sff00009S-APS password : *****S-APS path name : /SAPS/hix56xxr28.00/S-APS file name : saps.hix56xxr28.00.009

SWITCH(config)#


78

Operate CLI

Id:0900d805805d83d6


In order to configure auto backup local, use one of the following commands.

In order to check auto backup configuration, use the following command.


auto-backup ftp{enable I disable}

Global Enables/disables the automatic save of the configuration data on a FTP server.

auto-backup ftp file-count<1-32>

Configures the number of files on FTP server.

1-32 The number of files.

auto-backup ftp ipA.B.C.D

Configures the IP address of the FTP server.

A.B.C.D The IP address of the FTP server.

auto-backup ftp path{PATH I}

Configures the path on FTP server where to save the backup.

PATH The path on FTP server where to save.

auto-backup ftp account USER PASSWORD

Configures the account to access the FTP serverwith user name and password.

USER User name of the FTP server account.

PASSWORD Password of the FTP server account.

auto-backup ftp account_USER PASSWORD

Configures the account to access the FTP-server with user name and password already ciphered

USER Ciphered user name of the FTP-account

PASSWORD Ciphered password of the FTP-account

auto-backup ftp interval<1-48>

Configures the time between two backups.

1-48 The time (hours) between to backups

auto-backup ftp start-time<0-1439>

Configures the time of day when first backup is written.

0-1439 The time of day (minutes) when the first backup is written.

auto-backup now Writes a local backup and backup on FTP server now.

auto-backup ftp refresh-file-table Refreshes FTP backup file table.

auto-backup ftp restoreINDEX

Restores backup from FTP server.

INDEX The index of the backup to be restored in the FTP file table.

no auto-backup ftp Disables the automatic save function.


auto-backup local{enable I disable}

Global Enables/disables the automatic save of the configuration data in persistent memory.

enable Enables auto-backup local.

disable Disables auto-backup local.

auto-backup local waiting-time<1-59>

Configures auto-backup waiting-time for local backup.

1-59 The waiting time in minutes after the last config-uration action before the configuration data are saved in persistent memory.

no auto-backup local Disables the automatic save function.

79


Id:0900d805805d83d6

In order to check auto backup FTP file table, use the following command.

Transfer of history log files to FTP serverTo save history log file and user commands on a server, use following commands:


show auto-backup Global Display the auto-backup configuration.


show auto-backup ftp file-table Global Displays the backup files located on the FTP server.


history ftp_interval<0-2147483647>

Global Histories of user commands:

– Set the interval time between FTP transfer in seconds.

<0-2147483647> Timer interval in seconds.

history ftp A.B.C.D ID PASSWD FTPPATH

Histories of user commands:

– Set FTP server, ID and password for log file transfer

A.B.C.D IP address of FTP server

ID FTP login ID

PASSWD FTP login passwd

FTPPATH FTP Pathname

80

Operate CLI

Id:0900d805805d83d6


4.7 Mobile backhaul servicesMobile Backhaul with Support of Synchronization via Synchronous Ethernet is realized according to Q.8261 with IPD version 2.8.

This section lists use cases with configuration examples. Applications of mobile backhaul service and design of CLOCK-SYNC application and device driver and the interface between both are provided here.

The design needs not only to meet requirements of “Synchronous Ethernet” (Synchro-nous Ethernet acc. to G.8261 for GE Lines (at least 1 uplink)) but also “Timing over Packet” (Adaptive Clock Synchronization via Uplink Interface according to IEEE 1588 (slave) PTP (Precision Time Protocol)).

4.7.1 Overview of mobile backhauling serivceFor mobile backhaul applications (in packet network only scenarios) a highly stable clock of 10ppb frequency accuracy is required on the base station side.

Operators request to have a clock synchronization that is end to end based on physical layer methods like synchronous Ethernet and NTR on DSL. This usually is the preferred method when the mobile operator owns the access network or at least have friendly rela-tionship with the access network provider.

However, in some access network synchronization over physical layer scenarios can not be provided since Synchronous Ethernet is not available. In this case “Timing over Packet” using like PTP according IEEE1588v2 need to be used.

Even if IEEE1588 slaves may also be available in Base Stations, this function in DSLAM is required since the DSL in first mile adds additional jitter to the PTP flow causing unpre-dictable quality of the recovered synchronization.

From DSLAM to the Base Station site the synchronization is forwarded via the NTR signal. Backhauling over DSL in general drastically reduces the transmission cost of the operators since alternatively multiple E1 leased lines need to be used.

Synchronization of BTS is a mandatory feature for use of DSL in Packet only scenarios of Mobile Backhauling.

Another important use case is to synchronize subtended DSLAMs via the 10*1G Ethernet card. Therefore it must also be possible to synchronize the outgoing Synchro-nous Ethernet interfaces of the 10*1G Ethernet card by the IEEE1588 slave.

Figure 4 shows the basic network scenario:

81


Id:0900d805805d83d6

Figure 4 Mobile backhauling - subtended DSLAM

See also use case “Configure SHDSL to select clock from CXU via backplane” and “Configure SHDSL line to selected reference clock from CXU (backplane)”

4.7.2 Clock synchronization on CXUFor clock synchronization overview in IPD version R2.8, see Figure 5.

ZL30310 (Zarlink) is working in automatic clock source switching mode.

REF_FAIL and DPLL1 interrupt handlers provide notification over comdev to Clk_d regarding the state of external references – T3/E1/BITS/SyncE and active source selected for synchronisation.

The device is configured through the SPI1 device driver (PLL frequencies, bandwidths, clock source priorities, wait time, revertive/non revertive mode).See also use case “Show / Configure clock sync sources”.

Figure 5 Overview clock synchronisation

82

Operate CLI

Id:0900d805805d4566

Equipment management

5 Equipment managementThis chapter provides the guidelines of hardware management, including configuring admin state, alarm severities, external alarms, temperature and humidity thresholds, CXU redundancy and Metallic Test Access (MTA).

5.1 Shelf overview for hiX 5622/25/30/35 R2.8The following shelves are suitable for the hiX 5622/25/30/35 R2.8.

There are various types of central units for different shelves, see the overview in System Description of the hiX 5622/25/30/35 R2.8.

The IU’s suitable for the hiX 5622/25/30/35 R2.8 and other components are also to find in the System Description or in the applicable Installation Instruction.

Shelf Type Part Number CXU and IU Support Maximum Number of Ports

G200 2G S50028-B3180-A1 1 x CXU + 2 x IU 144

M400 S50028-B2035-A1 1 x CXU + 5 x IU2 x CXU + 4 x IU

360 288

G400 S50028-B2140-A1 1 x CXU + 4 x IU2 x CXU + 4 x IU

288 288

G400R for ONU S50028-B2140-A2 1 x CXU + 4 x IU2 x CXU + 4 x IU

288 288


576 576

G600 2G S50028-B3160-A1 1 x CXU + 8 x IU2 x CXU + 8 x IU

576 576

G600R 2G S50028-B3160-A2 1 x CXU + 8 x IU2 x CXU + 8 x IU

576 576


1080 1008

M1100_2G S50028-B3113-A1 1 x CXU + 15 x IU2 x CXU + 14 x IU

1080 1008

G1100-B1 ETSI S50028-B2102-B1 1 x CXU + 14 x IU2 x CXU + 14 x IU

1008 1008

G1100 2G S50028-B3102-A1 1 x CXU + 14 x IU2 x CXU + 14 x IU

1008 1008

M1200 S50028-B2012-B1 1 x CXU + 16 x IU2 x CXU + 15 x IU

1152 1080

Table 9 Overview of the HW components and LC’s

83

Operate CLI Equipment management

Id:0900d805805d4566

5.2 Configure the admin state of modulesFor the hiX 5622/25/30/35 R2.8, it is possible to configure a slot of the shelf for a specific module without module equipping. If a certain module is equipped, the system will check whether the module equipping is valid or not.

To create a new module, use the following command.

g If an equipped module is valid, then the administrative state will be automatically changed to the state <unlocked>.

To set IUGE admin state, use the following command.


port iu_ge PORT (enable | disable) Bridge Set IUGE port admin state.

– IUGE card)

PORT Select PORT

enable Option enable

disable Option disable


slot card create SLOTNUMBER (m_iuvdsl_24p_e | m_vplu-s72-pots_e | m_iuadsl_72p_ifx | m_iuadsl_72i_ifx | m_iushdsl_48s_e | m_iushdsl_48b_e | m_iuadsl_72a_e | m_iuadsl_72a_cg | m_iuadsl_72b_cg | m_iuadsl_72ai_wc | m_iuadsl_72aj_wc | m_iuvdsl_24d_ifx | (planned | locked)

Global Create a new card.

create create a new card

SLOTNUMBER Number of the Slot

m_iuvdsl_24p_e create iuvdsl_24p_e (24-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 1.4)

m_vplu-s72-pots_e create iuvoip_72p (72-Port VoIP)

m_iuadsl_72p_ifx create iuadsl_72p_ifx (72-Port ADSL2+ Annex A POTS; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iuadsl_72i_ifx create iuadsl_72i_ifx (72-Port ADSL2+ Annex B ISDN; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iushdsl_48s_e create iushdsl_48s_e (48-Port SHDSL Conexant 24-Port when 4 wired)

m_iushdsl_48b_e create iushdsl_48b_e (48-Port SHDSL Conexant bonding, bis and wetting current support)

m_iuadsl_72a_e create iuadsl_72a_e (72-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24)

m_iuadsl_72a_cg create iuadsl_72a_cg (72-Port ADSL2+ Annex A POTS; Infineon Convergate D; Infineon Geminax Max plus (V1.3))

m_iuadsl_72b_cg create iuadsl_72b_cg (72-Port ADSL2+ Annex B ISDN; Infineon Convergate D; Infineon Geminax Max plus (V1.3))

m_iuadsl_72ai_wc create iuadsl_72ai_wc (72-Port ADSL2+ Annex I/J splitterless application; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iuadsl_72aj_wc create iuadsl_72aj_wc (72-Port ADSL2+ Annex J; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iuvdsl_24d_ifx create iuvdsl_24d_ifx (24-Port VDSL2 over ISDN; Infineon Convergate D; Infineon Vinax 1.3)

Table 10 Creating new modules

84

Operate CLI

Id:0900d805805d4566


To convert an configured card type, use the following command.

g Before deleting an existing module, user must set administrative state to "locked".

slot card create SLOTNUMBERm_iuvdsl_24d2_ifx | m_iuadsl_48p_e | m_iu1ge_10o_syn_e | m_iu_32i4_e | m_iu_32i2_e | m_iuadsl_72a_cgh | m_iuadsl_72b_cgh | m_iuadsl_72j_cgh | m_iushdsl_48e_e | m_vplu_72p_e | m_iuvdsl_48p_e | m_iuvdsl_48i2_e | m_iushdsl_48e_8q_e | m_cxuge_4e_e | m_cxucge_4e_e | m_cxub1ge_4e_e | m_cxub2ge_4_e | m_cxuc2ge_4_e | m_cxub3ge_4_e | m_cxub22ge_4_e | m_cxub21ge_4_e) (planned | locked)

Global m_iuvdsl_24d2_ifx create iuvdsl_24d2_ifx (24-Port VDSL2 over ISDN, ADSL2+ Annex B BWC; Infineon Convergate D; Infineon Vinax 1.4)

m_iuadsl_48p_e create iuadsl_48p_e (48-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24)

m_iu1ge_10o_syn_e create iu1ge_10o_syn_e (downlink with optical 10x 1G interfaces with synchro-nization)

m_iu_32i4_e create iu_32i4_e (32-Port ISDN (4B3T))

m_iu_32i2_e create iu_32i2_e (32-Port ISDN (2B1Q))

m_iuadsl_72a_cgh create iuadsl_72a_cgh (72-Port ADSL2+ Annex A POTS; Infineon Converate D; Infineon Geminax Max plus (V2.1))

m_iuadsl_72b_cgh create iuadsl_72b_cgh (72-Port ADSL2+ Annex B ISDN; Infineon Converate D; Infineon Geminax Max plus (V2.1))

m_iuadsl_72j_cgh create iuadsl_72j_cgh (72-Port ADSL2+ Annex J; Infineon Converate D; Infineon Geminax Max plus (V2.1))

m_iushdsl_48e_e create iushdsl_48e_e (48-Port SHDSL Infineon Annex A/B:standard mode Annex F/G:enhanced mode)

m_vplu_72p_e create vplu_72p_e (72-Port VoIP)

m_iuvdsl_48p_e create iuvdsl_48p_e (48-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 2.2)

m_iuvdsl_48i2_e create iuvdsl_48i2_e (48-Port VDSL2 over ISDN, ADSL2+ Annex B/J BWC; Infineon Convergate D; Infineon Vinax 2.2)

m_iushdsl_48e_8q_e create iushdsl_48e_8q_e (48-Port SHDSL Infineon Annex A/B: standard mode Annex F/G:enhanced mode 8-queue-flat)

m_cxuge_4e_e create cxuge_4e_e card

m_cxucge_4e_e create cxucge_4e_e card

m_cxub1ge_4e_e create cxub1ge_4e_e card

m_cxub2ge_4_e create cxub2ge_4_e card

m_cxuc2ge_4_e create cxuc2ge_4_e card




planned set Adminstate to "planned"

locked set Adminstate to "locked"


Table 10 Creating new modules (Cont.)

85


Id:0900d805805d4566

To reset an equipped module, use the following command.


slot card convertSLOTNUM (m_iuadsl_48p_e | m_iuadsl_72p_ifx | m_iuadsl_72i_ifx | m_iuadsl_72a_e | m_iuvdsl_24d2_ifx | m_vplu-s72-pots_e | m_vplu_72p_e | m_iuadsl_72a_cg | m_iuadsl_72b_cg | m_iuadsl_72a_cgh | m_iuadsl_72b_cgh | m_iuvdsl_48i2_e | m_iuvdsl_24p_e | m_iuvdsl_48p_e | m_iushdsl_48e_e | m_iushdsl_48e_8q_e)| m_iuvdsl_48i2_e | m_iuvdsl_24p_e | m_iuvdsl_48p_e | m-vplu-s72-pots_e | m_vplu_72p_e | m_vplu_72p1_em_vplu_72p2_e)

Global Convert an existing module to:

SLOTNUM Number of the slot.

m_iuadsl_48p_e Convert card to "iuadsl_48p_e" (48-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24).

m_iuadsl_72p_ifx Convert card to "iuadsl_72p_ifx" (72-Port ADSL2+ Annex A POTS; Wintegra WinArrow 117; Infineon Geminax Max (V1.2)).

m_iuadsl_72i_ifx Convert card to "iuadsl_72i_ifx" (72-Port ADSL2+ Annex B ISDN; Wintegra WinArrow 117; Infineon Geminax Max (V1.2)).

m_iuadsl_72a_e Convert card to "iuadsl_72a_e" (72-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24).

m_iuvdsl_24d2_ifx Convert card to "iuvdsl_24d2_ifx" (24-Port VDSL2 over ISDN, ADSL2+ Annex B BWC; Infineon Convergate D; Infineon Vinax 1.4).

m_vplu-s72-pots_e Convert card to "vplu-s72-pots_e" (72-Port VoIP).

m_vplu_72p_e Convert card to "vplu_72p_e" (72-Port VoIP).

m_iuadsl_72a_cg Convert card to "iuadsl_72a_cg" (72-Port ADSL2+ Annex A POTS; Infineon Convergate D; Infineon Geminax Max plus (V1.3)).

m_iuadsl_72b_cg Convert card to "iuadsl_72b_cg" (72-Port ADSL2+ Annex B ISDN; Infineon Convergate D; Infineon Geminax Max plus (V1.3)).

m_iuadsl_72a_cgh Convert card to "iuadsl_72a_cgh" (72-Port ADSL2+ Annex A POTS; Infineon Converate D; Infineon Geminax Max plus (V2.1)).

m_iuadsl_72b_cgh Convert card to "iuadsl_72b_cgh" (72-Port ADSL2+ Annex B ISDN; Infineon Converate D; Infineon Geminax Max plus (V2.1)).

m_iuvdsl_48i2_e Convert card to "iuvdsl_48i2_e" (48-Port VDSL2 over ISDN, ADSL2+ Annex B/J BWC; Infineon Convergate D; Infineon Vinax 2.2).

m_iuvdsl_24p_e Convert card to "iuvdsl_24p_e" (24-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 1.4).

m_iuvdsl_48p_e Convert card to "iuvdsl_48p_e" (48-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 2.2).

m_iushdsl_48e_e Convert card to "iushdsl_48e_e" (48-Port SHDSL Infineon Annex A/B: standard mode Annex F/G:enhanced mode).

m_iushdsl_48e_8q_e Convert card to "iushdsl_48e_8q_e"(48-Port SHDSL Infineon Annex A/B: standard mode Annex F/G:enhanced mode 8-queue-flat).

m_iuvdsl_48i2_e 48-Port VDSL2 over ISDN, ADSL2+ Annex B/J BWC; Infineon Convergate D; Infineon Vinax 2.2.

m_iuvdsl_24p_e 24-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 1.4.

m_iuvdsl_48p_e 48-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 2.2.

m-vplu-s72-pots_e 72-Port VoIP.

m_vplu_72p_e 72-Port VoIP.

m_vplu_72p1_e VPLU_72p1_e (IU with 72 ports VoIP).

m_vplu_72p2_e VPLU_72p2_e (IU with 72 ports VoIP).

Table 11 Converting a configured module

86

Operate CLI

Id:0900d805805d4566



reset type(m_iuvdsl_24p_e | m_iuadsl_72p_ifx | m_iuadsl_72i_ifx | m_iushdsl_48s_e | m_iushdsl_48b_e | m_iuadsl_72a_e | m_iuadsl_72a_cg | m_iuadsl_72b_cg | m_iuvdsl_24d_ifx | m_iuvdsl_24d2_ifx | m_iuadsl_72ai_wc | m_iuadsl_72aj_wc | m_vplu-s72-pots_e | m_iuadsl_48p_e | m_iu1ge_10o_syn_e | m_iu_32i4_e | m_iu_32i2_e | m_iuadsl_72a_cgh | m_iuadsl_72b_cgh | m_iuadsl_72j_cgh | m_iushdsl_48e_e | m_iushdsl_48e_8q_e| m_vplu_72p_e | m_iuvdsl_48p_e | m_iuvdsl_48i2_e)

Global Reset all cards of same type:

m_iuvdsl_24p_e reset all cards of type "iuvdsl_24p_e" (24-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 1.4)

m_iuadsl_72p_ifx reset all cards of type "iuadsl_72p_ifx" (72-Port ADSL2+ Annex A POTS; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iuadsl_72i_ifx reset all cards of type "iuadsl_72i_ifx" (72-Port ADSL2+ Annex B ISDN; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iushdsl_48s_e reset all cards of type "iushdsl_48s_e" (48-Port SHDSL Conexant 24-Port when 4 wired)

m_iushdsl_48b_e reset all cards of type "iushdsl_48b_e" (48-Port SHDSL Conexant bonding, bis and wetting current support)

m_iuadsl_72a_e reset all cards of type "iuadsl_72a_e" (72-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24)

m_iuadsl_72a_cg reset all cards of type "iuadsl_72a_cg" (72-Port ADSL2+ Annex A POTS; Infineon Convergate D; Infineon Geminax Max plus (V1.3))

m_iuadsl_72b_cg reset all cards of type "iuadsl_72b_cg" (72-Port ADSL2+ Annex B ISDN; Infineon Convergate D; Infineon Geminax Max plus (V1.3))

m_iuvdsl_24d_ifx reset all cards of type "iuvdsl_24d_ifx" (24-Port VDSL2 over ISDN; Infineon Convergate D; Infineon Vinax 1.3)

m_iuvdsl_24d2_ifx reset all cards of type "iuvdsl_24d2_ifx" (24-Port VDSL2 over ISDN, ADSL2+ Annex B BWC; Infineon Convergate D; Infineon Vinax 1.4)

m_iuadsl_72ai_wc reset all cards of type "iuadsl_72ai_wc" (72-Port ADSL2+ Annex I/J split-terless application; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_iuadsl_72aj_wc reset all cards of type "iuadsl_72aj_wc" (72-Port ADSL2+ Annex J; Wintegra WinArrow 117; Infineon Geminax Max (V1.2))

m_vplu-s72-pots_e reset all cards of type "vplu-s72-pots_e" (72-Port VoIP (AGLU))

m_iuadsl_48p_e reset all cards of type "iuadsl_48p_e" (48-Port ADSL2+ Annex A POTS; Conexant Columbia 1; Conexant G24)

m_iu1ge_10o_syn_e reset all cards of type "iu1ge_10o_syn_e" (downlink with optical 10x 1G interfaces with synchronization)

m_iu_32i4_e reset all cards of type "iu_32i4_e" (32-Port ISDN (4B3T))

m_iu_32i2_e reset all cards of type "iu_32i2_e" (32-Port ISDN (2B1Q))

m_iuadsl_72a_cgh reset all cards of type "iuadsl_72a_cgh" (72-Port ADSL2+ Annex A POTS; Infineon Converate D; Infineon Geminax Max plus (V2.1))

m_iuadsl_72b_cgh reset all cards of type "iuadsl_72b_cgh" (72-Port ADSL2+ Annex B ISDN; Infineon Converate D; Infineon Geminax Max plus (V2.1))

m_iuadsl_72j_cgh reset all cards of type "iuadsl_72j_cgh" (72-Port ADSL2+ Annex J; Infineon Converate D; Infineon Geminax Max plus (V2.1)

m_iushdsl_48e_e reset all cards of type "iushdsl_48e_e" (48-Port SHDSL Infineon Annex A/B:standard mode Annex F/G:enhanced mode)

m_vplu_72p_e reset all cards of type "vplu_72p_e" (72-Port VoIP)

m_iushdsl_48e_8q_e reset all cards of type "iushdsl_48e_8q_e" (48-Port SHDSL Infineon Annex A/B: standard mode Annex F/G:enhanced mode 8-queue-flat)

Table 12 Resetting equipped module

87


Id:0900d805805d4566

To change the administrative state, use the following commands:

To delete an existing module, use the following command.

g Before deleting an existing module, user must set administrative state to “locked”.

reset type(m_iuvdsl_48p_e | m_iuvdsl_48i2_e)

Global m_iuvdsl_48p_e reset all cards of type "iuvdsl_48p_e" (48-Port VDSL2 over POTS, ADSL2+ Annex A BWC; Infineon Convergate D; Infineon Vinax 2.2)

m_iuvdsl_48i2_e reset all cards of type "iuvdsl_48i2_e" (48-Port VDSL2 over ISDN, ADSL2+ Annex B/J BWC; Infineon Convergate D; Infineon Vinax 2.2)

reset card SLOTNUMBER Reset a specified module.

SLOTNUMBER Number of the slot.

reset cxu SLOTNUMBER Reset CXU.


reset all Reset all cards.


Table 12 Resetting equipped module (Cont.)


cxu-iu-interface-version-check (enable|disable|block-all) Global CXU-IU interface version check configuration.

enable Enable CXU-IU interface version check (IU is in state "degraded" when at least one version does not match) .

disable Disable CXU-IU interface version check (can lead to misconfigurations when versions are different!).

block-all Block all IUs from getting configuration (to allow software download in any case) .


card admin-state SLOTNUM (planned | locked | unlocked) Global

card Card commands.

admin-state

Change AdminState of a card.

SLOTNUM Slotnum of the card.

planned change AdminState of a card to "planned".

locked Change AdminState of a card to "locked" .

unlocked Change AdminState of a card to "unlocked" .

Table 13 Changing administrative state


slot card delete SLOTNUMBER Global Deletes an existing card.

SLOTNUMBER Number of the Slot.

Table 14 Deleting existing module

88

Operate CLI

Id:0900d805805d4566


To display the physical tables, use the following commands.


show table physical-container {SLOT | }

PrivilegedGlobal

Shows an SNMP table.


table shows SNMP tables.

physical-container shows SNMP table "shePhysContainerTable".

SLOT Slot number to show information for.

show table physical-card {SLOT | } Shows an SNMP table.

show Show running system information

table shows SNMP tables

physical-card shows SNMP table "shePhysCardTable"

SLOT Slot number to show information for

show table shelf SLOTPOSITION Shows a slot usage and configuration, enter the slot number to show information for.

SLOTPOSITION Number of the slot.

show shelf ext-alarm-input {<1-8> | } Show running system information;

– shelf commands – external alarm input settings.

1-8 number of the alarm input <1-8>.

show shelf ext-alarm-output {<1-3> | } Show running system information;

– shelf commands – external alarm output settings.

1-3 number of the alarm output <1-3>.

show table shelf Shows usage and configuration of all slots.

show slot-overview Shows usage and configuration of all slots in a table.

show table physical-entity {PHYSINDEX | }

PrivilegedGlobal

Shows an SNMP table, enter the physical index to show the information.


table shows SNMP tables

physical-entity shows SNMP table "entPhysicalTable"

PHYSINDEX Physical index to show information for.

show objects temperature Shows the current temperature of SNMP objects.


objects shows SNMP objects.

temperature shows SNMP objects "sheTemperatureObjects".

show status temperature Shows current temperature status information.


status Current Status

temperature Current temperature

show relative-humidity Shows current relative humidity and alarm thresholds.

show system-information Global Shows system information.

Table 15 Displaying physical tables

89


Id:0900d805805d4566

5.3 Select alarm severitiesTo change an alarm severity profile, use the following command.


card alarm-severity-profile SLOTNUMBER <1-10> Global Change alarm severity profile.


1-10 Index of the profile.

rack alarm-severity-profile <1-10> Change alarm severity profile.


shelf alarm-severity-profile <1-10> Change alarm severity profile.


Table 16 Changing alarm severity profile

90

Operate CLI

Id:0900d805805d4566


5.4 Configure external alarmsTo change an external alarm configuration, use the following command.


shelf ext-alarm-output <1-3> USAGE Global Change usage string of an external alarm output.

1-3 Number of the alarm outputs.

USAGE New usage string.

shelf ext-alarm-input <1-8> <0-1> USAGE Change level and usage string of an external alarm input.

1-8 Number of the alarm inputs.

0-1 Low or high active.

USAGE New usage string.

shelf ext-alarm-output-switch <1-3> (on | off) Shelf commands;- Switch on/off an external alarm output.

<1-3> Number of the alarm output.

on Switch on.

off Switch off.

shelf sb-ext-alarm-input-output <0-1> <0-1> <0-1> <0-1> <0-1> <0-1> <0-1> <0-1> STRING1 STRING2 STRING3 STRING4 STRING5 STRING6 STRING7 STRING8 STRING9 STRING10 STRING11

Shelf commands.

sb-ext-alarm-input-output

Changes the level and usage string of an external alarm input and output.

<0-1> <0-1> -- low or high-active input 1








STRING1 -- new usage string input 1








STRING9 -- new usage string output 1



Table 17 Changing external alarm configuration

91


Id:0900d805805d4566

5.5 Define temperature and humidity thresholdsTo change temperature warning thresholds, use the following command.

To change humidity alarm thresholds, use the following command.


change temperature-warning-thresholds <0-120> <0-120>

Global Change temperature-warning-thresholds:

0-120 Temperature that clears the over tempera-ture warning.

0-120 Temperature that issues the over tempera-ture warning.

Table 18 Changing temperature warning thresholds


change humidity-alarm-thresholds <0-100> <0-100> Global Change humidity-alarm-thresholds.

0-100 Humidity that clears the humidity alarm.

0-100 Humidity that issues the humidity alarm.

Table 19 Changing humidity alarm thresholds

92

Operate CLI

Id:0900d805805d4566


5.6 Configure CXU redundancyFor an increased reliability of the hiX 5622/25/30/35 R2.8, board redundancy for the central switch unit (CXU) is supported. The M1200/M1100/G1100/M600/M400 shelves can be optionally equipped with a set of two CXUs, one of them acting as active CXU.

The second CXU remains in the standby mode until a failure condition on the active CXU triggers a redundancy switching event.

The board redundancy meets following requirements:

• Redundancy switching is initiated autonomously by CXU HW in case of a watchdog event (SW error on the currently active CXU).

• Redundancy switching is initiated autonomously if the currently active CXU is plugged-out.

• Redundancy switching can be initiated by a SW command on the currently active CXU. This can occur:– as a result of HW state monitoring or– if switchover is requested by the TMN.

g Normally, when a critical error occurs on the current active CXU, the hiX 5622/25/30/35 R2.8 will proceed the switchover to the standby CXU automati-cally. In this case, the uplink connection can be kept up with the cross-connection for the CXU redundancy. For more information, refer to the System Description for the hiX 5622/25/30/35 R2.8 and the Installation Manual for the hiX 5622/25/30/35 R2.8.

To enable/disable the CXU redundancy manually, use the following commands.

To display a current redundancy state, use the following commands.

You can also configure the DSLAM to monitor the operation of the optical interfaces on the CXU for automatic CXU switchover for a connection failure.

To enable/disable link monitoring, use the following command.


redundancy SLOT Global Enables the redundancy for a plug-in unit in the given slot, enter the slot number.

no redundancy SLOT Disables the redundancy for a plug-in unit in the given slot, enter the slot number.

switchover SLOT Switchover to the standby plug-in unit if the standby unit has no error, enter the slot number in which the active unit is plugged-in.

switchover-forced SLOT Switchover to the standby plug-in unit, enter the slot number in which the active unit is plugged-in.

optical_splitter Activate the Optical-Splitter-Redundancy, e.g. Link 1 from active CXU + Link 1 from Standby CXU are guided over optical splitter.

no optical_splitter Deactivate the Optical-Splitter-Redundancy.


show redundancy-states Global Shows a redundancy state of all plug-in units.

show optical_splitter Shows the optical splitter configuration.

93


Id:0900d805805d4566

To show link-monitor configuration, use the following command.

5.7 Configure MTATo install and configure MTA, use following commands, see also 14.3.11 Use case: Metallic Test Access (MTA):


link-monitor PORTSswitch-over

GlobalBridge

Activate the port monitor for optical splitter -> loss of link on the active CXU causes the switchover to the standby CXU.

no link-monitor PORTS switch-over

Deactivate the port monitor for optical splitter -> loss of link on the active CXU causes the switchover to the standby CXU.

port link-monitor PORTSenable

GlobalBridge

Activate the port monitor -> loss of link on the active CXU causes the switchover to the standby CXU.

port link-monitor PORTSdisable

Deactivate the port monitor.

PORTS Select port number like 0/1-0/1 or s0.


show link-monitor Global Shows the link-monitor configuration.


mta Config Setting the MTA mode.

mta connectcable dslam<1-17> <1-2> splitter <1-2> <1-17>

Connection from DSLAM to Splitter.

1-17 Slot of the DSLAM shelf.

1-2 Cable of the DSLAM shelf.

1-2 Splitter shelf no.

1-17 Slot in Splitter shelf.

mta disconnectcable dslam<1-17> <1-2>

Disconnect the DSLAM from Splitter.

1-17 Slot of the DSLAM shelf.

1-2 Cable of the DSLAM shelf.

mta set mappingmode(standard|dynamic)

Setting the MTA mapping mode.

standard Standard mode.

dynamic Dynamic mode.

show mta connectcable Shows all MTA active dynamic mapping connect cables.

94

Operate CLI

Id:0900d805805d4568

Port configuration

6 Port configurationYou can configure Ethernet, ADSL/ADSL2/ADSL2+/VDSL2 and SHDSL ports. ADSL and VDSL ports will be configured as line configuration or as line configuration profile.

It mainly contains the following Sections.

• Port assignment • Configuring ethernet port • Configuring DSL port

6.1 Port assignmenthiX 5635: Slot Allocation of M1200The M1200 shelf provides 15 mounting slots for the IUs, 1 mounting slot for the CXU_B and 1 mounting slot for either IU or redundant CXU_B. Each IU contains 48 or 72 ADSL ports/48 SHDSL ports/24 VDSL ports, and CXU_B contains 4 Gigabit Ethernet ports.

When you configure the hiX 5635 via the CLI, the hiX 5635 assigns the slot number 0, 9 or 10 to the mounting slot for CXU_B in the physical slot number 209/210. The slot number 1-8 and 10/11-17 will be assigned to other mounting slots for the IUs in the physical slot number 201-208 and 210/211-217, refer to Figure 6.

Figure 6 M1200 Slot Allocation for CLI

hiX5635: Slot allocation of M1100/G1100The M1100/G1100 shelf provides 14 mounting slots for the IUs, 1 mounting slot for the CXU_B1/B21/B3 and 1 mounting slot for a redundant CXU_B1/B21/B3. In M1100 shelf, mounting slot 110 can be equipped with an additional IU instead of the redundant CXU_B1/B21/B3.

Slot203

Slot204

Slot205

Slot206

Slot207

Slot208

Slot209

CXU

_B

Slot210

CXU

_B o

r

Slot211

Slot212

Slot213

Slot214

Slot215

Slot216

Slot217

Slot202

Slot201

Fan unit

1) IUs acc. Section "Equipment Management"2) Slot number in CLI3) Slot number in CLI is 10 for IU on mounting slot 210.

Slot number in CLI is 0 for CXU_B for port commands.Slot number in CLI is 9 or 10 for CXU_B for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

12)

22)

32)

42)

52)

62)

72)

82)

011

2)12

2)13

2)14

2)15

2)16

2)3)or9

03)

or10

172)

95

Operate CLI Port configuration

Id:0900d805805d4568

Each IU contains 72 ADSL ports/48 SHDSL ports/24 VDSL ports, and CXU_B1/B21/B3 contains 4 Gigabit Ethernet ports.

When you configure the hiX 5635 via the CLI, the hiX 5635 assigns the slot number 0, 9 or 10 to the mounting slot for CXU in the physical slot number 109/110. The slot number 1-8 and 10/11-16 will be assigned to other mounting slots for the IUs in the physical slot number 101-108 and 110/111-116, refer to Figure 7.

Figure 7 M1100/G1100 Slot Allocation for CLI

hiX5630: Slot allocation of G600 2GThe G600 2G shelf provides 8 mounting slots for the IUs, 1 mounting slot for the CXU_B21 and 1 mounting slot for a redundant CXU_B21. Two special slots are for the power modules.

Slot103

Slot104

Slot105

Slot106

Slot107

Slot108

Slot109

CX

U_B

21

Slot110

CX

U_B

21 o

r IU

Slot111

Slot112

Slot113

Slot114

Slot115

Slot116

Slot117

Slot102

Slot101

Fan unit

1) IUs acc. Section "Equipment Management"

PM_1

Slot118

PM

_U

PL

2) Slot number in CLI

12)

22)

32)

42)

52)

62)

72)

82)

011

2)12

2)13

2)14

2)15

2)16

2)3)

3) Slot number in CLI is 10 for IU on slot 110 (only possiible in M1100 shelf).

Slot number in CLI is 0 for CXU_B21 for port commands.Slot number in CLI is 9 or 10 for CXU_B21 for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

or9

0 3)or10

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)IU

1)

96

Operate CLI

Id:0900d805805d4568

Port configuration

Figure 8 G600 2G Slot Allocation for CLI

hiX5630: Slot allocation of G600R 2GThe G600R 2G shelf provides 8 mounting slots for the IUs, 1 mounting slot for the CXU_B21 and 1 mounting slot for a redundant CXU_B21. One special slot is for the power module.

Figure 9 G600R 2G Slot Allocation for CLI

hiX 5630: Slot allocation of M600The M600 shelf provides 8 mounting slots for the IUs, 2 mounting slots for the CXU_C/CXU_B21/B3 and 1 mounting slot for CIUG. Each IU contains 72 ADSL ports/48 ADSL ports/48 SHDSL ports/24 VDSL ports, and CXU_C/CXU_B21/B3 contains 4 Gigabit Ethernet ports.

2) Slot number in CLI3) Slot number in CLI is 0 for CXU_C for port commands.

Slot number in CLI is 5 or 6 for CXU_C for the following commands:reset card, card admin-state, card alarm-severity-profile, switchover commands, slot card commands and show commands.

Slot 201Slot 202Slot 203Slot 204Slot 205Slot 206Slot 207Slot 208Slot 209Slot 210Slot 211

IU #11)

IU #21)

IU #31)

IU #41)

CXU #ACXU #BIU #51)

IU #61)

IU #71)

IU #81)

PM_UPL / PM_ONU Slot 212 PM_1R

G60

0 Fa

n U

nit

12)

22)

32)

42)

72)

82)

92)

102)

0 or 63)

0 or 53)

1) IUs acc. Section "Equipment Management".

2) Slot number in CLI3) Slot number in CLI is 0 for CXU_C for port commands.


Slot 201Slot 202Slot 203Slot 204Slot 205Slot 206Slot 207Slot 208Slot 209Slot 210Slot 211

IU #11)

IU #21)

IU #31)

IU #41)

CXU #ACXU #BIU #51)

IU #61)

IU #71)

IU #81)

PM_R

G60

0 Fa

n U

nit

12)

22)

32)

42)

72)

82)

92)

102)

0 or 63)

0 or 53)

1) IUs acc. Section "Equipment Management".

97


Id:0900d805805d4568

When you configure the hiX 5630 with the CLI, the hiX 5630 assigns the slot number 0, 5 or 6 to the mounting slot for CXU_C/CXU_B21/B3 in the physical slot number 206/207. The slot number 1-4 and 7-10 will be assigned to other mounting slots for the IUs in the physical slot numbers 202-205 and 208-211, refer to Figure 10


hiX 5625: Slot allocation of M400The M400 shelf provides 5 mounting slots for the IUs, 1 mounting slot for the CXU_C CXU_B21/B3 and 1 mounting slot for CIUG.

IUs can contain 48/72 ADSL ports, 48 SHDSL ports or 24/48 VDSL ports. The CXU_C CXU_B21/B3 contains 4 Gigabit Ethernet ports.

When configuring the hiX 5625 via the CLI, the hiX 5625 assigns the slot numbers 0, 1 or 2 to the mounting slot for CXU_C CXU_B21/B3 in the physical slot numbers 202/203.

The slot numbers 2 and 3 to 6 will be assigned to other mounting slots for the IUs in the physical slot numbers 203 and 204 to 207, refer to Figure 10.

1) IUs acc. Section "Equipment Management" 2) Slot number in CLI3) Slot number in CLI is 0 for CXU_C for port commands.


Slot 201Slot 202Slot 203Slot 204Slot 205Slot 206Slot 207Slot 208Slot 209Slot 210Slot 211 IU #11)

IU #21)

IU #31)

IU #41)

CXU_CCXU_CIU #51)

IU #61)

IU #71)

IU #81)

0 or 63)

0 or 53)

CIUG12)

22)

32)

42)

72)

82)

92)

102)

Fan

Un

it

98

Operate CLI

Id:0900d805805d4568

Port configuration


hiX 5625: Slot allocation of G400The G400 shelf provides 4 mounting slots for the IUs, 2 mounting slots for the CXU_C/CXU_B21/B3 and 2 mounting slot for PM_UPL and PM_1R.

IUs can contain 48/72 ADSL ports, 48 SHDSL ports or 24/48 VDSL ports. The CXU_C/CXU_B21/B3 contains 4 Gigabit Ethernet ports.

When configuring the hiX 5625 via the CLI, the hiX 5625 assigns the slot numbers 0, 3 or 4 to the mounting slot for CXU_C/CXU_B21/B3.

The slot numbers 1, 2, 5 and 6 will be assigned to other mounting slots for the IUs in the physical slot numbers 201, 202, 205 and 206 refer to Figure 12.

Figure 12 G400 Slot Allocation for CLI (Example: for ETSI application)

1) IUs acc. Section "Equipment Management"2) Slot number in CLI3) Slot number in CLI is 2 for IU on mounting slot 203.

Slot number in CLI is 0 for CXU_C for port commands.Slot number in CLI is 1 or 2 for CXU_C for the following commands: reset card, card admin-state, card alarm-severity-profile, switchover commands, slot card commands and show commands.

IU #11)

IU #21)

IU #31)

IU #41)

CXU_C / IU #51)

CXU_C

CIUG

0 or 2

0 or 13)

3)

32)

42)

52)

62)

Slot 201

Slot 202

Slot 203

Slot 204

Slot 205

Slot 206

Slot 207

Fan

Uni

t

1) IUs acc. Section "Equipment Management"

IU #11)

IU #21)

IU #31)

IU #41)

CXU

CXU

PM_UPL ETSI

0 or 33)

0 or 43)

52)

62)

Slot 201

Slot 202

Slot 203

Slot 204

Slot 205

Slot 206

Slot 207

G40

0 Fa

n U

nit

PM_1R ETSISlot 208

22)

12)

2) Slot number in CLI3) Slot number in CLI is 0 for CXU for port commands.

Slot number in CLI is 3 or 4 for CXU for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

99


Id:0900d805805d4568

hiX 5625: Slot allocation of G400RThe G400R shelf provides 4 mounting slots for the IUs, 2 mounting slots for the CXU_C/CXU_B21/B3 and 2 mounting slot for PM_UPL and PM_1R.

IUs can contain 48/72 ADSL ports, 48 SHDSL ports or 24/48 VDSL ports. The CXU_C/CXU_B21/B3 contains 4 Gigabit Ethernet ports.

When configuring the hiX 5625 via the CLI, the hiX 5625 assigns the slot numbers 0, 3 or 4 to the mounting slot for CXU_C/CXU_B21/B3.

The slot numbers 1, 2, 5, 6 will be assigned to other mounting slots for the IUs in the physical slot numbers 201, 202, 205 and 206 refer to Figure 13.

Figure 13 G400R Slot Allocation for CLI

hiX 5622: Slot allocation of G200 2GThe G200 2G shelf provides 2 mounting slots for the IUs, 1 mounting slot for the CXU and 2 mounting slot for PM_UPL/PM_ONU and PM_1R.

IUs can contain 48/72 ADSL ports, 48 SHDSL ports or 24/48 VDSL ports. The CXU_C contains 4 Gigabit Ethernet ports.

When configuring the hiX 5622 via the CLI, the hiX 5622 assigns the slot number 3 to the mounting slot for CXU_C.

The slot numbers 1 and 2 will be assigned to other mounting slots for the IUs in the physical slot numbers 201 and 202 refer to Figure 14.

1) IUs acc. Section "Equipment Management"2) Slot number in CLI3) Slot number in CLI is 0 for CXU for port commands.

Slot number in CLI is 3 or 4 for CXU for the following commands: reset card, card admin-state,card alarm-severity-profile, switchover commands, slot card commands and show commands.

IU #11)

IU #21)

IU #31)

IU #41)

CXU

CXU

PMR

0 or 33)

0 or 43)

52)

62)

Slot 201

Slot 202

Slot 203

Slot 204

Slot 205

Slot 206

Slot 207

G40

0 Fa

n U

nit

22)

12)

100

Operate CLI

Id:0900d805805d4568

Port configuration

Figure 14 G200 2G Slot Allocation for CLI

Slot numberWhen specifying a slot number in the CLI, you can simply put the number in the form of s1, s2, …. To input multiple slot numbers it is also possible, e.g. s1, s2, s7 or s1-s5. Note that the CXU is normally configured with ports but not a slot.

g For hiX 5622/25/30/35 R2.8, regardless of the state (active or standby) or place, the CXU always has the slot number 0 in the CLI.

Port numberIn the principle of the slot numbering, the hiX 5622/25/30/35 R2.8 displays a physical port number in the form of SLOT/PORT, e.g. 0/1 (Ethernet port 1 in the CXU), 3/26 (xDSL port 26 in the slot 3) or 5/72 (xDSL port 72 in the slot 5).

Bridge port numberThe hiX 5622/25/30/35 R2.8 provides up to 8 bridge ports on every physical xDSL port. When specifying a bridge port number in the CLI, enter the number in the form of SLOT/PORT/VC, e.g. 4/21/5 (bridge port 5 of xDSL port 21 in the slot 4), 6/15/2 (bridge port 2 of xDSL port 15 in the slot 6), or 2/2/1 (bridge port 1 of xDSL port 2 in the slot 2).

To enable/disable a port, use the following commands.

1) IUs acc. Section "Equipment Management". 2) Slot number in CLI.3) Slot number in CLI is 0 for CXU_C for port commands.

Slot number in CLI is 3 for CXU_C for the following commands:reset card, card admin-state, card alarm-severity-profile, switchover commands, slot card commands and show commands.

Slot 201Slot 202Slot 203Slot 204

IU #11)

IU #21)

CXUPM_UPL / PM_ONU Slot 205 PM_1R

G20

0

12)

22)

0 or 33)

Fan

Uit


port lre PORTS (enable | disable | test)

Bridge Port configuration for Long Reach Ethernet

PORTS Enter the port number or slot number. (e.g. 1/1-1/24, s1)

enable Enables the port

disable Disables port

test Port as test port description, port specific description.

101


Id:0900d805805d4568

port lre PORTS alarm-severity-profile <1-10>

Bridge Port configuration for Long Reach Ethernet.Configures LRE port specific alarm severity profile, enter a port number.

PORTS Select port number.

alarm-severity-profile

Alarm severity profile index configuration.

<1-10> Index of severity table (1 to 10).

port lre PORTS description LINE

Port configuration for Long Reach Ethernet.Enables LRE port description (max. number of characters is 100), enter a text line in form of "ID|Name|Info1|Info2|Info3|Info4|Info5"..

Select port number

Select port number

description Port specific description

LINE ID | Name | Info1 | Info2 | Info3 | Info4 | Info5

port lre PORTS operstatus-trap (enable | disable)

Enables/disables operational state trap on selected LRE port, enter the port number.

PORTS Select port number

operstatus-trap Operational state trap

enable Enables the command

disable Disables the command

port {working_cu|protecting_cu} PORTS {enable| disable| test}

Enable/disable a port on working/protecting central unit (CXU), enter the port number.

test Configures a port as test port.

port role PORTS{uplink | cascading}

Configures port as uplink or cascading, enter the port number.

port {working_cu | protecting_cu} PORTSdescription LINE

Specifies CXU port description (max. number of characters is 100), enter a text line in form of ID|Name|Info1|Info2|Info3|Info4|Info5.

port {working_cu | protecting_cu} PORTS alarm-severity-profile <1-10>

Configures working/protecting central unit (CXU) specific alarm severity profile, enter a port number.

1-10 Number of the profile.

port {working_cu Iprotecting_cu} PORTS operstatus-trap {enable I disable}

Enables/disables operational state trap for working/protecting central unit, enter the port number.

working_cu working central unit

protecting_cu protecting central unit

port stby-laser PORTS{on | off | enable | disable}

Activate/deactivate the optical port on the Standby CXU (necessary for optical Splitter redundancy)

on, enable laser on standby board enabled.

off, disable laser on standby board disabled.

port interlink{disable | electrical | optical}

Interlink configuration.

disable Do not use interlink.

electrical The medium type of interlink is electrical.

optical The medium type of interlink is optical,“Disable” must be chosen for the optical splitter.


102

Operate CLI

Id:0900d805805d4568

Port configuration

Displaying port interlink configuration

6.2 Configuring ethernet portEthernet is standardized as IEEE 802.3. The combination of the twisted pair versions of Ethernet for connecting end systems to the network, along with the fiber optic versions for site backbones, is the most widespread wired LAN technology.

6.2.1 Basic configurationEthernet port basic configuration task listBy default, all uplink interfaces are 1000M/100M/10M auto-negotiation electrical ones.

Perform the tasks in the following sections to configure an Ethernet port:

• Activating port • Specifying port type • Configuring flow control • Displaying traffic statistic of port • Displaying port status • Example of configuring Ethernet port

6.2.1.1 Activating portThe default status of Ethernet Port is active. If you want to activate one port, use the fol-lowing command in bridge mode:

Example:

SWITCH(bridge)# portworking_cu 0/1 enable

6.2.1.2 Specifying port typeFor the hiX 5622/25/30/35 R2.8, it is possible to specify the Ethernet port type to optical or electrical regardless of the physical network connection.

To choose the port type, use the following commands.


show port interlink Privileged GlobalBridge

Shows running system information;Port configuration,Interlink configuration.


port working_cu PORTS enable Bridge Enables Ethernet Port.

103


Id:0900d805805d4568

Example:SWITCH(bridge)# port type 0/2,0/3 electrical

6.2.1.3 Configuring flow controlEthernet ports on the switches use flow control to restrain the transmission of packets to the port for a period of time. Typically, if the receive buffer becomes full, the port trans-mits a pause packet that tells remote ports to delay sending more packets for a specified period of time. In addition, the Ethernet ports can receive and act upon pause packets from other devices.

To configure flow control of the Ethernet port, use the following command.

6.2.1.4 Configuration of an GBond interface Basically the same steps for NE internal parameter checks as on SNMP side have to be performed on CLI. All needed configuration steps should be made on the same level as all other DSL commands - SWITCH(bridge)#.

Use this command to enable/disable/test a GBond port.

Use this command to create an ATM/Eth type of GBond port.


port type PORTS{electrical | optical}

Bridge Configures the port type of the specified port, enter port number:

electrical internal electrical port (default)

optical external optical SFP.

port medium PORTS{electrical| optical}

Configures the port medium of the specified port, enter port number.


port flow-control PORTS {disable | enable}

Bridge Configures flow control for a specified port, enter the port number.


port gbond PORTS (enable|disable|operstatus-trap|test )

Bridge Port configuration for a GBond interface.


enable Enables port.

disable Disables port.

opersta-tus-trap

Operational state trap.

test Test port.

104

Operate CLI

Id:0900d805805d4568

Port configuration

Use this command to delete a GBond Interface number.

Use this commands to modify attributes for a specified GBond IF Number.


gbond create type (atm|eth) portlist PORTS

Bridge Creation of an atm/eth type of GBond port.

atm Not supported in version R2.8.

eth For SHDSL ports only.

PORTS Enter the list of port number se.g.: 1/1/1-1/4/1, 1/1-1/2.


gbond ifnumber IFNUMBER delete Bridge Deletes the GBond Interface number.

IFNUMBER IF Number of GBond interface which should be deleted.


gbond ifnumber IFNUMBER modify atmdelaytolerance up <0-8176> down <0-8176>

Bridge Modifies the attributes ATM delay tolerance up and down of the GBond Interface with a specified ifnum-ber.(ATM GBond is not supported with version R2.8.)

IFNUMBER IfNumber of GBond interface which should be modified.

0-8176 Value 0-8176 ms.

0-8176 Value 0-8176 ms.

gbond ifnumber IFNUMBER modify atmmaxrate up (ignore|<1-1000000>) down (ignore|<0-1000000>)

Modifies the attributes ATM maxrate up and down of the GBond Interface with a specified ifnumber. (ATM GBond is not supported by version R2.8.)


ignore No maximum setting, train with maximum possible datarate.

1-1000000 Maximum rate in kbps.



105


Id:0900d805805d4568

Use this commands to show ATM port configuration/status for a specified interface/slot.

gbond ifnumber IFNUMBER modify discoveryCode CODE

Bridge Modifies the attribute discovery code of a GBond Interface with a specified ifnumber.


CODE Octet string, max. length is 6.

gbond ifnumber IFNUMBER modify ethtclayer (tc6465|tchdlc)

Modifies the attribute eth tc layer of a GBond Inter-face with a specified ifnumber.

IFNUMBER IfNumber of GBond interface.

tc6465 64/65-octet encapsulation

tchdlc HDLC encapsulation.

gbond ifnumber IFNUMBER modify portlist PORTS

Modifies the portlist of an existing GBond interface with a specified ifNumber.


PORTS portliste wie immer 1/1/1-1/4/1..

gbond ifnumber IFNUMBER modify targetRate up (ignore|<1-1000000>)

Konfiguration of target rate up for the GBond inter-face in kbps or ignore.




gbond ifnumber IFNUMBER modify targetRate up (ignore|<1-1000000>) down (ignore|<1-1000000>)

Modifies the attribute target rate up and down of a GBond Interface with a specified ifnumber.






gbond ifnumber IFNUMBER modify thresholdLowRate-trap(enable|disable)

Modifies the attribute threshold LowRate-trap of a GBond Interface with a specified ifnumber.


enable Enables modification.

disable Disables modification.

gbond ifnumber IFNUMBER modify thresholdLowRate up <1-1000000>

Modifies the attribute threshold LowRate up of a GBond Interface with a specified ifnumber.


1-1000000 Threshold value in kbps.

gbond ifnumber IFNUMBER modify thresholdLowRate up <1-1000000> down <1-1000000>

Modifies the attribute threshold LowRate up and down of a GBond Interface with a specified ifnumber.





106

Operate CLI

Id:0900d805805d4568

Port configuration

Use this commands to GBond Ethernet port configuration for a specified interface/slot.

Use the following commands to show GBond port attributes.


show gbond atmport-configuration ifnumber IFNUMBER

Bridge Shows the GBond ATM port-configuration of speci-fied IF. (atm GBond is not supported by version R2.8)


show gbond atmport-configuration slot SLOTNUMBER

Shows the GBond ATM port-configuration of speci-fied slot

SLOTNUMBER Number of the Slot (e.g s1, s2).

show gbond atmport-status ifnumber IFNUMBER

Shows the GBond ATM status of specified IF.


show gbond atmport-status slot SLOTNUMBER

Shows the GBond ATM status of specified slot.



show gbond ethport-bce-status ifnumber IFNUMBER

GlobalBridge Priviledged

Shows the GBond Eth port bce-status of specified IF.

IFNUMBER IfNumber of an existing Eth GBond interface e.g. 5101.

show gbond ethport-bce-status slot SLOTNUMBER

Shows the GBond Eth port bce-status of specified slot.


show gbond ethport-capability ifnumber IFNUMBER

Shows the GBond Eth port capability of specified IF.


show gbond ethport-capability slot SLOTNUMBER

Shows the GBond Eth port capability of specified slot.


show gbond ethport-configuration ifnumber IFNUMBER

Shows the GBond Eth port configuration of specified IF.


show gbond ethport-configuration slot SLOTNUMBER

Shows the GBond Eth port configuration of specified slot.


show gbond ethport-status ifnumber IFNUMBER

Shows the GBond Eth port status of specified IF.


show gbond ethport-status slot SLOTNUMBER

Shows the GBond Eth port status of specified slot.


107


Id:0900d805805d4568

Example:

The following command line is a proposal!gbond create type (atm|eth(EFM)) portlist PORTS PORTS --> should represent the selected port- and channel number’s like “1/1/1 - 1/4/1” (slot 1 port 1 - 4 always channel 1) or “2/1/1 - 2/2/1,2/3/2” (slot 2 port 1 - 2 channel 1 + port 3 channel 2).

The create command should return the ifIndex value of the new created gbond interface, which should be used for all further configuration request’s on this interface.


show gbond port-capability Global-Bridge Priviledged

Shows the GBond port capability.

show gbond port-configuration Shows the GBond port configuration.

show gbond port-info Shows the GBond port info.

show gbond port-status Shows the GBond port status.

show gbond port-capability ifnumber IFNUMBER

Shows the GBond port capability of specified IF.


show gbond port-capability slot SLOTNUMBER

Shows the GBond port capability of specified slot.


show gbond port-configuration ifnumber IFNUMBER

Global-Bridge Priviledged

Shows the GBond port configuration of specified IF.


show gbond port-configuration slot SLOTNUMBER

Shows the GBond port configuration of specified slot.


show gbond port-info ifnumber IFNUMBER

Shows the GBond port info of specified IF.


show gbond port-info slotSLOTNUMBER

Shows the GBond port info of specified slot.


show gbond port-status ifnumber IFNUMBER

Shows the GBond port status of specified IF.


show gbond port-status slot SLOTNUMBER

Shows the GBond port status of specified slot.


show port gbond statisticsinterface PORTS

Shows the GBond interface port statistics.


show running-config gbond Privileged Global

Shows running system information, - current operating configuration, - GBond information.

108

Operate CLI

Id:0900d805805d4568

Port configuration

A show command should give always the information about available gbond interfaces in the NE and its current status as follows:show gbond port-info

g The individual gbond port configuration and show commands should then use this ifNumber to identify the affected interface.

Basic configuration

Only for gbond interfaces of type ATM: (not supported with IPD version R2.8)

Only for gbond interfaces of type Eth (EFM):

The CLI commands for GBond port activation and deactivation will be located in the interfaceController, but they should follow the same configuration template:

gbond ifnumber IFNUMBER (enable|disable).

gbond ifnumber IFNUMBER modify portlist PORTSgbond ifnumber IFNUMBER modify discoveryCode CODEgbond ifnumber IFNUMBER modify targetRate up <0-1000000> down <0-1000000>gbond ifnumber IFNUMBER modify thresholdLowRate up <1-1000000> down <1-1000000>gbond ifnumber IFNUMBER modify thresholdLowRate-trap (enable|disable)show gbond port-infoshow gbond port-info slot SLOTNUMBERshow gbond port-info ifnumber IFNUMBERshow gbond port-configurationshow gbond port-configuration slot SLOTNUMBERshow gbond port-configuration ifnumber IFNUMBERshow gbond port-capabilityshow gbond port-capability slot SLOTNUMBERshow gbond port-capability ifnumber IFNUMBERshow gbond port-statusshow gbond port-status slot SLOTNUMBERshow gbond port-status ifnumber IFNUMBER

gbond ifNumber IFNUMBER modify atmmaxrate up <0-1000000> down <0-1000000>gbond ifNumber IFNUMBER modify atmdelaytolerance up <0-8176> down <0-8176>show gbond atmport-configurationshow gbond atmport-configuration slot SLOTNUMBERshow gbond atmport-configuration ifnumber IFNUMBER show gbond atmport-status slot SLOTNUMBERshow gbond atmport-status ifnumber IFNUMBER

gbond ifnumber IFNUMBER modify ethtclayer (tc6465|tchdlc) show gbond ethport-configuration slot SLOTNUMBERshow gbond ethport-configuration ifnumber IFNUMBER show gbond ethport-capability slot SLOTNUMBERshow gbond ethport-capability ifnumber IFNUMBER show gbond ethport-status slot SLOTNUMBERshow gbond ethport-status ifnumber IFNUMBER

--------------------------------------------------------------Gbond ifNumber TYPE SLOT Assigned ports Status--------------------------------------------------------------5101 atm 1 1/1 2/1 3/1 4/1 enabled5102 atm 1 5/1 6/1 7/2 enabled5301 eth 3 1/1 2/1 disabled==============================================================

109


Id:0900d805805d4568

A gbond port could be deleted with the following command:

gbond ifnumber IFNUMBER delete

6.2.1.5 Displaying traffic statistic of portTo display traffic statistic of each port or interface with MIB or RMON MIB data defined, use the following commands.

The following is an example of displaying the traffic statistics of average packet for the Ethernet port 4 in the CXU.


show port statistics avg-pkt [PORTS | all]

Global Bridge Privileged

Shows average traffic of specified port, enter port number.

PORTS Sets port number like 0/1 or 0/1-0/4 or s0

all All ports including internal ports to IU

show port statistics interface {PORTS | rcu}

Global Bridge Privileged

Shows MIB data of specified port.

PORTS Port number

rcu Redundant Central Unit (CXU)

show port statistics ethernet [PORTS|all

Shows Ethernet statistic counters of specified port, enter the port number.

PORTS Port number


show port statistics dot3 [PORTS|all]

Shows DOT3 statistic counters of specified port, enter the port number.

PORTS Port number


show port state mirror [PORTS]

Shows state information of mirrored port, enter the port number.

show port statistics pvc PORTS

Switch port statistic counters, ATM packet counters per PVC.

PORTS Sets ADSL port number like 1/1 or 1/1-1/4 or s1

show port statistics pvc xdsl PORTS

Switch port statistic counters, ATM packet counters per PVC.

PORTS Sets xDSL port number like 1/1 or 1/1-1/4 or s1

110

Operate CLI

Id:0900d805805d4568

Port configuration

SWITCH(bridge)# show port statistics avg-pkt 0/4

Otherwise, to clear all recorded statistics of port and initiate, use the following com-mands.

6.2.1.6 Displaying port statusTo display a port status, use the following commands.

The following items are the information that you can see by using above commands.


clear port PORTS description Bridge Clears port specific description, enter the port number.

clear port statistics interface{PORTS | all}

Clears all recorded port statistics.

PORTS Port number.

all Clears all information.

clear port statistics dot3 PORTS Bridge Clears DOT3 statistic counters of specified port, enter the port number.

clear port statistics ethernet PORTS Clears Ethernet statistic counters of specified port, enter the port number.

clear port statistics avg-pkt PORTS Clears traffic average of specified port, enter the port number.

===================================================================== Slot/Port | Tx | Rx--------------------------------------------------------------------- Time | pkts/s | bytes/s | bits/s | pkts/s | bytes/s | bits/s=====================================================================0/4 -----------------------------------------------------------------5 sec: 0 0 0 11 1106 8,8481 min: 0 1 8 1 155 1,24010min: 0 0 0 0 15 120SWITCH(bridge)#


show port PrivilegedGlobalBridge

Shows configured state of all ports.

show port PORTS description Shows port specific description (max. number of char-acters is 100), enter the port number.

show port stby-laser [PORTS] Shows a status of CXU uplink port.

show port sfp Shows SFP module state.

show port sfp inventory Shows inventory data for upgrade.

show lre PORTS adsl Shows LRE port status, enter the port number.

show lre PORTS adsl chan-table Shows LRE adsl channel status.

Item Description

S/P Shows the slot and port number.

Table 20 Port information

111


Id:0900d805805d4568

The following example shows the state of Ethernet ports in the CXU.

SWITCH(bridge)# show port

=============================================================================== S/P PVID LINK NEGO DUP SPEED FC MEDIUM ROLE RED-CFG ===============================================================================SLOT 9 (ACTIVE)-------------------------------------------------------------------------------0/1 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/2 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/3 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/4 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk-------------------------------------------------------------------------------SLOT 10 (STANDBY)-------------------------------------------------------------------------------%standby CXU not available-------------------------------------------------------------------------------LAG -------------------------------------------------------------------------------0/5 1 Dwn/Dwn - -/- -/0 -/- - Uplk -0/6 1

SWITCH(bridge)#

6.2.1.7 Example of configuring Ethernet portThe following example shows how to configure an Ethernet port and display its state. Note: The sentence after the “---->” mark is the description of the command, you don’t need to input them.

SWITCH(bridge)# port type 0/2,0/3 electrical----> Sets Ethernet port 2,3 in CXU to electrical port

SWITCH (bridge)# port type 0/1,0/4 optical----> Sets Ethernet port 1,4 in CXU to optical port

SWITCH (bridge)# port nego 0/1 force----> Disables auto-negotiation for Ethernet port 1 in CXU

SWITCH (bridge)# port speed 0/1 1000----> Assign transmit speed 1000M to Ethernet port 1 in CXU.

SWITCH (bridge)# port duplex 0/1 full----> Sets full duplex mode for Ethernet port 1 in CXU.

PVID Shows PVID of port.

LINK Shows status of port. LINK is up/down status by user configuration.

NEGO Shows status for auto-negotiation.

DUP Shows status for duplex mode.

SPEED Shows status for rate of the port

FC Shows flow control of port, enable or disable.

MEDIUM Shows the medium type.

ROLE Shows role of the port.

RED-CFG Shows reg-cfg.

Item Description

Table 20 Port information (Cont.)

112

Operate CLI

Id:0900d805805d4568

Port configuration

SWITCH(bridge)# port flow-control 0/1 enable ----> Enables flow control for Ethernet port 1 in CXU.

SWITCH(bridge)# show port----> Display the state of Ethernet ports in the CXU .==============================================================================S/P PVID LINK NEGO DUP SPEED FC MEDIUM ROLE RED-CFG==============================================================================SLOT 9 (ACTIVE)------------------------------------------------------------------------------0/1 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/2 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/3 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -0/4 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Elect Uplk -------------------------------------------------------------------------------SLOT 10 (STANDBY)------------------------------------------------------------------------------%standby CXU not available------------------------------------------------------------------------------LAG------------------------------------------------------------------------------0/5 1 Dwn/Dwn - -/- -/0 -/- - Uplk -0/6 1 Dwn/Dwn - -/- -/0 -/- - Uplk -

SWITCH(bridge)#

SWITCH(bridge)# show port statistics avg-pkt 0/4----> displaying the traffic statistics of average packet for the Ethernet port 4 in the CXU

6.2.2 Link Aggregation Group (LAG)

Used terms in this Section

• Member port:– A physical port assigned to a trunk (group).– A physical port assigned to LACP protocol, so it can be used by aggregator to

build a trunk. • Trunk port:

– A port which combines physical ports to build a logical port which can be used as any other physical port. The way how the packets are distributed over the physical ports can be configured.

• Aggregator:

===================================================================== Slot/Port | Tx | Rx--------------------------------------------------------------------- Time | pkts/s | bytes/s | bits/s | pkts/s | bytes/s | bits/s=====================================================================0/4 -----------------------------------------------------------------5 sec: 0 0 0 11 1106 8,8481 min: 0 1 8 1 155 1,24010min: 0 0 0 0 15 120SWITCH(bridge)#

113


Id:0900d805805d4568

– A logical instance of LACP which collects information about physical ports. If LACP finds out that physical ports can be combined, a trunk is build. There is a 1:1 relation between aggregator and trunk port.

• Trunk group:– A certain trunk used for fix trunk aggregation. There is a 1:1 relation between

trunk port and trunk group. • Trunk:

– An aggregation of several physical ports into a logical one. • Aggregated port:

– A physical port which is part of a trunk. • LACP:

– The protocol. It is possible to assign trunk ports and physical ports to LACP and let the protocol decide which physical ports can be bounded to trunk ports.

Link aggregation group (LAG) complying with IEEE 802.3ad bundles several physical ports together into one logical port so that you can get enlarged bandwidth.

The hiX 5622/25/30/35 R2.8 supports two kinds of link aggregation:– fix trunk and– LACP

While in case of fix trunking the links are added manually to a trunk group in case of LACP the aggregator members will be selected from a pool of ports that share the same VLAN properties and linkstate/speed.

As LACP reacts on changes of port properties which can lead to traffic interruption, in case of a known network topology using fix trunking is the recommended solution.

g You can create two trunks at maximum, and a trunk can bind up to four physical ports.

6.2.2.1 Fix trunkFix trunking enables you to statically group similarly configured ports into a single logical link (trunk port) to increase bandwidth, while reducing traffic congestion.

• Configuring fix trunk • Enabling/disabling fix trunk • Displaying fix trunk configuration • Fix trunk example

Configuring fix trunkThe distribution mode of a trunk group defines how packet forwarding is done in case a logical trunk port is addressed which aggregates several physical links. To select a physical link the distribution method uses information from the packet that should be for-warded.

That can be one of the following:

– source IP address (srcip) – destination IP address (dstip)

114

Operate CLI

Id:0900d805805d4568

Port configuration

– source MAC address (srcmac)– destination MAC address (dstmac)

In addition following combinations of above are supported:

– source IP XOR destination IP (srcdstip)– source MAC XOR destination MAC (srcdstmac)

The default distribution mode of fix trunk groups is srcdstmac which can be changed by following command.

g It is possible to input 0 or 1 as trunk group ID because the hiX 5622/25/30/35 R2.8 supports 2 logical aggregator ports.

Note that an aggregator can either be used for fix trunk or LACP.

g Per default an XOR combination of source/destination MAC address is used to decide which link is selected for packet forwarding.

g Hint, for inband management:

Add trunk port to the management VLAN before adding any physical ports to the matching trunk group, otherwise management connectivity might be lost, see also Use case: Fix trunk setting!

All VLAN properties of a port (PVID, dot1p, VLAN membership) added as member to fix trunk, are automatically deleted.

Enabling/disabling fix trunkTo assign or remove a (physical) port to/from a trunk use the following commands.


trunk group distmodeAGGREGATORS{srcmac | dstmac | srcdstmac | srcip | dstip | srcdstip}

Bridge Changes the distribution mode of trunk group(s).

AGGRE-GATORS

Trunk group ID.

srcmac Source MAC address.

dstmac Destination MAC address.

srcdstmac XOR source/destination MAC address (default).

srcip Source IP address.

dstip Destination IP address.

srcdstip XOR source/destination IP address.

no trunk group distmode AGGREGATORS

Sets the distribution mode of trunk group(s) back to its default value (XOR source/destination MAC).

115


Id:0900d805805d4568

g If a member port is removed from a fix trunk group, the former member port will inherit all the VLAN properties from the logical trunk port.

Displaying fix trunk configurationTo display a configuration of fix trunk, use the following command.

Fix trunk exampleAs example see Use case: Fix trunk setting.

6.2.2.2 LACP configurationLink Aggregation Control Protocol (LACP) provides using wider bandwidth, like previ-ously stated fix trunk function, but, unless fix port assignment, aggregating more than two ports as a logical port is done dynamically.

To aggregate several physical ports into a logical one, LACP is evaluating the ports, link state, speed and VLAN properties. As only ports with the same VLAN properties will be combined, all designated member ports have to share their VLAN properties consisting of VLAN membership, PVID and Dot1p.

Depending on the LACP working mode the VLAN properties either have to be assigned to the trunk port (trunk-like mode) or to the single uplink ports (normal mode). In addition the ports that should be aggregated must share the speed settings and must be opera-tional.

g It is possible to use 0 or 1 as LACP aggregator ID because the product supports two logical aggregator ports.

Note that an aggregator can either be used for fix trunk or LACP.

g Please note that only ports with the same admin key can be aggregated.

The following explains how to configure LACP.

• LACP modes • Enabling/disabling LACP • Configuring distribution mode • Configuring member port • Configuring operation mode


trunk portAGGREGATOR PORTS

Bridge Adds ports to a trunk.

AGGREGATOR Trunk group ID

PORTS Port numbers to be added (e.g. 0/1 -0/4).

no trunk portAGGREGATOR PORTS

Removes ports from a trunk.


show trunk PrivilegedGlobalBridge

Shows the configuration for trunk.

116

Operate CLI

Id:0900d805805d4568

Port configuration

• Setting priority of switch • Manual aggregating • Configuring BPDU transmit rate • Setting administration key • Setting port priority • Displaying LACP configuration • LACP configuration example

LACP modesTo change the LACP mode use the following command.

The LACP working mode changes the way how LACP is dealing with VLAN configura-tions.

In trunk-like mode the VLAN configuration has to be done on the trunk port and affects all physical ports assigned to LACP.

In normal mode the VLAN configuration has to be done on the physical ports assigned to LACP and affects only the selected port. Only physical ports currently aggregated by the aggregator are affected, if a configuration is done on the trunk port in normal mode.

g Note:

(1) Changing the LACP mode is only possible if no LACP aggregator is configured.

(2) Default LACP mode is "normal".

Normal LACP modeIn this LACP mode all VLAN configuration has to be done on the physical ports assigned to LACP instead of configuring the trunk port itself.


lacp mode (trunk-like | normal) Bridge Link Aggregation Control Protocol Mode Configuration.

trunk-like Is a simplification of LACP comparable with trunk. That means VLAN configurations (e.g. VLAN-membership and PVID) are performed only on a aggregator port.

normal Means normal behavior of LACP. The VLAN con-figurations (e.g. VLAN-membership and PVID) are to be done on member ports.

Configuration Action Normal LACP mode Trunk-like LACP mode

VLAN setting on a single port. Possible, at first the port is removed from LACP and from trunk. It is up to LACP to add it to the trunk again depending on the VLAN settings.

Not allowed.

VLAN setting on trunk port (aggregator).

Possible, the trunk is not destroyed. Aggregated ports are influenced only.

Possible, the trunk is not destroyed. All ports assigned to LACP are influenced.

117


Id:0900d805805d4568

The trunk port can be used to change the configuration of all aggregated port while ports assigned to LACP but currently not aggregated are not affected.

Behaviour:1. Up to two aggregators each mapped to a trunk port can be used.

– Aggregator 0 is mapped to trunk port 0/5.– Aggregator 1 is mapped to trunk port 0/6.

2. Configuration of VLANs can be done either on trunk port or on physical ports assigned to LACP. • Configuration of VLANs on trunk port means:

– Configuration on trunk port will change the VLAN properties of all currently aggregated ports without removing aggregated ports from a trunk

– Ports assigned to LACP but not used in trunk will not be changed.– Ports that leave a trunk (e.g. port is down) keep their VLAN settings.

• Configuration of VLANs per port means:– If a port is used in trunk, for changing the VLAN settings it is removed from

LACP, configured and assigned to LACP again. Due to this procedure the port leaves the trunk and afterwards cannot be aggregated by the same trunk again as its VLAN properties have changed (but it can be used by another trunk if the new VLAN settings are identical with other port(s) ones).

– Ports that are not used in aggregation can be configured in the same way as aggregated ones.

3. LACP can only aggregate ports with identical VLAN settings. This means that the VLANs to which the ports are assigned and the PVIDs must be identical. The VLAN settings are part of the operational key calculated for each port.

Trunk-like LACP modeLACP configuration is simplified in this mode in a way that all VLAN configuration has to be done on the trunk port instead of configuring the single ports.

All ports assigned to LACP inherit the VLAN properties from the trunk port. Configuration per port is not supported (allowed) in this mode.

Behaviour:1. There is only one of the following aggregators useable in trunk-like mode, which is

mapped to a trunk port.– Aggregator 0 is mapped to trunk port 0/5.– Aggregator 1 is mapped to trunk port 0/6.

2. Configuration of VLANs has to be done on the trunk port. All physical ports assigned to LACP independent of aggregated or not will be modified.

3. Configuration of VLANs on a port assigned to LACP is denied.4. Ports assigned to LACP inherit the VLAN configuration from the trunk port and lose

their own VLAN properties.5. Ports removed from LACP keep their VLAN properties.

g Info (trunk-like only): Add trunk port to the management VLAN before adding any physical ports to LACP, otherwise management connectivity might be lost.

Enabling/disabling LACPTo configure LACP function, use the following commands.

118

Operate CLI

Id:0900d805805d4568

Port configuration

In order to release LACP and delete the configuration of LACP, use one of the following commands.

Configuring distribution modeThe distribution mode of an aggregator defines how packet forwarding is done in case a trunk port is addressed which aggregates several physical links.To select a physical link the distribution method uses information from the packet that should be forwarded which can either be:

– source IP address (srcip) – destination IP address (dstip)– source MAC address (srcmac)– destination MAC address (dstmac)

And following combinations of above:

– source IP XOR destination IP (srcdstip)– source MAC XOR destination MAC (srcdstmac)

g Per default an XOR combination of source/destination MAC address is used to decide which link is selected for packet forwarding.

The default distribution mode of aggreators is srcdstmac which can be changed by fol-lowing command.


lacp aggregator AGGREGATIONS

Bridge Enables LACP of designated Aggregator-number.

AGGREGATIONS Select aggregator ID that should be enabled for LACP (valid value from 0 to 1).

lacp aggregator admin-key AGGREGATIONS <1-15>

Enables admin-key of designated Aggregator-number.

AGGREGATIONS Select aggregator ID that should be enabled for LACP (valid value from 0 to 1).

1- 15 Admin-key value (default: 1)


no lacp aggregator AGGREGATIONS

Bridge Disables LACP for designated Aggregator-number, select the aggregator ID that should be disabled for LACP.

AGGREGATIONS Select aggregator IDs that should be disabled for LACP (0-1).

no lacp aggregator admin-key AGGREGATIONS

Disables admin-key of designated aggregator number, select the aggregator number.

AGGREGATIONS Select aggregator numbers (0-1).

119


Id:0900d805805d4568

To restore the default distribution mode, use the following command.

Configuring member portAfter configuring the aggregator, configure the physical ports that should be available for LACP aggregation (designated member ports). LACP selects a physical port as active member based on its operational state/speed and VLAN properties.

In contrast to "Fix Trunk" the properties of the aggregator are determind by properties of member ports (all aggregated ports share the same properties).

g Note:

In case of trunk-like LACP mode all ports assigned to LACP share the same VLAN properties (inherited from aggregator) and VLAN properties can only be changed for all LACP ports together (via trunk port).

As soon as a property of an aggregated port is changed, it will be removed from the group.

To configure designated member port(s) useable by the LACP protocol, use the follow-ing commands on Bridge Configuration mode.

g Note:

When you configure several ports, you have to enter each port separated by a comma without space or use dash mark “-“ to arrange port range.


lacp aggregator distmode AGGREGETIONS {srcmac | dstmac | srcdstmac | srcip | dstip | srcdstip}

Bridge Configures the distribution mode of the LACP aggrega-tor.

AGGREGATIONS Aggregator ID

srcmac Source MAC address

dstmac Destination MAC address

srcdstmac XOR source/destination MAC address (default)

srcip Source IP address

dstip Destination IP address

srcdstip XOR source/destination IP address


no lacp aggregator distmode AGGREGETIONS

Bridge Sets the distribution mode of aggregator(s) back to its default value (XOR source/destination MAC).


lacp port PORTS Bridge Configures physical ports to be useable for LACP aggregation. Select the port number(s) that should be enabled for LACP.

PORTS 0/1 to 0/4 (slot/port, slot 0 is CXU slot)

120

Operate CLI

Id:0900d805805d4568

Port configuration

To remove (designated) member ports from LACP protocol handling (so they can not be aggregated anymore), use the following command.

Configuring operation modeAfter configuring the member port, configure the LACP operation mode of the member port. This defines the operation way for starting LACP operation. You can select the operation mode between the active and passive mode.

The active mode allows the system to start LACP operation regardless of other con-nected devices. On the contrary, the passive mode allows the system to start LACP operation only when receiving LACP messages from other connected devices.

To configure the operation mode of the member port, use the following command.

To restore the ports default activity mode, use the following command.

Setting priority of switchIn case of both switches have ports in active mode, the system priority specifies the switch that decides which ports are aggregated (based on ports priorities). For this case, the user could configure the priority on switch.

The following is the command of configuring the priority of the switch in LACP function.

To restore the default system priority, use the following command.


no lacp port PORTS Bridge Removes ports from LACP, so that they can not be used for aggre-gation anymore. Aggregated member ports will be removed from aggregator. Select the port number(s) that should be disabled for LACP.

!In case of an LACP connection between 2 switches, if the member ports of both switches are configured as the passive mode, the link between the switches cannot be established.


lacp port activity PORTS{active | passive}

Bridge Configures the operation mode of the member port. (default: active)


no lacp port activity PORTS Bridge Restores the default activity property of a specified member port back to active.


lacp system priority<1-65535>

Bridge Sets the priority of the switch in LACP function, enter the switch system priority. (default: 32768)

121


Id:0900d805805d4568

Manual aggregatingFor each LACP member port it can be configured if the port should be aggregateable by the LACP protocol or works as an individual port that will not be useable in a trunk.

To change the aggregation property, use the following command:

To restore the ports default aggregation property use the following command:.

Configuring BPDU transmit rateThe member port transmits BPDU with its information. For hiX 5622/25/30/35 R2.8, the BPDU transmit rate can be configured with the following command.

To restore the ports default BPDU transmission rate, use the following command:

Setting administration keyEach LACP member port has an admin key. In case the aggregator should be able to select any LACP member ports to build a trunk, all should share the same key value.

To select specific member ports for aggregation, configure those ports with the same key value while all other ports should be configured with another key value.


no lacp system priority Bridge Restores the default system priority of a specified member port back to 32768.


lacp port aggregation PORTS {aggregatable | individual}

Bridge Configures the property of a specified member port for LACP. (default: aggregatable)


no lacp port aggregation PORTS Bridge Restores the default aggregation property of a specified member port back to aggregatable.


lacp port timeout PORTS{short | long}

Bridge Configures BPDU transmit rate.

PORTS Select the port number.

short Short timeout (1 sec)

long Long timeout (default: 30 sec.)


no lacp port timeout PORTS Bridge Clears BPDU transmit rate of configured member port, select the port number.

122

Operate CLI

Id:0900d805805d4568

Port configuration

To restore the ports default admin-key, use the following command:

Setting port priorityThe priority of a member port specifies which of the available ports is preferred to be used in aggregation (in case there are more ports available for LACP then required for aggregation).

To configure priority of an LACP member port, use the following command.

To restore the ports default prioirty, use the following command:

Displaying LACP configurationTo display a configured LACP, use the following commands.

LACP configuration exampleAs example see Use case: LACP configuration (normal mode) and Use case: LACP configuration (trunk-like mode).


lacp port admin-key PORTS<1-15>

Bridge Configures the key value of a member port.


1-15 Key value (default: 1)


no lacp port admin-key PORTS Bridge Restores the default admin-key property of a specified member port back to 1.


lacp port priority PORTS<1-65535>

Bridge Sets the LACP priority of a member port, select the port number. (default: 32768)


no lacp port priority PORTS Bridge Restores the default priority property of a specified member port back to 32768.


show lacp aggregator PrivilegedGlobalBridge

Shows the information of all aggregators.

show lacp aggregator AGGREGATIONS

Shows the information of selected aggregator.

show lacp port Shows the information of all member port.

show lacp port PORTS Shows the information of of selected port.

123


Id:0900d805805d4568

6.2.3 STP configurationThe local area network (LAN), which is composed of double paths like token ring, has the advantage that it is possible to access in case of disconnection with one path. However there is another problem called a loop when you always use the double paths.

The loop may occur when double paths are used for link redundancy between switches and one sends unknown unicast or multicast packet that causes endless packet floating on the LAN like loop topology. That superfluous traffic eventually can result in network fault. It causes superfluous data transmission and network fault.

Figure 15 Example of Loop

The Spanning-tree Protocol (STP) is the function to prevent the loop in LAN with more than two paths and to utilize the double paths efficiently. It is defined in IEEE 802.1d. If the STP is configured in the system, there is no loop since it chooses more efficient path of them and blocks the other path. In other words, when SWITCH C in the below figure sends packet to SWITCH B, path 1 is chosen and path 2 is blocked.

Figure 16 Principle of Spanning Tree Protocol

124

Operate CLI

Id:0900d805805d4568

Port configuration

Meanwhile, the Rapid Spanning-Tree Protocol (RSTP) defined in IEEE 802.1w dramat-ically reduces the time of network convergence on the Spanning-Tree Protocol (STP). It is easy and fast to configure new protocol. The IEEE 802.1w also supports backward compatibility with IEEE 802.1d.

The hiX hiX 5622/25/30/35 R2.8 provides STP, RSTP and MSTP. For more detail description of STP and RSTP, refer to the following sections.

• STP operation • RSTP operation • MSTP operation • Configuring STP/RSTP/MSTP mode • Configuring STP/RSTP/MSTP • BPDU configuration

6.2.3.1 STP operationThe 802.1d STP defines port state as blocking, listening, learning and forwarding. When STP is configured in LAN with double-path, switches exchange their information includ-ing bridge ID.

It is named as BPDU (Bridge Protocol Data Unit). Switches decide port state based on exchanged BDPU and automatically decide optimized path to communicate with root switch as standard of spanning-tree.

Root switchThe critical information to decide root switch is bridge ID. Bridge ID is composed of two bytes-priority and six bytes-mac address. The root switch is decided with the lowest bridge ID.

Figure 17 Root switch

After configuring STP, switches exchange their information. The priority of SWITCH A is 8, the priority of SWITCH B is 9 and the priority of SWITCH C is 10. In this case, SWITCH A is automatically configured as root switch.

125


Id:0900d805805d4568

Designated SwitchAfter deciding root switch, when SWITCH A transmits packet to SWITCH C, SWITCH A compares exchanged BDPU to decide which path to link. The critical information to decide path is path-cost. Path-cost depends on transmit rate of LAN interface and path with lower path-cost is selected.

Figure 18 Designated switch

In case of the above picture showing SWITCH C sends packet, path-cost of PATH 1 is 150 and path-cost of PATH 2 is total 200(100+100, path-cost of SWITCH C to B + path-cost of SWITCH B to C). Therefore lower path-cost, PATH1 is chosen. In this case, port connected to Root switch is named Root port. In the above picture, port of SWITCH C connected to SWITCH A as Root switch is Root port. There can be only one Root port on equipment.

The standard to decide designated switch is total root path-cost which is added with path-cost to root. Path-cost depends on transmit rate of switch LAN interface and switch with lower path-cost is selected to be designated switch.

g Switch with lower path-cost is selected to be designated switch. When root path-costs are same, bridge ID is compared.

Designated port and root portA Root Port is the port in the active topology that provides connectivity from the Desig-nated Switch toward the root. A Designated Port is a port in the active topology used to forward traffic away from the root onto the link for which this switch is the Designated Switch. That is, except root port in each switch, selected port to communicate is desig-nated port. The other ports, except root port and designated port, are named blocked port.

Port priorityMeanwhile, when path-costs of two paths are same, port-priority is compared. As the below picture, suppose that two switches are connected. Since the path-costs of two paths are 100, same, their port priorities are compared and port with smaller port priority is selected to transmit packet.

126

Operate CLI

Id:0900d805805d4568

Port configuration

g All these functions are automatically performed by BDPU, which is the bridge infor-mation exchanged between switches to activate or disable a specific port. It is also possible to configure BDPU to change root switch or path manually.

Figure 19 Port Priority

Port statesEach port on a switch can be in one of five states.

Figure 20 Port states

– BlockingA port that is enabled, but that is neither a Designated port nor a Root port, will be in the block state. A blocking port will not receive or forward data frames, not will it transmit BPDUs, but instead it will listen for other’s BPDUs to determine if and when the port should consider becoming active in the spanning tree.

127


Id:0900d805805d4568

– ListeningThe port is still not forwarding data traffic, but is listening to BPDUs in order to compute the spanning tree. The port is comparing its own information (path cost, Bridge Identifier, and Port Identifier) with information received from other candidates and deciding which is best suited for inclusion in the spanning tree.

– LearningThe port is preparing to forward data traffic. The port waits for a period of time to build its MAC address table before actually forwarding data traffic. This time is the forwarding delay.

– ForwardingAfter some time learning address, it is allowed to forward data frame. This is the steady state for a switch port in the active spanning tree.

– DisabledWhen disabled, a port will neither receive nor transmit data or BPDUs. A port is in this state because it is broken or disabled by administrator.

6.2.3.2 RSTP operationWhen STP or RSTP is configured on network where loop can be created, result of the last topology is same. However, RSTP is more rapidly progressed than STP at the stage of reaching to the last topology. This section describes how RSTP works more improved than STP. It contains the below sections.

– Port States– BPDU Policy– Rapid Network Convergence– Compatibility with 802.1d.

Port statesRSTP defines port states as discarding, learning and forwarding. Blocking of 802.1d and listening is combined into discarding. Same as STP, root port and designated port are decided by port state. But existing blocked port is divided into alternate port and backup port. Alternate port means a port blocked by receiving BDPU of priority of high numerical value from another network element, and backup port means a port blocked by receiving BDPU of priority of high numerical value from another port of same equipment.

The difference between alternate port and backup port is that alternate port can alter-nate path of packet when there is a problem between Root switch and SWITCH C but Backup port cannot provide stable connection in that case.

128

Operate CLI

Id:0900d805805d4568

Port configuration

Figure 21 Alternate Port and Backup Port

BPDU policyIn 802.1d, only a root switch can generate BPDU every hello time and other switches cannot. They can create BPDU when receiving BPDU from the root switch. However, in 802.1w not only root switch but also all the other switches forward BPDU following Hello-time. BPDU is more frequently issued than the interval the root switch exchanges, but with 802.1w conversion to the forwarding state become faster to keep up with changing network.

By the way, when low BDPU is received from root switch or designated switch, it is immediately accepted. For example, suppose that root switch is disconnected to SWITCH B. Then, SWITCH B is considered to be root because of the disconnection and forwards BDPU.

However, SWITCH C recognizes root existing, so it transmits BDPU including informa-tion of root to Bridge B. Thus, SWITCH B configures a port connected to SWITCH C as new root port.

Figure 22 Example receiving of low BPDU

Rapid network convergence

129


Id:0900d805805d4568

A new link is connected between Switch A and root. Root and Switch A is not directly connected, but indirectly through Switch D. After Switch A is newly connected to root, packet cannot be transmitted between the ports because state of two switches becomes listening, and no loop is created.

In this state, if root transmits BDPU to Switch A, Switch A transmits new BDPU to Switch B and Switch C, Switch C transmits new BDPU to Switch D.

Switch D, which received BDPU from Switch C makes port connected to Switch C blocking state to prevent loop after new link.

Figure 23 Network convergence of 802.1d

Figure 24 Network convergence of 802.1w (1)

130

Operate CLI

Id:0900d805805d4568

Port configuration

This is very an epochal way of preventing loop, the matter is that communication is dis-connected during two times of BDPU Forward-delay till a port connected to switch D and SWITCH C is blocked.

Then, right after the connection, it is possible to transmit BDPU although packet cannot be transmitted between switch A and root.

SWITCH A negotiates with root through BDPU. To make the link between SWITCH A and root, port state of non-edge designated port of SWITCH is changed to blocking. Although SWITCH A is connected to root, loop will not be created because SWITCH A is blocked to SWITCH Band C. In this state, BDPU from root is transmitted to SWITCH B and C through SWITCH A. To configure forwarding state of SWITCH A, SWITCH A negotiates with SWITCH B and SWITCH A does with SWITCH C.


131


Id:0900d805805d4568


SWITCH B has only edge-designated port. Edge designated does not cause loop, so it is defined in 802.1w to be changed to forwarding state. Therefore, SWITCH B does not need to block specific port to forwarding state of SWITCH A. However since SWITCH C has a port connected to SWITCH D, you should make blocking state of the port.

It is same with 802.1d to block the connection of SWITCH D and SWITCH C. However, 802.1w does not need any configured time to negotiate between switches to make for-warding state of specific port. So it is very fast progressed. During progress to forward-ing state of port, listening and learning are not needed. These negotiations use BDPU.

Compatibility with 802.1dRSTP internally includes STP, so it has compatibility with 802.1d. Therefore, RSTP can recognize BDPU of STP. But, STP cannot recognize BDPU of RSTP.

For example, assume that Switch A and Switch B are operating as RSTP and Switch A is connected to Switch C as designated switch. Since Switch C, which is 802.1d ignores RSTP BDPU, it is interpreted that Switch C is not connected to any switch or segment.

Figure 27 Compatibility with 802.1d (1)

132

Operate CLI

Id:0900d805805d4568

Port configuration

However, Switch A converts a port received BDPU into RSTP of 802.1d because it can read BDPU of Switch C. Then Switch C can read BDPU of Switch A and accepts Switch A as designated switch.

Figure 28 Compatibility with 802.1d (2)

6.2.3.3 MSTP operationTo operate the network more effectively, hiX 5635 uses MSTP (Multiple Spanning-Tree Protocol). It consists of the network with VLAN subdividing the existing LAN domain log-ically and configures the route by VLAN or VLAN group instead of the existing routing protocol.

OperationHere is explained how STP/MSTP differently operates on the LAN. Suppose to config-ure 100 VLANs from Switch A to B, C. In case of STP, there’s only an STP on all of the VLANs and it does not provide multiple instances.

While the existing STP is a protocol to prevent loop in a LAN domain establishes STP per VLAN in order to realize routing suitable to VLAN environment.

It does not need to calculate all STP for several VLAN so that traffic overload could be reduced. By reducing unnecessary overload and providing multiple transmission route for data forwarding, it realizes load balancing and provides many VLAN through instances.

MSTPIn MSTP, VLAN is classified to groups with the same Configuration ID. Configuration ID is composed of Revision name, Revision, VLAN map. Therefore in order to have same configuration ID, all of these three conditions should be the same. VLAN classified with the same configuration ID is called MST region. In a region, there’s only an STP so that it is possible to reduce the number of STP comparing to PVSTP. There’s no limitation for region in a network environment but it is possible to generate instances up to 32. Therefore instances can be generated from 1 to 32. Spanning-tree which operates in each region is IST (Internal Spanning-Tree). CST is applied by connecting each spanning-tree of region. Instance 0 means that there is not any instance generated from grouping VLAN, that is, it does not operate as MSTP. Therefore Instance 0 exists on all the ports of the equipment. After starting MSTP, all the switches in CST exchange BPDU and CST Root is decided by comparing their BPDU. Here, the switches that don’t operate with MSTP have instance 0 so that they can also join BPUD exchanges. The operation of deciding CST Root is CIST (Common & Internal Spanning-Tree).

In CST, A and B are the switches operating with STP and C, D and E are those operating with MSTP. First, in CST, CIST is established to decide CST Root. After CST root is

133


Id:0900d805805d4568

decided, the closest switch to CST root is decided as IST root of the region. Here, CST root in IST is IST root.

Figure 29 CST and IST of MSTP (1)

Figure 30 CST and IST of MSTP (2)

In above situation, if B operates with MSTP, B will send it’s BPDU to CST root and IST root in order to request itself to be CST root. However, if any BPDU having higher priority than that of B is sent, B cannot be CST root.

134

Operate CLI

Id:0900d805805d4568

Port configuration

For the hiX 5635, the commands configuring MSTP are also used to configure STP and RSTP.

6.2.3.4 Configuring STP/RSTP/MSTP modeFor hiX 5622/25/30/35 R2.8, in order to configure STP, first of all, configure force-version in order to decide the mode.

To decide force-version, use the following command.

To clear STP configuration from the DSLAM, use the following command.

6.2.3.5 Configuring STP/RSTP/MSTP

Activating STP/RSTP/MSTPTo enable/disable STP, RSTP and MSTP in the force-version, use the following command.

Even though STP function does not operate, loop event does not occur in a DSLAM which belongs to the non-dual path LAN environment.

Root switchTo establish STP, RSTP or MSTP function, first of all, root switch should be decided. In STP or RSTP, it is root switch and in MSTP it is IST root switch. Each switch has its own bridge ID and root switch on the same LAN is decided by comparing their bridge IDs. However, the user can change root switch by configuring priority for it. The switch having lowest priority is decided as root switch.

To change root switch by configuring priority for it, use the following commands.


stp force-version{stp | rstp | mstp}

Bridge Configures force-version in the bridge.

stp STP (802.1d-1998)

rstp Rapid STP (802.1d-2004/802.1w)

mstp Multiple STP (802.1Q-2003/802.1s)


no stp force-version Bridge Clears force-version configuration.


stp mst {enable | disable} Bridge Enable/disable STP, RSTP or MSTP function.

stp mst reset-tccountMSTID_RANGE

Spanning Tree Protocol,- Multiple Spanning Tree (802.1Q-2003/802.1s)- reset bridge topology change count

MST ID (X | X-Y)

MSTID_RANGE Enter the instance number <0-32>

135


Id:0900d805805d4568

Here is an example for the stp mst priority command.

Path-costsAfter deciding the root switch, you need to decide to which route you will forward the packet. To do this, the standard is path-cost.

Generally, the path cost depends on the transmission speed of LAN interface in the DSLAM. The following table shows path cost according to transmit rate of LAN interface.


stp mst priorityMSTID_RANGE <0-61440>

Bridge Configures the priority of the switch.

MSTID_RANGE MST ID: (X | X-Y).

0-61440 Priority value in steps of 4096 (default: 32768)

no stp mst priorityMSTID_RANGE

Clears the priority of the switch, enter the instance number.

SWITCH(bridge)# stp mst priority 0 8192SWITCH(bridge)# show stp mst 0 allCST Root 0000.000000000000max age 20(s) hello time 2(s) forward delay 15(s) max hops 20-------------------- MST00 --------------------IST Root 0000.000000000000vlans : 1-4096bridge id 8000.000fbb1013addesignated root 0000.000000000000root port 0/0 path cost 0bridge topology change time 0:00:00bridge topology change count 0bridge topology change flag falsePort id AdminCost Cost Role State UpTime Attribute---------------------------------------------------------------0/1 8001 0 - disable disabled 0:00:00 - 0/2 8002 0 - disable disabled 0:00:00 - 0/3 8003 0 0 designated forwarding 0:00:00 STP Share Boundary0/4 8004 0 - disable disabled 0:00:00 - 0/5 8005 0 - disable disabled 0:00:00 - 0/6 8006 0 - disable disabled 0:00:00 -

Transmit Rate Path-cost

4M 250

10M 100

100M 19

1G 4

10G 2

Table 21 STP path-cost

136

Operate CLI

Id:0900d805805d4568

Port configuration

When the route decided by path-cost gets overloading, you would better take another route. Considering these situations, it is possible to configure path-cost of root port so that user can configure route manually.

To configure path-cost, use the following command.

MST regionIf MSTP is established in hiX 5635, decide which MST region the switch is going to belong to by configuring MST configuration ID. Configuration ID contains region name, revision, VLAN map.

To set configuration ID, use the following command.

Transmit Rate Path-cost

4M 20000000

10M 2000000

100M 200000

1G 20000

10G 2000

Table 22 RSTP path-cost


stp mst path-costMSTID_RANGE PORTS<1-200000000>

Bridge Configures path-cost to configure route.

MSTID_RANGE Select instance number (0-32).


1-200000000 Enter the path cost value.

no stp mst path-costMSTID_RANGE PORTS

Clears the configured path-cost, enter the instance number and the port number.

auto-cost reference-bandwidth <1-4294967>

OSPF Calculate OSPF interface cost according to bandwidth.

Use reference bandwidth method to assign OSPF cost.

1-4294967 The reference bandwidth in terms of Mbits per second.

137


Id:0900d805805d4568

g In case of configuring STP or RSTP, you don’t need to set configuration ID. If you try to set configuration ID on STP or RSTP, an error message will be displayed.

To delete configuration ID, use the following command.

After setting the configuration ID in hiX 5622/25/30/35 R2.8, you should apply the con-figuration to the switch. After changing or deleting the configuration, you must apply it to the switch. If not, it is not injected into the switch.

To apply the configuration to the switch after configuring configuration ID, use the fol-lowing command.

g After deleting the configured configuration ID, apply it to the switch using the above command.

Displaying configurationTo display the configuration after configuring STP, RSTP and MSTP, use the following command.


stp mst config-id name NAME

Bridge Designate the name for the region.

name Sets the MST region name.

NAME Enter name to give the MST region.

stp mst config-id map <1-32> VLAN-RANGE

Configures the range of VLAN that is going to be grouping as a region.

1-32 Select an instance ID number.

VLAN-RANGE Enter a number of the VLANs to be mapped to the specified instance.

stp mst config-id revision <0-65535>

Configures the switches in the same MST boundary as same number.

0-65535 Sets the MST configuration revision number.


no stp mst config-id Bridge Deletes the entire configured configuration ID.

no stp mst config-id name Negate a command or set its defaults.- Spanning Tree Protocol,- Multiple Spanning Tree (802.1Q-2003/802.1s),- MSTP configuration Identifier,- Sets the MST region name.

no stp mst config-id map <1-32> VLAN-RANGE

Deletes entire VLAN-map or part of it, select the instance ID number and the number of the VLANs to remove from the specified instance.

no stp mst config-id map <1-32>

Deletes entire VLAN-map or part of it, select the instance ID number.

no stp mst config-id revision Deletes the configured revision number.


stp mst config-id commit Bridge Commit the configuration of the region.

138

Operate CLI

Id:0900d805805d4568

Port configuration

g With the show stp command, it is possible to display the information for STP, RSTP and MSTP. How to distinguish them is to check which one is marked on the mode.

g In case STP or RSTP is configured in hiX 5635, you should configure MSTID_RANGE as 0.

Here is an example for show stp mst command.

To display a configured MSTP of the DSLAM, use the following command.

For example, after setting the configuration ID, if it is applied to the DSLAM with the stp mst config-id commit command, you can see the configuration ID with the show stp mst config-id current and show stp mst config-id pending command.


show stp PrivilegedGlobalBridge

Shows the configuration of STP/RSTP/MSTP.

show stp mst Shows the configuration when it is configured as MSTP.

show stp mstMSTID_RANGE

Shows the configuration of specific Instance, enter the instance number.

show stp mstMSTID_RANGE{all | PORTS}[detail]

Shows the configuration of the specific instance for the ports.MSTID_RANGE: select the MST instance number.

all Select all ports.


detail Shows detail information (optional).


show stp mst config-id{current | pending}


Shows the MSTP configuration identifier.

current Shows the current configuration as it is used to run MST.

pending Shows the edited configuration.

SWITCH(bridge)# show stp mst 0 allCST Root 0000.000000000000max age 20(s) hello time 2(s) forward delay 15(s) max hops 20-------------------- MST00 --------------------IST Root 0000.000000000000vlans : 1-4096bridge id 8000.000fbb1013addesignated root 0000.000000000000root port 0/0 path cost 0bridge topology change time 0:00:00bridge topology change count 0bridge topology change flag falsePort id AdminCost Cost Role State UpTime Attribute---------------------------------------------------------------0/1 8001 0 - disable disabled 0:00:00 - 0/2 8002 0 - disable disabled 0:00:00 - 0/3 8003 0 0 designated forwarding 0:00:00 STP Share Boundary0/4 8004 0 - disable disabled 0:00:00 - 0/5 8005 0 - disable disabled 0:00:00 - 0/6 8006 0 - disable disabled 0:00:00 -

139


Id:0900d805805d4568

However, if the stp mst config-id commit command was not used to apply the config-uration to the DSLAM, the edited configuration can be checked with the show stp mst config-id pending command and the current configuration with the show stp mst config-id current command.

STP portsThis feature allows administrator to decide whether the port can be managed by STP or not.

To set port configuration, use the following command.

g When the administrator deletes a port from STP, this port is not managed by STP, but packet forwarding can be available.

To display the managed ports, use the following command to show the port-set list.

To set the ports priority, use the following command.


stp port{add | del} PORTS

Bridge Sets portset to be managed by STP.

add Add port number to portset (default: all ports are added).

del Deletes port number from portset.

PORTS Select slot/port number (for STP slot number always 0).


show stp port PrivilegedGlobalBridge

Shows the portset list to be managed by STP.

140

Operate CLI

Id:0900d805805d4568

Port configuration

To delete configuration of ports priority, use the following command.


stp mst port-priority MSTID_RANGE PORTS <0-240>

Bridge Spanning Tree Protocol.- Multiple Spanning Tree (802.1Q-2003/802.1s)- Sets port priority.

MSTID_RANGE MST ID: (X | X-Y) Select the MST instance number.


<0-240> Port priority value in steps of 16 (default: 128)


no stp mst port-priority MSTID_RANGE PORTS

Bridge Negate a command or set its defaults.- Spanning Tree Protocol,- Multiple Spanning Tree (802.1Q-2003/802.1s),- Sets port priority.

MSTID_RANGE

MST ID: (X | X-Y) Select the MST instance number.


141


Id:0900d805805d4568

Here is an example for the show stp port and stp port del command.

MSTP protocolMSTP protocol has a backward compatibility with STP and RSTP. If another bridge runs with STP mode and sends BDPU version of STP or RSTP, MSTP automatically changes to STP mode.

However, STP mode cannot be changed to MSTP mode automatically. If administrator wants to change network topology to MSTP mode, he has to clear previous detected protocol manually.

To configure the protocol, use the following command.

Point-to-point MAC parametersThe internal sublayer service makes available a pair of parameters that permit inspec-tion of, and control over, the administrative and operational state of the point-to-point status of the MAC entity by the MAC relay entity.

To configure the point-to-point status, use the following command.

SWITCH(bridge)# show stp port--------------------------------------------------------------- Port STP Portset-status MAC Admin-status MAC Oper-status--------------------------------------------------------------- 0/1 added enabled Off 0/2 added enabled Off 0/3 added enabled On 0/4 added enabled Off 0/5 added enabled Off 0/6 added enabled Off---------------------------------------------------------------Default portset bitmask:0x3fCurrent portset bitmask:0x3fSWITCH(bridge)#SWITCH(bridge)# stp port del 0/3SWITCH(bridge)# show stp port

--------------------------------------------------------------- Port STP Portset-status MAC Admin-status MAC Oper-status--------------------------------------------------------------- 0/1 added enabled Off 0/2 added enabled Off 0/4 added enabled Off 0/5 added enabled Off 0/6 added enabled Off---------------------------------------------------------------Default portset bitmask:0x3fCurrent portset bitmask:0x3fSWITCH(bridge)#


stp clear-detected-protocolPORTS

Bridge Clears detected protocol and try administrative pro-tocol.

PORTS Selects the port number.

142

Operate CLI

Id:0900d805805d4568

Port configuration

The parameter “true” means, the MAC is connected to a point-to-point LAN, i.e., there is at most one system attached to the LAN. The parameter “false” means, the MAC is connected to a non point-to-point LAN, i.e., there can be more than one systems attached to the LAN.

To delete the point-to-point configuration, use the following command.

Edge portsEdge ports are used for connecting end devices. There are no switches or spanning-tree bridges after the edge port.

To configure edge port mode, use the following command.

To delete the edge port mode, use the following command.

6.2.3.6 BPDU configurationBPDU is a transmission message in LAN in order to configure and maintain the config-uration for STP, RSTP and MSTP. DSLAMs with installed STP exchange their BDPU information to find the best path. MSTP BPDU is the general STP BPDU having addi-tional MST data on it’s end. MSTP part of BPDU does not rest when it is out of region.

– Hello timeHello time decides an interval time when a switch transmits BPDU. It can be config-ured from 1 to 10 seconds. The default is 2 seconds.


stp point-to-point-macPORTS {auto | force-true | force-false}

Bridge Sets point-to-point MAC (admin).

PORTS Select the port number

auto Auto detect

force-true Force to point-to-point MAC

force-false Force to shared MAC (not point-to point MAC)


no stp point-to-point-mac PORT Bridge Deletes point-to-point MAC configuration.

PORTS Select the port number


stp edge-port PORTS Bridge Sets port edge mode.



no stp edge-port PORTS Bridge Deletes port edge mode.


143


Id:0900d805805d4568

– Max ageRoot switch transmits new information every time based on information from other switches. However, if there are many switches on network, it takes lots of time to transmit BDPU. And if network status is changed while transmitting BDPU, this infor-mation is useless. To get rid of useless information, max age is identified in each information.

– Forward delaySwitches find location of other switches connected to LAN by received BDPU and transmit packets. Since it takes certain time to receive BDPU and find the location before transmitting packet, switches send packet at regular interval. This interval time is named forward delay.

g The configuration for BPDU is applied as selected in force-version. The same commands are used for STP, RSTP and MSTP.

Hello timeHello time decides an interval time when a switch transmits BPDU. To configure hello time, use the following command.

To clear configured hello-time, use the following command.

Forward delayIt is possible to configure forward delay, which means the time to take port status from listening to forwarding. To configure forward delay, use the following command.

To delete a configured forward delay, use the following command.

Max ageMax age shows how long path message is valid. To configure max age to delete useless messages, use the following command.


stp mst hello-time <1-10> Bridge Configures hello time to transmit the message in STP, RSTP, MSTP.

1-10 set the hello time (default: 2 seconds).


no stp mst hello-time Bridge Clears the time configuration that is set up to transmit route message.


stp mst forward-delay <4-30> Bridge Designate Forward-delay in STP, RSTP or MSTP,

4-30 Enter a delay time value. (default: 15 seconds)


no stp mst forward-delay Bridge Deletes a configured forward delay.

144

Operate CLI

Id:0900d805805d4568

Port configuration

g It is recommended that max age is configured less than twice of forward delay and more than twice of hello time.

To delete a configured max age, use the following command.

BPDU hopIn MSTP, it is possible to configure the number of hops in order to prevent BPDU from wandering. BPDU passes the switches as the number of hops by this function.

To configure the number of hops of BPDU in MSTP, use the following command.

To delete the configured number of hops for BPDU, use the following command.

Displaying BPDU configurationTo display a configuration for BPDU, use the following command.

Self loop detectionAlthough there is no double path in user’s equipment, loop can be caused by network environment and cable condition connected to the equipment. To avoid this problem, hiX 5635 has self loop detection to perceive that outgoing packet is got back. Through the self loop detection, you can deny packet, which comes back because it blocks the port.

To enable/disable self loop detection, use the following command.


stp mst max-age <6-40> Bridge Configures max age of route message in STP, RSTP or MSTP.

6-40 Enter a max age time value. (default: 20 seconds)


no stp mst max-age Bridge Deletes max age of configured route message.


stp mst max-hops <1-40> Bridge Configures the number of hops for BPDU, set the number of possible hops in the region.


no stp mst max-hops Bridge Deletes the number of hop for BPDU in MSTP.


show stp mst PrivilegedGlobalBridge

Shows a configuration for BPDU.

145


Id:0900d805805d4568

To display a configuration for BPDU, use the following command.

6.2.3.7 Sample configurationMSTP Configuration

The following is an example of configuring MSTP in the DSLAM.


stp self-loop-detect{enable | disable}

Bridge Enable/disable self loop detection function.


show stp self-loop-detect PrivilegedGlobalBridge

Shows status of self loop detection.

show stp self-loop-detect{all | PORTS}

Shows self loop detection status on specified ports.

all all the ports

PORTS selected port

SWITCH(bridge)# stp force-version mstpSWITCH(bridge)# stp mst enableSWITCH(bridge)# stp mst config-id map 2 1-50SWITCH(bridge)# stp mst config-id name 1SWITCH(bridge)# stp mst config-id revision 1SWITCH(bridge)# stp mst config-id commitSWITCH(bridge)# show stp mst

Status enabledbridge id 8000.000fbb26f954designated root 8000.000fbb26f954root port 0/0 path cost 0max age 20.00 bridge max age 20.00hello time 2.00 bridge hello time 2.00forward delay 15.00 bridge forward delay 15.00bridge topology change time 0:00:00bridge topology change count 0bridge topology change flag falseCIST regional root 8000.000fbb26f954 CIST path cost 0max hops 20

name 1revision 1instance vlans-------------------------------------------------------------------CIST 29,31,34,36-39,41-49,51-40962 1-28,30,32-33,35,40,50-------------------------------------------------------------------SWITCH(bridge)#

146

Operate CLI

Id:0900d805805d4568

Port configuration

6.2.4 ERP configurationEthernet Ring Protection (ERP) is a Nokia Siemens Networks proprietary protection protocol and procedure to protect Ethernet ring topologies from getting looped. The ERP provides for opti-mal loop prevention and optimal failover performance of a ring config-uration optimized for fast failure detection and recovery of Ethernet rings. ERP conver-gence time in previous versions can’t reach 50ms in large scale network. The main reason is that the speed of learning MAC addresses is not fast enough. Therefore, the basic idea for solving the problem is to use SML which means that MAC address learning is done by hardware not by software for a period of time.

The main characteristics of the ERP are the follows:

– It requires no additional underlying protection mechanism within the ring configura-tion, the complete functionality is implemented on the interface units of the system and does not require additional dedicated hardware which may raise network com-plexity and costs.

– It is a unique robustness functionality which runs on every network element involved in the ring configurations. It means each system is active part of the ring protection mechanism. Therefore it guarantees a maximum of 50 ms to switch over towards a new configuration after link or system failures.

To configure ERP domain, use the following commands, see also 14.3.3 Use case: Ethernet Ring Protection (ERP).


erp domain <1-64> {create | delete}

Global Create/delete an ERP domain, enter a domain number.

erp domain <1-64> name NAME

Assign or change the name of ERP domain, enter the domain number and domain name.

erp domain <1-64> primary-port uplink <1-4>

Assign or change the primary port of an ERP domain, enter the domain number and port number.

uplink Uplink port.

<1-4> Port index of CXU.

erp domain <1-64> secundary-port uplink <1-4>

Assign or change the secondary port of an ERP domain, enter the domain number and port number.

uplink Uplink port

<1-4> Port index of CXU.

erp domain <1-64> control-vlan VLAN

Assign or change the control VLAN of an ERP domain, enter the domain number and VLAN number.

erp domain <1-64> mode {nn | rm}

Mode of the ERP node of the CXU.

nn Normal node

rm Redundancy manager node

erp domain <1-64> wait-to-restoretime <2-720>

Wait time to verify ring integrity

147


Id:0900d805805d4568

Before adding a VLAN to an ERP domain, you should create a domain first with the command erp domain <dmain number> create.

Then use the following command to add a VLAN to the new created domain.

To delete a VLAN from ERP domain, use the following command.

To configure the SML, use the following command.

erp domain <1-64> testpacket-interval <10-500>

Global Ethernet Ring Protection;- Sets ERP domain,- Sets Test Packet Interval time.(Time interval between consecutive transmission of test packets (in steps of 10 ms))

<1-64> Domain ID (1-64)

<10-500> Test packet interval. unit: milli-second, step: 10ms, default: 200ms. Noted: Test packet interval will be adapted automatically according to CPU frequency of CXU board.

erp domain <1-64> learning-disable-time <0-500>

Time to disable MAC learning after FDB flush (in steps of 10 ms)

erp domain <1-64> lotp-trap {enable | disable}

Enable/disable “loss of test packets” traps.

erp domain <1-64> ulotp-trap {enable | disable}

Enable/disable “loss of unidirectional test packets” traps.

erp domain <1-64> multiple-rm-trap {enable | disable}

Enable/disable "multiple redundancy manager" traps.

erp domain <1-64> rm-reach-trap {enable | disable}

Enable/disable “redundancy manager accessibility (reachable)” traps.

erp domain <1-64> operator-request{switch-over | clear}

Manual switchover to secondary port.

switch-over Swap the role of secondary and primary port.

clear Disables a previous manual switch to secondary port.

erp domain <1-64> activation {activate | deactivate}

Manual activation/deactivation of a created domain.


erp traffic-vlan-addVLAN <1-64>

Global Add a VLAN to an ERP domain.

VLAN VLAN ID.

<1-64> Domain ID (1-64).


erp traffic-vlan-del{VLAN | VLANX-VLANY}

Global Remove a VLAN from an ERP domain.

VLAN VLAN ID

VLANX-VLANY VLAN ID range.


148

Operate CLI

Id:0900d805805d4568

Port configuration

To display a VLAN or current SML state and the duration of SML learning, use one of the following commands.

To display an ERP domain, use the following command.


erp sml activate(enable | disable)

Global Configures the SML activation.

enable Enables SML

disable Disables SML.

erp sml time<10-1000>

Configures the SML time.

10-1000 SML taking time.

Unit milisecond

Step 10ms

Default 200ms.


show erp traffic-vlan all Global Shows all VLANs.

show erp traffic-vlan domain<1-64>

Shows VLANs of a certain ERP domain, enter the domain number.

show erp sml Shows running system information.- Ethernet Ring Protection,- Hardware MAC learning.


show erp domain{<1-64> | all}

GlobalPrivileged

Shows the specified ERP domain.

149


Id:0900d805805d4568

6.3 Configuring DSL portThe hiX 5622/25/30/35 R2.8 provides both Internet and telephone communication through existing telephone line with DSL technology.

6.3.1 Understanding modulation of DSL signalDSL communication system requires the technique to convert a digital signal into an analog signal and return the analog signal into the digital signal. There are three types of modulation commonly in DSLAMs: QAM (Quadrature Amplitude Modulation), CAP (Carrierless Amplitude and Phase), and DMT (Discrete Multitone).

Figure 31 shows the process of signal transmission in DSL system.

Figure 31 Transmission in DSL system

In the picture above, modulator converts a digital signal into an analog signal to be sent over the channel. Also, the analog signal is returned into the digital signal at the demod-ulator. First, QAM is described in the following Section.

6.3.1.1 QAM modulationQAM (Quadrature Amplitude Modulation) classifies digital signal into certain amount and changes it to carrier wave and phase to modulate into a frequency component. Classified symbols during certain time are transmitted with certain bits and transmitted bits are marked as coordinates in QAM constellation. The classified symbols by regular interval that is notated as bit are called constellation. If a constellation is 2, symbol is notated as 2 bits. Digital signal consists of 0 and 1. So, 2 bits can be notated as 00, 01, 10, and 11. To mark 2 bits as signal, four coordinates are required.

That is, all possible numbers of 2 bits can be made by 0 and 1. If a symbol is transmitted as 4 bits, all possible combinations of 0 and 1 are 16. That can be notated as 16 coor-dinates. QAM can be divided according to constellation. If constellation is 2, it is called 4-QAM because total number of 22 =4 can be made with 0 and 1. If constellation is 4, total number of 24=16 can be made. So, it is called 16-QAM.

That is, kinds of QAM can be counted with 2-constellation QAM.

150

Operate CLI

Id:0900d805805d4568

Port configuration

Figure 32 shows 4-QAM and 16-QAM.

Figure 32 4-Bit QAM and 16-Bit QAM

Figure 33 shows the process of 4-bit QAM modulation.

Figure 33 4-Bit QAM modulation

As the above picture shows, the 4 bits of signal to be transmitted are mapped only one point on QAM constellation. The transmitted signal is transmitted to DSL equipment again through connected channel. And the DSL equipment can mark this signal on QAM constellation as the same way. However, noise and distortion in the channel and com-promised electronics in the transmitter and receiver prevent the point projected onto the receiver’s constellation from falling directly on the top of a true point. So, the receiver selects the closest true point to the projected point as the one the transmitter is more likely to use to generate the QAM constellation.

If too much noise is present at the receiver, the point projected on the constellation may be closer to the wrong known point than the accurate known point, resulting in an error estimating the recovered symbol. In this case, the distance between the points in the 4

151


Id:0900d805805d4568

QAM constellation is greater than the distance between the points in the 16-QAM con-stellation. Consequently, in the same channel more noise is necessary to cause an error with using 4-QAM than with using 16-QAM. Or 16-QAM requires a greater SNR (Signal to Noise Ratio) than 4-QAM requires. Therefore, you can take a larger QAM when there is higher SNR because there must be less noise. But you would better take a smaller QAM when there is lower SNR.

• Select the QAM type according to the size of SNR– recommend selecting a larger QAM in case of higher SNR– recommend selecting a smaller QAM in case of lower SNR.

In addition, the more bits are transmitted in certain time, the higher the transmit rate is. So, the bigger the constellation is, the higher the transmit rate is. Therefore, 32-QAM is faster than 16-QAM, and 16-QAM is faster than 4-QAM regarding the transmit rate of signal.

• Transmit rate according to type of QAM– 4-QAM < 16-QAM < 32-QAM

QAM is divided into 2-band, 3-band, and 4-band according to the band area. 2-band modulates signals of downstream and upstream areas. 3-band modulates signals of two downstream and one upstream area. And, 4-band modulates signals of two downstream and two upstream areas. Either 3-band or 4-band have faster transmit rate than 2-band because they can process more signals at once than 2-band.

Figure 34 2-Band QAM


152

Operate CLI

Id:0900d805805d4568

Port configuration


6.3.1.2 DMT modulationDMT builds on some of the ideas of QAM. Imagine, you have more than one constella-tion encoder. Each encoder receives a set of bits that are encoded by using a constel-lation encoder as described in the previous sections. In this basis, QAM is referred to as single carrier and DMT is referred to as multi carrier

In DMT modulation, frequency channel is named frequency bins, bins, tone, DMT tones, and sub-channels.

Figure 37 shows the process of DMT modulation.

153


Id:0900d805805d4568

Figure 37 DMT modulation

QAM using single carrier has advantage of relatively easy chip implementation and low power consumption, whereas it is impossible to control carrier about exterior noise dif-ferently came from each frequency in detail. However, QAM modulation has been used for many years and it is very stable and responsible.

Meanwhile, DMT using multi carrier can control carrier about exterior noise differently came from each frequency in detail, whereas the chip implementation is more compli-cated than QAM and power consumption is quite high. At the same time, it is possible to process many digital signals. Although its fundamentals are complicated, the pro-cessing is faster than QAM.

154

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.2 Configuring ADSL portADSL port configuration task list

g Only "adsl" commands are to use for ADSL port configuration if the ADSL cards are based on Wintegra WinArrow117 chipset.

Only "xdsl" commands are to use for ADSL port configuration if the ADSL cards are based on Convergate-D chipset.

The following sections introduce how to configure features on an ADSL port:

• Enabling LRE on ADSL port • ADSL DELT • SELT • Configuring ADSL line-config profile • Configuring ADSL alarm-config profile • Configuring hiX 5622/25/30/35 R2.8 to operate under ATM environment • Virtual channel • DSL channel use • VC rate limit • OAM • ATM service category • Rate limit • IRL • Profile configuration • Port mapping • Displaying IRL configuration • IRL configuration example • ORL

6.3.2.1 Enabling LRE on ADSL portBy default, all user ports are locked, to enable/disable and configure (Long Reach Ether-net) LRE ports, use the following commands in privileged Bridge mode.


lre PORTS adsl line-config pmsf(l3tol0 | l0tol2 | l3forced | l2tol0)

Bridge Long Reach Ethernet configuration.

PORTS LRE port or slot number (1/1-1/8 | s1).


line-config ADSL line config profile.

pmsf Power managment state forced.

l3tol0 Force state L3 (idle) to L0 (data).

l0tol2 Force state L0 (data) to L2 (low-power).

l3forced Force state L3 (idle).

l2tol0 Force state L2 (lowpower) to L0 (data).

155


Id:0900d805805d4568

lre PORTS adsl line-config gs action (startup | spectrumReverb | analogLb | digitalLb | atmLp | spectrumMedley | spectrumPilot | spectrumCMtpr | spectrumRMtpr | hybridLossTest | rcvLinearityTest | rcvFilterTest | rcvPowerPerBinTest | idleNoisePerBinTest | totalIdleNoiseTest)

Bridge Long Reach Ethernet configuration

PORTS LRE port or slot number (1/1-1/8 | s1)

adsl ADSL configuration

line-config ADSL line config profile

gs ADSL special configuration

action Defines gsAction

startup startUp

spectrumReverb spectrumReverb

analogLb analogLb

digitalLb digitalLb

atmLp atmLp

spectrumMedley spectrumMedley

spectrumPilot spectrumPilot

spectrumCMtpr spectrumCMtpr

spectrumRMtpr spectrumRMtpr

hybridLossTest hybridLossTest

rcvLinearityTest rcvLinearityTest

rcvFilterTest rcvFilterTest

rcvPowerPerBinTest rcvPowerPerBinTest

idleNoisePerBinTest idleNoisePerBinTest

totalIdleNoiseTest totalIdleNoiseTest

lre PORTS adsl line-config rfi-band INDEX (enable | disable)

Long Reach Ethernet configuration




rfi-band RFI band configration

INDEX RFI band index (1-32)

enable enable

disable disable

lre PORTS adsl line-config rfi-band INDEX restore

Long Reach Ethernet configuration




rfi-band RFI band configration

INDEX used RFI band indeces

restore restore info after reboot


156

Operate CLI

Id:0900d805805d4568

Port configuration

lre adsl-atm-bandwidth-check(enable | disable)

Bridge Long Reach Ethernet configuration. Enable/disable the ADSL and ATM bandwidth checking function.

adsl-atm-bandwidth-check

ADSL and ATM bandwidth checking function.

enable Enables bandwidth check.

disable Disables bandwidth check.

lre PORTS adsl adsl-atm-band-width-overbook <100-500>

Long Reach Ethernet configuration. Configures the adsl and atm bandwidth check overbooking.

PORTS LRE port or slot number (1/1-1/8 | s1).


adsl-atm-bandwidth-overbook

Bandwidth check overbooking.

<100-500> Percent

lre slot SLOT port PORTS Long Reach Ethernet configuration.

slot LRE Slot.

SLOT LRE slot number (1-17).

port LRE PORT.

PORTS LRE port number (48 | 72).

adsl rfi-band create BANDNAME <1-512> <1-512>

GlobalBridgePrivileged

ADSL configuration. Creates ADSL RFI band, enter band name.

rfi-band ADSL RFI band.

create Create band.

BANDNAME Enter Band-name.

<1-512> Start tone index.

<1-512> End tone index.

adsl rfi-band delete <1-32> ADSL configuration. Deletes RFI band, enter band index (1-32).

rfi-band ADSL RFI band

delete Deletes band.

<1-32> Enter band index.

adsl rfi-band restore BANDNAME <1-512> <1-512> <1-32>

ADSL configuration.

rfi-band ADSL RFI band

restore Restore band.

BANDNAME Enter Band-name

<1-512> Start tone index.

<1-512> End tone index.

<1-32> Used index in Rfi-Table.


157


Id:0900d805805d4568

Use the following command to display the adsl and atm bandwidth checking and over-booking configuration

Following example shows how to disable and enable LRE ports:

SWITCH(bridge)# port lre 2/1 disable

SWITCH(bridge)# port lre 2/1-2/24 disable

SWITCH(bridge)# port lre 2/1 enable

SWITCH(bridge)# port lre 2/1-2/24 enable

To apply a configured line-config profile to a specific port or slot, use the following command.

g You can find how to configure a line-config profile in Chapter 6.3.2.4 Configuring ADSL line-config profile.

Example:SWITCH (bridge)# lre 1/1-1/72 adsl line-config profile test

6.3.2.2 ADSL DELTITU-T G.992.3 and G.992.5 present new line diagnostics procedures that enhance the ADSL service maintenance and diagnostics defined in ITU-T G.992.1. VDSL2 is defined in ITU-T G.993.2.

Double-ended line test can be used to get an overview of the loop situation (attenuation, quiet line noise, etc.) while the measurement is being done. It can also be used if the loop conditions do not allow the achievement of data mode (show time). In the event of the inability of a line to get into data mode, DELT is typically activated by the operator of the system to troubleshoot the problem.

There are two types of DSL line sync such as normal data mode and DELT (loop diagnostic) mode.– Normal data mode: Normal service mode between ATU-C and ATU-R– DELT mode: Double-ended line test allows the immediate measurement of line

conditions at both ends of the line without requiring maintenance technicians to attach test equipment to the line. The resulting information helps to isolate the location (inside the premises, near the customer end of the line, or near the network


show lre adsl-atm-bandwidth-check Bridge Shows running system information;- Long Reach Ethernet configuration,- ADSL and ATM bandwidth checking function.

show lre PORTS adsl adsl-atm-bandwidth-overbook

Display the ADSL and ATM bandwidth check over-booking.


lre PORTS adsl line-config profile PROFILE

Bridge Configures an LRE (Long Reach Ethernet) and ADSL line-config profile.

PORTS Enter LRE port or slot number {1/1-1/8 I s1}.

PROFILE Enter profile name.

158

Operate CLI

Id:0900d805805d4568

Port configuration

end of the line) and the sources (crosstalk, radio frequency interference and bridged tap) of impairments.

The hiX 5622/25/30/35 R2.8 supports integrated double-ended line test for VDSL2, ADSL2 and ADSL2+. This enables you to check the characteristics of the line for trou-bleshooting or evaluation purposes. To do a DELT the CPE at the other end of the line has to support also this feature.

DELT can only be started if the related line is in administration state “locked”, because DELT is a service interrupting test mode.

DELT has the advantage over both the narrowband test function line check and the broadband test function SELT in that it tests in both the upstream and downstream direc-tions. Table 23 lists the DELT measurements. You can get more information in the telecom-munication standards ITU-T G.992.1, G.992.3, G.992.5, G.993.2 and G.997.1. The abbreviations used in this standards are shown in brackets in Table 23.

At the SNMP interface a command can be used to retrieve the current data. This command requests the line data for one line. The channel characteristics can be stored

Measurement Description

Status Initialization status: The result of the last training attempt.

Line attenuation [dB] Line attenuation (LATN): The measured difference between the total power transmitted and the total power received over all subcarriers during diagnostics and initialization.

Signal attenuation [dB] Signal attenuation (SATN): The measured difference between total power transmitted and the total power received over all subcarriers during show time.

SNR margin [dB] SNR margin (SNRM): The signal-to-noise ratio for the line.

Channel [dB] Channel characteristics per subcarrier, logarithmic (Hlog): This measurement shows the channel transfer function (absolute value) of the loop per subcarrier in a logarithmic representation. This function is a quantity that is related to the values of the (complex) source and load impedance.

Quiet line noise (QLN) [dBm/Hz]

This measurement shows the root mean square (effective noise level) for each subcarrier. QLN cannot be measured once the line is trained. Use this value to analyze crosstalk.

Signal-to-Noise Ratio (SNR) [dB]

This measurement provides the actual signal-to-noise ratio (SNR) in dB for each subcarrier. This provides an indication of the maximum possible ADSL transmission rate. The maximum ADSL transmission rate is calculated by the system. The graph can be updated as the current SNR changes due to crosstalk and noise conditions in the binder.

Attain rate [kBit/s] Maximum attainable data rate (ATTNDR): The maximum data rate you can expect to achieve on the line.

Output Power [dBm] Actual aggregate transmit power (ACTATP): The total power transmitted at the U-C reference point at the moment.

Last state transmitted Transmission state: This parameter represents the last successfully transmitted initialization state in the last full initialization performed on the line.

Table 23 DELT measurements

159


Id:0900d805805d4568

in linear or logarithmic form. The linear representation is suitable for a numerical pro-cessing. The logarithmic representation is suitable for the graphical representation.

The EM draws the logarithmic channel characteristics and the quiet line noise together as lines in a single diagram with the subcarrier (the bins) or alternatively the frequency.

You can export the data for a single port to the FTP server using the OS workstation. This data is then available for analysis and troubleshooting.

Use the following command to enable DELT mode, see also 14.3.2 Use case: DELT for ADSL:

Use the following command to display DELT configuration status:

To view DELT data, use following command.


lre PORTS adsl line-config delt {force | inhibit}

Bridge Configures an LRE (Long Reach Ethernet) and ADSL line-config profile.


force Force mode operation (for line test).

inhibit Inhibit mode operation (for normal data mode).


show lre PORTS adsl line-table Bridge Display DELT config status PORTS..



show lre PORTS adsl physical (atuc|atur) detail

BridgePriviledged Global

Shows ADSL physical table information, enter the port number and ATU value.

PORTS LRE port number.

show lre PORTS adsl physical (atuc | atur)

Display short physical status info, enter the port number and ATU value.



physical ADSL physcial table information.

atuc ADSL ATUC physical table.

atur ADSL ATUR physical table.

160

Operate CLI

Id:0900d805805d4568

Port configuration

The following is an example of displaying the result of the line testing with DELT using the hlin option:

show lre PORTS adsl physical(atuc | atur) delt(scale | hlin | hlog | hlogmt | qln | qlnmt | snr | snrmt | snrm | latn | attndr | actatp | lst | satn | all)

BridgePrivileged Global

Display DELT status info, enter the port number and ATU value.

PORTS Enters LRE port or slot number {1/1-1/8 I s1}.


physical ADSL physcial table information.

atuc ADSL ATUC physical table.

atur ADSL ATUR physical table.

delt Dual Ended Line Testing information.

scale H(f) linear representation scale per subcarrier.

hlin H(f) linear representation per subcarrier (Hlin).

hlog H(f) logarithmic representation in dB per subcarrier (Hlog).

hlogmt H(f) logarithmic measurement time.

qln Quiet Line Noise PSD in dB per subcarrier (QLN).

qlnmt Quiet Line Noise PSD measurement time.

snr Signal to Noise Ratio per subcarrier.

snrmt Signal to Noise Ratio measurement time.

snrm Signal to Noise Ratio Margin.

latn Line attenuation.

attndr Attainable net date rate.

actatp Actual aggregate transmit power.

lst Last state transmitted.

satn Signal attenuation.

all Shows all DELT results.


161


Id:0900d805805d4568

In the figure above, the values are displayed in form of a table with four columns for every displayed subcarrier (three subcarriers per line).

The columns have the following meanings, see also standards ITU-T G.992.3 and ITU-T G.997.1:column 1: Subcarrier index (i) column 2: calculated complex value H(f)

absolute value of Hlin (linear representation of the calculated complex value, can also bee shown as a graphic in the ACI register card “DELT”)

column 3: a(i) column 4: b(i)

Depending of the parameters used in the CLI command, the following values can be cal-culated: • The channel characteristic function H(f) corresponds to the frequency response of

the channel (i.e. amplitude magnification and phase shift) and is related to the values of the (complex) source and load impedance. H(f) can be used for analyzing the physical copper loop condition. – Hlin:

Linear representation of the channel characteristic function H(f) per subcarrier – Hlog:

Logarithmic representation in dB of the channel characteristic function H(f) per subcarrier

– Hlogmt: H(f) logarithmic measurement time. This parameter contains the number of symbols used to measure the Hlog(f) values.

162

Operate CLI

Id:0900d805805d4568

Port configuration

– Scale: H(f) linear representation scale per subcarrier. This parameter is the scale factor to be applied to the Hlin values.

• QLN: quiet line noise PSD in dB per subcarrier • QLNMT: quiet line noise PSD measurement time

6.3.2.3 SELTThe ADSL card supports single-ended line test. Table 24 lists the Single-Ended Line Test (SELT) measurements.

Single-ended line test is an automatic test method which tests DSL loop from central office end or subscriber end, and it needs no equipment and technical support at sub-scriber end.

Figure 38 SELT Solution describes the structure:

Figure 38 Single-Ended Line Test

SELT process

1. Operators send test command from ACI to DSLAM via SNMP;2. SNMP agent in CXU processes the command and forwards it to SELT module in

CXU;3. SELT module in CXU forwards the command to IU;4. SELT data collector in IU collects test data and sends them to CXU;5. SELT module in CXU transmits test data to SELT server;6. SELT server converts test data to parameters and sends them to SELT module in

CXU, and sends message to ACI that test results are ready;7. SELT module in CXU transmits parameters to IU;8. ACI gets test results from SELT server and displays them to operators.

ACI SELT Server

DSLAM

snmp

XoMsg

Private Interfaceon TCP Socket

CXU

IU

Snmp Agentsmux

Selt Module

comd

Com Agent

SELT Data Collection

comMsg

163


Id:0900d805805d4568

SELT measurements

Operational scenariosThere are three major operational scenarios where SELT can be used by the operator. • Post-DSLAM installation

In this scenario, no customer premise equipment (CPE) has been installed, but the physical loop has been pre-wired to the DSLAM. SELT can provide simple verifica-tion that the DSLAM port is physically connected to a physical loop and provide loading coil detection.

• Pre-DSL Service ActivationNo CPE has been installed, but the physical loop has been pre-wired to the DSLAM and verified through post-DSLAM installation tests. The objective is loop pre-quali-fication (line characterization, noise measurement, etc.) for the purpose of estimating what data rate the loop is capable of supporting.

• Post-DSL Service ActivationA CPE is installed and satisfactory performance was previously achieved, but now a problem has arisen. Possible reasons for service disruption include disconnection of the loop, a physical break in the loop, changes in loop noise, equipment failures, etc. SELT can be used to compare the current loop topology estimate against previous saved estimates

6.3.2.4 Configuring ADSL line-config profileFor hiX 5622/25/30/35 R2.8, it is possible to adjust the policy to the service port by des-ignating it as a profile. The profile that user can configure is the configuration applied to ADSL line and the configuration for alarm which informs the errors with SNMP trap. The configuration applied to ADSL line is named line-config profile. Line-config profile is the policy configuring the transmit rate, SNR margin, interleave-delay, and so on. Such a function is convenient for ISP business to apply the service according to the level. It is possible to adjust the policy designated as a profile without configuring each port according to the subscriber’s level, just apply the profile to the desired ports.

Measurement Descriptions

Loop Length Loop length in feet. Optional in feet or meter. Precision: - for 0 to 1000 ft: precision about 100 ft- for 1000 ft to 6000 ft: precision about 10% - for more than 6000 ft to 12000 ft: precision about 20% - for more than 12000 ft to 18000 ft: precision about 30%

Open/Short Detection Loop Termination: Whether the loop is open or short circuit.

Wire Gauge Wire gauge (awg) is determined

DS Data Rate [kBit/s] estimated downstream data rate of the modem in ADSL2+ mode

US Data Rate [kBit/s] estimated upstream data rate of the modem in ADSL2+ mode

CrosstalkDB this parameter indicates the estimated disturber types fitting to the measured noise PSD (HDSL, T1, ADSL Full-Rate, ISDN (T1.601) or Unknown) together with the related power level.

Table 24 SELT measurements

164

Operate CLI

Id:0900d805805d4568

Port configuration

Some line-config profiles may be configured according to xTU-C and xTU-R respec-tively. xTU-C (xDSL Terminal Unit Center) means hiX 5622/25/30/35 R2.8 CO as central service and xTU-R (ADSL Terminal Unit Remote) means CPE as subscriber’s equipment. When configuring line-config profile, xTU-C means the direction from CO to CPE, and xTU-R means the direction from CPE to CO.

To configure a line-config is as follows:

Step 1

• Creating a new ADSL line-config profile

Step 2Configure the line-config profile as you need.

• Setting ADSL rate mode • Configuring SNR margin • Setting transmit rate • Setting interleave-delay • Choosing fast/interleaved channel

Step 3

• Assigning the configured line-config profile to a port

Creating a new ADSL line-config profileTo create a line-config profile, use the following commands, see also 14.3.23 Use case: VDSL2 to ADSL2+ fallback.

165


Id:0900d805805d4568

g If it is not initiated by configuring a line card, an ADSL port cannot be configured

in order to remove the port in line-config profile, use the following command.In order to configure static line-config assigned to dynamic line-config profile, you must remove it from the profile.

To copy a line-config profile, use the following command.

Following example shows how to create and delete a line-config-profile with name ‘test’.

SWITCH(bridge)# adsl add line-config-profile test

SWITCH(bridge)# show adsl line-config-info

---------------------------------------------------------------PROFILE NAME display port number related to application


adsl add line-config-profile PROFILE (adsl | adsl-isdn | adsl2 | adsl2-isdn | adsl2-i | adsl2-j | adsl2-m | adsl2plus | adsl2plus-isdn | adsl2plus-i | adsl2plus-j | adsl2plus-m | dynamic)

Bridge ADSL configuration;- Add an ADSL profile,- ADSL line config profile,- Create a profile-name.

adsl G.992.1 Annex A - Adsl Over POTS

adsl-isdn G.992.1 Annex B - Adsl Over ISDN

adsl2 G.992.3 Annex A - Adsl2 Over POTS

adsl2-isdn G.992.3 Annex B - Adsl2 Over ISDN

adsl2-i G.992.3 Annex I - All Digital Mode Adsl2 Over POTS

adsl2-j G.992.3 Annex J - All Digital Mode Adsl2 Over ISDN

adsl2-m G.992.3 Annex M - Extended upstream Adsl2 Over POTS

adsl2plus G.992.5 Annex A - Adsl2Plus Over POTS

adsl2plus-isdn G.992.5 Annex B - Adsl2Plus Over ISDN

adsl2plus-i G.992.5 Annex I - All Digital Mode Adsl2Plus Over POTS

adsl2plus-j G.992.5 Annex J - All Digital Mode Adsl2Plus Over ISDN

adsl2plus-m G.992.5 Annex M - Extended upstream Adsl2Plus Over POTS

dynamic dynamic -dynamic profile


adsl delete line-config-profile PROFILE

Bridge Deletes an ADSL profile, enter the profile name.


adsl copy line-config-profilePROFILE PROFILE

Bridge Copy a line-config profile.

PROFILE Source ADSL Line Profile Name (e.g. DEFVAL, DEFVAL_ISDN),

PROFILE Target ADSL Line Profile Name.

166

Operate CLI

Id:0900d805805d4568

Port configuration

---------------------------------------------------------------DEFVAL s4DEFVAL_ISDN test===============================================================

SWITCH(bridge)# adsl delete line-config-profile test

SWITCH(bridge)#

Setting ADSL rate modeAs ADSL2+, hiX 5622/25/30/35 R2.8 makes sync for communicating between CO and CPE and detects an appropriate rate by monitoring a line status. The criteria detecting the line status is the shift SNR margin and shift time.

There are 3 ways of monitoring the line status to decide the rate. First, the fixed type is the way of using the configured rate until sync is disabled. Therefore, the shift SNR margin and shift time are useless for this case. Second, adapt-at-startup type is the way of configuring the rate if the shift SNR margin continues during the shift time when the first sync is realized by monitoring the line status time. Once the rate is decided, there’s no way of changing the rate by monitoring a line status. Lastly, adapt-at-runtime is the way of changing the rate whenever a shift SNR margin lasts for shift time by monitoring a line status after completing sync.

To configure the rate-mode in a line-config profile, use the following command.

The following example shows the method of setting ADSL rate mode and displays current setting (Applied to ADSL2+):

When SNR margin is reduced or rises, decreasing or increasing the transmit rate may keep the physical connection being up. For hiX 5622/25/30/35 R2.8, after configuring the shift SNR margin and shift time, if the shift SNR margin lasts for shift time, the rate is changed with SNR margin changing.

To control the transmit rate according to the changing SNR margin, control it when SNR margin is lasting for certain amount of time.

To set how much time of line-config profile should last to control the transmit rate, use the following commands.


adsl line-config-profile PROFILE atuc rate-mode {fixed | adapt-at-startup | adapt-at-runtime}

Bridge ADSL ATUC configuration, configure the transmit rate mode.

adsl line-config-profile PROFILEatur rate-mode(fixed | adapt-at-startup | adapt-at-runtime)

ADSL ATUR configuration, configure the transmit rate mode.

SWITCH(bridge)# adsl line-config-profile test atuc rate-mode adapt-at-runtime

SWITCH(bridge)# show adsl line-config-profile test

167


Id:0900d805805d4568

g The unit of up/downshift time is second.

Configuring SNR marginIn digital and analog communication, Signal to Noise Ratio (SNR) is the ratio of the signal divided by a noise. When the signal strength is referred as Vs and the noise strength is referred as Vn, the formula can be “SNR(dB) = 20 log10(Vs/Vn)”. When the signal strength is same with or less than the noise strength, stable communication can not be done. Therefore, SNR must not be minus or 0. But if SNR is 0, you have to increase signal strength or decrease noise strength. The transmit rate of ADSL line depends on SNR. But, the line status must always vary. Thus, you need to configure the transmit rate of ADSL line that can be decided according to the changing line status. If the noise suddenly increases, SNR is decreased and communication becomes unsta-ble. Therefore, you should configure the transmit rate for decreased SNR when the noise suddenly increases. Then there will not be a problem with communication although the noise always varies.

When you set an estimate SNR, the difference between the estimate SNR and current SNR is called the SNR margin. hiX 5622/25/30/35 R2.8 applies the SNR margin to the transmit rate.

If you set an SNR margin as 6, the difference that subtracts 6 from current SNR will be applied to the transmit rate as the below picture.


adsl line-config-profile PROFILEatuc min-dnshift-time <0-16383>

Bridge Minimum time of ATU-C that the current margin is below downshift SNR margin before a downshift occurs. In case that CADSL mode is not present, the value will be 0. Unit: second.

adsl line-config-profile PROFILE atuc min-upshift-time <0-16383>

Minimum time of ATU-C that the current margin is above upshift SNR margin before an up shift occurs. In case that CADSL is not present, the value will be 0. Unit: second.

adsl line-config-profile PROFILEatur min-dnshift-time <0-16383>

Minimum time of ATU-R that the current margin is below downshift SNR margin before a downshift occurs. In case that RADSL mode is not present, the value will be 0. Unit: second.

adsl line-config-profile PROFILEatur min-upshift-time <0-16383>

Minimum time of ATU-R that the current margin is above upshift SNR margin before an up shift occurs. In case that RADSL is not present, the value will be 0. Unit: second.

168

Operate CLI

Id:0900d805805d4568

Port configuration

Figure 39 Transmit Rate according to SNR Margin

If you think that the noise may change, it is better to configure a large SNR margin. However, if you set too large SNR, the transmit rate will slow down and the network state may become unstable.

To set the SNR margin of ATU-C, use the following commands.

g The default value of target SNR margin and maximum SNR margin of ATU-C is 6dB and 31dB individually. The unit of SNR margin is dB/10.

The following example shows how to configure the SNR and display the current settings:

To set the SNR margin of ATU-R, use the following commands.


adsl line-config-profile PROFILE atuc target-snr-mgn <0-310>

Bridge Sets the Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc max-snr-mgn <0-310>

Sets the maximum Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc min-snr-mgn <0-310>

Sets the minimum Signal/Noise margin of ATU-C.

adsl line-config-profile PROFILE atuc dnshift-snr-mgn <0-310>

Sets the Signal/Noise margin for rate downshift of ATU-C.

adsl line-config-profile PROFILE atuc upshift-snr-mgn <0-310>

Sets the Signal/Noise margin or rate upshift of ATU-C.

SWITCH(bridge)# adsl line-config-profile test atuc dnshift-snr-mgn 30


169


Id:0900d805805d4568

g The default value of target SNR margin of ATU-R is 6dB.

Configuring PSDTo make upstream Power Spectral Density (PSD) mask selection of ATU-R, the follow-ing command is used when writing configuration (write memory).

To add custom PSD mask breakpoint pair of ATU-C, use the following command.

To delete custom PSD mask breakpoint pair of ATU-C, use the following command.


adsl line-config-profile PROFILEatur target-snr-mgn <0-310>

Bridge Sets Signal/Noise margin of ATU-R.

<0-310> Signal/Noise Margin (dB/10).

adsl line-config-profile PROFILE atur max-snr-mgn <0-310>

Sets maximum acceptable Signal/Noise Margin of ATU-R.


adsl line-config-profile PROFILE atur min-snr-mgn <0-310>

Sets minimum acceptable Signal/Noise Margin of ATU-R.


adsl line-config-profile PROFILE atur dnshift-snr-mgn <0-310>

Sets Signal/Noise margin for rate downshift of ATU-R.


adsl line-config-profile PROFILE atur upshift-snr-mgn <0-310>

Sets Signal/Noise margin for rate upshift of ATU-R.



adsl line-config-profile PROFILE atur upstream-psd-mask-selection {adlu-eu-32 | adlu-eu-36| adlu-eu-40| adlu-eu-44| adlu-eu-48| adlu-eu-52| adlu-eu-56| adlu-eu-60| adlu-eu-64 | extended | jj-100 | standard}

Bridge Make upstream PSD mask selection (only for ANNEX M/J). Enter the profile name."extended", "jj-100" and "standard" are not yet sup-ported.


adsl line-config-profile PROFILE atuc custom-psd-mask add <32-511> <0-190>

Bridge ADSL atuc configuration, add custom psd mask break-point pair. Enter the profile name.

32-511 Bin number from GsTxStartBin to GsTxEndBin for line config profile.

0-190 User-defined psd mask level 0...-95dBm/Hz (coded as 0...190) in steps of 0.5 dBm/Hz.


adsl line-config-profile PROFILEatuc custom-psd-mask delete<32-511>

Bridge Deletes custom PSD mask breakpoint pair. Enter the profile name.

32-511 Bin number in custom-psd-mask table

170

Operate CLI

Id:0900d805805d4568

Port configuration

To delete custom PSD mask breakpoint pair of ATU-C by index, use the following command.

To enable/disable user defined PSD Mask breakpoint pair, use the following command.

To set maximum nominal PSD for downstream of ATU-C, use the following command.

To set maximum nominal aggregate transmission power for downstream of ATU-C, use the following command.

Setting transmit rateIt is possible to set the transmit rate of passing the interleave process. To set the transmit rate for interleave channel, use the following commands.


adsl line-config-profile PROFILE atuc custom-psd-mask delete-index <1-32>

Bridge Deletes custom PSD mask breakpoint pair by index. Enter the profile name.

<1-32> PSD mask index.


adsl line-config-profile PROFILEgs use-custom-psdmask(enable | disable)

Bridge Enables/disable user defined PSD Mask break-point pair. Enter the profile name.


adsl line-config-profile PROFILEatuc maxnompsd <300-600>

Bridge Sets maximum nominal PSD for downstream. Enter the profile name.

300-600 PSD range PSD from -30dBm/Hz to -60dBm/Hz in steps of 0.1 db.


adsl line-config-profile PROFILEatuc maxnomatp <0-255>

Bridge Sets maximum nominal aggregate transmission power for downstream. Enter the profile name.

0-255 Ranges from 0(0.0) dBm to 255(25.5) dBm in steps of 0.1 dB

171


Id:0900d805805d4568

g In line-config profile, user can set adsl fixed rate mode for Conexant interface card, because of the limitation of Conexant chipset, user should set same value for min-tx-rate of ATUR/ATUC and max-tx-rate of ATUR/ATUC. For fixed rate mode on Infinion card, user only need to set min-tx-rate as the fixed rate. By default, the ADSL rate mode is “rate adaptive”.

g The unit of transmit rate is kbps.

Following example shows how to configure the transmit rate and display the current set-tings:

Setting interleave-delayThere is an interleave process to correct data errors before modulating the digital signal into the analog signal. The interleave process gathers a certain size of data, re-orga-nizes the gathered data, and transmits the data divided by a certain size. After dispers-ing errors, the size of error becomes smaller so that you can correct the error easily.

On the other hand, the interleave process avoids errors with enhanced correction, but may slow down the transmit rate, because it takes some time to gather packets. There-fore you need to consider user’s condition before using the interleave process.

You can configure the interval of interleave process during modulation. This interval is called an interleave-delay. By configuring the interleave-delay, you can avoid transmis-sion delay which is caused by waiting data gathered.


adsl line-config-profile PROFILE atuc max-tx-rate {fast | interleaved} <32-32736>

Bridge Sets max. ATU-C transmit rate (fast or interleave).

adsl line-config-profile PROFILE atuc {fast | interleaved} min-tx-rate <32-32736>

Sets min. ATU-C transmit rate (fast or interleave).

adsl line-config-profile PROFILE atuc max-tx-rate <32-32736>

Sets max. ATU-C transmit rate.

adsl line-config-profile PROFILE atuc min-tx-rate <32-32736>

Sets min. ATU-C transmit rate.

adsl line-config-profile PROFILE atur {fast | interleaved} max-tx-rate <32-3520>

Sets max. ATU-R transmit rate (fast or interleave).

adsl line-config-profile PROFILE atur {fast | interleaved} min-tx-rate <32-3520>

Sets min. ATU-R transmit rate (fast or interleave).

adsl line-config-profile PROFILEatur max-tx-rate <32-3520>

Sets max. ATU-R transmit rate.

adsl line-config-profile PROFILEatur min-tx-rate <32-3520>

Sets min. ATU-R transmit rate.

adsl line-config-profile PROFILEatuc rate-chan-ratio <0-100>

Sets ADSL ATU-C rate channel ratio.

adsl line-config-profile PROFILEatur rate-chan-ratio <0-100>

Sets ADSL ATU-R rate channel ratio.

SWITCH(bridge)# adsl line-config-profile test atuc interleaved max-tx-rate 1024


172

Operate CLI

Id:0900d805805d4568

Port configuration

To set the interleave-delay in a line-config profile, use the following commands.

Example:

g It is also possible to configure an interleave-delay per ADSL port.

Choosing fast/interleaved channelThere is an interleave process to correct data error before modulating digital signal into analog signal. Interleave gathers certain size of data, re-organize the gathered data, and transmits the data divided by certain size. In the below image, you can see disperse errors by re-organizing gathered data through Interleave. After dispersing errors, the size of error becomes smaller so that you can correct the error easily.By the way, Inter-leave prevents error by enhanced correction but may slow down transmit rate because packets are gathered. Therefore you need to consider user’s condition to configure mode.

If you skip the interleave process, the error correction will not be done well, whereas the transmit rate of data becomes faster and the latency will be lower. You can skip the inter-leave process and configure it before transmitting data.

To skip the interleave process, use the following command.

Setting ADSL mode, ADSL2 or ADSL2+. You should set it based on CPE, generally, ADSL CPE use multimode, ADSL2+ CPE use adsl2PlusAuto

Example:

Setting transmission modeFor hiX 5622/25/30/35 R2.8, the type of DMT mode can be configured. There are FDM (Frequency Division Multiplexing) and EC (Echo Cancellation) in channel construction method.


adsl line-config-profile PROFILE atuc max-interleave-delay <0-63>

Bridge Sets an interleave-delay of ATU-C. Unit : millisecond

adsl line-config-profile PROFILEatur max-interleave-delay <0-63>

Sets an interleave-delay of ATU-R. Unit : millisecond

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc max-interleave-delay 16

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atur interleaved max-tx-rate 63

SWITCH(bridge)# show adsl line-config-profile ADSL_1M_Intl


adsl line-config-profile PROFILE comm line-type{fast | interleaved| fast-and-interleaved}

Bridge Configures to enable/disable the interleave process.

SWITCH(bridge)# adsl line-config-profile test comm line-type fast

SWITCH(bridge)# adsl line-config-profile test gs standard multimode


173


Id:0900d805805d4568

To configure the channel configuration method of a line-config profile, use the following command.

Power managementhiX 5622/25/30/35 R2.8 provides power management on IFX72 card, this offers the way of saving power at three levels (L0/L2/L3).

The L2 low-power mode enables statistical powers savings at the ADSL transceiver unit in the central office (ATU-C) by rapidly entering and exiting low power mode based on Internet traffic running over the ADSL connection. When large files are being down-loaded, ADSL2 operates in full power mode (called "L0" power mode) in order to maximize the download speed. When Internet traffic decreases, such as when a user is reading a long text page, ADSL2 systems can change into L2 low power mode, in which the data rate is significantly decreased and overall power consumption is reduced.

The L3 power mode on the other hand, enables overall power savings at the ATU-C by entering into sleep mode when the connection is not being used for extended periods of time. L3 is a sleep mode where traffic cannot be communicated over the ADSL connec-tion when the user is not online.

To configure ADSL power management, use following commands:


adsl line-config-profile PROFILEcomm dmt-mode {ec | fdm}

Bridge Configures the transmission mode in DMT of a line-config profile.

comm dmt-mode Indicates whether there is overlap or no overlap of bins.

ec Echo cancel mode.

fdm Frequency division mux mode.


adsl line-config-profile PROFILE atuc pwrmgmt l0-time <0-255>

Bridge Configures ADSL power management (L0-time configuration), enter profile name

0-255 Value in seconds.

adsl line-config-profile PROFILE atuc pwrmgmt l2-time <0-255>

Configures ADSL power management (L2-time configuration), enter profile name


adsl line-config-profile PROFILEatuc pwrmgmt I2atpr <0-310>

Configures ADSL power management (L2atpr configuration), enter profile name

0-310 Values 0-310 (dB/10).

adsl line-config-profile PROFILE atuc pwrmgmt I2rate <800000-1024000>

Configures ADSL power management (L2 minimum rate configuration), enter profile name

800000-1024000 Value in bits/sec.

174

Operate CLI

Id:0900d805805d4568

Port configuration

Impulse noise protectionTo reduce the number of errors that occur due to impulse noise, use following commands to set ADSL impulse noise protection of ATUC/ATUR.

Additional configurationsFor hiX 5622/25/30/35 R2.8, it is possible to configure not only the features of ADSL2+ standards but also the distinguished features of hiX 5622/25/30/35 R2.8.

adsl line-config-profile PROFILEatuc pwrmgmt mode {disable I l2only Il2andl3}

Bridge Configures ADSL power management mode, enter profile name

disable Disables power management.

l2only Enables L2 mode.

l2andl3 Enables L2 and L3 mode.

adsl line-config-profile PROFILE atuc pwrmgmt l2atpr <0-310>

ADSL configuration;

– ADSL line config profile,– ADSL ATUC configuration,– Power Managment configration,– L2ATPR configuration

PROFILE Enter a profile-name.

0-310 Values 0-310 (dB/10).

adsl line-config-profile PROFILE atuc pwrmgmt l2rate<800000-1024000>

ADSL configuration;

– ADSL line config profile,– ADSL ATUC configuration,– Power Managment configration,– L2 Minimum Rate configuration.

PROFILE Enter a profile-name.

800000-1024000 Values 800000 - 1024000.



adsl line-config-profile PROFILEatuc inp{0| half | 1| 2| 3 | 4 | 5 | 6 | 7| 8| 9| 10| 11| 12| 13| 14| 15| 16| auto}

Bridge Sets ADSL Impulse noise protection of ATUC, enter profile name

half half symbol

auto auto mode

0 0 symbols - minimal protection

1...16 1...16 symbols

adsl line-config-profile PROFILEatur inp{ 0 | half | 1| 2| 3| 4| 5| 6| 7| 8| 9| 10| 11| 12|13|14|15|16| auto}

Sets ADSL Impulse noise protection of ATUR, enter profile name

175


Id:0900d805805d4568

Setting duplex modeOnly unidirectional communication is practicable on half duplex mode, and bidirectional communication is practicable on full duplex mode.To set duplex mode, use the following command.


adsl line-config-profile PROFILE gs adv-cap{disable | annex-a | annex-b | annex-i | annex-j | annex-m | adsl-plus | annex-a_adsl-plus}

Bridge Configures if the CO will attempt to startup using alter-nate standards, if CPE does not support ADSL+.

adsl line-config-profile PROFILEgs bit-swap {enable | disable}

Enables bit swapping.

adsl line-config-profile PROFILEgs erase-profs {enable | disable}

Enables the ability to erase all fast retrain profiles at startup.

adsl line-config-profile PROFILEgs max-dco {64 | 128 | 256}

Maximum interleaving depth customer hardware support.

adsl line-config-profile PROFILEgs ntr {local | ref-clock}

Enable/Disable NTR on a per chip basis.local: local oscillator,ref-clock: reference clock 8 kHz.

adsl line-config-profile PROFILE gs psd-mask-type {adsl | hadsl-m1 | hadsl-m2 | msk2-rfi | flat-msk-rfi | cab-msk2-rfi | adsl2-nonovlp-m1 | adsl2-nonovlp-m2 | adsl2-nonovlp-flat}

Select the PSD mask option to be used.

adsl line-config-profile PROFILEgs rs-int-correct-dn {disable | 125US | 250US | 500US | 1MS | 2MS | 4MS}

Configures the correction time for the downstream inter-leaved buffer. RS can also be disabled.

adsl line-config-profile PROFILEgs rs-int-correct-up {disable | 125US | 250US | 500US | 1MS | 2MS | 4MS}

Configures the correction time for the upstream inter-leaved buffer. RS can also be disabled.

adsl line-config-profile PROFILE gs standard {t1-413 | g-lite | g-dmt | multimode | adsl2 | adsl2-plus | adsl2-plus-auto | adsl2-adsl2plus-only| readsl2}

Select preferred standard compliance. Outcome is dependent upon standard support of the remote unit. Only for ADSL+ applications.

adsl line-config-profile PROFILEgs tx-power-attn <0-40 >

Configures the value in dB of TX power attenuation.

adsl line-config-profile PROFILEgs use-custom-bin {enable | disable}

Enables user selection of any of those 511 bins that will be enabled for upstream and downstream transmission.

adsl line-config-profile PROFILE gs config-custom-bin BINSET

Sets user selection for any of the 511 bins, 1 bit per bin.

BINSET 128 values 123456789ABCDEF..., blank will reset to 64 times FF.

adsl line-config-profile PROFILEgs coding-gain (auto|0|1|2|3|4|5|6|7)

Sets the coding gain in dB increments.- ADSL line config profile,- Enter profile-name,- ADSL special configuration,- coding gain in dB increments.

auto auto

0 to 7 0 to 7 in dB

176

Operate CLI

Id:0900d805805d4568

Port configuration

Example:

SWITCH(bridge)# port duplex 0/1 full

Configuring transmit rate of Ethernet portIn order to configure transmit rate of Ethernet port, use the following command.

Configuring auto-negotiationYou can configure auto-negotiation for a port, automatically to match the transmission speed and the duplex mode of the attached device.To determine if the speed and duplex mode are set to auto-negotiate, use the following command:

Displaying line-config profileTo display the configuration of a line-config profile, use the following commands.


port duplex PORTS (full) Bridge Port configuration;- Duplex configuration- Full duplex.

PORTS Set port number like 0/1 or 0/1-0/4 or s0


port speed PORTS (10|100|1000)

Bridge Port configuration;- Speed configuration- Full duplex.

PORTS Set port number like 0/1 or 0/1-0/4 or s0

10 10 Mbps

100 100 Mbps

1000 1000 Mbps


port nego PORTS (force | auto) Bridge Port configuration;- Negotiation configuration.

PORTS Set port number like 0/1 or 0/1-0/4 or s0.

force Auto negotiation disabled.

auto Auto negotiation enabled.

177


Id:0900d805805d4568

To display the line configuration for a specified port, use the following commands.

The following information will be shown via the command, show lre PORTS adsl line-config.

The following example displays the current line-config-profile


show adsl rfi-band PrivilegedGlobalBridge

Display the ADSL RFI band configuration.

show adsl line-config-profile Shows all configured line profiles.

show adsl line-config-profile PROFILE

Shows one configured line profile, enter the profile name.

show adsl line-config-info Shows all line-config profiles and their assigned ports.

show adsl line-config-infoPROFILE

Shows one line-config profile and its assigned ports

show adsl line-config-info-long Show running system information;

– ADSL information– ADSL line config profile information

show adsl line-config-info-long PROFILE

Show running system information;

– ADSL information– ADSL line config profile information

PROFILE Enter profile-name


show lre PORTS adsl line-config


Shows ADSL line configuration briefly for a specified port, enter the port number.

show lre PORTS adsl line-config-detail

Shows ADSL line configuration in detail for a specified port, enter the port number.

show lre PORTS adsl line-config-info

Shows ADSL line configuration information for a specified port, enter the port number.

show lre PORTSadsl line-table

Shows ADSL line table information for a specified port, enter the port number.

Item Description

Port Shows slot and port number.

Admin Status Shows link connection status on the port.

GS Standard Shows ADSL standard.

Line Type Shows whether interleave is used.

Line Speed Shows the transmit rate of line.

Target Snr Shows target SNR margin.

Interleaved Delay Shows interleaved delay.

Table 25 Information of ADSL line-config

178

Operate CLI

Id:0900d805805d4568

Port configuration


SWITCH(bridge)#

start-------------------------------------------------------------------Profile Name : testTarget SNR Margin(dB) : UP [ 6.0] / DOWN [ 6.0]Maximum SNR Margin(dB) : UP [ 31.0] / DOWN [ 31.0]Minimum SNR Margin(dB) : UP [ 0.0] / DOWN [ 0.0]UpShift SNR Margin(dB) : UP [ 12.0] / DOWN [ 9.0]DownShift SNR Margin(dB) : UP [ 3.0] / DOWN [ 3.0]Minimum UpShift time(sec) : UP [ 0] / DOWN [ 30]Minimum DownShift time(sec) : UP [ 0] / DOWN [ 30]Fast Min Rate (kbps) : UP [ 32] / DOWN [ 32]Fast Max Rate (kbps) : UP [ 1088] / DOWN [ 32736]Interleaved Min Rate (kbps) : UP [ 32] / DOWN [ 32]Interleaved Max Rate (kbps) : UP [ 1088] / DOWN [ 32736]Interleaved Delay (ms) : UP [ 16] / DOWN [ 63]Interleaved correction time : UP [disable] / DOWN [disable]Gs Fast Overhead : UP [disable] / DOWN [disable]AnnexType : ADSL2, LineType : InterleavedDMT conf mode : FDM, DMT Trellis : ONRatemode UP : AdaptAtRunT, Ratemode DOWN : AdaptAtRunTAtucMinInp UP : auto mode, AtucMinInp DOWN : auto modeGsStandard : ADSL2+Auto, GsMaxBitsPerBin : 15GsDrStby : disable, GsRxBinAdjust : disableGsTxStartBin : 32, GsTxEndBin : 511GsRxStartBin : 6, GsRxEndBin : 31AdvertisedCapability : Annex A, GsUseCustomBins : disableGsDnBinUsage : 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFGsTxPowerAttenuation : 0, GsNTR : localGsCodingGain : auto, GsExpandedExchange : expandedGsEscapeFastRetrain : disable, GsBitSwap : enableGsEraseProfiles : disable, GsTriggerMode : disableGsInitiate : waitPn, GsFastRetrain : disableGsMaxDCO : 256, GsFullRetrain : enableGsExternalRsMemory : Not Present, GsDataBoost : enableGsUpstreamPsd : Standard, GsPSDMaskType : ADSLGsParametricTestInputFile : -GsParamHybridLossTestStart : 2, GsParamHybridLossTestEnd: 64PwrMgmtMode : disablePwrMgmtL0Time : 180, PwrMgmtL2Time : 60PwrMgmtL2ATPR(dB) : 3.0, PwrMgmtL2Rate(bps) : 1024000Chan Ratio UP perc. : 0, Chan Ratio DN percent : 0Max Nom PSD(dB/10) : -400, Max Nom Atp(dB/10) : 204PSD Mask Enable : disableDownstream PSD Mask :------------------------------------------------------------------------[000] (000,000) (000,000) (000,000) (000,000)[004] (000,000) (000,000) (000,000) (000,000)[008] (000,000) (000,000) (000,000) (000,000)[012] (000,000) (000,000) (000,000) (000,000)[016] (000,000) (000,000) (000,000) (000,000)[020] (000,000) (000,000) (000,000) (000,000)[024] (000,000) (000,000) (000,000) (000,000)[028] (000,000) (000,000) (000,000) (000,000)end=====================================================================

179


Id:0900d805805d4568

Examples of configuring and applying line-config profileConfiguring line-config Profile for ADSL port (interleaved mode)

Configuring line-config profile for ADSL port (fast mode)

Configuring line-config profile for ADSL2+ port (interleaved mode), complying with CPE

Configuring line-config profile for ADSL2+ port (fast mode), complying with CPE

Assign a line-config profile to an ADSL port

Show the list of line-config detailsSWITCH (bridge)# show adsl line-config-info

6.3.2.5 Configuring ADSL alarm-config profileAn alarm-config profile is a configured policy, which alarm service is provided to clients with using SNMP trap in case of system error. It is a convenient way because it is

SWITCH(bridge)# adsl add line-config-profile ADSL_1M_Intl adsl

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc rate-mode adapt-at-runtime

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc interleaved max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atur interleaved max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Intl atuc max-interleave-delay 16

SWITCH(bridge)# adsl add line-config-profile ADSL_1M_Fast adsl

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast atuc rate-mode adapt-at-runtime

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast atuc fast max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast atur fast max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL_1M_Fast gs standard multimode

SWITCH(bridge)# adsl add line-config-profile ADSL2plus_1M_Intl adsl

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc rate-mode adapt-at-runtime

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc interleaved max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atur interleaved max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atuc max-interleave-delay 16

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl atur max-interleave-delay 20

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Intl gs standard adsl2-plus

SWITCH(bridge)# adsl add line-config-profile ADSL2plus_1M_Fast adsl2plus

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atuc rate-mode adapt-at-runtime

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atuc fast max-tx-rate 1024

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast atur fast max-tx-rate 640

SWITCH(bridge)# adsl line-config-profile ADSL2plus_1M_Fast gs standard adsl2-plus

SWITCH (bridge)# port lre 1/1-1/72 disable

SWITCH (bridge)# lre 1/1-1/72 adsl line-config profile ADSL_1M_Intl

SWITCH (bridge)# port lre 1/1-1/72 enable

180

Operate CLI

Id:0900d805805d4568

Port configuration

possible to configure standards of error displaying, which varies according to its service type in each port.

For hiX 5622/25/30/35 R2.8, it is possible to configure the alarm-config in two ways. There are dynamic alarm configurations by inputting a desired port in the configured profile and static alarm configuration by specifying the alarm-config on each port.

Some alarm-config profiles may be configured according to xTU-C and xTU-R respec-tively. xTU-C (xDSL Terminal Unit Center) means hiX 5622/25/30/35 R2.8 CO as central service and xTU-R (xDSL Terminal Unit Remote) means CPE as subscriber’s equipment. When configuring the alarm-config profile, xTU-C means the direction from CO to CPE, and xTU-R means the direction from CPE to CO.

To configure an alarm-config is as follows:

Step 1

• Creating alarm-config profile

Step 2Configure the alarm-config profile as you need.

• Alarming of initializing failure • Setting threshold of error seconds within 15 minutes of ATU-C • Setting threshold of error seconds within 15 minutes of ATU-R • Configuring threshold of change in fast/interleave rate of ATU-C • Configuring threshold of change in fast/interleave rate of ATU-R

Step 3

• Applying alarm-config profile

Creating alarm-config profileTo create/delete an alarm-config profile, use the following commands.

Example:

Above example shows how to create an adsl alarm-config-profile with name ‘test’.

Alarming of initializing failureYou can configure hiX 5622/25/30/35 R2.8 to be able to alarm by trap when the init failure occurs. To configure the alarm-config profile for initializing failure of ATU-C, use the following commands.


adsl add alarm-config-profile PROFILE

Bridge Create an alarm-config profile, enter a profile name.

adsl delete alarm-config-profile PROFILE

Deletes an alarm-config profile.

SWITCH (bridge)# adsl add alarm-config-profile test

SWITCH (bridge)# show adsl alarm-config-info

181


Id:0900d805805d4568

The following example shows how to create an adsl alarm-config-profile with name ‘test’ and enable the ATU-C init-failure trap:

Setting threshold of error seconds within 15 minutes of ATU-CTo configure the alarm-config profile about the threshold of error in ATU-C, within any given 15 minutes performance data collection period, use the following commands.

The following example shows how to configure a threshold of error seconds(600) in ATU-C, within any given 15 minutes performance data collection period.

Setting threshold of error seconds within 15 minutes of ATU-RTo configure the alarm-config profile about the threshold of error in ATU-R, within any given 15 minutes performance data collection period, use the following commands.


adsl alarm-config-profile PROFILE atuc init-fail-trap {enable | disable}

Bridge Enables/disable the init-failure trap. This option is disabled by default.

adsl alarm-config-profile PROFILE atuc op-state-trap {enable | disable}

Enables/disable the op-state trap. This option is disabled by default.

SWITCH (bridge)# adsl add alarm-config-profile test

SWITCH (bridge)# adsl alarm-config-profile test atuc init-fail-trap enable

SWITCH (bridge)# show adsl alarm-config-profile test


adsl alarm-config-profile PROFILE atuc thresh-15min-sesl <0-900>

Bridge Configures an ADSL alarm config profile, enter the profile-name. Sets the ADSL ATUC configuration with ATUC minimum SesL Value. Enter the threshold value.

adsl alarm-config-profile PROFILE atuc thresh-15min-uasl <0-900>

Configures an ADSL alarm config profile, enter the profile-name. Sets the ADSL ATUC configuration with ATUC minimum UasL Value. Enter the threshold value.

adsl alarm-config-profile PROFILE atuc thresh-15min-ess <0-900>

Configures a threshold of error seconds in ADSL inter-face, within any given 15 minutes performance data col-lection period.

adsl alarm-config-profile PROFILE atuc thresh-15min-lofs <0-900>

Configures a threshold of loss of frame seconds in ADSL interface within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atuc thresh-15min-lols <0-900>

Configures a threshold of loss of link seconds in ADSL interface, within any given 15 minutes performance.

adsl alarm-config-profile PROFILE atuc thresh-15min-loss <0-900>

Configures a threshold for seconds with loss of signal in ADSL interface, within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atuc thresh-15min-lprs <0-900>

Configures a threshold of loss of power seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.

SWITCH(bridge)# adsl alarm-config-profile test atuc thresh-15min-ess 600

SWITCH(bridge)# show adsl alarm-config-profile test

182

Operate CLI

Id:0900d805805d4568

Port configuration

The following example shows how to configure a threshold of error seconds(600) in ATU-R, within any given 15 minutes performance data collection period.

Configuring threshold of change in fast/interleave rate of ATU-CTo configure the alarm-config profile about the threshold of change in rate in ATU-C, use the following commands.

Configuring threshold of change in fast/interleave rate of ATU-RTo configure the alarm-config profile about the threshold of change in rate in ATU-R, use the following commands.


adsl alarm-config-profile PROFILE atur thresh-15min-sesl <0-900>

Bridge Configures an ADSL alarm config profile, enter the profile-name. Sets the ADSL ATUR configuration with ATUC minimum SesL Value. Enter the threshold value.

adsl alarm-config-profile PROFILE atur thresh-15min-uasl <0-900>

Configures an ADSL alarm config profile, enter the profile-name. Sets the ADSL ATUR configuration with ATUC minimum UasL Value. Enter the threshold value.

adsl alarm-config-profile PROFILE atur thresh-15min-ess <0-900>

Configures a threshold of error seconds in ADSL inter-face, within any given 15 minutes performance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-lofs <0-900>

Configures a threshold of loss of frame seconds in ADSL interface within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-loss <0-900>

Configures a threshold for seconds with loss of signal in ADSL interface, within any given 15 minutes perfor-mance data collection period.

adsl alarm-config-profile PROFILE atur thresh-15min-lprs <0-900>

Configures a threshold of loss of power seconds in ADSL interface, within any given 15 minutes perfor-mance data collection period.

SWITCH(bridge)# adsl alarm-config-profile test atur thresh-15min-ess 600



adsl alarm-config-profile PROFILE atuc fast-thresh-rate-down <0-65535>

Bridge Configures a threshold of change in fast rate of downstream in ATU-C.

adsl alarm-config-profile PROFILE atuc fast-thresh-rate-up <0-65535>

Configures a threshold of change in fast rate of upstream in ATU-C.

adsl alarm-config-profile PROFILE atuc intl-thresh-rate-down <0-65535>

Configures a threshold of change in interleaved rate of downstream in ATU-C.

adsl alarm-config-profile PROFILE atuc intl-thresh-rate-up <0-65535>

Configures a threshold of change in interleaved rate of downstream in ATU-C.

183


Id:0900d805805d4568

g The fast rate applies to ‘Interleave’ channel only.

Displaying alarm-config profileTo display a configuration of alarm-config, use the following commands.

The following is an example of displaying an ADSL alarm-config profile.


adsl alarm-config-profile PROFILE atur fast-thresh-rate-down <0-65535>

Bridge Configures a threshold of change in fast rate of downstream in ATU-R.

adsl alarm-config-profile PROFILE atur fast-thresh-rate-up <0-65535>

Configures a threshold of change in fast rate of upstream in ATU-R.

adsl alarm-config-profile PROFILE atur intl-thresh-rate-down <0-65535>

Configures a threshold of change in interleaved rate of downstream in ATU-R.

adsl alarm-config-profile PROFILE atur intl-thresh-rate-up <0-65535>

Configures a threshold of change in interleaved rate of downstream in ATU-R.


show adsl alarm-config-profile PrivilegedGlobalBridge

Shows all configured alarm profiles.

show adsl alarm-config-profile[PROFILE]

Shows one configured alarm profile, enter the profile name.

show lre PORTSadsl alarm-config-info

Shows an LRE port ADSL alarm-config.

show adsl alarm-config-info[PROFILE]

Shows one alarm-config profile and its assigned ports, enter the profile name.

show adsl alarm-config-info Shows all alarm-config profiles and their assigned ports.

show adsl alarm-config-info-long Show running system information;- ADSL information- ADSL alarm config profile information.

show adsl alarm-config-info-long PROFILE

Show running system information;- ADSL information- ADSL alarm config profile information.


184

Operate CLI

Id:0900d805805d4568

Port configuration

Applying alarm-config profileTo apply a configured alarm-config profile to a specific port or slot, use the following command.

SWITCH(bridge)# show adsl alarm-config-profile

----------------------------------------------------------------------Profile Name : DEFVAL

ADSL ATUC Configuration :----------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Init Fail Trap : disable OpState Trap : disableThresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lols : 0 Thresh 15Min Lprs : 0Thresh 15Min Ess : 0 Thresh 15Min Fail FastR : 0Thresh 15Min SesL : 0 Thresh 15Min UasL : 0Thresh 15Min FecsL : 0

ADSL ATUR Configuration :----------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Thresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lprs : 0 Thresh 15Min Ess : 0----------------------------------------------------------------------

Profile Name : test

ADSL ATUC Configuration :---------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Init Fail Trap : disable OpState Trap : disableThresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lols : 0 Thresh 15Min Lprs : 0Thresh 15Min Ess : 0 Thresh 15Min Fail FastR : 0Thresh 15Min SesL : 0 Thresh 15Min UasL : 0Thresh 15Min FecsL : 0

ADSL ATUR Configuration :---------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Thresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lprs : 0 Thresh 15Min Ess : 0======================================================================SWITCH(bridge)#


lre PORTS adsl alarm-config profile PROFILE

Bridge Configures LRE (Long Reach Ethernet) and ADSL alarm-config profile.

PORTS LRE port or slot number {1/1-1/8 I s1}


185


Id:0900d805805d4568

Following example shows how to apply an alarm-config profile to a port.

Copying an alarm-config profileTo copy an alarm-config profile, use the following command.

Displaying generated alarmsTo display the generated alarms, use the following commands.

SWITCH (bridge)# lre s4 adsl alarm-configprofile test

SWITCH (bridge)# lre 5/1 adsl alarm-configprofile test


adsl copy alarm-config-profilePROFILE PROFILE

Bridge Copy an alarm-config profile.

PROFILE Source ADSL Alarm Profile Name (e.g. DEFVAL),

PROFILE Target ADSL Alarm Profile Name (e.g. DEFVAL).


show alarm-id PrivilegedGlobal

Shows assignment alarm and ID.

show alarm-list-oid Shows the alarm list of the system (alarms shown by OIDs).

show alarm-list {critical | major | minor | warning}

Shows the alarm list of the system.

DEFAULT All alarms

critical Only critical alarms

major Only major alarms

minor Only minor alarms

warning Only warnings

show alarm-list-reportingsourcetype {physical_entity | interface | vcctp I vlan | bridgeport | erpdomain}

Shows the alarm list of the system.

physical_entity

Only alarms from physical entity

interface Only alarms from interfaces

vcctp Only alarms from VccTP

vlan Only alarms from VLAN

bridgeport Only alarms from bridge port

erpdomain Only alarms from ERP domain

show alarm-severity-table SEVERITY_TABLE_INDEX

Shows the alarm severity table with the chosen index, index of alarm severity table index range <1-10>

show alarm-severity ALARM_ID Shows the severity of an alarm, enter the ID value.


alarm-severity

the Severity of an Alarm.

ALARM_ID Alarm ID of the Alarm.

186

Operate CLI

Id:0900d805805d4568

Port configuration

To modify/update the alarm, use the following commands.

To enable/disable the alarm history table, use the following commands.

To show the status or the whole alarm history table, use the following commands.


modify alarm-severity ALARM_ID PROFILE_INDEX SEVERITY

Global Modifies the index of the severity profile in severity profile table, enter the index value.

ALARM_ID Alarm ID of the alarm (use: show alarm id).

PROFILE_INDEX Index of the severity profile in severity profile table.

SEVERITY New severity of the alarm (1 to 5).

update alarm-list Update alarm list after change of severity/severities.

al-mgr set sev profile {ALARM-ID} {SEV1} {SEV2} {SEV3} {SEV4} {SEV5} {SEV6} {SEV7} {SEV8} {SEV9} {SEV10}

Sets all severities for chosen alarm, first is default and cannot be overwritten.

ALARM_ID Alarm ID of the alarm (use: show alarm id).

SEV1-10 Severity for profile 1-10.

al-mgr set sev profile oid (SEV1)(SEV2)(SEV3)(SEV4)(SEV5)(SEV6)(SEV7)(SEV8)(SEV9)(SEV10)(LINE)

Sets all severities for a choosen alarm , first is default and cannot be overwritten.- used for write config data,- for each alarm,- there are 10 profiles.

oid OID (0 to 255) with separator '.'

SEV1-10 Severity for profile 1-10.


set alarm-history-enabled Global Enables the alarm history table.

set alarm-history-disabled Disables the alarm history table.

set alarm-history-base HISTORY_NUMBER(critical| major| minor| warning)

Sets the alarm history table base values (number of max history entries and severity level).

HISTORY_NUMBER

Number of max hist entries in the alarm history table (max1000).

critical Severity level, critical: only critical errors will be stored.

major Severity level, major: critical and major errors will be stored.

minor Severity level, minor: critical major and minor errors will be stored.

warning Severity level, warning: all errors will be stored.


show alarm-history-table-status PrivilegedGlobal

Shows the status of alarm history table.

187


Id:0900d805805d4568

To clear the alarm history table, use the following command.

Example of configuring and applying ADSL alarm-config profileFollowing example shows how to configure an adsl alarm-config profile.

SWITCH (bridge)# lre 5/1 adsl alarm-config profile test

6.3.2.6 Configuring hiX 5622/25/30/35 R2.8 to operate under ATM environ-mentYou can configure hiX 5622/25/30/35 R2.8 to operate under ATM environment. Before configuring the ATM parameters, you have to disable the ADSL port first; after the con-figuration, you have to enable the port to trigger the configuration.

6.3.2.7 Virtual channelhiX 5622/25/30/35 R2.8 supports ATM network with virtual channel (VC). VC is config-ured by virtual circuit identifier (VCI) and virtual path identifier (VPI).


show alarm-history-table PrivilegedGlobal

Shows the whole alarm history table.

show alarm-history-table-status Shows the status of the alarm history table.


clear alarm-history Global Clears the alarm history table.

SWITCH(bridge)# adsl add alarm-config-profile test

SWITCH(bridge)# adsl alarm-config-profile test atuc init-fail-trap enable

SWITCH(bridge)# adsl alarm-config-profile test atur thresh-15min-ess 600


----------------------------------------------------------------------Profile Name : test

ADSL ATUC Configuration :-------------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Init Fail Trap : enable OpState Trap : disableThresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lols : 0 Thresh 15Min Lprs : 0Thresh 15Min Ess : 0 Thresh 15Min Fail FastR : 0Thresh 15Min SesL : 0 Thresh 15Min UasL : 0Thresh 15Min FecsL : 0

ADSL ATUR Configuration :-------------------------------Thresh Fast Rate Up(bps) : 4000 Thresh Intl Rate Up(bps) : 4000Thresh Fast Rate Down(bps): 4000 Thresh Intl Rate Down(bps) : 4000Thresh 15Min Lofs : 0 Thresh 15Min Loss : 0Thresh 15Min Lprs : 0 Thresh 15Min Ess : 600======================================================================

188

Operate CLI

Id:0900d805805d4568

Port configuration

To configure VC, use the following command.

To configure VPI and VCI, use the following command.


lre PORTS atm vc{creat | delete} vpi <0-255> vci <32-65535>

Bridge Create/delete VC on specified port, enter the port number, the VPI and VCI values.Note: This command is used for Wintegra based linecards.

lre PORTS xdsl atm vc {creat | delete} vpi <0-255> vci <32-65535>

xDSL configuration, create/delete VC on specified xDSL port, enter the port number, the VPI and VCI values.Note: This command is used for CG based linecards.

lre PORTS atm vc delete vpi <0-255> vci <32-65535>

Long Reach Ethernet configuration;- ATM configuration- VC configuration create/delete- delete ATM VCCTP- VPI- VCI

PORTS LRE port or slot number (1/1-1/8|s1)

0-255 VPI value(0-255)

32-65535 VCI value(32-65535)


lre PORTS atm vcc<1-8> dslchannel(fast | interleaved)

Bridge Long Reach Ethernet configuration;- ATM configuration- VCC configuration- Dsl Channel Type of ATM VC cells.

PORTS LRE port or slot number (1/1-1/8|s1)

1-8 VCC value(1-8)

fast Fast channel transmitted/received by ATM VC cells.

inter-leaved

Interleaved channel transmitted/received by ATM VC cells.

lre PORTSatm vcc <1-8> vpi <0-255>vci <32-65535>

Configures VC on specified port, enter the port number, the VPI and VCI values.

lre PORTS atm vcc <1-8> alarmseverity <1-10>

Configures alarm severity.

lre PORTS xdsl atm vcc <1-8> alarmseverity <1-10>

xDSL configuration, configure alarm severity.

lre PORTSatm vcc <1-8>encap {llc | vc-mux}

Configures VC encapsulation over AAL5.

llc LLC encapsulation

vc-mux VC-MUX encapsulation

lre PORTSxdsl atm vcc <1-8> vpi <0-255> vci <32-65535>

xDSL configuration, configure VC on specified xDSL port, enter the port number, the VPI and VCI values.

lre PORTSxdsl atm vcc <1-8> encap (llc|vc-mux)

xDSL configuration, configure VC encapsulation over AAL5).

llc LLC encapsulation

vc-mux VC-MUX encapsulation

189


Id:0900d805805d4568

To set admin status of VCC, use the following command.

To display a configuration of ATM VCCTP, use the following command.

Following example shows how to create virtual channel on a port.

Following example shows how to configure virtual channel

SWITCH(bridge)# lre 4/1 atm vcc 2 vpi 0 vci 36SWITCH(bridge)# show lre 4/1 atm vc


lre PORTSatm vcc <1-8> adminstatus (enable | disable)

Bridge Sets admin status of VCC

1-8 VCC value(1-8), enable: admin status enable, disable: admin status disable.

lre PORTSxdsl atm vcc <1-8> adminstatus (enable | disable)

xDSL configuration, set admin status of VCC

1-8 VCC value(1-8), enable: admin status enable, disable: admin status disable.


show lre PORTS atm vc PrivilegedGlobalBridge

Shows VC for a specified port, enter the port number.

show lre PORTSxdsl atm vcctp-overview

Shows VCC configuration overview for an xDSL port, enter the port number.

show lre PORTSxdsl atm vcctp-info

Shows VCC configuration detailed information for an xDSL port, enter the port number.

SWITCH(bridge)# lre 4/1 atm vc create vpi 0 vci 35SWITCH(bridge)# show lre 4/1 atm vc

===============================================================================PORT Num VPI VCI type a5txsize a5rxsize orl AlarmSeverity AdminState dslchan-------------------------------------------------------------------------------4/ 1 1 0 32 llc 1536 1536 24000 1 up intlvd4/ 1 2 0 35 llc 1536 1536 24000 1 up intlvd===============================================================================SWITCH(bridge)#

============================================================================PORT Num VPI VCI type a5txsize a5rxsize orl AlarmSeverity AdminState dslchan----------------------------------------------------------------------------4/ 1 1 0 32 llc 1536 1536 24000 1 up intlvd4/ 1 2 0 36 llc 1536 1536 24000 1 up intlvd============================================================================SWITCH(bridge)#

190

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.2.8 DSL channel useTo set DSL channel use of ATM VC cells, use the following command.

6.3.2.9 VC rate limitYou can configure hiX 5622/25/30/35 R2.8 with rate limit of VC. To configure rate limit of VC, use the following command.

6.3.2.10 OAMYou can check VC status configured by user through Operation Administration Mainte-nance (OAM). The OAM of hiX 5622/25/30/35 R2.8 uses a continuity check (CC) method.

To enable a CC and configure a target CC, use the following commands.

To disable CC, use the following command.

To select the mode of CC, use the following command.


lre PORTSxdsl atm vcc <1-8> dslchannel (1 | 2)

Bridge Sets DSL channel use of ATM VC cells.

<1-8> ATM VC cells.

1 First channel used by VCC-TP.

2 Second channel used by VCC-TPSecond channel can only be assigned to VC in case of dual latency.


lre PORTSatm vcc <1-8> aal5-pdu tx-size <1-1536> rx-size <1-1536>

Bridge Configures rate limit of VC channel on specified port, enter the port number and the values


lre PORTSatm vcc <1-8> oam cc action act dir {sink I src I both}

Bridge Bridge Enables CC and configures target CC on specified port, enter the port number and the values.

1-8 VCC value(1-8)


lre PORTSatm vcc <1-8> oam cc action deact

Bridge Disables CC on specified port, enter the port number and the values.


lre PORTS atm vcc <1-8> oam cc mode {auto | manual}

Bridge Select the mode of CC on specified port, enter the port number and the values.

191


Id:0900d805805d4568

hiX 5622/25/30/35 R2.8 detects the problem occurring in ATM Network with loopback. To perform loopback in ATM Network, use the following command.

To display OAM status, use the following command.

6.3.2.11 ATM service categoryTo set the weight for the Weighted Fair Queuing (WFQ), use the following command, see also 14.3.19 Use case: Shaping and policing on port.

To configure ingress policer, use the following command.

To set a Constant Bit Rate (CBR), use the following command.


lre PORTS atm vcc <1-8> oam loopback type e2e

Bridge Configures loopback function on specified port, enter the port number and the values.

lre PORTSxdsl atm vcc <1-8> looptest (none | e2e)

xDSL configuration, set loop test status of VCC.

none no test running.

e2e end-to-end test.


show lre PORTS atm oam {loopback | cc}


Shows the OAM status of loopback or CC cell on specified port, enter the port number and the values.


lre PORTSatm vcc <1-8> egress-shaping service-category best-effort weight <1-8>

Bridge Sets the weight for the weighted fair queuing (WFQ).

1-8 VCC value

1-8 Weight value


lre PORTS atm vcc <1-8>ingress-policing scr <3-9436> mbs <1-1073741824>

Bridge The Long Reach Ethernet configuration, configure the ingress policer.

1-8 VCC value(1-8)

3-9436 Cells/second

1-1073741824 Cells


lre PORTSatm vcc <1-8> egress-shaping service-category cbr pcr <3-73129>

Bridge Sets a constant bit rate (CBR).

1-8 VCC value

pcr Peak cell rate

3-73129 Cells per second

192

Operate CLI

Id:0900d805805d4568

Port configuration

The two commands described above can be used to set Input Rate Limit (IRL) and Out-put Rate Limit (ORL) for Wintegra based line cards, the following example shows how that an be realized.

To set a Real-Time Variable Bit Rate (RTVBR), use the following command.

To set a Non-Real-Time Variable Bit Rate (NRTVBR), use the following command.

To set an Unspecified Bit Rate (UBR), use the following command.

To display an ATM shaping configuration, use the following command.

SWITCH(bridge)# lre 1/1 atm vcc 1 ingress-policing scr 9436 mbs 100

SWITCH(bridge)# lre 1/1 atm vcc 1 egress-shaping service-category cbr pcr 5000


lre PORTS atm vcc <1-8> egress-shaping service-category rtvbr pcr <3-73129> scr <3-73129> mbs <0-1073741824>

Bridge Sets a real-time variable bit rate (RTVBR).

1-8 VCC value

pcr Peak cell rate


scr Sustained cell rate

mbs Maximum burst size

0-1073741824 Cells


lre PORTS atm vcc <1-8> egress-shaping service-category nrtvbr pcr <3-73129> scr <3-73129> mbs <0-1073741824>

Bridge Sets a non-real-time variable bit rate (NRTVBR).

1-8 VCC value.

pcr Peak cell rate.

3-73129 Cells per second.

scr Sustained cell rate.

mbs Maximum burst size.

0-1073741824 Cells


lre PORTS atm vcc <1-8> egress-shaping service-category ubr pcr <3-73129>

Bridge Sets an unspecified bit rate (UBR).

1-8 VCC value

pcr Peak cell rate



show lre PORTS atm shaping-conf Bridge Shows an ATM shaping configuration.

show lre PORTS atm policing-conf Shows an ATM policing information.

193


Id:0900d805805d4568

The following is an example of displaying an ATM shaping configuration.

SWITCH(bridge)# show lre 13/1 atm shaping-conf

6.3.2.12 Rate limit

g IRL configuration described in this chapter is only valid for Conexant (CNX) line card, to set IRL and ORL for Wintegra based line card, refer to 6.3.2.11 ATM service category.

6.3.2.13 IRLInput Rate Limit (IRL) can be used to control the amount of incoming traffic at the sub-scriber’s side. IRL provides mechanisms to manage maximum and committed values of bandwidth (kbit/sec) and burst size (bytes) because many subscribers may share the same resources of the switch and the network.

IRL application is configured via profiles. An IRL profile is a kind of traffic policy and each profile determines a set of four values. Additionally, each profile has a unique name.

A profile can be applied to one or more subscriber ports. These ports can reside on the same or different interface units (IUs). One profile can be referred by any number of ports at the same time.

======================================================================slot port vcc atm_service trf_desc weight pcr scr mbs---------------------------------------------------------------13 1 1 best effort unshaped 1 unused unused unused13 1 2 best effort unshaped 1 unused unused unused13 1 3 best effort unshaped 1 unused unused unused13 1 4 best effort unshaped 1 unused unused unused13 1 5 best effort unshaped 1 unused unused unused13 1 6 best effort unshaped 1 unused unused unused13 1 7 best effort unshaped 1 unused unused unused13 1 8 best effort unshaped 1 unused unused unused======================================================================

Value Unit Range

cir (committed information rate) Kbps 0-16000

pir (peak information rate) Kbps 0-16000

cbs (committed burst size) Byte 96-10000

pbs (peak burst size) Byte 96-15000

Table 26 IRL value

194

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.2.14 Profile configurationCreating a new profileTo create an IRL profile, use the following command, see also 14.3.6 Use case: Rate limiting for port.

g The profile name must be unique. It may have a length of up to 245 significant char-acters.

Saving a profileAfter configuring a new profile or modifying an existing profile using the commands above, it should be applied to the switch by saving. If the profile is not saved, all entered configurations will be lost.

To save and apply the profile, use the following command.

1. The switch manages up to 200 different profiles at the same time.2. Each profile has a unique name.3. Each adsl port can be applied only one IRL profile.4. g The switch keeps the values of the latest created or modified profile in tem-

porary memory. These values can be reused to create further profiles, which only differ in e.g. the cbs value. That means, it is not necessary always to enter all four values if they are the same as the previously created or modified profile.

Configuring values of an IRL profileTo configure the value of each parameter, use the following commands.


irl create profilePROFILENAME

Global Create a new IRL profile, enter a profile name.


irl apply profile Global Save profile configuration.

195


Id:0900d805805d4568

g The order in which the irl set profile command is entered is arbitrary. The configu-ration of a profile being edited can be changed as often as wanted until the irl apply command is entered.

Here is an example of creating and configuring an IRL profile.

SWITCH(config)# irl create profile Profile_001

SWITCH(config)# irl set profile cir 1000

SWITCH(config)# irl set profile cbs 7500

SWITCH(config)# irl set profile pir 1000

SWITCH(config)# irl set profile pbs 10000

SWITCH(config)# irl apply profile

SWITCH(config)# show irl profile info Profile_001


irl set profile(cir | cbs | pir | pbs | dscir | dscbs | dspir | dspbs | polic-ingds) VALUE

Global Configures Input/Output Rate Limiting (IRL) profile. Sets IRL profile data.

cir Committed information rate for upstream policing <0 - 100000> (kbps)

cbs Committed burst size for upstream policing <96 - 10000> (bytes)

pir Peak information rate for upstream policing <0 - 100000> (kbps)

pbs Peak burst size for upstream policing <96 - 15000> (bytes)

dscir Committed information rate for downstream policing <0 - 100000> (kbps)

dscbs Committed burst size for downstream policing <96 - 10000> (bytes)

dspir Peak information rate for downstream policing <0 - 100000> (kbps)

dspbs Peak burst size for downstream policing <96 - 15000> (bytes)

policingds Using the meterprofile parameter settings for policing downstream <0 - 1> (off - on)

VALUE Enter value.

-------------------------+-++-------------------------+-++ upstream | || downstream | || policing |u|| policing |u||------+-----+------+-----|s||------+-----+------+-----|s||------+--------------- CIR | CBS | PIR | PBS |e|| CIR | CBS | PIR | PBS |e||SNMP- | Profile Name kbps |bytes| kbps |bytes| || kbps |bytes| kbps |bytes| ||index |------+-----+------+-----+-++------+-----+------+-----+-++------+--------------- 1000| 7500| 1000 |10000|1|| 1000| 7500| 1000|10000|1|| 1 | Profile_001

SWITCH(config)#

196

Operate CLI

Id:0900d805805d4568

Port configuration

If “irl apply profile” isn’t executed after creating or modifying one profile, you can display the information by the command: “show irl profile editor”. SWITCH(config)# irl create profile Profile_002SWITCH(config)# show irl profile editor

SWITCH(config)# show irl profile infoNo IRL profiles configured.SWITCH(config)#

Modifying a profileTo modify an applied IRL profile, use the following command.

Here is an example of modifying, setting and applying the IRL profile:

SWITCH(config)# irl modify profile Profile_003SWITCH(config)# irl set profile cbs 5000SWITCH(config)# irl apply profileSWITCH(config)# show irl profile info Profile_003

SWITCH(config)#

Deleting a profileTo delete an existing IRL profile, use the following command.


irl modify profile PROFILENAME Global Modifies an existing IRL profile, enter the profile name.

IRL profile to be created: Profile_002CIR: 1000 (kbps)CBS: 7500 (bytes)PIR: 1000 (kbps)PBS: 10000 (bytes)DSCIR: 1000 (bytes)DSCBS: 7500 (bytes)DSPIR: 1000 (bytes)DSPBS: 10000 (bytes)POLICINGDS: on

SWITCH(config)#


SWITCH(config)#

197


Id:0900d805805d4568

g A profile cannot be deleted if it is applied to any adsl port, i.e., the profile must be released from all applied ports before it is deleted. The show irl ifmap profile command can be used to get a list of all ports being mapped to this profile.

To apply an IRL profile to a port, refer to Port mapping

6.3.2.15 Converting bridgeport notation in index and vice versaTo convert bridgeport notation into bridgeport index or vice versa, use the following com-mands.

6.3.2.16 Port mappingInput rate limit can be activated for a VC of a dedicated port by mapping this VC to an existing IRL profile, see also 14.3.7 Use case: IRL with .1p priority.

Mapping a port to an IRL profileTo map an IRL profile, use the following command.


irl delete profile PROFILENAME Global Deletes an existing IRL profile, enter the profile name.


show bridgeportindex PORTS lGlobalBridgeExec

Shows running system information.

bridgeportindex Converts bridgeport notation (e.g. 1/1/1) into bridgeport index (e.g. 1011).

PORTS Bridgeports (e.g. 1/1/1-1/72/1,0/1).

show bridgeportspv BPORTIDXS Show running system information.

bridgeportspv Converts bridgeport index (e.g. 1011) into bridgeport notation (e.g. 1/1/1).

BPORTIDXS Bridgeports (e.g. 1/1/1-1/72/1,0/1).

198

Operate CLI

Id:0900d805805d4568

Port configuration


irl create ifmap PORTS PROFILENAME

Global Configure Input/Output Rate Limiting (IRL) port;- Create a new IRL configuration- IRL port mapping

PORTS Enter list of subscriber physical/dsl ports (e.g. 2/1) or list of subscriber bridgeports (e.g. 2/1/1) (the port list must contain only one type of ports).

PROFILENAME Enter a profilename.

irl create ifmap bridgeport PORTS PROFILENAME

Configure Input/Output Rate Limiting (IRL) port.

irl Configure Input/Output Rate Limiting (IRL) port

create Create a new IRL configuration

ifmap IRL port mapping

bridgeport Bridgeport configuration

PORTS Enter list of subscriber bridgeports (e.g. 2/1/1) (the port list must contain only one type of ports)

PROFILENAME Enter profilename

irl create ifmap PORTS dot1pDOT1P PROFILENAME

Configure Input/Output Rate Limiting (IRL) port;- Create a new IRL configuration- IRL port mapping with subscriber port and .1p value


DOT1P .1p priority (0..7).


199


Id:0900d805805d4568

irl create ifmap PORTS protocol (arp|dhcp|igmp) PROFILENAME

Note: Feature not yet sup-ported.

Global Configures Input/Output Rate Limiting (IRL) port.- Create a new IRL configuration, IRL port mapping", - Protocol-based IRL mapping.

PORTS Enter subscriber DSL port number.

arp Protocol mapping per ARP.

dhcp Protocol mapping per DHCP.

igmp Protocol mapping per IGMP.


irl create ifmap slot SLOTS protocol (arp|dhcp|igmp) PROFILENAME

Configures Input/Output Rate Limiting (IRL) port.- Create a new IRL configuration, IRL port mapping", - Slot-based IRL mapping.

SLOTS Enter slot number.





irl create ifmap bridgeport PORTS PROFILENAME

Configure Input/Output Rate Limiting (IRL) port;- Create a new IRL configuration- IRL port mapping.

PORTS Enter list of subscriber bridgeports (e.g. 2/1/1) (the port list must contain only one type of ports).


irl create ifmap dslport PORTS PROFILENAME


irl Configure Input/Output Rate Limiting (IRL) port.

create Create a new IRL configuration.

ifmap IRL port mapping.

dslport DSL port configuration.

PORTS Enter list of subscriber physical/dsl ports (e.g. 2/1) (the port list must contain only one type of ports).

PROFILENAME Enter profilename.

irl create ifmap dslport PORTS protocol (arp|dhcp|igmp) PROFILENAME



create Create a new IRL configuration


dslport DSL port configuration

PORTS Enter list of subscriber physical/dsl ports (e.g. 2/1)

protocol Protocol-based IRL mapping

arp Protocol mapping per ARP

dhcp Protocol mapping per DHCP

igmp Protocol mapping per IGMP

PROFILENAME Enter profilename


200

Operate CLI

Id:0900d805805d4568

Port configuration

g The port should already exist and should be a subscriber port. The switch rejects non-created ports and ports with the wrong type. However, offline configuration is of course possible (e.g. if the concerned LIU is currently not plugged-in).

Here’s an example of applying IRL profiles to ports.

SWITCH(config)# irl create ifmap1/1/1 Profile_001SWITCH(config)# irl create ifmap1/4/1 Profile_001SWITCH(config)# irl create ifmap1/2/1 Profile_003SWITCH(config)# irl create ifmap2/2/1 Profile_003SWITCH(config)# irl create ifmap2/4/1 Profile_003SWITCH(config)#

Deleting an IRL mappingTo delete a mapping, use the following command.


irl delete ifmap PORTS Global Configure Input/Output Rate Limiting (IRL) port;- Delete IRL configuration- IRL port mapping.


irl delete ifmap PORTSdot1p DOT1P

Configure Input/Output Rate Limiting (IRL) port;- Delete IRL configuration- IRL port mapping- IRL port mapping with subscriber port and .1p value.


DOT1P .1p priority (0..7)

irl delete ifmap PORTS protocol (arp | dhcp | igmp)

Configures Input/Output Rate Limiting (IRL) port.- Deletes IRL configuration- IRL port mapping- Protocol-based IRL mapping.

PORTS Enter list of subscriber physical/dsl ports (e.g. 2/1).




irl delete ifmap slot SLOT protocol (arp | dhcp | igmp)

Configures Input/Output Rate Limiting (IRL) port.- Deletes IRL configuration, IRL port mapping- Slot-based IRL mapping- Protocol-based IRL mapping.

SLOT Enter slot.




201


Id:0900d805805d4568

Here’s an example of deleting a mapping and a profile.

SWITCH (config)# irl delete ifmap 1/4/1SWITCH(config)# show irl ifmapNo ports are mapped to any IRL profile.SWITCH (config)# show irl profile info Profile_001

SWITCH (config)# irl delete profile Profile_001SWITCH (config)# show irl profile infoNo IRL profiles configured.SWITCH (config)#

• irl create ifmap and irl delete ifmap commands will be processed immediately. • g One and the same IRL profile can be used for any number of ports residing

on the same or different LIUs. • An IRL profile will be automatically loaded from CXU_B to that LIU, which owns a

given port, at the moment the profile is referred the first time. It will be automatically unloaded if the last port of this LIU, that is mapped to this profile, is unmapped. That means, unused (unreferred) profiles are not loaded on a LIU in order to save profile memory on LIUs.

• This restriction (10 different profiles per LIU) means that all IRL ports of the same LIU can be mapped to at most 10 different profiles. The switch rejects a port

irl delete ifmap bridgeport PORTS

Global Configures Input/Output Rate Limiting (IRL) port.


delete Delete IRL configuration



PORTS Enter list of subscriber bridgeports (e.g. 2/1/1) (the port list must contain only one type of ports)

irl delete ifmap dslport PORTS

Configures Input/Output Rate Limiting (IRL) port.


delete Delete IRL configuration


dslport DSL port configuration

PORTS Enter list of subscriber physical/dsl ports (e.g. 2/1) (the port list must contain only one type of ports)



SWITCH(config)#

202

Operate CLI

Id:0900d805805d4568

Port configuration

mapping command (irl create ifmap) that would require to load the eleventh profile to this LIU. Please select one of the already loaded profiles, that fulfill your require-ments as nearest as possible in this case.

• The switch automatically deletes the port mapping if the concerned port will be de-leted and unloads the profile if it becomes unused in this case.

6.3.2.17 Displaying IRL configurationThe DSLAM provides several ways to display IRL profiles, IRL port mapping, or both together.

To display an IRL profile and/or port mapping, use the following commands.

g The output of the show command can be unsorted.

6.3.2.18 IRL configuration example1. Create one IRL profile:

SWITCH(config)# irl create profile testSWITCH(config)# irl set profile cbs 5000SWITCH(config)# irl set profile cir 1000SWITCH(config)# irl set profile pbs 10000SWITCH(config)# irl set profile pir 1500


show irl profile info PrivilegedGlobal

Shows profile information of all existing profiles regardless used or unused.

show irl profile infoPROFILENAME

Shows profile values for a specified profile, enter the profile name.

show irl ifmap bridgeport PORT

Shows running system information;- Input/Output Rate Limiting (IRL),- IRL port mapping,- Port information.

bridgeport Enter a list of subscriber bridgeports (e.g. 2/1/1)

show irl ifmap dslportPORT

Shows IRL mapping information for a specified subscriber DSL port, enter the subscriber DSL port number.

PORT Enter subscriber DSL port number.

show irl profile editor Shows information of profile being created or modified.

show irl ifmap slot SLOT

Shows all IRL mapping information for a specified slot together with their profile name, enter the slot number.

SLOT Enter subscriber DSLslot number.

show irl ifmap profilePROFILENAME

Shows all ports of the whole system (all slots), which are cur-rently mapped to any given profile, enter the profile name.

PROFILE-NAME

Enter name of the PROFILE.

show irl ifmap Shows IRL mapping information.

203


Id:0900d805805d4568

SWITCH(config)# irl apply profileSWITCH(config)# show irl profile info test

2. Apply the profile to one port:

SWITCH(config)# irl create ifmap 1/4/1 testSWITCH(config)# show irl ifmap

3. Modify the IRL profile:

SWITCH(config)# irl modify profile test SWITCH(config)# irl set profile cir 500SWITCH(config)# irl apply profileSWITCH(config)# show irl profile info

4. Delete the IRL profile:

Before deleting one IRL profile, please delete ifmap first.SWITCH(config)# irl delete ifmap 1/4/1SWITCH(config)# show irl ifmap

-------------------------+-++-------------------------+-++ upstream | || downstream | || policing |u|| policing |u||------+-----+------+-----|s||------+-----+------+-----|s||------+--------------- CIR | CBS | PIR | PBS |e|| CIR | CBS | PIR | PBS |e||SNMP- | Profile Name kbps |bytes| kbps |bytes| || kbps |bytes| kbps |bytes| ||index |------+-----+------+-----+-++------+-----+------+-----+-++------+--------------- 1000| 5000|15000 |10000|1|| 1000| 7500| 1000|10000|1|| 1 | test

SWITCH(config)#

----------+------------+------------------------------------- Key 1 | Key 2 | Profile Name----------+------------+------------------------------------- 1/4/1 | - | testSWITCH(config)#

-------------------------+-++-------------------------+-++ upstream | || downstream | || policing |u|| policing |u||------+-----+------+-----|s||------+-----+------+-----|s||------+--------------- CIR | CBS | PIR | PBS |e|| CIR | CBS | PIR | PBS |e||SNMP- | Profile Name kbps |bytes| kbps |bytes| || kbps |bytes| kbps |bytes| ||index |------+-----+------+-----+-++------+-----+------+-----+-++------+--------------- 500| 5000| 15000|10000|1|| 1000| 7500| 1000|10000|1|| 1 | testSWITCH(config)#

204

Operate CLI

Id:0900d805805d4568

Port configuration

No ports are mapped to any IRL profile.SWITCH(config)# show irl profile info

SWITCH(config)# irl delete profile testSWITCH(config)# show irl profile infoNo IRL profiles configured.SWITCH(config)#

6.3.2.19 ORLhiX 5622/25/30/35 R2.8 provides the function that adjusts the transmit rate of upstream and downstream for ADSL port.

To configure the Output Rate Limit (ORL) which determines the upstream speed, use the following command. Note that before using this command, the adsl port should be disabled first.

6.3.3 Configuring SHDSL portThe following sections introduce how to configure features on an SHDSL port:

• Configuring SHDSL line-config profile • Configuring SHDSL alarm-config profile • Configuring SHDSL span-config profile • SHDSL bis tcpam mode

6.3.3.1 Configuring SHDSL line-config profileTo configure SHDSL line-config profile, use the following commands.

-------------------------+-++-------------------------+-++ upstream | || downstream | || policing |u|| policing |u||------+-----+------+-----|s||------+-----+------+-----|s||------+--------------- CIR | CBS | PIR | PBS |e|| CIR | CBS | PIR | PBS |e||SNMP- | Profile Name kbps |bytes| kbps |bytes| || kbps |bytes| kbps |bytes| ||index |------+-----+------+-----+-++------+-----+------+-----+-++------+--------------- 500| 5000| 15000|10000|1|| 1000| 7500| 1000|10000|1|| 1 | testSWITCH(config)#


lre PORTS atm orl <64-29952>

Bridge Configures the output rate limit on specified port.

PORTS Enter a port number (1/1-1/8, s1) and ORL values.

64-29952 Output rate limiting value is in 16 kbps granularity. For SHDSL IU line, the value can be changed, orl (max 11408) setting through span-config-profile 's maxlinerate.

205


Id:0900d805805d4568

To configure maintenance operations for SHDSL line, use the following commands.


lre PORTS shdsl line-config arcrcchk {enable | disable}

Bridge Enable/disable auto retrain based on CRC errors for the specified port, enter the port number.

lre PORTSshdsl line-config arfrmrsynchk {enable | disable}

Enable/disable auto retrain based on framer syn-chronization for the specified port, enter the port number.

lre PORTSshdsl line-config arsnrmarginchk {enable | disable}

Enable/disable auto retrain based on SNR margin for the specified port, enter the port number.

lre PORTS shdsl line-config arcrcthresh <0-500>

Bridge Determine threshold for the number of frame with CRC errors for auto-retrain for the specified port, enter the port number.

0-500 Threshold value.

lre PORTS shdsl line-config arsnrmarginthresh <1-6>

Determine margin threshold for auto-retrain for the specified port, enter the port number.

1-6 Value of threshold.

lre PORTSshdsl line-config artime <1-10>

Determine the time auto-retrain occurs for auto-retrain for the specified port, enter the port number.

1-10 Time in seconds.

lre PORTS shdsl line-config opstatetrap{enable | disable}

Enable/disable trap indicating a change in op state for the specified port, enter the port number.

lre PORTSshdsl line-config frmroh <0-65535>

Determines framer overhead channel for the speci-fied port, enter the port number.

0-65535 Value for framer overhead channel.

lre PORTSshdsl line-config latrapenable{enable | disable}

Enables/disables trap for loop attenuation threshold crossing for the specified port, enter the port number.

lre PORTS shdsl line-config snrmgntrapenable {enable | disable}

Long Reach Ethernet configuration;- SHDSL configuration,- SHDSL line configuration,- Trap for SNR Margin Threshold crossing.

PORTS LRE port or slot number (1/1|1/1-1/8|s1|s1-s3).

enable Enable

disable Disable

lre PORTS shdsl line-config frmrohtrapenable {enable | disable}

Enable/disable trap for framer overhead threshold crossing for the specified port, enter the port number.

206

Operate CLI

Id:0900d805805d4568

Port configuration


lre PORTS shdsl endp-maint powerbackoff stuC(default | disable)

Bridge Long Reach Ethernet configuration;- SHDSL configuration,- SHDSL endp maint profile,- Defines power backoff mode.

PORTS LRE port or slot number (1/1|1/1-1/8|s1|s1-s3)

stuC SHDSL LIU = stuC

default Default

disable Disable

207


Id:0900d805805d4568

To configure SHDSL line-config profile (action), use the following command.

lre PORTS shdsl endp-maint powerbackoff stuR(default | enhanced)

Bridge Long Reach Ethernet configuration;- SHDSL configuration,- Defines power backoff mode- SHDSL endp maint profile.


stuR SHDSL modem = stuR.

default Default.

enhanced Enhanced.

lre PORTS shdsl endp-maint loopback stuC(noLoopback | normalLoopback | digitalLoopback | analogLoop-back | interfaceLoopback | localFramerLoopback)

Long Reach Ethernet configuration;- SHDSL configuration,- SHDSL endp maint profile,- Defines loopback configuration.


stuC SHDSL LIU = stuC

noLoopback NoLoopback

normalLoopback NormalLoopback

digitalLoopback DigitalLoopback

analogLoopback AnalogLoopback

interfaceLoopback InterfaceLoopback

localFramerLoopback LocalFramerLoopback

lre PORTS shdsl endp-maint loopback stuR(noLoopback | normalLoopback |specialLoopback | normalLoopbackEocId9 | specialLoopbackEocId9)

Long Reach Ethernet configuration.


shdsl SHDSL configuration.

endp-maint SHDSL endp maint profile.

loopback Defines loopback configuration.

stuR SHDSL modem = stuR.

noLoopback NoLoopback.

normalLoopback NormalLoopback.

specialLoopback SpecialLoopback.

normalLoopbackEocId9

NormalLoopbackEocId9.

specialLoopbackEocId9

SpecialLoopbackEocId9.

lre PORTSshdsl endp-maint softrestart

Enables the manager to trigger a soft restart of the modem at the associated segment endpoint.

lre PORTSshdsl unit-maint timeout {stuC I stuR} <0-4095>

Sets timeout value for loopback for specified port, enter the port number

0-4095 Value in minutes. (0 means timeout disable).


208

Operate CLI

Id:0900d805805d4568

Port configuration

Displaying line-config profileTo display a configuration of SHDSL line-config, use the following commands.


lre PORTS shdsl line-config action(startup | abortreq | gearshiftreq | downloadreq | bertstarttxreq | bertstartrxreq | bertstopreq | hybridlosstestreq | spectrumdownreq | spec-trumupreq | spectrumtxrxreq | residualechoreq | totalechoreq | nextpsdreq | autoretrainonreq | autore-trainoffreq | propeoconreq | propeocoffreq | rmtatmcellstatusreq | rmt-fullstatusreq)

Bridge Long Reach Ethernet configuration;- SHDSL configuration,- SHDSL line configuration;- Defines Action.


startup Start Up

abortreq Abort Request

gearshiftreq Gear Shift Request

downloadreq Download Request

bertstarttxreq Bert Start Tx Request

bertstartrxreq Bert Start Rx Request

bertstopreq Bert Stop Request

hybridlosstestreq Hybrid Loss Test Request

spectrumdownreq Spectrum Down Request

spectrumupreq Spectrum Up Request

spectrumtxrxreq Spectrum Tx Rx Request

residualechoreq Residual Echo Request

totalechoreq Total Echo Request

nextpsdreq Next Psd Request

autoretrainonreq Auto Retrain On Request

autoretrainoffreq Auto Retrain Off Request

propeoconreq Prop Eoc On Request

propeocoffreq Prop Eoc Off Request

rmtatmcellstatusreq Remote Atm Cell Status Request

rmtfullstatusreq Remote Full Status Request


show lre PORTS shdsl line-config


Shows SHDSL line configuration for a specified port, enter the port number.

show lre PORTS shdsl line-config-detail

Shows SHDSL line configuration in detail for a specified port, enter the port number.

show lre PORTS shdsl line-status

Shows SHDSL line state for a specified port, enter the port number.

show lre PORTS shdsl perf-intv 15min {stuC | stuR} {network-side | customer-side} {wire-pair-1 | wire-pair-2| wire-pair-3| wire-pair-4} <1-96>

Shows 15 minutes interval of SHDSL channel for a specified port, enter the port number.

1-96 Interval number 1-96 (show intvl 1 with CR).

209


Id:0900d805805d4568

6.3.3.2 Configuring SHDSL alarm-config profileJust like configuring alarm-config Profile for ADSL port, you can configure an SHDSL alarm-config profile as following steps:

Step 1

• Creating an alarm-config profile

Step 2

• Configuring an alarm-config profile

Step 3

• Applying alarm-config profile

Creating an alarm-config profileTo create an alarm-config profile, use the following command.

show lre PORTSshdsl perf-intv 1day{stuC | stuR} {network-side | customer-side} {wire-pair-1 | wire-pair-2| wire-pair-3| wire-pair-4} <1-30>


Shows 1 day interval of SHDSL channel for a specified port, enter the port number

1-30 Interval number 1-30 (show intvl 1 with CR)

show lre PORTSshdsl intv 15min{wire-pair-1 | wire-pair-2| wire-pair-3| wire-pair-4} <1-96>

Shows 15 minutes interval of SHDSL line.


show lre PORTSshdsl intv 1day{wire-pair-1 | wire-pair-2| wire-pair-3| wire-pair-4} <1-96>

Shows 1 day interval of SHDSL line.

1-96 Interval number

show lre PORTSshdsl ep-maint

Shows endpoint maintenance configuration for a specified port, enter the port number.

show lre PORTS shdsl unit-maint

Shows unit maintenance configuration for a specified port, enter the port number.

show shdsl intv valid-no{15min | 1day}

Shows number of valid intervals for all SHDSL ports.

15min 15 min invalid numbers

1day 1 day invalid numbers

show lre PORTS shdsl inventory

Shows inventory data for a specified port, enter the port number.



shdsl add alarm-config-profile PROFILE

Bridge Create an SHDSL alarm-config profile, enter a profile name.

210

Operate CLI

Id:0900d805805d4568

Port configuration

Configuring an alarm-config profileTo configure an SHDSL alarm-config profile, use the following commands.

Displaying alarm-config profileTo display the configuration of SHDSL alarm-config, use the following commands.


shdsl alarm-config-profile PROFILE threshloopattenuation VALUE

Bridge Configures a specific loop attenuation alarm threshold profile.

PROFILE Profile name.

VALUE Value for loop attenuation alarm threshold.

shdsl alarm-config-profile PROFILE threshSNRmargin VALUE

Configures a specific SNR margin alarm threshold profile, enter profile name.

VALUE Value for SNR margin alarm threshold (-127 to +128).

shdsl alarm-config-profile PROFILE threshES <0-900>

Configures a specific ES alarm threshold profile, enter profile name.

0-900 Value for ES alarm threshold

shdsl alarm-config-profile PROFILE threshSES <0-900>

Configures a specific SES alarm threshold profile, enter profile name.

0-900 Value for SES alarm threshold

shdsl alarm-config-profile PROFILE threshCRCanomalies <0-2147483647>

Configures a specific CRC anomalies alarm threshold profile, enter profile name.

0-2147483647

Value for CRC anomalies alarm threshold.

shdsl alarm-config-profile PROFILE threshLOSWS <0-900>

Configures a specific LOSWS alarm threshold profile, enter profile name.

0-900 Value for LOSWS alarm threshold.

shdsl alarm-config-profile PROFILE threshUAS <0-900>

Configures a specific UAS alarm threshold profile, enter profile name .

0-900 Value for UAS alarm threshold.


show shdsl alarm-config-profile PROFILE


Shows an SHDSL alarm-config profile, enter a profile name.

show shdsl alarm-config-profile Shows all SHDSL alarm-config profiles.

show shdsl alarm-config-info PROFILE

Shows config information of a specified SHDSL alarm-config profile, enter a profile name.

show shdsl alarm-config-info Shows information of all SHDSL alarm-config profiles.

show lre PORTS shdsl epcurr-status

Shows SHDSL endpoint currently status (detail), enter an LRE port number: (x/y)

show lre PORTSshdsl alarm-config-info

Shows an SHDSL line alarm profile information on an LRE port or slot, enter an LRE port or slot number: (1/1|1/1-1/8|s1|s1-s3).

211


Id:0900d805805d4568

Applying alarm-config profileTo apply a configured alarm-config profile to a specific port or slot, use the following commands.

Copying an alarm-config profileTo copy an alarm-config profile, use the following command.

Deleting an alarm-config profileTo delete an alarm-config profile, use the following command.

6.3.3.3 Configuring SHDSL span-config profile

Creating a span-config profileTo create a span-config profile, use the following command, see also 14.3.20 Use case: SHDSL port configuration.

Copying a span-config profileTo copy a span-config profile, use the following command.

Deleting a span-config profile


lre PORTSshdsl alarm-config PROFILE

Bridge Configures an assignment of alarm profile to profile for an LRE port or slot, enter profile name and LRE port or slot number: (1/1-1/8 | s1).

lre PORTSshdsl alarm-config span PROFILE

Configures an assignment of alarm profile to span profile for an LRE port or slot, enter profile name and LRE port or slot number: (1/1-1/8 | s1).


shdsl copy alarm-config-profile PROFILE PROFILE

Bridge Copy an SHDSL alarm-config profile.

PROFILE Enter source file name (e.g. DEFVAL).

PROFILE Enter target file name (e.g. DEFVAL).


shdsl delete alarm-config-profile PROFILE

Bridge Deletes SHDSL alarm-config profile, enter the profile name.


shdsl add span-config-profile PROFILE

Bridge Create an SHDSL span-config profile, enter a profile name.


shdsl copy span-config-profile PROFILE PROFILE

Bridge Copy a SHDSL span-config profile.



212

Operate CLI

Id:0900d805805d4568

Port configuration

To delete a span-config profile, use the following command.

Configuring span-config profileTo configure SHDSL span-config profile, use the following commands, see also 14.3.20 Use case: SHDSL port configuration.


shdsl delete span-config-profile PROFILE

Bridge Deletes an SHDSL span-config profile, enter the profile name.


shdsl span-config-profile PROFILE remoteenable {enable | disable}

Bridge Enable/disable remote management of units.

shdsl span-config-profile PROFILE psd {symmetric | asymmetric | r1asymmetric | r2asymmetic}

Configures use of symmetric/asymmetric psd (Power Spectral Density) mask, enter a profile name.

shdsl span-config-profile PROFILE transmissionmode {region1 | region2}

Configures the transmission mode, enter a profile name.

shdsl span-config-profile PROFILE currcondtgtmgndown MARGIN

Specifies the downstream current condition target SNR margin, enter a profile name.

MARGIN Margin value (-10 to 21).

213


Id:0900d805805d4568

shdsl span-config-profile PROFILE minlinerate <200-22816>maxlinerate <200-22816>

Bridge Configures the minimum and maximum transmit rate.

PROFILE Profile name.

minlinerate Configures the minimum transmission rate.

200-22816 Rate (Kbps) where both limits follows the calculation: m*200...m*5704 (m=1...4 no. of wire pairs).

maxlinerate Configures the maximum transmis-sion rate.

200-11408 Rate (Kbps) where both limits follows the calculation: m*200...m*5704 (m=1...4 no. of wire pairs)

shdsl span-config-profile PROFILE worstcasetgtmgndown MARGIN

Specifies the downstream worst case target SNR margin, enter a profile name.


shdsl span-config-profile PROFILE currcondtgtmgnup MARGIN

Specifies the upstream current condition target SNR margin, enter a profile name.


shdsl span-config-profile PROFILE worstcasetgtmgnup MARGIN

Specifies the upstream worst case target SNR margin, enter a profile name.


shdsl span-config-profile PROFILE referenceclock (localclk|netclk|dataornetclk|dataclk)

Specifies clock reference for STU-C.

localclk Local clock.

netclk Network clock.

dataornetclk Data or network clock.

dataclk Data clock.

shdsl span-config-profile PROFILE powerfeeding(nopower|powerfeed|wettingcurrent)

Specifies power feeding in SHDSL line.

shdsl span-config-profile PROFILE usedtgtmgns {currentconddown | worstcasedown | currentcondup | worstcaseup}

Enable/disable target SNR margin, enter a profile name.

current-conddown

Current condition down.

worstcase-down

Worst case down.

current-condup

Current condition up.

worst-casedup

Worst case up.

shdsl span-config-profile PROFILE lineprobe {enable | disable}

Enable/disable line probe, enter a profile name.


214

Operate CLI

Id:0900d805805d4568

Port configuration

Displaying span-config profileTo display a configuration of SHDSL span-config, use the following commands.

shdsl span-config-profile PROFILE wireinterface {twowire | fourwire | fourwirebitinterleaved | fourwirebyteinterleaveenhanced | fourwirebitinterleaveenhanced | sixwire | eightwire } {minlinerate <200-22816>} {maxlinerate <200-22816>}

Bridge Configures two-wire or optional four, six, eight-wire operation.

twowire Two wire.

fourwire Four wire.

fourwire-bitinter-leaved

Four wire bit interleave.

fourwire-byteinter-leaveenhanced

Four wire byte interleave enhanced.

fourwire-bitinter-leaveenhanced

Four wire bit interleave enhanced.

sixwire Six wire.

eightwire Eight wire.

minlinerate Configures the minimum transmission rate.

<200-22816>

Rate (Kbps) where both limits follows the calculation: m*200...m*5704 (m=1...4 no. of wire pairs)

maxlinerate Configures the maximum transmis-sion rate.

<200-22816>

Rate (Kbps) where both limits follows the calculation: m*200...m*5704 (m=1...4 no. of wire pairs)

shdsl span-config-profile PROFILE tc-layer {atm | efm | hdlc}

Configures used TC-Layer.

shdsl span-config-profile PROFILE pam-constellation {16tcpam | 32tcpam | autotcpam}

SHDSL tcpam mode constellation.

16tcpam Use 16bit tcpam mode only

32tcpam Use 32bit tcpam mode only

autotcpam Auto tcpam mode



show shdsl span-config-profile PROFILE


Shows a specified SHDSL span-config profile, enter a profile name.

show shdsl span-config-profile Shows all SHDSL span-config profiles.

show shdsl span-config-info PROFILE

Shows config information of a specified SHDSL span-config profile, enter a profile name.

show shdsl span-config-info Shows config information of all SHDSL span config profiles.

215


Id:0900d805805d4568

Applying a span-config profileTo apply a configured span-config profile to a specific port or slot, use the following command.

Example of setting span-config profile

SWITCH (bridge)# port lre 5/1 disable

SWITCH (bridge)# lre 5/1 shdsl span-config test

SWITCH (bridge)# port lre 5/1 enable

show lre PORTSshdsl span-config-info


Shows config information for a specified Long Reach Ethernet port, enter LRE port or slot number: (1/1-1/8 | s1 | s1-s3).

show lre PORTS shdsl span-status

Shows span-config status for a specified Long Reach Ethernet port, enter LRE port or slot number: (1/1-1/8 | s1 | s1-s3).

show shdsl span-config-info-long Shows SHDSL span config profile information.

show shdsl span-config-info-long PROFILE

Shows SHDSL span config profile information.- Enter profile name.



lre PORTS shdsl span-config PROFILE

Bridge Configures a profile for Long Reach Ethernet, enter a profile name.

PORTS LRE port or slot number (1/1-1/8 I s1)

SWITCH(bridge)# shdsl add span-config-profile test

SWITCH(bridge)# shdsl span-config-profile test minlinerate 200 maxlinerate 2320

SWITCH(bridge)# shdsl span-config-profile test transmissionmode region 1

SWITCH(bridge)# show shdsl span-config-profile test

----------------------------------------------------------------------------Profile Number: 2Profile Name : test---------------Wire Interface : 2 wirePSD : symmetricTransmission Mode: region 1 / -Remote Enabled : noPower Feeding : no powerReference Clock : localLine Probe Enable: yesMinimum / Maximum Line Rate (kbps) : 200 / 2320 Target Margin: Target Margin used:Curr Cond Down/Up (dB) : 5 / 5 yes / yesWorst Case Down/Up (dB): 5 / 5 no / noPAM constellation: autotcpamTC layer support : ATM============================================================================

216

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.3.4 SHDSL bis tcpam modeTo configure SHDSL bis tcpam mode, use the following command.

Displaying SHDSL bis tcpam modeTo show SHDSL bis tcpam mode, use the following command.

Example:SWITCH(bridge)# show lre 3/1 shdsl bis-tcpam-mode

----------------------------------------------------------------- | Payload | Port | Bis pam mode | MaxAtnRate | ActualRate | GsStartUpInfo ----------------------------------------------------------------- 03/01 autotcpam 0 0 unsupported =================================================================

6.3.4 Configuring xDSL port of Convergate-D based DSL cardsxDSL port configuration is for xDSL cards based on Convergate-D Chipset. (IU_VDSL24, IU_VDSL24P, IU_VDSL48P, IU_ADSL72_CG). The following Sections introduce how to configure features on an xDSL port:

• Configuring xDSL line-config profile • Verifying line-config profile • Verifying physical status information • Verifying channel status information • Assigning the configured line-config profile to a port • xDSL notch profile • xDSL channel profile • xDSL PSD mask profile • xDSL DELT • Configuring xDSL alarm-config profile • Example of configuring VDSL profile • Example of configuring IU_VDSL24 to ADSL mode

6.3.4.1 Configuring xDSL line-config profileThe operator can create and configure xDSL line-config profiles, se also 14.3.1 Use case: ADSL configuration and 14.3.23 Use case: VDSL2 to ADSL2+ fallback.

Creating a line-config profile


lre PORTSshdsl bis-tcpam-mode (16tcpam | 32tcpam| autotcpam)

Bridge SHDSL tcpam mode configuration

16tcpam 16bit tcpam mode

32tcpam 32bit tcpam mode

autotcpam auto tcpam mode


show lre PORTSshdsl bis-tcpam-mode

Bridge Shows SHDSL bis tcpam mode.

217


Id:0900d805805d4568

In order to create a line-config profile, use the following command

Copying a line-config profileTo copy an line-config profile, use the following command.

Deleting a line-config profileIn order to delete line-config profile, use the following command

Profile rate modeIn order to configure rate mode, use the following commands.

Max. aggregate powerIn order to configure max. aggregate power, use the following command

Command Mode Function

xdsl add line-config-profile PROFILE Bridge Create xDSL line-config profile, enter the profile name.


xdsl copy line-config-profile PROFILE PROFILE

Bridge Copy an xDSL line-config profile.

xdsl xDSL profile configuration.

copy Copy xDSL profile.

line-config-profile

xDSL line config profile.

PROFILE Enter source profile name (e.g. DEFVAL, DEFVAL_VDSL2_ISDN, DEFVAL_VDSL2_P, DEFVAL_ADSL_A, DEFVAL_ADSL_B, DEFVAL_ADSL_J)

PROFILE Enter target profile name


xdsl delete line-config-profile PROFILE

Bridge Deletes xDSL line-config profile, enter the profile name.


xdsl line-config-profile PROFILE {down-rate-mode I up-rate-mode}{fixed I adapt-at-init I adapt-at-runtime}

Bridge Configures rate mode on xDSL line, enter the profile name.

down-rate-mode Rate selection behavior down-stream.

up-rate-mode Rate selection behavior upstream.

fixed Force to configured rate.

adapt-at-init Adapt to line quality.

adapt-at-runtime Seamless rate adapts during runtime based upon line quality.

218

Operate CLI

Id:0900d805805d4568

Port configuration

Max. Rx power upstreamIn order to configure max. Rx power upstream, use the following command

Signal noise margin (SNR margin)In order to configure signal noise margin, use one of the following commands.


xdsl line-config-profile PROFILE {down-max-pwr I up-max-pwr}<0-255>

Bridge Configures max aggregate power on xDSL line, enter the profile name.

down-max-pwr Aggregate downstream power.

up-max-pwr Aggregate upstream power.

0-255 Value from 0 to 25.5 dBm in steps of 0.1 dBm.


xdsl line-config-profile PROFILEmax-up-rx-pwr MAX_RCV_POWER

Bridge Configures max Rx power upstream on xDSL line, enter the profile name.

max-up-rx-pwr Max. aggregate upstream.

MAX_RCV_POWER Value from -25.5 - 25.5 dBm in steps of 0.1 dBm.


xdsl line-config-profile PROFILE {down-max-snr-mgn I down-min-snr-mgn Idown-tgt-snr-mgn I up-max-snr-mgn I up-min-snr-mgn I up-tgt-snr-mgn}<0-310>

Bridge Configures max/min. SNR margin on xDSL line, enter the profile name.

down-max... Max. downstream SNR margin.

down-min... Min. downstream SNR margin.

down-tgt... Target downstream SNR margin the transceiver must achieve.

up-max... Max. upstream SNR margin.

up-min... Min. upstream SNR margin.

up-tgt... Target upstream SNR margin the transceiver must achieve.

0-310 Value from 0-31 dBm in steps of 0.1dBm.

xdsl line-config-profile PROFILE (down-max-snr-mgn|up-max-snr-mgn) unlimited

Configures max/min. SNR margin;- xDSL profile configuration,- xDSL line config profile.


down-max-snr-mgn

Maximum downstream Sig-nal/Noise margin.

up-max-snr-mgn

Maximum upstream Signal/Noise margin.

unlimited The maximum value is infinite.

219


Id:0900d805805d4568

Virtual noiseIn order to configure virtual noise, use the following commands.

xdsl line-config-profile PROFILE {vtuc-down-snr-mgn I vtuc-up-snr-mgn I vtur-down-snr-mgn I vtur-up-snr-mgn} <0-310>

Bridge Sets SNR margin for rate downshift/upshift on xDSL line, enter the profile name.

vtuc-down... SNR margin for rate downshift VTUC(upstream).

vtuc-up... SNR margin for rate upshift VTUC (upstream).

vtur-down... SNR margin for rate downshift VTUR (downstream).

vtur-up... SNR margin for rate upshift VTUR (downstream)).

0-310 Value from 0-31 dBm in steps of 0.1dBm.

xdsl line-config-profile PROFILE {vtuc-down-snr-time I vtuc-up-snr-time I vtur-down-snr-time I vtur-up-snr-time} <0-16383>

Sets SNR margin the downshift/upshift min. time on xDSL line, enter the profile name.

vtuc-down... Min. time that current margin < DownshiftSnrMgnbefore down-shift VTUC (upstream) occur.

svtuc-up... Min. time that current margin > UpshiftSnrMgnbefore upshift VTUC (upstream) occurs.

vtur-down... Min. time that current margin < DownshiftSnrMgnbefore down-shift VTUR (downstream) occurs.

vtur-up... Min. time that current margin > UpshiftSnrMgnbefore upshift VTUR (downstream) occurs.



xdsl line-config-profile PROFILE (snr-mode-ds|snr-mode-us) (enable|disable)

Bridge Enable/disable the transmitter referred virtual noise in the DS/US direction, enter the profile name.

xdsl xDSL profile configuration.

line-config-profile

xDSL line config profile.


snr-mode-ds

Enables the transmitter referred virtual noise in the DS direction, defined in "tx-ref-vn-down".

snr-mode-us

Enables the transmitter referred virtual noise in the US direction, defined in "tx-ref-vn-up".

enable Enables virtual noise.

disable Disables virtual noise.


220

Operate CLI

Id:0900d805805d4568

Port configuration

MaxNominal transmit PSD (power spectral density)In order to configure max nominal transmit PSD in upstream/downstream direction during initialization and show time, use following command.

To make upstream PSD mask selection of ATU-R, use the following command.

xdsl line-config-profile PROFILEtx-ref-vn-down add <1-4095> (255 | <0-200>)

Bridge Sets one downstream virtual noise breakpoint (pair of sub-carrier + level), add one subcarrier/level pair (ascending order of subcarriers will be sorted automatically) on xDSL line.

1-4095 Subcarrier index.

255 Special value (coded as 255) indicates a noise level of 0 W/Hz.

0-200 Noise level -40 dBm/Hz (coded as 0) to -140 dBm/Hz (coded as 200) in steps of 0.5 dBm/Hz.

xdsl line-config-profile PROFILEtx-ref-vn-up add <1-4095>(255 | <0-200>)

Sets one upstream virtual noise breakpoint (pair of subcar-rier + level), add one subcarrier/level pair (ascending order of subcarriers will be sorted automatically) on xDSL line.


255 Special value (coded as 255) indicates a noise level of 0 W/Hz.

0-200 Noise level -40 dBm/Hz (coded as 0) to -140 dBm/Hz (coded as 200) in steps of 0.5 dBm/Hz.

xdsl line-config-profile PROFILEtx-ref-vn-down delete index<1-32>

Deletes one entry (pair subcarrier/level) by mask index on xDSL line1-32: virtual noise mask index 1-32 (down-stream)".

xdsl line-config-profile PROFILEtx-ref-vn-up delete index <1-16>

Deletes one entry (pair subcarrier/level) by mask index on xDSL line1-16: virtual noise mask index 1-16 (upstream).

xdsl line-config-profile PROFILEtx-ref-vn-down delete subcarrier<1-4095>

Deletes one entry (pair subcarrier/level) by subcarrier index on xDSL line.

1-4095 Virtual noise mask subcarrier index 1-4095 (downstream).

xdsl line-config-profile PROFILEtx-ref-vn-up delete subcarrier<1-4095>

Deletes one entry (pair subcarrier/level) by subcarrier index on xDSL line.

1-4095 Virtual noise mask subcarrier index 1-4095 (upstream).


xdsl line-config-profile PROFILE (down-max-nom-psd|up-max-nom-psd) MAX_NOM_PSD

Bridge Sets max nominal transmit PSD during initialization and show time.

down-max-nom-psd Max. nominal transmit PSD in downstream direction during initialization and show time.

up-max-nom-psd Max. nominal transmit PSD in upstream direction during initialization and show time.

MAX_NOM_PSD Value between -600...-300 in 0.1 dBm/Hz.


221


Id:0900d805805d4568

xDSL2 profilesIn order to configure xDSL2 profiles, use the following command


xdsl line-config-profile PROFILEus-psd-mask-sel{adlu-eu-32| adlu-eu-36| adlu-eu-40| adlu-eu-44| adlu-eu-48| adlu-eu-52| adlu-eu-56| adlu-eu-60|adlu-eu-64}

Bridge Selects the PSD mask option to be used. Only for annexes J and M - other DSL standards will ignore value! Enter the profile name.


xdsl line-config-profile PROFILE use-profile-number{profile8a Iprofile8b I profile8c | profile8d Iprofile12a I profile12b I profile17a Iprofile17b | profile30a}

Bridge Select xDSL2 profile which should be used for basic parameter configuration on xDSL line, enter the profile name.

8a 8A (8.8 MHz bandwidth, 2048 tones, 17.5 dBm line power)

8b 8B (8.8 MHz bandwidth, 2048 tones, 20.5 dBm line power)

8c 8C (8.5 MHz Bandwidth, 1972 Tones, 11.5 dBm Line Power)

8d 8D (8.8 MHz bandwidth, 2048 tones, 14.5 dBm line power)

12a 12A (12 MHz bandwidth, 2783 tones, 14.5 dBm line power)

12b 12B (12 MHz bandwidth, 2783 tones, 14.5 dBm line power)


17b 17B (17 MHz Bandwidth, 4096 Tones, 14.5 dBm line power)


222

Operate CLI

Id:0900d805805d4568

Port configuration

GS standardIn order to configure line type, use the following command:

Bit swappingIn order to enable/disable bit swapping, use the following command


xdsl line-config-profile PROFILE profile-gs-standard{ansi-t1-413|adsl-pots| adsl-isdn| adsl2-annexj |adsl2-pots| adsl2-isdn| adsl2plus-annexj |reach-ext-adsl2-pots-m1| reach-ext-adsl2-pots-m2| ext-up-adsl2-pots| ext-up-adsl2plus-pots| adsl2plus-pots| adsl2plus-isdn| vdsl2-region-a| vdsl2-region-b| vdsl2-region-c}

Bridge Configures the used standard compliance (selects either single mode or combine all and system selects) on xDSL line, enter the profile name.

ansi-t1-413 ANSI T1.413-1998 Standard.

adsl-isdn G992.1 ADSL Isdn NonOverlapped.

adsl-pots G992.1 ADSL Pots NonOverlapped.

adsl2-annexj G992.3 Adm ADSL2 Annex J NonOverlapped.

adsl2-pots G992.3 ADSL2 Pots NonOverlapped.

adsl2-isdn G992.3 ADSL2 Isdn NonOverlapped.

adsl2plus-annexj G992.3 Adm ADSL2+ Annex J NonOverlapped.

reach-ext-adsl2-pots-m1 G992.3 Reach Ext ADSL2 Pots NonOverlapped M1.

reach-ext-adsl2-pots-m2 G992.3 Reach Ext ADSL2 Pots NonOverlapped M2.

ext-up-adsl2-pots G992.3 Ext Up Adsl2 Pots NonOverlapped - Annex M.

ext-up-adsl2plus-pots G992.5 Ext Up Adsl2+ Pots NonOverlapped - Annex M.

adsl2plus-pots G992.5 ADSL2+ Pots NonOverlapped.

adsl2plus-isdn G992.5 ADSL2+ Isdn NonOverlapped.

vdsl2-region-a G993.2 VDSL2 NonOverlapped RegionA.

vdsl2-region-b G993.2 VDSL2 NonOverlapped RegionB.

vdsl2-region-c G993.2 VDSL2 NonOverlapped RegionC.

g Annex J is supported by following cards: iuadsl_72j_cgh, iuadsl72b_cg, iuadsl_72j_cgh and iuvdsl48i2_e.


xdsl line-config-profile PROFILE {down-bitswap I up-bitswap}{enable I disable} Bridge Enable/disable downstream/upstream bit swapping on xDSL line, enter the profile name.

223


Id:0900d805805d4568

PBOIn order to configure power backoff (PBO )attributes, use one of the following com-mands:


adsl dpbo-config-profile PROFILE (down-pbo-escma | down-pbo-escmb | down-pbo-escmc) <0-640>

Bridge ADSL configuration;- ADSL dpbo config profile


down-pbo-escma

Cabel model parameter A (fixed part of ESCM(f) equation)

down-pbo-escmb

Cabel model parameter B (linear part of ESCM(f) equation)

down-pbo-escmc

Cabel model parameter C (square root part of ESCM(f) equation)

0-640 Value in multiples of 2E-8

adsl dpbo-config-profile PROFILE (down-pbo-esel | down-pbo-esel-min) <0-512>

ADSL configuration;- ADSL dpbo config profile


down-pbo-esel-min

Downstream power backoff assumed electrical length of the line

down-pbo-esel

Downstream power backoff assumed minimum electrical length of the line

0-512 Value in steps of 0.5dB (0 = PBO disabled)

adsl dpbo-config-profile PROFILE down-pbo-fmax <1-512>

ADSL configuration;

– ADSL dpbo config profile– End value of frequency range where PBO is applied


0-512 Value * 4.3125 kHz

adsl dpbo-config-profile PROFILE down-pbo-fmin <1-512>

ADSL configuration;

– ADSL dpbo config profile– Start value of frequency range where PBO is applied


0-512 Value * 4.3125 kHz

adsl dpbo-config-profile PROFILE down-pbo-mus <0-255>

ADSL configuration;

– ADSL dpbo config profile– Downstream power backoff assumed Minimum

Usable receive Signal PSD


0-512 Value in steps of 0.5dBm/Hz

224

Operate CLI

Id:0900d805805d4568

Port configuration

adsl dpbo-config-profile PROFILE dpbo-epsd add <1-512> <0-255>

Bridge ADSL configuration;

– ADSL dpbo config profile– Add one subcarrier/level pair (ascending order of

subcarriers will be sorted automatically)– Set one PSD mask pair subcarrier + level to be per-

mitted at the exchange.


dpbo-epsd add

1-512 Subcarrier index

0-255 EPSD mask level

adsl dpbo-config-profile PROFILE dpbo-epsd delete index <1-16>

ADSL configuration

– ADSL dpbo config profile– Set one PSD mask pair subcarrier + level to be per-

mitted at the exchange– Delete one entry (pair subcarrier/level) by index or

subcarrier.


1-16 EPSD mask index 1-16

adsl dpbo-config-profile PROFILE dpbo-epsd delete subcarrier<1-512>

ADSL configuration

– ADSL dpbo config profile– Set one PSD mask pair subcarrier + level to be per-

mitted at the exchange– Delete one entry (pair subcarrier/level) by index or

subcarrier.– Deletion by subcarrier index.


1-512 EPSD subcarrier index 1-512

adsl add dpbo-config-profile PROFILE

ADSL configuration

– Add ADSL profile– ADSL dpbo config profile


adsl copy dpbo-config-profile PROFILE PROFILE

ADSL configuration

– Copy ADSL profile– ADSL dpbo config profile

PROFILE Source ADSL dpbo Profile Name

PROFILE Target ADSL dpbo Profile Name

adsl delete dpbo-config-profile PROFILE

ADSL configuration

– Delete ADSL profile– ADSL dpbo config profile



225


Id:0900d805805d4568

xdsl line-config-profile PROFILE {down-pbo-esel I down-pbo-esel-min} <0-512>

Bridge Configures power backoff assumed electrical length of xDSL line, enter the profile name.

down-pbo-esel

Downstream power backoff assumed electrical length.

down-pbo-esel-min

Downstream power backoff assumed minimum electrical length.

0-255 Values in steps of 0.5 dB (0 = PBO disabled).

xdsl line-config-profile PROFILE down-pbo-mus <0-255>

Sets min. usable receive signal PSD on xDSL line, enter the profile name.

0-255 Values in steps of 0.5 dB/Hz.

xdsl line-config-profile PROFILE down-pbo-fmin <0-4096>

Sets start value of frequency range where PBO is applied on xDSL line, enter the profile name.

0-4096 Value *4.3125 kHz.

xdsl line-config-profile PROFILE down-pbo-fmax <32-4095>

Sets end value of frequency range where PBO is applied on xDSL line, enter the profile name.

32-4095 Value *4.3125 kHz.

xdsl line-config-profile PROFILE dpbo-epsd add <1-4095> <0-255>

Add one subcarrier/level pair (PSD mask) on xDSL line, enter the profile name.


0-255 PSD mask level.

xdsl line-config-profile PROFILE dpbo-epsd delete index <1-16>

Deletes one entry (pair subcarrier/level) by index on xDSL line, enter the profile name.

1-16 EPSD mask index.

xdsl line-config-profile PROFILE dpbo-epsd delete subcarrier<1-4095>

Deletes one entry (pair subcarrier/level) by subcarrier on xDSL line, enter the profile name.

1-4095 EPSD subcarrier index.

xdsl line-config-profile PROFILE {down-pbo-escma I down-pbo-escmb I down-pbo-escmc} <0-640>

Configures cable model parameter on xDSL line, enter the profile name.

escma Cable model parameter A (fixed part of ESCM (f) equation).

escmb Cable model parameter B (linear part of ESCM (f) equation).

escmc Cable model parameter C (square root part of ESCM (f) equation).

0-255 Value in multiples of 2E-8.

xdsl line-config-profile PROFILEup-pboa {us1 I us2 I us3 I us4 | us5}<4000-8095>

Configures the value A in the reference PSD on xDSL line, enter the profile name.

us1 UPBOA for US1 band.





4000-8095 Value in 0.01 dBm/Hz.


226

Operate CLI

Id:0900d805805d4568

Port configuration

Power managementIn order to configure power management, use the following command

xdsl line-config-profile PROFILEup-pbob {us1|us2|us3|us4|us5} <0-4095>

Bridge Configures the value B in the reference PSD on xDSL line, enter the profile name.

us1 UPBOB for US1 band.





0-4095 Value in 0.01 dBm/Hz (if 0 + up-pboa=4000 => UPBO disabled for this band).

xdsl line-config-profile PROFILE up-pbo-kl <0-1280>

Configures the upstream electrical loop length expressed in dB at 1 MHz on xDSL line, enter the profile name.

0-1280 Value in steps of 0.1 dB (0=0 dB;1280=128 dB).

xdsl line-config-profile PROFILE up-pbo-ko {enable I disable}

Enable/disable usage of electrical loop length on xDSL line, enter the profile name.

xdsl line-config-profile PROFILE boost-mode {enable I disable}

Enable/disable usage of boost mode on xDSL line, enter the profile name.


xdsl line-config-profile PROFILE{pwr-mgmt-l0time I pwr-mgmt-l2time} <0-255>

Bridge Configures the L0/L2 time on xDSL line, enter the profile name.

xdsl line-config-profile PROFILE(pwr-mgmt-l2atpr | pwr-mgmt-l2atprt) <0-31>

Configures the maximum aggregate transmit power reduction.

pwr-mgmt-l2atpr

Maximum aggregate transmit power reduction performed through a single Power Trim.

pwr-mgmt-l2atprt

Total max. aggregate transmit power reduction performed in L2 state (L2 req.s + Power Trims).

0-31 Value in dB.

xdsl line-config-profile PROFILEpwr-mgmt-mode{disabled | l3-enabled | l1-l2-enabled |l1-l2-l3-enabled }

Configures the enabled power management state and where the line may autonomously transition to.

disabled None

l3-enabled Idle state.

l1-l2-enabled Low power state.

l1-l2-l3-enabled Both idle and low power state.


227


Id:0900d805805d4568

gsActionIn order to set gsAction (possible test modes on IU), use the following command.

lre PORTS xdsl pmsf(none | l0-to-l2 | l2-to-l0)

Bridge Power Management State Forced

none PM is not forced but only influenced by the Admin State.

l0-to-l2 Force the line to transition from L0 full power to L2 low power.

l2-to-l0 Force the line to transition from L2 low power to L0 full power.


lre PORTS xdsl line-config gs-action (startup | spectrum-reverb | atm-lb | spectrum-medley | showtime-lock | return-loss)

Bridge LRE port information.



xdsl xDSL configuration.

line-config xDSL line config profile.

gs-action Defines gsAction (possible test modes on IU).

startup Start up (NO testmode activated).

spectrum-reverb Activates SPECTRUM REVERB mode without cyclic prefix.

atm-lb Activates the UTOPIA-loopback from DS to US.

spectrum-medley Activates SPECTRUM MEDLEY mode with cyclic prefix.

showtime-lock Activates a line with "Showtime-Lock" enabled.

return-loss Special command: mask all subcarriers afterwards REVERB mode.


228

Operate CLI

Id:0900d805805d4568

Port configuration

Handshake tonesIn order to set handshake tone, use the following command.

FilterIn order to set filter, use the following command.

Usage of subcarrier maskingIn order to enable/disable usage of subcarrier masking, use the following command.


lre PORTSxdsl line-config handshake-tones{vdsl2-b43 | vdsl2-a43 | vdsl2-v43 | vdsl1-v43p | vdsl1-v43i | adsl1-c43 | adsl2-j43 | adsl2-b43c | adsl2-a43c}

Bridge Influences handshake tone set according to G.994.1 Amendment 2.

adsl1-c43 Carrier set C43 for ADSL Annex C/J.

adsl2-a43c Carrier set A43C for ADSL2+ with US0 (No ISDN).

adsl2-b43c Carrier set B43C for ADSL2+ with US0.

adsl2-j43 Carrier set J43 for ADSL2/2+ Annex J/M with US0 (No ISDN).

vdsl1-v43i Carrier set V43P for VDSL1 over ISDN.

vdsl1-v43p Carrier set V43P for VDSL1 over POTS.

vdsl2-a43 Carrier set A43 for VDSL2 with US0 (No ISDN).

vdsl2-b43 Carrier set B43 for VDSL2 with US0.

vdsl2-v43 Carrier set V43 for VDSL2 without US0.


lre PORTS xdsl line-config filter(off | isdn | pots | pots2 | pots3)

Bridge Influences filter usage.

isdn Additional filter for xDSL over ISDN is used.

off No additional filter is used.

pots Additional filter for xDSL over POTS is used (VDSL2 with PSD limitations).

pots2 Additional filter for VDSL over POTS is used.

pots3 Additional filter for VDSL over POTS is used (Suggested mode for double US0 and quad US0).


xdsl line-config-profile PROFILEsubcarrier-mask-use {enable | disable}

Bridge Enable/disable usage of subcarrier masking (defined with subcarrier-mask).

229


Id:0900d805805d4568

Band plan numberTo select the band plan number which should be used for basic parameter configuration, use the following command.

g Pay attention to the following mapping of bandplans/VDSL2-profiles.

Configuration CLI Configuration chipset------------------------------------------------------------------------bandplan: annexa-... bandplan: annexa-...profile: 12B profile: 12A

bandplan: annexa-... bandplan: annexa-...profile: 17A profile: 17B

Configuration CLI Configuration chipset------------------------------------------------------------------------bandplan: annexb-997-E17-m2x-nus0 bandplan: annexb-997-E17-m2x-nus0 or annexb-998-ade17-m2x-a annexb-998-ade17-m2x-a or annexb-998-ade17-m2x-b annexb-998-ade17-m2x-b or annexb-998-ade17-m2x-m annexb-998-ade17-m2x-m or annexb-998-e17-m2x-a annexb-998-e17-m2x-aprofile: 17A profile: 17B


xdsl line-config-profile PROFILEband-plan-number{itu-annexa-m1-eu32 | itu-annexa-m9-eu64| itu-annexa-m1-adlu32 | itu-annexa-m9-adlu64 | itu-annexa-m10-eu128 | 997-m1c-a-7 | 997-m1x-m-8 | 997-m1x-m | 997-m2x-m-8 | 997-m2x-a | 997-m2x-m | 998-m1x-a | 998-m1x-b | 998-m1x-nus0 | 998-m2x-a | 998-m2x-m | 998-m2x-m17 | 998-m2x-b | 998-m2x-b17 | 998-m2x-nus0 | 998-m2x-nus017 | 997e30-m2x-nus0 | 998e17-m2x-a | 998e17-m2x-nus0 | anfp-cal0-long | anfp-cal0-medium | anfp-cal0-short | anfp-cal0e-short | annexa-m1-eu32 | annexa-m2-eu36 | annexa-m3-eu40 | annexa-m4-eu44 | annexa-m5-eu48 | annexa-m6-eu52 | annexa-m7-eu56 | annexa-m8-eu60 | annexa-m9-eu64 | annexa-eu128 | annexa-m1-adlu32 | annexa-m2-adlu36 | annexa-m3-adlu40 | annexa-m4-adlu44 | annexa-m5-adlu48 |annexa-m6-adlu52 | annexa-m7-adlu56 | annexa-m8-adlu60 | annexa-m9-adlu64 | annexa-adlu128 | annexb-997-m1c-a-7 |annexb-997-m1x-m-8 | annexb-997-m1x-m | annexb-997-m2x-m-8 | annexb-997-m2x-a | annexb-997-m2x-m | annexb-997-hpe17-m1-nus0 | annexb-997-hpe30-m1-nus0 | annexb-997-e17-m2x-nus0 | annexb-997-e30-m2x-nus0 | annexb-998-m1x-a | annexb-998-m1x-b | annexb-998-m1x-nus0 |annexb-998-m2x-a | annexb-998-m2x-m | annexb-998-m2x-b | annexb-998-m2x-nus0 | annexb-998-e17-m2x-nus0 | annexb-998-e17-m2x-nus0-m | annexb-998-ade17-m2x-nus0-m | annexb-998-ade17-m2x-a | annexb-998-ade17-m2x-b |annexb-998-e30-m2x-nus0 | annexb-998-e30-m2x-nus0-m | annexb-998-ade30-m2x-nus0-m | annexb-998-ade30-m2x-nus0-a | annexb-998-ade17-m2x-m | annexb-998-e17-m2x-a}

Bridge Selects the Band plan number which should be used for basic parameter configura-tion.

230

Operate CLI

Id:0900d805805d4568

Port configuration

BinIn order to set user selection for any of the 512 ADSL bins, use the following command.

Minimum rate of messageIn order to set minimum rate of message based overhead maintained by the xTU in the upstream/downstream direction, use the following command.

6.3.4.2 Verifying line-config profileTo verify the configuration of an xDSL line-config profile, use the following commands.


xdsl line-config-profile PROFILE custom-subc-mask{upstream|downstream} (BINSET|)

Bridge Sets user selection for any of the 512 ADSL bins (1 bit per Bin).

upstream Upstream subcarrier mask.

downstream Downstream subcarrier mask.

BINSET 128 values like 123456789ABCDEF (CR resets mask to 64 x FF) - only for ADSL.


xdsl line-config-profile PROFILE (msg-min-up|msg-min-down) <4-248>

Bridge Sets minimum rate of message based overhead maintained by the xTU in the upstream/down-stream direction.

<4-248> value in kbps


show lre PORTS xdsl line-table Privileged/Global/Bridge

Shows xDSL line status information (from IU)

show lre PORTS xdsl line-conf Shows line table configuration (from DB).

show xdsl line-config-profile Shows all configured line profiles.

show xdsl line-config-profile PROFILE

Shows one configured line profile, enter the profile name.

show xdsl line-config-profile PROFILE margin

Shows all SNR margins of selected profile, enter the profile name.

show xdsl line-config-info Shows all line-config profiles and their assigned ports.

show xdsl line-config-infoPROFILE

Shows one line-config profile and its assigned ports.

show lre PORTSxdsl line-config-info

Shows relation between ports and assigned xDSL line profiles.

show xdsl line-config-info-long Show running system information;- xDSL profile configuration- xDSL line config profile information

show xdsl line-config-info-long PROFILE

Show running system information;- xDSL profile configuration- xDSL line config profile information- Enter profile name

231


Id:0900d805805d4568

6.3.4.3 Verifying physical status informationTo display xDSL physical status information, use the following commands.

6.3.4.4 Verifying channel status informationTo display xDSL channel status information, use the following commands..

6.3.4.5 Displaying line band tableTo display xDSL line band table, use the following commands..

6.3.4.6 Assigning the configured line-config profile to a portTo apply a configured xDSL line-config profile to a specific port or slot, use the following command.


show lre PORTSxdsl phys-table detail (xtuc|xtur)

Privileged Global Bridge

Shows detailed information of xDSL physical status.

PORTS LRE port or slot number .

xtuc VDSL LIU = vtuC.

xtur VDSL modem = vtuR.

show lre PORTSxdsl phys-table linerates


Shows running system information;- LRE port information- xDSL information- xDSL physical status info- Only linerates (up/downstream).


show lre PORTSxdsl phys-table alarm

Shows running system information;- Alarm/failure state.


show lre PORTSxdsl chan-table

Privileged

Global

Bridge

Display xDSL channel status information.

PORTS: LRE port or slot number


show lre PORTSxdsl band-table

Privileged

Global

Bridge

Shows xDSL line band table

PORTS LRE port or slot number


lre PORTSxdsl line-config PROFILE

Bridge Configures an LRE (Long Reach Ethernet) and xDSL line-config profile.

PROFILE Enter LRE port or slot number {1/1-1/8 I s1}.

232

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.4.7 xDSL notch profileThe operator can create and configure Notch profile.

Creating a notch profileIn order to create Notch profile, use one of the following command

Copying a notch profileTo copy a Notch profile, use the following command.

Deleting a notch profileIn order to delete a Notch profile, use one of the following command

Configuring a notch profileIn order to configure Notch profile, use the following command:


xdsl add notch-config-profile PROFILE

Bridge Create Notch profile, enter the profile name.

xdsl notch-config-profile PROFILE add-notch <1-4094> <2-4095>

Add one Notch to the table, (up to 16 Notches possi-ble), enter the profile name.

1-4094 Start index of subcarrier for Notch.

2-4095 Stop index of subcarrier for Notch.


xdsl copy notch-config-profile PROFILE PROFILE

Bridge Copy an xDSL notch-config profile.




xdsl delete notch-config-profile PROFILE

Bridge Deletes a specified Notch profile, enter the profile name.

xdsl notch-config-profile PROFILE delete-notch <1-16>

Deletes one Notch from the Notch profile table, enter the profile name.

1-16 Notch index

233


Id:0900d805805d4568

Verifying the configuration of notch profileIn order to verify about configuration of Notch profile, use one of the following command


lre PORTSxdsl rfibandmask{{amateurband1 |amateurband2 | amateurband3 | amateurband4 | amateurband5 | amateurband1 |gmdss1 | gmdss2 | gmdss3} | }

Bridge Configures transmit power spectral density mask code (avoid interfer-ence with HAM (handheld amateur radio) radio bands) to specified port, enter the port number.

amateurband1

Start/stop frequency: 1800 kHz/2000 kHz.

amateurband2

Start/stop frequency: 3500 kHz/3800 kHz(ETSI).

amateurband3

Start/stop frequency: 7000 kHz/7200 kHz(ETSI).

amateurband4


amateurband5


gmdss1 Start/stop frequency: 2173 kHz/2191 kHz.



lre PORTS xdsl notch-config {PROFILE|}

Configures xDSL Notch profile for a specified port.

PROFILE Enter profile name or nothing if profile has to be removed from port.


show xdsl notch-config-profile PROFILE

PrivilegedConfigBridge

Shows one configured notch profile, enter the profile name.

show xdsl notch-config-profile Shows all configured notch profiles.

show xdsl notch-config-info PROFILE

Shows one notch-config profile and its assigned ports, enter the profile name.

show xdsl notch-config-info Shows all notch-config profiles and their assigned ports.

show xdsl rfi-config-info Shows the xDSL RFI band masks and ports assigned to them.

show xdsl rfi-config-info-long Shows running system information:

– xDSL information,– RFI band masks and xDsl ports assigned to them.

show lre PORTS xdsl notch- config-info

Shows LRE port xDSL Notch config profile information, enter the port number.

show xdsl notch-config-info-long Shows running system information:

– xDSL information,– Relation between created xDsl notch profiles and

assigned ports.

show xdsl notch-config-info-long PROFILE

Shows running system information:

– xDSL information,– xDSL notch config profile information.– Enter a profile name.

234

Operate CLI

Id:0900d805805d4568

Port configuration

6.3.4.8 xDSL channel profileThe operator can create and configure channel profile.

Creating a channel profileIn order to create channel profile, use one of the following command

Copying a chan-config profileTo copy a chan-config profile, use the following command.

Deleting a channel profileIn order to delete a channel profile, use the following command

Configuring a channel profileIn order to configure channel profile, use the following commands


xdsl add chan-config-profile PROFILE

Bridge Create channel profile, enter the profile name.


xdsl copy chan-config-profile PROFILE PROFILE

Bridge Copy an xDSL channel configuration profile.




xdsl delete chan-config-profile PROFILE

Bridge Deletes a specified channel profile, enter the profilename.

235


Id:0900d805805d4568


xdsl chan-config-profilePROFILE (datarate-min-ds|datarate-min-us | datarate-min-res-ds | datarate-min-res-us | datarate-max-ds | datarate-max-us | datarate-min-low-pwr-ds) <32-103980>

Bridge Configures the maximum and minimum data rate of downstream/upstream channel.

datarate-min-ds

Min. data rate of downstream channel

datarate-min-us

Min. data rate of upstream channel

datarate-min-res-ds

Min. reserved data rate of downstream channel (only used in dynamic RA mode)

datarate-min-res-us

Min. reserved data rate of upstream channel (only used in dynamic RA mode)

datarate-max-ds

Max. data rate of downstream channel

datarate-max-us

Max. data rate of upstream channel

datarate-min-low-pwr-ds

Min. data rate of downstream channel in low power state

236

Operate CLI

Id:0900d805805d4568

Port configuration

xdsl chan-config-profilePROFILE(max-interdelay-ds | max-interdelay-us) <0-255>

Bridge Configures maximum interleave delay for down-stream/upstream channel.

max-inter-delay-ds

Max. interleave delay for downstream channel.

max-inter-delay-us

Max. interleave delay for upstream channel.

xdsl chan-config-profilePROFILE{min-inp-ds | min-inp-us} {off | halfsymbol | 0 | 1 | 2 |3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |11 | 12 | 13 | 14 | 15 | 16}

Configures minimum Impulse noise protection on xDSL line, enter the profile name.

halfsym-bol

0.5 symbol.

0 0 symbol (= off)

1 to 16 1 symbol to 16 symbols

xdsl chan-config-profilePROFILE (max-bit-errorrate-ds | max-bit-errorrate-us) (10E-7|10E-5 | 10E-3)

Configures maximum value for allowed bit error rate on xDSL line, enter the profile name.

max-bit-errorrate-ds

Maximum value for allowed bit error rate on downstream direction.

max-bit-errorrate-us

Maximum value for allowed bit error rate on upstream direction.

xdsl chan-config-profilePROFILE(thresh-downshift-ds| thresh-upshift-ds | thresh-downshift-us| thresh-upshift-us) <0-1000000>

Configures rate change threshold causing a down-shift/upshift trap on downstream/upstream channel.

thresh-downshift-ds

Rate change threshold causing a down-shift trap on downstream channel.

thresh-downshift-us

Rate change threshold causing a down-shift trap on upstream channel.

thresh-upshift-ds

Rate change threshold causing an upshift trap on downstream channel.

thresh-upshift-us

Rate change threshold causing an upshift trap on upstream channel.

lre PORTS xdsl(force-inp-ds | force-inp-us) (true | false)

Configures minimum Impulse noise protection on xDSL line, enter the profile name;- LRE port information- xDSL configuration


force-inp-ds

Downstream Force Impulse Noise Pro-tection

force-inp-us

Upstream Force Impulse Noise Protec-tion

true Framer settings of bearer selected such that INP computed acc. to formula >= MIN-INP

false Framer settings of bearer not selected to fulfill condition: calc. INP >= MIN-INP

lre PORTSxdsl chan-config(channel1| channel2) (PROFILE|)

Sets profile name for channel1/channel2. Profile name for channel 1 must be set, profile name for channel2 can be left empty.


237


Id:0900d805805d4568

Verifying the configuration of channel profileIn order to verify about configuration of channel profile, use one of the following command

6.3.4.9 xDSL PSD mask profileThe operator can create and configure power spectral density (PSD) mask profile.

In order to create PSD mask profile or a PSD breakpoint, use one of the following com-mands:

lre PORTSxdsl chan-config(chan1-ratio-ds | chan1-ratio-us) <0-100>

Bridge Sets ratio allocated by Channel1 in down-stream/upstream direction.Channel1 + channel2 = 100%.

<0-100> Value from 0-100%


show xdsl chan-config-profile PROFILE

PrivilegedConfigBridge

Shows one configured channel profile, enter the profile name.

show xdsl chan-config-profile Shows all configured channel profiles.

show xdsl chan-config-infoPROFILE

Shows information of xDSL channel config profile, enter the profile name

show xdsl chan-config-info Shows information of xDSL channel config profiles.

show lre PORTSxdsl chan-config-info

Shows LRE port xDSL channel config profile informa-tion, enter the port number.

show xdsl chan-config-info-long Shows running system information:

– xDSL information,– xDSL channel config profile information.

show xdsl chan-config-info-long PROFILE


– xDSL information,– xDSL channel config profile information,– Enter profile name.



xdsl add psd-config-profile PROFILE {downstream I upstream}

Bridge Create PSD mask profile in upstream/downstream direction, enter the profile name

xdsl psd-config-profile PROFILE add-psd <0-4095> <0-195>

xDSL profile configuration;- xDSL psd config profile,- Add one PSD breakpoint to the table,- possible up to 32(downstream)/16(upstream).


0-4095 Index of subcarrier, where breakpoint will be placed.

0-195 PSD mask level 0 to -97.5 dBm/Hz (coded as 0 to 195) in steps of 0.5 dBm/Hz.

238

Operate CLI

Id:0900d805805d4568

Port configuration

Deleting a PSD mask profile or a PSD maskIn order to delete PSD mask profile or a PSD mask, use one of the following command

Configuring a PSD mask profileIn order to configure PSD mask profile, use the following command

Copying a psd-config profileTo copy a psd-config profile, use the following command.

Verifying the configuration of PSD mask profileIn order to verify about configuration of PSD mask profile, use one of the following command


xdsl delete psd-config-profile PROFILE

Bridge Deletes a specified PSD mask profile, enter the profile name.

xdsl psd-config-profile PROFILE delete-psd index <1-32>

Deletes one PSD mask from the PSD mask profile by mask index, enter the profile name.

1-32 PSD mask index.

xdsl psd-config-profile PROFILE delete-psd subcarrier <0-4095>

Deletes one PSD mask from the PSD mask profile by subcarrier index, enter the profile name.



lre PORTS xdsl psd-config{up Idown} {PROFILE|}

Bridge Assign PSD upstream/downstream profile to specified port, enter the port number.

PROFILE Enter profile name (or nothing to reassign profile from ports.)


xdsl copy psd-config-profilePROFILE PROFILE

Bridge Copy an xDSL psd-config profile.

PROFILE Enter source file name (e.g. DEFVAL),


239


Id:0900d805805d4568

6.3.4.10 xDSL DELTThe operator can configure dual ended line diagnostic mode (DELT) for xDSL line. In order to configure the DELT mode, use the following command.

In order to verify the DELT parameter, use one of the following commands.


show xdsl psd-config-profile PROFILE

PrivilegedGlobal Bridge

Shows one configured PSD profile, enter the profile name.

show xdsl psd-config-profile Shows all configured PSD config profiles.

show xdsl psd-config-info PROFILE

Shows one psd-config profile and its assigned ports, enter the profile name.

show xdsl psd-config-info Shows all psd-config profiles and their assigned ports

show lre PORTS xdsl psd-config-info

Shows LRE port xDSL PSD config profile information, enter the port number.

show xdsl psd-config-info-long Shows running system information:

– xDSL information,– xDSL psd config profile information.

show xdsl psd-config-info-long PROFILE


– xDSL information,– xDSL psd config profile information,– Enter profile name.


lre PORTS xdsl delt {force I inhibit}


Configures DELT mode on xDSL line for a specified port, enter the port number.

force Force loop diagnostic by VTU-C.

inhibit Stop loop diagnostic process.


show lre PORTS xdsl delt status


Shows information about the DELT status on xDSL line for one port, enter the port number.

show lre PORTS xdsl delt bit-allocation{downstream Iupstream} {<1-4096> {<1-4096> I} I}

Shows bit allocation table for different subcarriers of one port, enter the port number.

downstream Downstream direction (BITSpsds).

upstream Upstream direction (BITSpsus).

1-4096 Start subcarrier (press ENTER to show all).

1-4096 End subcarrier (press ENTER to show only one).

240

Operate CLI

Id:0900d805805d4568

Port configuration

show lre PORTS xdsl delt gain-allocation{downstream Iupstream} {<1-4096> {<1-4096> I} I}


Shows gain allocation table for different subcarriers of one port, enter the port number.

downstream Downstream direction (GAINSpsds).

upstream Upstream direction (GAINSpsus).

1-4096 Start subcarrier (press ENTER to show all).

1-4096 End subcarrier (press ENTER to show only one).

show lre PORTSxdsl delt snr{downstream I upstream} {<1-4096> {<1-4096> I} I}

Shows SNR table for different subcarrier groups of one port, enter the port number.

downstream Downstream direction (SNRpsds).

upstream Upstream direction (SNRpsds).

1-4096 Start subcarrier group (press ENTER to show all).

1-4096 End subcarrier group (press ENTER to how only one).

show lre PORTS xdsl delt qln{downstream I upstream} {<1-4096> {<1-4096> I} I}

Shows Quiet Line Noise table for different subcarrier groups of one port, enter the port number.

downstream Downstream direction (QLNpsds).

upstream Upstream direction (QLNpsus).


1-4096 End subcarrier group (press ENTER to show only one).

show lre PORTSxdsl delt hlin{downstream I upstream} {<1-4096> {<1-4096> I} I}

Shows H(f) linear representation for subcarrier groups of one port, enter the port number.

downstream Downstream direction (HLINpsds).

upstream Upstream direction (HLINpsus).



show lre PORTS xdsl delt hlog {downstream I upstream} {<1-4096> {<1-4096> I} I}

Shows H(f) linear representation for subcarrier groups of one port, enter the port number.

downstream Downstream direction (HLOGpsds).

upstream Upstream direction (HLOGpsus).


1-4096 end subcarrier group (press ENTER to show only one).


241


Id:0900d805805d4568

Example for xDSL DELT (M:IUVDSL:48P:E in ADSL mode)

SWITCH(bridge)# port lre 2/1 disableSWITCH(bridge)# lre 2/1 xdsl delt forceSWITCH(bridge)# show lre 2/1 xdsl delt status

---------------+ DELT ------------------------------------------------- internalSlot Port Admin status counter result----+----+-----+-------------------------------------------------------02 01 down inhibit 0 LDSF completed successfully=======================================================================

SWITCH(bridge)# show lre 2/1 xdsl delt hlog upstream

HLog table of port 2/ 1 (direction downstream)measurement time : 4000group size : 1number of entries: 512subc.| offsetgroup| 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15-----+--------------------------------------------------------------------------------0001 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0017 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0033 | 151 61 36 13 0 1005 996 989 985 980 979 978 979 979 981 9820049 | 983 984 986 987 989 989 990 990 991 991 991 991 992 992 992 9920065 | 993 992 992 992 992 992 992 992 993 991 991 991 991 991 991 9910081 | 991 990 990 990 991 991 991 991 990 990 990 990 990 990 989 9890097 | 989 989 989 988 988 988 988 987 987 987 987 986 986 986 986 9850113 | 985 984 984 984 984 983 983 982 982 982 981 981 980 980 979 9790129 | 979 978 978 977 977 976 976 975 976 975 975 974 974 973 973 9720145 | 972 971 971 970 971 970 970 969 969 968 968 968 967 967 966 9660161 | 965 965 965 964 964 964 963 963 963 962 962 962 962 961 961 9610177 | 961 961 961 961 961 960 960 960 960 960 959 959 959 959 959 9590193 | 959 959 959 959 959 959 958 958 958 958 958 958 958 958 958 958

show lre PORTS xdsl delt all {downstream I upstream} {<1-4096> {<1-4096> I} I}


Shows all subcarrier group values of one port, enter the port number.

downstream Downstream direction.

upstream Upstream direction.



show lre PORTSxdsl delt tss{downstream | upstream}

Shows transmit spectrum shaping table for different subcarriers of one port (only ADSL).

downstream Downstream direction (TSSpsds).

upstream Upstream direction (TSSpsus).

show lre PORTS xdsl delt mrefpsd{downstream|upstream}

Shows medley reference PSD table (only VDSL).

downstream Downstream direction (MREFPSDds).

upstream Upstream direction (MREFPSDus).


242

Operate CLI

Id:0900d805805d4568

Port configuration

0209 | 959 959 959 958 958 958 958 958 958 958 958 958 958 958 957 9570225 | 957 957 957 956 956 956 956 956 957 956 956 956 956 955 955 9550241 | 955 954 954 954 953 953 953 953 952 952 952 951 951 951 950 9500257 | 950 950 951 951 953 953 954 954 955 955 956 956 957 957 958 9590273 | 959 960 961 961 962 962 963 964 965 966 967 967 968 969 969 9700289 | 971 972 973 973 974 975 976 977 977 978 979 980 981 981 982 9830305 | 984 985 986 987 988 989 989 990 991 992 993 994 995 995 996 9970321 | 997 998 999 1000 1001 1002 1003 1004 1006 1007 1008 1009 1009 1010 1011 10120337 | 1013 1014 1015 1016 1016 1016 1017 1018 1019 1020 1020 1021 1022 1022 1022 10220353 | 1022 1022 1022 1022 1022 1022 1022 1022 1022 1022 1022 ---- ---- 15 16 170369 | 18 17 18 18 19 20 20 21 23 24 24 24 24 24 24 240385 | 25 26 27 27 28 28 29 29 29 28 29 29 29 30 30 300401 | 32 32 32 33 33 34 34 35 36 37 37 38 39 40 40 410417 | 41 41 42 42 43 42 43 43 43 44 45 45 46 47 47 480433 | 48 48 49 50 50 51 52 52 53 54 55 55 56 56 57 580449 | 58 58 59 60 60 60 61 61 61 61 62 61 62 63 64 650465 | 65 65 66 66 66 67 68 68 69 69 70 71 72 71 72 730481 | 74 74 74 74 75 75 75 75 75 75 75 75 76 75 74 740497 | 73 72 72 71 70 70 69 69 68 66 66 65 65 63 61 62*************** ---- = measurement not possible or value out of range ****************

Example for xDSL DELT (M:IUVDSL:48P:E im VDSL Mode)

SWITCH(bridge)# lre 2/1 xdsl delt forceSWITCH(bridge)# show lre 2/1 xdsl delt status

---------------+ DELT ------------------------------------------------- internalSlot Port Admin status counter result----+----+-----+-------------------------------------------------------02 01 down inhibit 0 LDSF completed successfully=======================================================================

SWITCH(bridge)# show lre 2/1 xdsl delt hlog downstream

HLog table of port 2/ 1 (direction downstream)measurement time : 4000group size : 4number of entries: 512subc.| offsetgroup| 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15-----+--------------------------------------------------------------------------------0001 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- 105 105 93 93 86 860017 | 81 81 77 77 75 75 73 73 70 70 69 69 68 68 67 670033 | 67 67 66 66 66 66 65 65 64 64 64 64 64 64 63 630049 | 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 630065 | 63 63 63 63 62 62 63 63 535 535 63 63 62 62 62 620081 | 508 508 62 62 62 62 63 63 541 541 63 63 62 62 62 620097 | 62 62 62 62 62 62 63 63 62 62 62 62 62 62 62 620113 | 62 62 63 63 62 62 62 62 62 62 62 62 62 62 62 620129 | 62 62 62 62 62 62 62 62 522 522 62 62 63 63 62 620145 | 63 63 63 63 62 62 63 63 485 485 63 63 63 63 63 630161 | 481 481 62 62 63 63 62 62 526 526 62 62 63 63 63 630177 | 490 490 62 62 63 63 63 63 63 63 63 63 63 63 63 630193 | 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 630209 | 63 63 63 63 63 63 63 ---- ---- ---- ---- ---- ---- ---- ---- ----0225 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0241 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0257 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----

243


Id:0900d805805d4568

0273 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0289 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----0305 | ---- ---- 64 64 65 65 64 64 64 64 65 65 64 64 65 650321 | 64 64 65 65 65 65 65 65 65 65 65 65 65 65 65 650337 | 65 65 66 66 66 66 66 66 65 65 66 66 66 66 66 660353 | 66 66 66 66 65 65 66 66 66 66 65 65 65 65 66 660369 | 66 66 65 65 66 66 65 65 66 66 66 66 66 66 66 660385 | 67 67 67 67 67 67 67 67 66 66 65 65 66 66 67 670401 | 64 64 67 67 68 68 67 67 67 67 67 67 67 67 68 680417 | 66 66 67 67 68 68 67 67 67 67 66 66 68 68 66 660433 | 67 67 67 67 66 66 68 68 67 67 67 67 69 69 68 680449 | 68 68 68 68 70 70 68 68 70 70 70 70 71 71 73 730465 | 74 74 73 73 76 76 79 79 82 82 86 86 88 88 93 930481 | 96 96 102 102 105 105 114 114 118 118 ---- ---- ---- ---- ---- ----0497 | ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ----*************** ---- = measurement not possible or value out of range ****************

6.3.4.11 Configuring xDSL alarm-config profileAlarm-config profile is a configured policy, which alarm service is provided to clients with using SNMP trap in case of system error. It is convenient way because it is possible to configure standard of error checking, which varies according to service type, in each port.

Creating xDSL alarm-config profileIf you want to configure alarm-config profile, first of all, create the new alarm-config profile.

In order to create a new alarm-config profile, use the following command.

The following is an example of configuring alarm-config-profile named as TEST, that default profile is ADSL.

SWITCH (bridge)# xdsl add alarm-config profile TEST

SWITCH (bridge)#

Copying xDSL alarm-config profileIn order to copy an xDSL alarm-config profile, use the following command.

Deleting xDSL alarm-config profileIn order to delete an xDSL alarm-config profile, use the following command.


xdsl add alarm-config-profile PROFILE-NAME

Bridge Create the new alarm-config profile, enter the profile name


xdsl copy alarm-config-profilePROFILE PROFILE

Bridge Copy an alarm-config profile.

PROFILE Enter source profile name (e.g. DEFVAL).

PROFILE Enter target profile name (e.g. DEFVAL).


xdsl delete alarm-config-profile PROFILE-NAME

Bridge Deletes the alarm-config profile, enter the profile name.

244

Operate CLI

Id:0900d805805d4568

Port configuration

Configuring alarm-config profileIn order to configure alarm-config profile, use one of the following commands.

Checking the configuration of alarm-configIn order to verify about configuration of alarm-config, use one of the following com-mands.


xdsl alarm-config-profile PROFILE {thresh-lofs I thresh-loss I thresh-lprs I thresh-lols I thresh-es I thresh-ses I thresh-uas} <0-900}

Bridge Configures the alarm threshold profile, enter the profilename.

thresh-lofs Loss of frame seconds alarm threshold.

thresh-loss Loss of signal seconds alarm threshold.

thresh-lprs Loss of power seconds alarm threshold.

thresh-lols Loss of link seconds alarm threshold.

thresh-es Errored seconds alarm threshold.

thresh-ses Severely errored seconds alarm threshold.

thresh-uas Unavailable seconds alarm threshold.


xdsl alarm-config-profile PROFILE {opstate-notify I initfailure-notify} {enable I disabe}

Enable/disable the state notification, enter the profile name.

opstate-notify Operation state notification.

initfailure-notify Init failure notification.

lre PORTS xdsl alarm-configPROFILE

Assigns xdsl alarm-config profile to a specified port.

PORTS Enter LRE port or slot number{1/1-1/8 I s1}.



show lre PORTS xdsl alarm-config-info

Privileged ConfigBridge

Shows the xDSL relation between ports and assigned alarm profiles.

show xdsl alarm-config-profile Shows all configured alarm profiles

show xdsl alarm-config-profile PROFILE

Shows one configured alarm profile, enter the profile name

show xdsl alarm-config-info PROFILE

Shows one alarm-config profile and its assigned ports, enter the profile name.

show xdsl alarm-config-info Shows all alarm-config profiles and their assigned ports.

show xdsl key-info Shows the xDSL key information for IU and LIUBD (all xDSL slots).

show xdsl alarm-config-info-long Shows running system information:- xDSL information,- Relation between created xDsl alarm profile(s) and assigned ports.

show xdsl alarm-config-info-long PROFILE

Shows running system information:- xDSL information,- Relation between created xDsl alarm profile(s) and assigned ports,- Enter a profile name.

245


Id:0900d805805d4568

6.3.4.12 Example of configuring VDSL profilePreparations: IU_VDSL24 is equipped and unlocked

6.3.4.13 Example of configuring IU_VDSL24 to ADSL modeThe IU_VDSL24 (product number S50028-Q2028-A3) supports ADSL2+ over ISDN profiles for each port, the IU_VDSL24P can be configured with ADSL2+ over POTS pro-files.

Preparations:

IU_VDSL_24_A3 is equipped and unlocked

SWITCH(bridge)# xdsl add chan-config-profile vdsl_100_40_fast

SWITCH(bridge)# xdsl chan-config-profile vdsl_100_40_fast datarate-max-ds 100000

SWITCH(bridge)# xdsl chan-config-profile vdsl_100_40_fast datarate-max-us 40000

SWITCH(bridge)# xdsl chan-config-profile vdsl_100_40_fast max-interdelay-ds 1

SWITCH(bridge)# xdsl chan-config-profile vdsl_100_40_fast max-interdelay-us 1

SWITCH(bridge)# xdsl chan-config-profile vdsl_100_40_fast min-inp-ds 0

SWITCH(bridge)# xdsl add line-config-profile vdsl_lineconf1

SWITCH(bridge)# xdsl line-config-profile vdsl_lineconf1 profile-gs-standardvdsl2-region-b

SWITCH(bridge)# xdsl line-config-profile vdsl_lineconf1 band-plan-number998-m2x-b

SWITCH(bridge)# xdsl line-config-profile vdsl_lineconf1 use-profile-numberprofile8b


SWITCH(bridge)# lre 5/1 xdsl chan-config channel1 vdsl_100_40_fast

SWITCH(bridge)# lre 5/1 xdsl line-config vdsl_lineconf1


SWITCH(bridge)# show xdsl line-config-info

SWITCH(bridge)# xdsl add chan-config-profile vdsl_chan1

SWITCH(bridge)# xdsl chan-config-profile vdsl_chan1 datarate-max-ds 20096

SWITCH(bridge)# xdsl chan-config-profile vdsl_chan1 datarate-max-us 1152

SWITCH(bridge)# xdsl add line-config-profile vdsl_lineconf2

SWITCH(bridge)# xdsl line-config-profile vdsl_lineconf2 profile-gs-standard adsl2plus-isdn

SWITCH(bridge)# show xdsl line-config-profile vdsl_lineconf2


SWITCH(bridge)# lre 5/1 xdsl chan-config channel1 vdsl_chan1

SWITCH(bridge)# lre 5/1 xdsl line-config vdsl_lineconf2


SWITCH(bridge)# show xdsl line-config-info

--------------------------------------------------PROFILE NAME TYPE Assigned port number(s)--------------------------------------------------DEFVAL VDSL 2/2-2/24DEFVAL_ADSL_A ADSL -DEFVAL_ADSL_B ADSL -DEFVAL_ADSL_J ADSL -DEFVAL_VDSL2_P VDSL -vdsl_lineconf2 ADSL 5/1==================================================

246

Operate CLI

Id:0900d805805d456a

Bridge and VLAN configuration

7 Bridge and VLAN configurationThis chapter introduces the bridge and VLAN configuration. Bridging is the basic function of hiX 5622/25/30/35 R2.8. Virtual Local Area Network (VLAN), a network of computers that behave as when they are connected to the same wire even though they may actually be physically located on different segments of a LAN. VLANs are config-ured through software rather than hardware, which makes them extremely flexible.

7.1 Bridge configurationBridge configuration includes bridge base and bridge port configuration.

7.1.1 Configuring of bridge base

Enabling a switching processTo enable a switching process, use the following command.

Default bridge modeTo select the default bridge mode, use the following command.

Default tagging modeThe hiX 5622/25/30/35 R2.8 supports two tagging modes, the single tagging mode is the default mode. The double tagging mode can also be set if necessary.

To configure a tagging mode, use the following command.

Routing modeThe default routing mode is residential. This mode forbids the communication between subscriber ports no matter the subscriber ports belong to the same LIU card or different LIU cards. However, an ‘unrestricted’ mode can be set to permit the communication between subscriber ports. To configure a routing mode, use the following command.


bridge Global Enables a switching process.


bridgebase bridgemode{basic | diffserv | enhanced}

Bridge Sets the default bridge mode.


bridgebase taggingmode{single | double}

Bridge Sets a tagging mode.

247

Operate CLI Bridge and VLAN configuration

Id:0900d805805d456a

Inband/outband switching modeTo configure VLANs for inband/outband switching mode, use the following commands.

Destination Lookup Failure (DLF) filterThe default value of DLF-filter is “enable”. This filter only works for downstream traffic.

Bridgebase IPoA configurationTo configure bridgebase IPoA, use the following command.

To show bridgebase IPoA configuration, use the following command.

Bridgeport IPoA router IP-address configuration


bridgebase routing-mode{residential | unrestricted}

Bridge Sets a routing mode.

residential internal routing of frames among subscribers disabled

unrestricted internal routing of frames among subscribers enabled


bridgebase inband-outband-switching (VLAN | off)

Bridge Configures VLAN for inband/outband switching.

VLAN Select VLAN IDs (e.g. 101-148,1000)

off disable inband/outband switching


no bridgebase inband-outband-switching Bridge Negates the configuration of VLAN for inband/outband switching.


bridgebase dlf-filter{enable | disable}

Bridge Configures a destination lookup failure (DLF) filter.

enable Destination MAC unknown unicast towards subscriber ports blocked.

disable Destination MAC unknown unicast towards subscriber ports allowed.


bridgebase ipoa arpreq-intervalSECONDS

Bridge Sets ARP request interval for IPoA provider router.

SECONDS arp request interval (0 to (2147483647 * 2U + 1)).


show bridgeport PORTS ipoa-arpreq-status

BridgeGlobalPriviledged

Shows the arp request running status for IPoA provider router.

PORTS Subscriber bridgeports (e.g. 1/1/1-1/72/1,2/1/1).

248

Operate CLI

Id:0900d805805d456a


To configure IPoA router IP-address to bridge port, use the following commands, see also 14.3.5 Use case: Port in IPoA mode.

Multicast Destination-Lockup-Failure filter

g The configuration of DLF and Multicast filter influence the forwarding behavior of the system. The configuration of Multicast filter is influenced by configuration of IGMP. IGMP configuration has higher priority. The configuration of multicast-flooding per VLAN disables the IGMP snooping and IGMP Proxy on CXU for this VLAN.

Port mirroringTo configure the mirror monitor port, use the following command. Note that to enable the mirror function, you need to create a corresponding rule to monitor the traffic you want to control.

DSLAM MAC address translation

To enable/disable mac address translation, use the following commands, see 14.3.10 Use case: MAC Address Translation (MAT).


bridgeport PORTS ipoa-router-ipaddr A.B.C.D

Bridge Bridgeport provider router's IP address configuration.


A.B.C.D Provider IP address.


no bridgeport PORTS ipoa-router-ipaddr

Bridge Reset bridge port provider router's IP address configuration.



bridgebase multicast-filter{disable | upstream | downstream | updownstream}

Bridge Enable/disable multicast Destination-Lockup-Failure filter.

disable Disables multicast DLF filter (destination-mac unknown multicast from and towards subscriber ports allowed).

upstream Enables multicast DLF filter (destination-mac unknown multicast from subscriber ports blocked).

downstream Enables multicast DLF filter (destination-mac unknown multicast towards sub-scriber ports blocked).

updownstream Enables multicast DLF filter (destination-mac unknown multicast from and towards subscriber ports blocked).


bridgebase mirror PORT Bridge Select uplink port for monitor traffic (rule must be created).

no bridgebase mirror Deletes the mirror port.

249


Id:0900d805805d456a

To show DSLAM MAC address translation, use one of the the following commands:


mat PORT (enable | disable)

Bridge MAC address translation, select port numbers.

PORT (e.g 1/1/1-1/72/1).

enable MAT enable.

disable MAT disable.

g MAT per VLAN or per bridgeport:The command for switching the mode is: iubridgeprofile SLOTS mat-mode (per-bridgeport | per-vlan)

Both modes are supported by Conexant - and Convergate D-IUs but Wintegra IUs only support 'per-vlan'.

iubridgeprofile SLOTS mat-mode(per-vlan | per-bridgeport)

Bridge Setting the IU bridge profile configuration;- for MAC address translation mode.

SLOT IU slot (e.g. 1-2,10).

per-vlan MAT per vlan configuration mode.

per-bridgeport MAT per bridge port configuration mode.

vlan mac-address-transVLANS (off | on)

Enable/disable mac address translation per VLAN.

VLANS VLAN IDs (e.g. 101-148,1000).

off Switch MAT OFF.

on Switch MAT ON.

mat translation-mode{world | ths | ths_anymode}

Configures MAC translation mode.

world World mac translation format.

ths-anymode THS anymode translation format.(anymode means same MACs for untagged and tagged traffic on the same bridge port in MAT mode)

ths THS mac translation format.

mat dslamid DSLAMID Enables DSLAM MAC address translation.

DSLAMID DSLAM ID (in translation mode. World - range 0 to 4095, THS - range to 524287).

no mat dslamid Disables DSLAM MAC address translation.

250

Operate CLI

Id:0900d805805d456a


VLAN MAC address translationTo enable DSLAM MAC address translation per VLAN or per port, use the following commands and the corresponding use case in Section 14.3.10.

Max-host

g For ConverGate-IUs the value of max. hosts (MAC addresses) is divided to tagged- and untagged frames.

For Example, the max-host value is set to 32, this causes the fact that the hiX 5622/25/30/35 R2.8 can learn 16 MAC hosts (incoming tagged frames) and 16 MAC hosts (incoming untagged frames). To set bridge port max-host, use the fol-lowing command.


show mat global PrivilegedGlobalBridge

Shows DSLAM MAC address translation.

show mat port PORT Shows DSLAM MAC address translation.


mat Switch MAC address.

port Selection by port number (userports only).

PORT Select port number.

show mat vlan VLANID (PORT|)

Shows DSLAM MAC address translation.


mat Switch MAC address.

vlan Selection by Vlan (mac addresses learned at IU only are invisible).

VLANID Vlan ID.



mat mode(per-vlan | per-port)

Bridge MAC address translation, select mode.

per-vlan MAT per VLAN configuration mode.

per-port MAT per port configuration mode.

251


Id:0900d805805d456a

Example:

g With the port mapping of the max-host values a roundrobin will be used.

Max-hostname To set max-hostname length for circuit-id and remote-id, use the following command.

To set max-hostname length to default value (16), use the following command.


bridgeport PORTS max-host (max|MAXHOSTS)

Bridge Bridgeport configuration; - Bridgeport max-host configuration.


PORTS Bridgeports (e.g. 1/1/1-1/72/1,0/1)

max-host Bridgeport max-host configuration.

max Set the max. allowed max-host value.

MAXHOSTS List of max. MAC numbers (e.g. 5, 10 - 20).

no bridgeport PORTS max-host

Reset functions;

– Bridgeport configuration – Bridgeport max-host configuration


max-hosts PORTS MAXHOSTS

Bridge Sets bridge port max-host, select a port number.

PORTS Select port number (e.g. 1/1/1-1/72/1,0/1).

MAXHOSTS Maximum MAC number (highest max-host value of IUs is 64, default is 16).

Switch(bridge)# bridgeport 1/1/1,1/2/1 max-host 10,12

--> bridgeport 1/1/1 will be configured with max-host 10;

--> bridgeport 1/2/1 will be configured with max-host 12.

Switch(bridge)# show max-hosts 1/1/1 1/1/1 0/10 (current / max-allowed dynamic MACs)Switch(bridge)# show max-hosts 1/2/11/2/1 0/12 (current / max-allowed dynamic MACs)

Switch(bridge)# bridgeport 1/1/1,1/2/1 max-host 10

--> bridgeport 1/1/1 will be configured with max-host 10;

--> bridgeport 1/2/1 will be configured with max-host 10.

Switch(bridge)# show max-hosts 1/1/11/1/1 0/10 (current / max-allowed dynamic MACs)Switch(bridge)# show max-hosts 1/2/11/2/1 0/10 (current / max-allowed dynamic MACs)


bridgebase max-hostnameMAXHOSTLENGTH

Bridge Sets max-hostname length for circuit-id and remote-id.

MAXHOSTLENGTH Sets max-hostname (1-63), default value is 16.

252

Operate CLI

Id:0900d805805d456a


Displaying bridge base configurationTo display a configuration of bridge base, use the following command.

Example:

SWITCH(bridge)# show bridgebaseBridge mode : basicRouting mode : unrestrictedUnicast DLF filter: disabledMulticast DLF filter: disabledMax Hostname length : 16Tagging mode : single taggingOuter default PVID : 2Outer default Prior : 0service-tag-TPID : 0x8100 (only in double tagging mode)default remoteid format string: "%M"default circuitid format string: "%N %T %S/%P:%p.%c"Mirror bridge port : no mirror port configuredMAC aging time : 100000IPoA arp request interval: 0in/outband switching vlan: disabled

SWITCH(bridge)# circuitid-format "%s/%P:%p.%c"

updating dhcpd ... done.

SWITCH(bridge)# remoteid-format "%S/%P/%V -> %b"

updating dhcpd ... done.

SWITCH(bridge)# show bridgeport 17/1/1

Port | PVIDs(o/i) .1p(o/i) -mode(o/i) TaggingMode ReplaceVID | VCC-Aggr IPMode DSCP-Prof HostProto SrcMacAddress | Etype-Prof MAT -------------------------------------------------------------------------------- 17/1/1 | 1000/1 0/(0) set/def untagged off (16011)| - IPoE none none <none> | none off | CircuitId=default(217/01:1.32) RemoteId=default(17/01/1 -> 16011) Mult |>icastPackageGroups=<none> LeaveMode=fast(EHTMode=off) maxJoinedGroups= |>10 maxNonPremiumChannels=10 maxMCBandwidth=10000kbps minUCBandwidth=0k |>bps IpoaProviderRouterIpAddress=<none> ip-antispoofing=off -------------------------------------------------------------------------------

Bridgebase settings of single tagged scenarios


no bridgebase max-hostname Bridge Sets max-hostname length to default value (16).


show bridgebase PrivilegedGlobalBridge

Shows a configured bridge base.

253


Id:0900d805805d456a

g The bridgebase setting values are global switch parameters. Changes of the default value will have influence to the switching behavior of the system. Please be careful!

The required command for single tagged scenarios:

The commands for tagged scenarios, (optional only for global single tagged mode):

Bridgebase settings of double tagged scenarios

g The bridgebase setting values are global switch parameters. Changes of the default value will have influence to the switching behavior of the system. Please be careful!

The switching from single tagged to double tagged causes significant changes in VLAN handling. Please use the following command:

Switch(bridge)# show vlan propertiesto find out differences in the system behavior after switching from single to double tagged. In this case the following value is important:

VLAN property stacked or double

VLAN property cross-connect on or off

In case of vlan property 'stacked' the single tagged scenario will still work after switching from single to double tagged.

In case of vlan property 'double' the single tagged scenario will work as double tagged scenario after switching from single to double.

The property 'cross-connect' is similar to a feature that is called “transparent LAN service” but it isn't the same. Please take care of it!!!

Switch(bridge)# bridgebase taggingmode single--> set System to single tagged (single tagged is the default value)

Switch(bridge)# bridgebase routing-mode residential--> User2User-communication disabled Switch(bridge)# bridgebase routing-mode unrestricted--> User2User-communication enabledSwitch(bridge)# bridgebase dlf-filter enable--> flooding of unicast frames in downstream permittedSwitch(bridge)# bridgebase dlf-filter disable--> flooding of unicast frames in downstream deniedSwitch(bridge)# bridgebase multicast-filter disable--> unknown multicast is floodedSwitch(bridge)# bridgebase multicast-filter downstream--> unknown multicast is flooded in upstreamSwitch(bridge)# bridgebase multicast-filter upstream--> unknown multicast is flooded in downstreamSwitch(bridge)# bridgebase multicast-filter updownstream--> unknown multicast is blockedSwitch(bridge)# bridgebase mirror '0/1-0/4' --> select uplink port for monitor traffic (rule must be created)Switch(bridge)# mat translation-mode world--> set translation-mode for mat (12bit)Switch(bridge)# mat translation-mode ths--> set translation-mode for mat (19bit)Switch(bridge)# mat dslamid '0-4095' --> configure dslamid (translation-mode world)Switch(bridge)# mat dslamid '0-524287' --> configure dslamid (translation-mode THS)

254

Operate CLI

Id:0900d805805d456a


The required command for double tagged scenarios:

The commands for double tagged scenarios:

7.1.2 Configuring bridge portBridge port tag replacement

Bridge port tagging mode

Switch(bridge)# bridgebase taggingmode double

--> set System to double tagged

Switch(bridge)# bridgebase routing-mode residential--> User2User-communication disable Switch(bridge)# bridgebase routing-mode unrestricted--> User2User-communication enableSwitch(bridge)# bridgebase dlf-filter enable--> flooding of unicast frames in downstream permitted Switch(bridge)# bridgebase dlf-filter disable--> flooding of unicast frames in downstream denied Switch(bridge)# bridgebase multicast-filter disable--> unknown multicast is floodedSwitch(bridge)# bridgebase multicast-filter downstream--> unknown multicast is flooded in upstream Switch(bridge)# bridgebase multicast-filter upstream--> unknown multicast is flooded in downstreamSwitch(bridge)# bridgebase multicast-filter updownstream--> unknown multicast is blockedSwitch(bridge)# bridgebase mirror '0/1-0/4' --> select uplink port for monitor traffic (rule must be created) Switch(bridge)# mat translation-mode world--> set translation-mode for mat (12bit)Switch(bridge)# mat translation-mode ths--> set translation-mode for mat (19bit)Switch(bridge)# mat dslamid '0-4095' --> configure dslamid (translation-mode world)Switch(bridge)# mat dslamid '0-524287' --> configure dslamid (translation-mode THS)


bridgeport PORTS replace-vlantag(VID | off | iuglobal)

Bridge Configures bridgeport replace-vlantag.

VID VLAN ID for tag replacement, the default value of VID is 7.

PORTS Subscriber bridgeports (e.g. 1/1/1-1/72/1,0/1).

VID vlan id for tag replacement.

off switch off tag replacement.

iuglobal set iu global replace vlan tag (see 'iubridgeprofile SLOTS replace-vlantag ...').

no bridgeport PORTS replace-vlantag

Reset function for bridgeport replace vlantag, enter a port number, e.g., 1/1-1/48,2/20/1.


255


Id:0900d805805d456a

Bridge port PVIDEach port has a default inner PVID 1. You can also configure a PVID according to the need.

To configure a bridge port PVID, use the following command.

In double tag mode, you can define PVID for inner tag.

Following example shows how to set bridgeport PVID.

SWITCH(bridge)# bridgeport 1/1/1-1/72/1 pvid 1000

Bridge port multicast bandwidthTo show remain multicast bandwidth and accept status, use the following commands.

Bridge port multicast groupTo configure bridgeport multicast group, use the following commands.


bridgeport PORTStaggingmode{off | tagged I untagged}

Bridge Configures bridgeport tagging mode:

off Untagged, tagged frames are forwarded-unchanged

tagged Tagged frames are forwarded, untagged frames are dropped

untagged Untagged frames are forwarded, tagged frames are dropped


bridgeport PORTS pvid PVIDS

Bridge Configures PVID, enter a port number.

PORT (e.g. 1/1-1/48, 2/20).

PVIDS List of PVIDs (e.g. 101-172, 101), PVID=SlotPort (e.g. 101 for bridgeport 1/1/1).


bridgeport PORTS inner-pvid PVIDS

Bridge Define PVID for inner tag in double tag mode.


show remain-mcbw PORTS BridgeGlobalPriviledged

Shows port remain multicast bandwidth and accept status.

PORTS Port number (e.g. 1/1/1-1/72/1,2/1/1).

256

Operate CLI

Id:0900d805805d456a


Bridge port modeTo configure bridge port mode, use one of the following commands.


bridgeport PORTS max-non-premium-channel(MAXNONPREMIUM|no|unlimited

Bridge Configures bridgeport max. multicast non premium channels.

PORTS Port number (e.g. 1/1/1-1/72/1,0/1).

MAXNON-PREMIUM

Max. joined non premium channels, range 1-32.

no Deny

unlimited Unlimited.


bridgeport PORTS max-mcast-channel(MAXJOINED | no | unlimited)

Bridge Configures bridgeport max. multicast groups (IGMPv2) or max. multicast channels (IGMPv3).


MAXJOINED Max. joined multicast channels, range 1-32.

no No joined multicast channels.



bridgeport PORTS max-mcast-bandwidth(BANDWITH | deny | unlimited)

Bridge Configures bridgeport max. multicast bandwidth.


BANDWITH

Max bandwidth, do not forget the unit 'kbps' (100kbps..50000kbps)

deny Deny



bridgeport PORTS min-unicast-bandwidthBANDWITH

Bridge Configures bridgeport min. unicast bandwidth.


BANDWITH Min unicast bandwidth range, do not forget the unit 'kbps' (000kbps..50000kbps).

257


Id:0900d805805d456a

VCC aggregator

g For VCC-Aggregator there is the same restriction: all VCCs must have the same L2 configuration, unless:

– The priority of VCCs must be different,– There must exist a minimum of two VCCs.

To enable/disable a VCC aggregator, use the following command.

To delete a port from a VCC aggregator, use the following command.

Default remote IDTo specify a default remote ID, use the following command.


bridgeport PORTS mode{ipoa | ipoe | pppoa | auto}

Bridge Select a bridge port mode, enter a port number.

PORT (e.g. 1/1-1/48, 2/20).

ipoa Selects the IPoA mode.

ipoe Selects the IPoE mode.

pppoa Selects the PPPoA mode.

auto Auto selection between IPoE and PPPoE.

bridgeport PORTSleavemode (fast | normal | ehtmode)

Bridgeport configuration;- Bridgeport leave mode configuration.

PORTS Subscriber bridgeports.(e.g. 1/1/1-1/72/1,2/1/1).

fast Switch leave mode to fast (ehtmode disabled).

normal Switch leave mode to normal.

ehtmode Switch leave mode to ehtmode (ehtmode enabled, leavemode fast).

bridgeport PORTS mode default Bridgeport configuration;- Bridgeport mode configuration.

PORTS Subscriber bridgeports.(e.g. 1/1/1-1/72/1,2/1/1).

mode Bridgeport mode configuration.

default Conexant port reset mode.


bridgeport PORTS mode vcc-aggr{enable | disable}

Bridge Enable/disable VCC aggregator, enter a port number. (e.g. 1/1/1-1/72/1,0/1)


no bridgeport PORTS mode vcc-aggr

Bridge Deletes a specified port from VCC aggregator, enter a port number. (e.g. 1/1/1-1/72/1,0/1)

258

Operate CLI

Id:0900d805805d456a


To display a configured remote ID format, use the following command.

Default circuit IDTo specify a default circuit ID, use the following command.


bridgeport PORTS remoteid REMOTEID

Bridge Specifies using of remoteid-format, enter a port number and DHCP remote ID.


REMOTEID DHCP remote id (eg. "" means no remote id).

remoteid-format STRING Sets the default format string for remote IDs.

STRING format string (describer replacment: %B -> bridgeport string, %M -> mac address, %N -> hostname, %T -> dsl line type, %S -> slot, %s -> shelf slot (printed on IU), %P -> port, %R -> Vlan id (replaced by DHCP), %V -> VCC ID, %b -> unique bridgeport id, %p -> VPI, %c -> VCI)

no bridgeport PORTSremoteid

Deletes a specified default DHCP remote ID.


show remoteid-format Bridge Shows a configured default format string for remote ID.

259


Id:0900d805805d456a

To display a configured circuit ID format, use the following command.

Bridge port priorityTo configure bridge port priority, use the following command.

To configure bridge port inner priority, use the following command.

Priority mode for outer and inner vlan tagsThe 802.1p value handling in hiX 5622/25/30/35 R2.8 is according to Table 28.

A set of new configuration options used for setting the VLAN priority of the inner/C-VLAN and/or outer S-VLAN for upstream direction (DSL towards backplane) are defined. Table 27 shows all the combinations of the VLAN priority settings are supported.


bridgeport PORTS circuitid CIRCUITID

Bridge Specifies using of circuitid-format, enter a port number and DHCP circuit ID. (e.g. "default" means global default circuit id).

circuitid-format STRING Sets the default format string for circuit IDs.

STRING Format string (describer replacment: %B -> bridgeport string, %M -> mac address, %N -> node identifier or hostname (replaced by DHCP), %T -> dsl line type, %S -> slot, %s -> shelf slot (printed on IU), %P -> port, %R -> vlan id (replaced by DHCP), %E -> ethernet priority (replaced by DHCP), %V -> VCC ID, %b -> unique bridgeport id, %p -> VPI, %c -> VCI)

no bridgeport PORTS circuitid

Deletes a specified default circuit ID.


show circuitid-format Bridge Shows a configured default format string for circuit ID.


bridgeport PORTS priority PRIORITY

Bridge Configures port priority, enter a port number.(e.g. 1/1/1-1/72/1,0/1)

PRIORITY Priority (0-7).


bridgeport PORTSinner-priorityPRIORITY

Bridge Configures port inner priority, enter a port number.(e.g. 1/1/1-1/72/1,0/1)

PRIORITY Priority (0-7).

260

Operate CLI

Id:0900d805805d456a


g These features are for Convergate-D based IUs only. The following table give an overview regarding the modes for 1.p handling support on each bridgeport.

C-VLAN Priority S-VLAN Priority

Priority mode (a) (b) (c) (d) (e)

default/pre-defined config-uration

ToS/DSCP to VLAN prio mapping.

default/pre-defined config-uration

C-VLAN prio -> S-VLAN prio

ToS/DSCP to VLAN prio mapping

DSL line incoming untagged (ut)

Sets new (ut) or change existing (t) VLAN prio to default or con-figured value or keep received prio (t).

Sets new (ut) or change existing (t) VLAN prio based on DSCP value of the IP header.

Sets new VLAN prio to default or configured value.

(n/a) Sets new VLAN prio based on DSCP value of the IP header.

DSL line incoming tagged (t)

Copy C-VLAN prio to S-VLAN prio.

Table 27 VLAN priority configuration options

Incoming frames Outer tag Inner tag Mode according to Table 27

incoming frames outer tag inner tag Mode according to Table 27

single tagged mode

untagged set - (a)

untagged DSCP‡.1p - (b)

tagged set - (a)

tagged trust - (b)

tagged trust - -

double tagged mode

untagged set set (a), (c)

untagged set DSCP‡.1p Note: not required

untagged set trust Note: not required, due to untagged frames same as set/set

untagged DSCP‡.1p set Note: not required

untagged DSCP‡.1p DSCP‡.1p (e)

untagged DSCP‡.1p trust Note: not required due to untagged frames same as DSCP‡.1p/set

tagged set set (a), (c)

tagged set DSCP‡.1p Note: not required

tagged set trust Note: not required

tagged DSCP‡.1p set Note: not required

tagged DSCP‡.1p DSCP‡.1p (e)

tagged DSCP‡.1p trust Note: not required

tagged copy set Note: same as set/set

tagged copy DSCP‡.1p Note: same as DSCP‡.1p/ DSCP‡.1p

Table 28 Setting the priority bits

261


Id:0900d805805d456a

To configure priority mode for outer vlan tags, use the following command, see also Use case: Inner and outer priority.

To configure priority mode for inner vlan tags, use the following command, see also Use case: Inner and outer priority.

tagged copy trust (d)

The mode (d) is not supported by Wintegra based IUs. In addition, the mode for the inner and outer tag must always be the same. The Convergate-D based IUs will support all modes listed in the table above.


bridgeport PORTS outer-priority-option{set | copy | dscp} (PROFILEID | none | iuglobal | )

Bridge Configures priority mode for outer vlan tags, enter a port number. (e.g. 1/1-1/48, 2/20)

set Take outer .1p-priority of bridgeport set with CLI command 'bridgeport PORTS priority PRIOR-ITY'(default mode)

copy Copy the inner .1p-priority to outer (for so called "trusted customer").

dscp DSCP-to-.1p mapping, see also Table 28(the DSCP value of Layer3-packages is mapped to tagged-Layer2-frames with the help of DSCP-to-dot1p profiles)

PROFILEID DSCP- to -.1p profile id for DSCP mode (can be reserved in non-dscp prio modes, too) (1 to 16).

none Sets no DSCP-to-.1p profile id

iuglobal Sets IU global DSCP-to-.1p profile ID (see 'iubridgeprofile SLOTS dscp-to-dot1p-profile ...')


bridgeport PORTS inner-priority-option(default | set | dscp) (PROFILEID | none | iuglobal | )

Bridge Bridgeport configuration;- Priority mode for inner vlan tags.

PORTS Subscriber bridgeports (e.g. 1/1/1-1/72/1,2/1/1)

default Take usertag priority in case of single tagged traffic, otherwise same like 'set'-option (for so called 'trusted customer') (default mode)

set Take forced inner .1p-priority of bridgeport set with cli command 'bridgeport PORTS inner-priority PRIORITY'

dscp DSCP-to-.1p mapping (the DSCP value of Layer3-packages is mapped to tagged-Layer2-frames with the help of dscp-to-dot1p profiles)

PROFILEID DSCP-to-.1p profile id for dscp mode (can be reserved in non-dscp prio modes, too) (1..16)

none Sets no DSCP-to-.1p profile id

iuglobal Sets IU global DSCP-to-.1p profile id (see 'iubridgeprofile SLOTS dscp-to-dot1p-profile ...')

Incoming frames Outer tag Inner tag Mode according to Table 27

Table 28 Setting the priority bits (Cont.)

262

Operate CLI

Id:0900d805805d456a


Modify Ethertype VLAN tagging profile assignment to bridgeportTo modify the ethertype VLAN tagging profile assignment to bridgeport, use the follow-ing commands, see also 14.3.4 Use case: EtherType-based forwarding.

To show the ethertype based vlan tagging profile, use following command:


ethertype-based-vlan-tagging-profile create (PROFILEID | auto-id) ETHERTYPES VLANID (DOT1P | )

Bridge Create a new ethertype based VLAN tagging profile.

PROFILEID Profile ID of ethertype-based-vlantagging profile (1-100).

auto-id Auto-generated profile id.

ETHERTYPES

List of ethertypes (e.g. 0800, 8864).

VLANID VLAN ID in that packets is to convert.

DOT1P .1p value for to be converted packets.

ethertype-based-vlan-tagging-profile modify PROFILEID ((ethertype (set|add|remove) ETHERTYPES) |) ((vlanid VLANID) |) ((dot1p DOT1P) |)

Bridge Modifies ethertype-based-vlantagging profile profile.

PROFILEID Profile id of ethertype-based-vlantagging profile (1..100).

ethertype Modifies (add/remove/set) ethertype list of profile

set Sets ethertype list of profile.

add Add ethertype list of profile.

remove Remove ethertype list from profile.

vlanid Modifies vlan id of profile.

dot1p Modifies .1p priority value of profile.

ethertype-based-vlan-tagging-profile delete PROFILEID

Bridge Deletes an ethertype based VLAN tagging profile.

delete Delete ethertype-based-vlan-tagging profile profile

PROFILEID Profile id of ethertype-based-vlantagging profile (1..100)


show ethertype-based-vlan-tagging-profile (PROFILEIDS | )

BridgeGlobalPriv-iledged

Shows running system information.- ethertype-based-vlantagging profile.

PROFILEIDS Profile id (1 to 100).

263


Id:0900d805805d456a

Bridgeport IP-antispoofing configurationTo configure IP-antispoofing to bridgeport, use the following command.

Source MAC address for IPoATo configure a source MAC address for IPoA, use the following command.


bridgeport PORTSethertype-based-vlan-tagging-profile (none | PROFILEID)

Bridge Modifies ethertype-based-vlantagging profile assignment to bridgeport.


none Detach profile.

PROFILEID Append profile.

no bridgeport PORTS ethertype-based-vlan-tagging-profile

Reset functions;

– Bridgeport configuration – Bridgeport max-host configuration – Detach ethertype-based-vlantagging

profile from bridgeport



bridgeport PORTS ip-antispoofing(off | (on (no | inner | outer | both)))

Bridge Configures IP-antispoofing, enter a port number.


off Switch IP-antispoofing off.

on Switch IP-antispoofing on.

no No vlan check.

inner Inner vlan check.

outer Outer vlan check.

both Both (inner and outer) vlan check.


no bridgeport PORTS ip-antispoofing

Bridge Reset IP-antispoofing in configuration, enter a port number.



bridgeport PORTSsrcmacaddr(auto|SRCMACADR)

Bridge Configures a source MAC address for IPoA, enter a port number. (e.g. 1/1-1/48, 2/20).

Note: All used source MAC addresses must be different.

auto No source MAC address configuration for IPoA

SRCMACADR Source MAC address (e.g. 00:11:22:33:44:55)

264

Operate CLI

Id:0900d805805d456a


Host configuration protocolTo configure a host configuration protocol, use the following command.

g Operator shall change default value in order to let traffic (pppoe/dhcp) pass through. The default value is “none”.

Displaying bridge port configurationTo display a configuration of bridge port, use the following command.

The following example shows a bridge port configuration:

SWITCH(bridge)# show bridgeport 1/1/1Port | PVIDs(o/i) .1p(o/i) -mode(o/i) TaggingMode ReplaceVID | VCC-Aggr IPMode DSCP-Prof HostProto SrcMacAddress | Etype-Prof MAT max-hosts---------------------------------------------------------------------------------1/1/1 | 101/1 0/0 set/def off off ( 1011)| - IPoE none pppoe <none> | none off 10 | CircuitId=default(%N adsl 01/01:0.32) RemoteId=default(00:0f:bb:30:28: |>d2) MulticastPackageGroups=<none> LeaveMode=ehtmode(EHTMode=on) maxJoi |>nedGroups=10 maxNonPremiumChannels=10 maxMCBandwidth=unlimit minUCBand |>width=0kbps IpoaProviderRouterIpAddress=<none> ip-antispoofing=off Max |>IPAddresses=8---------------------------------------------------------------------------------

Bridgeport settings of single tagged scenarios

g The configuration of tagging mode defines whether ingress/incoming frames are tagged or untagged. In case of tag replacement or vlan swapping, the incoming vlan which matches the given one is overwritten (forced overwritten).

The priority of this VLAN is defined by bridgeports priority setting.

no bridgeport PORTS srcmacaddr

Bridge Deletes source for MAC address for IPoA, enter a port number. (e.g. 1/1-1/48, 2/20)


bridgeport PORTShost-protocol{none | dhcp | pppoe | dhcp-pppoe}

Bridge Configures a host configuration protocol, enter a port number. (e.g. 1/1/1-1/72/1,0/1)

none Drop DHCP and PPPOE discovery

dhcp Forward DHCP and drop PPPOE dis-covery

pppoe Forward PPPoE discovery and drop DHCP discovery

dhcp-pppoe

Forward DHCP and PPPOE discovery


show bridgeport PrivilegedGlobalBridge

Shows all existing bridge ports

show bridgeport (PORTS | ) Shows bridge port configuration, enter a port number. (e.g. 1/1/1-1/72/1, 0/1)


265


Id:0900d805805d456a

Required commands for single tagged scenarios:

Optional commands for single tagged scenarios:

Bridgeport settings of double tagged scenarios

g The configuration of tagging mode defines whether ingress/incoming frames are tagged or untagged. In case of tag replacement or vlan swapping, the incoming vlan which matches the given one is overwritten (forced overwritten). The priority of this VLAN is defined by the priority setting of bridgeport.

Required commands for double tagged scenarios:

Optional commands for double tagged scenarios:

Switch(bridge) bridgeport x/x/x replace-vlantag off--> bridgeport vlan tag replacement must be offSwitch(bridge) bridgeport x/x/x taggingmode untagged--> only untagged traffic is allowedSwitch(bridge)# bridgeport x/x/x pvid '1-4093' -->set port based vlanid for untagged trafficSwitch(bridge)# bridgeport x/x/x host-protocol none--> drop DHCP and PPPOE discoverySwitch(bridge)# bridgeport x/x/x host-protocol dhcp--> forward DHCP and drop PPPOE discoverySwitch(bridge)# bridgeport x/x/x host-protocol pppoe--> forward PPPoE discovery and drop DHCP discoverySwitch(bridge)# bridgeport x/x/x host-protocol dhcp-pppoe--> forward DHCP and PPPOE discovery

Switch(bridge)# bridgeport x/x/x taggingmode off--> both tagged and untagged are allowedSwitch(bridge)# bridgeport x/x/x ehtmode on--> explicit host tracking on for multiple multicast receiver,it’s supported by Convergate-D based line cards.Switch(bridge)# bridgeport x/x/x ehtmode off--> explicit host tracking off for single multicast receiver,it’s supported by Convergate-D based line cards.Switch(bridge)# bridgeport x/x/x priority '0-7' --> define priority of ingress traffic Switch(bridge)# bridgeport x/x/x max-mcast-channel 1-32 --> set max number of active multicast channel, it’s supported by Convergate-D based line cards.Switch(bridge)# bridgeport x/x/x leavemode fast--> set IGMP leavemode to 'fast', it’s supported by Convergate-D based line cards.Switch(bridge)# bridgeport x/x/x leavemode normal--> set IGMP leave mode 'normal', it’s supported by Convergate-D based line cards.Switch(bridge)# bridgeport x/x/x max-host '1-64' --> set max number of MAC per bridgeport

Switch(bridge) bridgeport x/x/x pvid '1-4093' -->set port based vlanid for untagged traffic.Switch(bridge) bridgeport x/x/x inner-pvid '1-4093' --> set port based inner vlanid for untagged traffic.Switch(bridge)# bridgeport x/x/x host-protocol none--> drop DHCP and PPPOE disc.Switch(bridge)# bridgeport x/x/x host-protocol dhcp--> forward DHCP and drop PPPOE disc.Switch(bridge)# bridgeport x/x/x host-protocol pppoe--> forward PPPoE disc and drop DHCP.Switch(bridge)# bridgeport x/x/x host-protocol dhcp-pppoe--> forward DHCP and PPPOE disc.

266

Operate CLI

Id:0900d805805d456a


Displaying IU bridge profile configurationTo display the configuration of IU bridge profile configuration, use the following command.

Configuring IU bridge profileTo configure IU Bridge Profile, use the following commands.

Configuring PPPoA source MAC addressTo configure PPPoA source MAC address, use the following commands.

Switch(bridge)# bridgeport x/x/x ehtmode on--> explicit host tracking on for multiple multicast receiver.Switch(bridge)# bridgeport x/x/x ehtmode off--> explicit host tracking off for single multicast receiver.Switch(bridge)# bridgeport x/x/x priority '0-7' --> define priority of ingress traffic.Switch(bridge)# bridgeport x/x/x inner-priority '0-7' --> define inner vlan priority of ingress traffic.Switch(bridge)# bridgeport x/x/x max-mcast-channel 1-32 --> set max number of active multicast channel.Switch(bridge)# bridgeport x/x/x leavemode fast--> set IGMP leave manually 'fast'.Switch(bridge)# bridgeport x/x/x leavemode normal--> set IGMP leave mode 'normal'.Switch(bridge)# bridgeport x/x/x max-host '1-64' --> set max number of MAC per bridgeport.


show iubridgeprofile {SLOT|} PrivilegedGlobalBridge

Shows IU bridge profile configuration

SLOT IU slot number, optional.


iubridgeprofile SLOTS dscp-to-dot1p-profile (none | PROFILEID)

Bridge IU bridge profile configuration;- DSCP-to-.1p mapping.(the DSCP value of Layer3-packages is mapped to tagged-Layer2-frames with the help of DSCP-to-dot1p profiles)

SLOTS iu slot (e.g. 1-2,10).

none Detach DSCP-to-.1p mapping profile.

PROFILEID DSCP-to-.1p mapping profile ID, (none, 1..16)

iubridgeprofile SLOTS replace-vlantag VID

IU bridge profile configuration.

SLOTS IU slot (e.g. 1-2,10).

replace-vlantag IU bridge replace-vlantag configuration.

VID VLAN ID for tag replacement (1..4093).

267


Id:0900d805805d456a

To show bridgeport PPPoA configuration, use the following commands.


iubridgeprofile SLOTS pppoa-srcmac(MACADDRESS | auto)

Bridge Configures PPPoA source MAC address.

iubridgeprofile IU bridge profile configuration.

SLOTS IU slots (e.g. 1-2,10).

pppoa-srcmac Configures PPPoA source mac address.

MACADDRESS MAC address (e.g. 00:11:22:33:44:55 or auto).

auto Autogenerated mac address.

no iubridgeprofile SLOTS pppoa-srcmac

Deletes IU bridge profile configuration.

iubridgeprofile IU bridge profile configuration.

SLOTS IU slots (e.g. 1-2,10).

pppoa-srcmac Configures PPPoA source mac address.


show bridgeport PORTS pppoa-session-status

BridgeGlobalPriviledged

Shows running system information:- Bridgeport configuration,- PPPoA session status.


268

Operate CLI

Id:0900d805805d456a


7.2 VLAN configurationVirtual Local Area Network (VLAN) is a bridged network that is logically segmented by customer or function. Each VLAN contains a group of ports called VLAN members. On the VLAN network, packets received on a port are forwarded only to the ports that belong to the same VLAN as the receiving port. Network devices in different VLANs cannot communicate with each other without a Layer 3 switching device to route traffic between the VLANs. VLAN reduces the amount of broadcast traffic so that flow control could be realized. It also has security benefits by completely separating traffics between different VLANs.

The IEEE 802.1q based ports on the DSLAM support simultaneously tagged and untagged traffic. An 802.1q port is assigned a default port VLAN ID (PVID), and all untagged traffic is assumed to belong to the default PVID. Thus, the ports participating in the VLANs accept packets bearing VLAN tags and transmit them to the port VLAN ID.

This chapter contains the following Sections:

• Assigning port to VLAN • VLAN IP routing • VLAN multicast permission • VLAN default gateway • Changing common VLAN to management VLAN • Configuring VLAN service type/cross-connect • Displaying VLAN • Deleting VLAN • VLAN settings of single tagged scenarios

You need to create a vlan first, then add the ports into the vlan. Configure VLAN ID for uplink interface using following command beginning in privileged Bridge mode:

g VLAN 1 & 4094 are default values, and cannot be created and deleted

To create/delete VLAN, use the following commands.

g The variable VLANS is a particular set of bridged interfaces. Frames are bridged only among interfaces in the same VLAN.

The following example shows how to create a vlan and assign Ethernet port 1 in CXU to the vlan.


vlan create VLANS Bridge Create new VLAN by assigning VLAN ID.

VLANS VLAN ID (1-4093)

vlan name VLANS{none | NAME}

Configures VLAN name.

VLANS VLAN IDs (e.g. 101-148, 1000)

NAME VLAN name.

no vlan name VLANS Deletes VLAN by assigning VLAN ID.

VLANS Select port numbers (e.g 1/1/1-1/48/1)

name Configures VLAN name.

269


Id:0900d805805d456a

7.2.1 Assigning port to VLANTo assign/remove a port to/from VLAN, use the following commands.

The following is an example.

| Vlan ID | Ports (u: untagged port, t: tagged port) |-------------------------------------------------------------- 1 | 10 | 0/3t,0/4t,4/1/1u

7.2.2 VLAN port priorityTo assign VLAN port priority, use the following command.

7.2.3 VLAN translationTo configure vlan translation from subscriber vlans to uplink vlan, use the following command.




vlan (add | set) VLANS PORTS (tagged | untagged) ((PORTS (tagged | untagged)) | )

Bridge Add ports to VLANs, Sets ports to vlans. VLAN configura-tion.

add Add ports to VLANs.

set Set ports to VLANs.

VLANS Enter the Vlan IDs.

PORTS Select port number for untagging or tagging (e.g. 1/1/1-1/48/1).

tagged/untagged Tagged/Untagged.

PORTS Select port number for tagging or untagging (e.g. 1/1/1-1/48/1).

tagged/untagged Tagged/Untagged.

vlan del VLANS PORTS Remove associated ports from specified VLAN.

VLANS VLAN ID.

PORTS Port number to be deleted.


SWITCH(bridge)# vlan add 10 0/3 tagged 4/1/1 untagged

SWITCH(bridge)# show vlan


bridgeport PORTSpriority PRIORITY

Bridge Configures port priority for a specified port.

PORTS Port number (e.g. 1/1/1-1/48/1).

PRIORITY Priority value (0-7).

270

Operate CLI

Id:0900d805805d456a


To clear vlan translation from subscriber vlans to uplink vlan, use the following command.

7.2.4 VLAN IP routingTo enable/disable VLAN IP routing, use the following command.

7.2.5 VLAN multicast permissionTo enable/disable VLAN for IGMP provider usage, use the following command.

7.2.6 Maximum of IP adressesTo configure the maximum of allowed ip addresses, use the following command.

g Traffic is only possible for the first 16 sessions of a single bridgeport (but of course it could be configured in a way that the 16 IPs are spreaded equally over the VCCs). The IU will reject configuration with more than 16 IP addresses per bridgeport.


vlan xlation VLANS(UPLINK | off)

Bridge Configures vlan translation from subscriber vlans to uplink vlan.

VLANS Select vlan IDs (e.g. 101-148,1000).

UPLINK Select the uplink vlan id.

off Switch vlan translation off.


no vlan xlation VLANS Bridge Clears vlan translation from subscriber vlans to uplink vlan.

VLANS Select vlan IDs (e.g. 101-148,1000).


vlan ip-routing VLANS {off | on}

Bridge Enable/disable vlan IP routing.

VLANS VLAN IDs (e.g. 101-148, 1000).


vlan multicast-permissionVLANS {enable | disable}

Bridge Enable/disable multicast permission.

VLANS: VLAN IDs (e.g. 101-148, 1000)

271


Id:0900d805805d456a

7.2.7 VLAN multicast-floodingTo enable/disable multicast-flooding per VLAN, use the following command.

g Disable the CXU multicast filter before.

7.2.8 VLAN default gatewayTo configure a VLAN default gateway, use the following command.


bridgeport PORTS max-allowed-ip-addresses MAXIPADDRS

Bridge Bridgeport configuration.


max-allowed-ip-addresses

Bridgeport max allowed IP addresses config-uration.

MAXIPADDRS Amount of max. allowed ip addresses (1 to 8).But at the DSL-Port a maximum of 16.

no bridgeport PORTS max-allowed-ip-addresses

Bridgeport configuration.;- Reset functions.


max-allowed-ip-addresses

Bridgeport max allowed IP addresses config-uration.


vlan multicast-flooding VLANS {off | on}

Bridge Configures flooding of multicast packages.


off Switch multicast flooding off.

on Switch multicast flooding on.


vlan default-gateway VLANS{DEFGATEWAY | none}

Bridge Configures default gateway.

VLANS VLAN IDs (e.g. 101-148, 1000).

DEFGATEWAY Default gateway (e.g. 10.0.0.1).

no vlan default-gateway VLANS Deletes a default gateway.

272

Operate CLI

Id:0900d805805d456a


7.2.9 Changing common VLAN to management VLANTo change common VLAN to management VLAN, use the following command.

g Commands lock adding of subscriber bridge ports.

To change management VLAN to common VLAN, use the following command.

7.2.10 Configuring slot limited-rateTo configure slot limited-rate and flow control correlated with vlan management, use the following commands.


vlan mgmt VLANS Bridge Change common VLAN to management VLAN.



no vlan mgmt VLANS Bridge Change management VLAN to common VLAN.



slot SLOTNUMBER limited-rate RATE burst-rate BURST

GlobalBridge

Configures slot rate.


RATE Limited rate in Kbits/sec.

BURST Burst rate in Kbits/sec, range 0-2147483647.

show slot SLOTNUMBER limited-rate

Shows slot rate.


slot SLOTNUMBER tx-pause (enable | disable) rx-pause (enable | disable)

Configures slot rate.


tx-pause Tx flow control, enable: enable flow control, disable: disable flow control.

rx-pause Rx flow control, enable: enable flow control, disable: disable flow control.

show slot SLOTNUMBER flow-ctrl

Shows slot rate.


273


Id:0900d805805d456a

7.2.11 Configuring VLAN service type/cross-connectWith the following commands, you can configure the VLAN service type and cross-connect mode.

Following example shows how to configure the vlan cross-connect mode.

– A VLAN must be created (e.g. outer VLAN ID 1000).– The port in the CXU (e.g. port 0/1) must be assigned tagged to this VLAN.– Also the port in the IU (e.g. port 1/1/1) must be assigned to this VLAN.– An inner VLAN ID must be defined (e.g. 200):

The cross-connect mode is active after the last command.


vlan servicetype VLANS (doubletagged | vlanstacked)

Bridge Configures vlan servicetype.Servicetype is a tagging and striping method that can be used in the double tagging mode.

doubletagged The two tags are added and stripped at the DSLAM.

vlanstacked Only a service VLAN tag is added and stripped at the DSLAM.

vlan cross-connect VLANS (off|on)

Configures vlan cross-connect mode.

VLANS Select VLAN IDs (e.g. 101-148,1000).

on Switches the cross mode on.

off Switches the cross mode off.

g Please note:

– MAC-learning = OFF is implemented for IUs, not for CXU.– Flooding of unknown unicast in downstream direction is implemented from this SW version. – Flooding is realized along the broadcast-domain with a two-stage implementation considering

both VLANs (outer/inner).– DLF must be switched off, multicast flooding must be switched on with bridgebase command– Unknown unicast/broadcast is always flooded by the CXU in downstream direction, the traffic is

blocked by IUs for non CC-VLANs.

SWITCH>enableSWITCH# configure terminalSWITCH(config)# bridgeSWITCH(bridge)# bridgebase taggingmode doubleSWITCH(bridge)# vlan create 1000SWITCH(bridge)# vlan servicetype 1000 doubletaggedSWITCH(bridge)# vlan add 1000 0/1 taggedSWITCH(bridge)# vlan add 1000 1/1/1 untaggedSWITCH(bridge)# bridgeport 1/1/1 pvid 1000SWITCH(bridge)# bridgeport 1/1/1 inner-pvid 200SWITCH(bridge)# port lre 1/1 enableSWITCH(bridge)# vlan cross-connect 1000 on

274

Operate CLI

Id:0900d805805d456a


7.2.12 Displaying VLANTo display a configuration of VLAN, use the following command.

7.2.13 Deleting VLANTo delete a VLAN, use the following command.

g All ports must be removed from VLAN before you delete VLAN.

The following is an example of creating, displaying and deleting VLAN.


SWITCH(bridge)# show vlan

| Vlan ID | Ports (u: untagged port, t: tagged port) |-------------------------------------------------------------- 1 | 10 |

SWITCH(bridge)# no vlan 10

7.2.14 VLAN settings of single tagged scenariosRequired commands for single tagged scenarios

Optional commands for single tagged scenarios


show vlan [VLANS] PrivilegedGlobalBridge

Shows the configuration for specific VLAN, enter VLAN ID.

show vlan properties [VIDS] Shows the properties for specific VLAN, enter VLAN ID.

show port-in-vlan PORTS List ports VLAN, enter the port number. (e.g. 1/1-1/48, 0/1, 1/2/1)

show host-vlan Shows assignment of host to a VLAN.


no vlan VLANS Bridge Deletes VLAN, enter the VLAN ID to be deleted.

Switch(bridge)# vlan create '1-4093' --> creation of VLAN which is identified by it's id Switch(bridge)# vlan add '1-4093' x/x/x tagged --> egress frames are sent with tagSwitch(bridge)# vlan add '1-4093' x/x/x untagged --> egress frames are send untaggedSwitch(bridge)'# vlan add 1-4093' '0/1-0/4' tagged--> uplink ports must be members of VLAN

275


Id:0900d805805d456a

g The dslamid must be set before enabling MAT.

g The multicast flooding depends on the global multicast filter settings

g The multicast permission can only be disabled if the VLAN is not used by an IGMP provider. A VLAN whose multicast permission is enabled has no different behavior than other VLANs. The command is for ensuring that the correct VLAN is used when an IGMP provider will be created.

7.2.15 VLAN settings of double tagged scenariosRequired commands for double tagged scenarios:

The command “vlan servicetype vlanstacked” --> forces the linecards to add ONLY the outer pvid to an ingress frame, independently if this frame is tagged or untagged or double tagged. This behavior leads sometimes to special effects, for example triple tagged QinQ. The command “vlan servicetype doubletagged” --> forces the linecard to add outer and inner pvid. In this case, it is expected that only untagged frame are received.

Optional commands for double tagged scenarios

g Only the outer VLAN is configurable. The inner VLANs are not recognized by CXU or linecard, except if the feature is configured for Layer 3 forwarding.

Switch(bridge)# mac aging-time '10-100000' --> set mac-aging-time different from global valueSwitch(bridge)# vlan del '1-4093' x/x/x --> remove port from VLANSwitch(bridge)# vlan mac-address-trans '1-4093' on--> enable MAT per VLANSwitch(bridge)# vlan mac-address-trans '1-4093' off--> disable MAT per VLAN

Switch(bridge)# vlan multicast-flooding '1-4093' on--> enable multicast-flooding per VLANSwitch(bridge)# vlan multicast-flooding '1-4093' off--> disable multicast-flooding per VLAN

Switch(bridge)# vlan multicast-permission '1-4093' enable--> enable VLAN for IGMP provider usageSwitch(bridge)# vlan multicast-permission '1-4093' disable--> disable VLAN for IGMP provider usage

Switch(bridge)# vlan create '1-4093' --> creation of VLAN which is identified by it's idSwitch(bridge)# vlan add '1-4093' x/x/x tagged--> egress frames are sent with tag Switch(bridge)# vlan add '1-4093' x/x/x untagged--> egress frames are sent untagged Switch(bridge)'# vlan add 1-4093' '0/1-0/4' tagged--> uplink ports must be member of VLANSwitch(bridge)'# vlan servicetype '1-4093' vlanstacked/doubletagged--> see remark below:

Switch(bridge)# bridgebase service-tag-tpid 0x0000-0xffff --> change outer Ethertype

Switch(bridge)# mac aging-time '10-100000' --> set mac-aging-time different to globalSwitch(bridge)# vlan del '1-4093' x/x/x --> remove port from VLAN

276

Operate CLI

Id:0900d805805d456a


g Before MAT enabling the DSLAM ID must be set, without setting the DSLAM ID MAT will not be enabled! The feature MAT in case of double tagged based on con-figuration of inner and outer tag. Please enable MAT always for inner and outer VLAN. In case of scenario 'double tagged untagged' the inner vlan must not be created. So MAT enabling is only needed for outer VLAN.

g The multicast flooding depends on the global multicast filter settings!

g The multicast permission can only be disabled if it is not used by an IGMP provider! A VLAN with enabled multicast permission has no different behavior than other VLANs. The command is used to ensure that the correct VLAN is used, when an IGMP provider will be created!

7.2.16 Example of configuring VLAN & bridge propertiesFollowing example shows how to configure VLAN and Bridge properties of User Port, first, ports 1/1/1-1/72/1 are added to vlan 1000, the interfaces are in untagged mode, then PVID of ports 1/1/1-1/72/1 are set to 1000 (generally, it’s the same as Vlan ID), set host protocol of 1/1/1 to DHCP – PPPoE.

Switch(bridge)# vlan mac-address-trans '1-4093' on--> enable MAT per VLAN Switch(bridge)# vlan mac-address-trans '1-4093' off--> disable MAT per VLAN

Switch(bridge)# vlan cross-connect '1-4093' on/off--> enables the CC-Mode for a outer VLAN Switch(bridge)# vlan multicast-flooding '1-4093' on--> enable multicast-flooding per outer VLAN Switch(bridge)# vlan multicast-flooding '1-4093' off--> disable multicast-flooding per outer VLAN

Switch(bridge)# vlan multicast-permission '1-4093' enable--> enable outer VLAN for IGMP provider usage Switch(bridge)# vlan multicast-permission '1-4093' disable--> disable outer VLAN for IGMP provider usage


SWITCH(bridge)# vlan add 1000 1/1/1-1/72/1 untagged

SWITCH(bridge)# bridgeport 1/1/1-1/72/1 pvid 1000

SWITCH(bridge)# bridgeport 1/1/1 host-protocol dhcp-pppoe

277

Operate CLI Setting IPoA mode

Id:0900d805805de17d

8 Setting IPoA modeTo set the IP over ATM mode configuration, use the following command.

To disable the IP over ATM mode, use the following command.

Example of IPoA Scenario:

Typical IPoA scenarioPerform the connection according to the figure below.

VLAN Mode: Single Tag

Bridge Port used: 1/1/1,1/2/1, 1/3/1 working at untagged mode

Uplink Port used: 0/1 working at tagged mode

VLAN Used: Yellow -->100; Blue --> 101; Black --> 102

Configure VLAN information for port:SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan add 100 1/1/1 untaggedSWITCH(bridge)# vlan add 100 0/1 taggedSWITCH(bridge)# bridgeport 1/1/1 pvid 100


ipoa destination SLOT A.B.C.D XX:XX:XX:XX:XX:XX

Bridge Sets the IPoA mode.

SLOT IU slot number (e.g. s1)

A.B.C.D Destination IP address

XX.XX.XX.XX.XX.XX Destination MAC address


no ipoa destination SLOTA.B.C.D

Bridge Disables the IPoA mode.

SLOT IU slot number (e.g. s1)

A.B.C.D destination IP address

278

Operate CLI

Id:0900d805805de17d

Setting IPoA mode

SWITCH(bridge)# vlan create 101SWITCH(bridge)# vlan add 101 1/2/1 untaggedSWITCH(bridge)# vlan add 101 0/1 taggedSWITCH(bridge)# bridgeport 1/2/1 pvid 101


Configure bridgeport into IPoA mode:SWITCH(bridge)# bridgeport 1/1/1 mode ipoaSWITCH(bridge)# bridgeport 1/2/1 mode ipoaSWITCH(bridge)# bridgeport 1/3/1 mode ipoa

Configure router IP address for per bridgeport:SWITCH(bridge)# bridgeport 1/1/1 ipoa-router-ipaddr 172.18.10.2SWITCH(bridge)# bridgeport 1/2/1 ipoa-router-ipaddr 172.18.10.6SWITCH(bridge)# bridgeport 1/3/1 ipoa-router-ipaddr 172.18.10.10

Configure the CPE IP address for per bridgeport:SWITCH(config)# ip arp-reply fixed 1/1/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/2/1 172.18.10.5SWITCH(config)# ip arp-reply fixed 1/3/1 172.18.10.9

Customer specific IPoA scenarioPerform the connection according to the figure below.

VLAN Mode: Double Tag

Bridge Port used: 1/1/1,1/2/1, 1/3/1 working at untagged mode

Uplink Port used: 0/1 working at tagged mode

VLAN Used:

Yellow -->100, 200 (c-vlan, s-vlan);

Blue --> 101, 200 (c-vlan, s-vlan)

Black --> 102, 200 (c-vlan, s-vlan)

279

Operate CLI Setting IPoA mode

Id:0900d805805de17d

Configure VLAN information for port:SWITCH(bridge)# bridgebase taggingmode doubleSWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 1/1/1,1/2/1,1/3/1 untaggedSWITCH(bridge)# vlan add 200 0/1 taggedSWITCH(bridge)# bridgeport 1/1/1,1/2/1,1/3/1 pvid 200 SWITCH(bridge)# bridgeport 1/1/1 innerpvid 100SWITCH(bridge)# bridgeport 1/2/1 innerpvid 101SWITCH(bridge)# bridgeport 1/3/1 innerpvid 102

Configure bridgeport into IPoA mode:SWITCH(bridge)# bridgeport 1/1/1 mode ipoaSWITCH(bridge)# bridgeport 1/2/1 mode ipoaSWITCH(bridge)# bridgeport 1/3/1 mode ipoa

Configure router IP address for per bridgeport:SWITCH(bridge)# bridgeport 1/1/1 ipoa-router-ipaddr 172.18.10.254SWITCH(bridge)# bridgeport 1/2/1 ipoa-router-ipaddr 172.18.10.254SWITCH(bridge)# bridgeport 1/3/1 ipoa-router-ipaddr 172.18.10.254

Configure the CPE IP address for per bridgeport:SWITCH(config)# ip arp-reply fixed 1/1/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/2/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/3/1 172.18.10.1

280

Operate CLI

Id:0900d805805de17f

IGMP configuration

9 IGMP configurationInternet Group Management Protocol (IGMP) is a host-to-router protocol used to announce multicast (MC) group membership by interested subscriber hosts. It supports an MC distribution service where only one data stream from the source is replicated in the routers per outgoing interface to serve a large number of receivers on behalf of its requests, see also 14.3.24 Use case: IGMP multicast.

In the “IGMP switching” mode MC traffic is forwarded over all ports of the MC VLAN. The modes “IGMP snooping” and “IGMP proxy” are evaluated per IGMP provider VLAN. In “IGMP snooping” mode the IGMP messages are transferred between IGMP router and hosts. Only relevant information are snooped to manage the IGMP MC group.

Both proxy modes may be used in order to reduce MC network traffic. An “IGMP proxy” acts as querier in host direction and as host in network direction.


igmp(vlan-translation | double-tagging) (inner | outer)

Global Configures IGMP vlan-translation/double-tagging work in inner/outer mode. Default configuration is double tagging at outer tag and vlan translation at inner tag.

vlan-translation: Set vlan-translation.

double-tagging: Set double-tagging.

inner: Inner mode.

outer: Outer mode.

igmp upload enable Globally enabling of the IGMP log upload function.

igmp upload disable Disables the log upload function.

igmp Configure IGMP

upload Upload function configuration

disable Global upload disable command

igmp upload ftp (ip A.B.C.D | user USERNAME PASSWORD | dir ROOTDIR)

Configures FTP server for IGMP log upload.

ftp: Upload ftp parameters configuration.

ip: Upload FTP server IP address.

A.B.C.D: IP address, example 192.168.11.1 (0.0.0.0 stand for unset)

user: Upload FTP user

USERNAME: User name.

PASSWORD: Password

dir: Upload FTP server root dir.

ROOTDIR: Root dir name.

igmp upload interval <1-1440> Configures the IGMP log upload interval.

interval: Global upload interval command.

<1-1440>: Upload time in minutes, and to make it work immediately, disable log and then enable log.

igmp upload manually Configures the manually upload of the IGMP log file.

281

Operate CLI IGMP configuration

Id:0900d805805de17f

igmp version(<1-10> | PROVNAME) (v2 | v3-only | v3-compatible)

Global Setting the IGMP version.

igmp Configure IGMP.

version Set IGMP version.

<1-10> Provider index.

PROVNAME Provider name.

v2 V2 mode,compatible with V1.

v3-only V3 mode only.

v3-compatible V3 mode, compatible with V2 and V1.

igmp xlation-table(add | modify) BRIDGEPORT <1-4093> ALLOWVLANLIST <1-4093>"

Creates or modify IGMP VLAN translation table item of bridgeport.

add: Create IGMP VLAN translation table item of bridgeport.

modify: Modify igmp vlan translation table item of bridgeport.

BRIDGEPORT: Bridgeport specified by slot/port/VCC.

1-4093: Provider VLAN.

ALLOWVLAN-LIST:

VLAN allow list (eg. 10,12-21,300 ). VLAN in the list will be translated.

1-4093: VLAN to translate to.

igmp xlation-table delete BRIDGEPORT <1-4093>

Deletes IGMP VLAN translation table item of certain port.

BRIDGEPORT: Bridgeport specified by slot/port/vcc

<1-4093> : Provider vlan id (1-4093)

igmp asm (<1-10>|PROVNAME) (enable|disable)

Sets the IGMP ASM mode.


asm Set IGMP ASM mode.



enable Enable ASM mode.

disable Disable ASM mode.

igmp asm-default-source((provider <1-10>) |(group <1-1000>) ) (A.B.C.D|<1-100>)

Sets IGMP ASM default source IP.

igmp Configure IGMP

asm-default-source

Set IGMP ASM default source ip

provider Asm default source of provider

<1-10> Provider index

group Asm default source of multicast-group

<1-1000> Multicast-group index

A.B.C.D Source ip address

<1-100> Source ip index


282

Operate CLI

Id:0900d805805de17f

IGMP configuration

no igmp asm-default-source ((provider <1-10>) |(group <1-1000>) ) ((A.B.C.D|<1-100>) |)

Global Negate a command or set its defaults:Sets IGMP ASM default source IP.



asm-default-source

Unset IGMP ASM default source ip.

provider Asm default source of provider.


group Asm default source of multicast-group.

<1-1000> Multicast-group index.

A.B.C.D Source ip address.

<1-100> Source ip index.

show igmp asm-default-source (((provider <1-10>) |(group <1-1000>) ) |)

Shows the IGMP ASM default source IP.


igmp Configure IGMP

asm-default-source

Show IGMP ASM default source ip

provider Asm default source of provider


group Asm default source of multicast-group

<1-1000> Multicast-group index


igmp cxu-snooping(<1-10> | PROVNAME) (enable | disable)

Global IGMP CXU Snooping only mode.


cxu-snooping

IGMP CXU Snooping only mode.



enable enable CXU snooping only mode.

disable disable CXU snooping only mode.

g When using the IGMP CXU-snooping feature the igmp query-parameters for the provider on CXU must be adapted to the same values used on the igmp querier on uplink-router.

This is necessary for optimum calculation of IGMP group membership intervals. If these intervals are not the same on the CXU and the router, the user may have multicast traffic inter-ruptions. Use "igmp query" to change the values, values of interest here are "Query interval" + "Robustness" and "Query response interval", see also 9.2 IGMP queries.

When using this feature the provider related igmp query-parameters on CXU must be adapted to at least the same or to higher values as used on the igmp querier on uplink-router.


283


Id:0900d805805de17f

igmp delay-leave(<1-1000> | GROUPNAME) <0-2147483647>

Global Delay time to send IGMP leave message. (it is only applicable for IU-ADSL (CNX))


delay-leave Delay leave configuration.

<1-1000> Group-channel index.

GROUP-NAME

Group name.

0-2147483647 Delay time interval (second).

igmp ether-access disable Disables IGMP Ethernet access function.

igmp Configure IGMP

ether-access Ethernet access function configuration

disable Global ethernet access disable command

igmp ether-access enable Enable IGMP Ethernet access in which case IGMP member-ship report can be received from cascading ports..


ether-access Ethernet access function configuration.

disable Global ethernet access enable command.

igmp group-to-package(<1-1000> | CHANNELNAME) (<1-100> | PACKAGENAME)

Add a IGMP multicast channel to a package.

1-1000 Multicast group index.

CHANNEL-NAME

Channel name.

1-100 Package index.

PACKAGE-NAME

Package name.

igmp chan-bw(CHAN_IDX | CHAN_NAME) <0-500>

Sets the bandwidth for premium channel.

CHAN_IDX: Channel index.

CHAN_NAME:

Channel name.

<0-500>: Channel bandwidth , unit is 100kbps.

igmp default-chan-bw(<1-10>|PROVNAME) <0-500>

Set default bandwidth for non-premium channel.

igmp Configure IGMP

default-chan-bw

Set default channel bandwidth


PROVNAME Provider name

<0-500> Bandwidth range 0..500, unit 100kbps


284

Operate CLI

Id:0900d805805de17f

IGMP configuration

igmp group (<1-10>|PROVNAME) A.B.C.D (A.B.C.D|<1-100>) CHANNAME (<1-1000> | ) (static-join | )

Global Creates a multicast channel.

1-10 Provider index (1-10).


A.B.C.D Group IP address(224.0.0.0-239.255.255.255)

A.B.C.D Source ip address

1-100 Source index

CHANNAME Group-channel name

1-1000 Group-channel index (optional)

static-join IGMP static join (optional)

no igmp group <1-1000> Negate a command or set its defaults:Creates a multicast channel.



group Delete multicast group.

<1-1000> Index number.

igmp log cdr-recognition-time TIME

Configures CDR recognition time which is the time between one join/leave that DSLAM can recognize to record.


log Log function configuration.

cdr-recogni-tion-time

CDR recognition time configuration.

TIME Set CDR recognition time value (unit: second).

igmp log long-time-online-time TIME

When subscriber joins a channel longer than the time, a log will be recorded.

TIME: Set Long Time Online time value, range 0-2147483647 (unit: Minutes)

igmp log disable Global log disable command, stop periodically update log file.



disable Global log disable command, stop periodi-cally update log file.

igmp log enable Enable IGMP log function globally.



disable Global log enable command, start periodi-cally update log file.


285


Id:0900d805805de17f

igmp packet-limit(uplink | subscriber) VALUE

Global Configures the max number of allowed IGMP packets per minute.(it is only applicable for IU-ADSL (CNX)).

uplink IGMP packets limit on uplink port.

subscriber IGMP packets limit on subscriber port.

VALUE <-1 to 2147483647> threshold value (when -1 is set, no limit is applied).

Note: (IGMP preview is only applicable for IU-ADSL (CNX)).

igmp preview enable Global Enables the IGMP preview function.

enable: Global program preview enable command.

igmp preview auto-reset-time enable starttimeSTARTDATE STARTTIME unit UNIT time TIME

Sets the value of auto reset time of subscriber's preview time.

enable Enable preview autoreset functionality.

starttime Start time of preview auto reset functional-ity.

STARTDATE: Time of start time yyyy-mm-dd.

STARTTIME: hh:mm:ss

UNIT: Unit of preview auto reset time interval, D (day), W (week), M (month) and time value.

time: Time value of the preview auto reset inter-val.

TIME: Set time value of the preview auto reset interval.

igmp preview group-to-package (<1-1000> | GROUPNAME) (<1-32>|PACKNAME)

Adds a group to a package:


preview Program preview function configuration.

group-to-package

Add group to package.

<1-1000> Group index.

GROUP-NAME

Group name.

<1-32> Preview package index.

PACKNAME Preview package name.

no igmp preview package (<1-32> | PACKNAME)

Negate a command or set its defaults:Creates a preview IGMP package.




package Package configuration.

<1-32> The program preview package index.



286

Operate CLI

Id:0900d805805de17f

IGMP configuration

no igmp preview group-to-package (<1-1000> | GROUPNAME) (<1-32> | PACKNAME)

Global Negate a command or set its defaults:Adds a group to a package.

no Negate a command or set its defaults

igmp Configure IGMP

preview Program preview function configuration

group-to-package

Delete group from package

<1-1000> Group index

GROUP-NAME

Group name

<1-32> Preview package index

PACKNAME Preview package name

igmp preview package create <1-1000000><1-1000000> <1-1000000> (NAME|)

Creates a preview IGMP package.



package Package configuration.

create Create a preview package.

<1-1000000> Preview lasting period (minute), default: 0 minute.

<1-1000000> Interval between previews (minute), default: 0 minute.

<1-1000000> Preview number allow for a subscriber, default: 0.

NAME Name of a preview package (optional).

igmp preview package modify (<1-32> | PACKNAME) (period | interval | number | name) VALUE

Modify a preview IGMP package.

igmp Configure IGMP

preview Program preview function configuration

package Package configuration

modify Modify a preview package



period Period : preview lasting period

interval Interval : interval between previews

number Number : preview number

name Preview package name

VALUE Value input for the preview package to modify


287


Id:0900d805805de17f

igmp preview subscriber ((<1-17> <1-72> <1-8>) | BRIDGEPORT) (<1-32> | PACKNAME)

Global Add a preview package to a subscriber port.



subscriber subscriber-add-package.

<1-17> slot index.

<1-72> port index.

<1-8> vcc index.

BRIDGE-PORT

Bridgeport specified by slot/port/vcc.

<1-32> Preview package index.


igmp preview reset number-all Resets the preview number of all subscribers.

igmp preview reset number-individual((<1-17> <1-72> <1-8>) |BRIDGEPORT)

Resets of one preview number for a subscriber.



reset Reset number-individual|reset number-all.

number-indi-vidual

Number-individual: preview number of one subscriber.

<1-17> Slot index.

<1-72> Port index.

<1-8> Vcc index.

BRIDGE-PORT

Bridgeport specified by slot/port/vcc.


igmp static-group(<1-1000> | NAME) (static | non-static)

Global Sets a static channel to be static/non-static.

1-1000 Group index.

NAME Group name.

static Set the Group as static.

non-static Set the Group as non-static.

igmp source A.B.C.D (<1-100> | )

Creates IGMP multicast source IP.

A.B.C.D Source IP Address

1-100 Index of Source IP Address (optional)


288

Operate CLI

Id:0900d805805de17f

IGMP configuration

9.1 IGMP providerTo create/modify/delete an IGMP provider, use the following commands.


igmp provider-dot1p (<1-10>|PROVNAME) priority <0-7>

Global Modify the IGMP provider dot1p priority.


provider-dot1p Modify IGMP provider dot1p priority.



priority Dot1p priority.

<0-7> Priotity

igmp provider (<1-10>|) A.B.C.D <1-4094> NAME (unlimited|) <0-4094>

Creates an IGMP provider.

1-10: Provider index.

A.B.C.D: IGMP proxy IP address, example 192.168.151.15.

1-4093: VLAN ID of IGMP provider.

NAME: Name of IGMP provider.

unlimited: all subscribers within this VLAN can access all the multicast groups.

0-4093: Double-tagged VLAN ID of IGMP provider ('0' for not double tagged).

no igmp provider (<1-10> | PROVNAME)

Negate a command or set its defaults:Creates an IGMP provider.


igmp Configure IGMP

provider Delete IGMP provider



igmp provider-max-bw(<1-10>|PROVNAME) (<0-10000>|unlimited)

Sets the max bandwidth allowed for a provider.


provider-max-bw Set provider max bandwidth.



0-10000 Bandwidth range 0..10000, unit 100kbps.


289


Id:0900d805805de17f

To display an IGMP provider, use the following commands.


igmp provider-dot1p (<1-10>|PROVNAME) priority <0-7>

Global Modify an IGMP provider IEEE 802.1p priority.

provider-dot1p

Modify IGMP provider dot1p priority.




<0-7> Priority

igmp provider-dot1p (<1-10>|PROVNAME) priority <0-7> <0-7>

Modify an IGMP provider IEEE 802.1p priority, report priority.




<0-7> Priority

<0-7> Priority for report.

igmp provider-dot1p (<1-10>|PROVNAME) priority <0-7> <0-7> <0-7>

Set an IGMP provider IEEE 802.1p priority, report priority and inner tag priority..

provider-dot1p

Modify IGMP provider dot1p priority.




<0-7> Priority

<0-7> Priority for report.

<0-7> Priority for inner tag (Double VLAN mode).

igmp provider-dot1p (<1-10>|PROVNAME) priority <0-7> <0-7> <0-7> <0-7>

Modify IGMP provider dot1p priority.- Configure IGMP.



priority Dot1p priority

<0-7> Priority

<0-7> Priority for report

<0-7> Priority for inner tag (Double VLAN mode)

<0-7> Priority for inner tag of Report (Double VLAN mode)

no igmp provider {<1-10>} Deletes IGMP provider:

<1-10> Provider index (default all)

290

Operate CLI

Id:0900d805805de17f

IGMP configuration


show igmp provider (<1-10> | PROVNAME | )

Privileged Global

Show running system information,- Configure IGMP- List of created IGMP providers.



show igmp provider egress-port-list (<1-10>|PROVNAME)

Shows subscriber list per provider.



provider Provider.

egress-port-list Shows subscriber list per provider.



291


Id:0900d805805de17f

9.2 IGMP queriesYou can use the hiX 5622/25/30/35 R2.8 as IGMP queries without multicast router, because IGMP query daemon has been installed in the hiX 5622/25/30/35 R2.8.

To configure IGMP queries, use the following command.

To display IGMP query parameter, use the following command.

9.3 IGMP host parameterTo set IGMP host parameter, use the following command.


igmp query<1-255> <10-250> <1-255> <1-65535> <1-255> <1-255> <1-255> <1-400> (<1-10>|PROVNAME|)

Global Sets IGMP Querier Parameters.


query Set Querier Parameters.

1-255 Robustness Variable should not be 1, default 2.

10-250 Query Interval (sec) default 125.

1-255 Query Response Interval (1/10 sec) default 100

1-65535 Startup Query Interval (sec) default 31, 1/4 Query Interval

1-255 Startup Query Count 1-255 default 2.

1-255 LastMemberQueryInterval (1/10 sec) default 10.

1-255 LastMemberQueryCount default 2.

1-400 Version1RouterPresentTimeout (sec) default 400.

1-10 Provider index (default 1).



show igmp query (<1-10> | PROVNAME | )

GlobalPriviledged

Shows running system information,- configure IGMP- shows querier parameters.

show Shows running system information.


query Shows querier parameters.




igmp host <1-65535>(<1-10> | PROVNAME | )

Global Sets IGMP host parameters.

igmp Configure IGMP

host Set Host Parameters

1-65535 Unsolicited Report Interval (sec) default 10

1-10 Provider index (default 1)


292

Operate CLI

Id:0900d805805de17f

IGMP configuration

To display IGMP host parameter, use the following command.

9.4 IGMP multicast packageTo create IGMP package of multicast group, use the following command.

To delete IGMP package of multicast group, use the following commands.


show igmp host (<1-10> | PROVNAME | )

GlobalPriviledged

Shows host parameters.



host Show host parameters.

1-10 Provider index.



igmp package NAME Global Creates package of multicast group, enter the multicast package name.

NAME Multicast package name.

igmp package NAME<1-100>

Creates package of multicast group, enter the multicast package name and the index.

NAME Multicast package name.

1-100 Package index

igmp group(<1-10> | PROVNAME) A.B.C.D (A.B.C.D | <1-100>) CHANNAME ((<1-1000> (static-join | )) | )

Privileged Creates multicast channel.

1-10 Provider index (default: 1).


A.B.C.D Group ip address (224.0.0.0 - 239.255.255.255 or 0.0.0.0).

A.B.C.D Source ip address (0.0.0.0 - 223.255.255.255)

1-100: Source index.

CHANNAME Group-channel name.

1-1000 Group-channel index (optional).

static-join IGMP static join (optional).


no igmp group <1-1000> Global Deletes multicast group by number.


no igmp group NAME Deletes multicast group by name.

NAME Multicast group name

293


Id:0900d805805de17f

no igmp group-to-package(<1-1000>|CHANNELNAME) (<1-100>|PACKAGENAME)

Global Deletes multicast group from package.

<1-1000> Multicast group index

CHANNEL-NAME

Group name.

<1-100> Package index.

PACKAGE-NAME

Package name.

no igmp log cdr-recognition-time Deletes the log CDR time.




cdr-recogni-tion-time

Disable the CDR functionality.

no igmp log long-time-online-time Deletes the Long Time On line time.

no igmp package index <1-100> Deletes IGMP package by package index.


no igmp package NAME Deletes igmp package by package name.

NAME package name


no igmp preview auto-reset-time Global Disables the function of preview auto reset.

igmp preview disable Global program preview disable command.


preview Program preview function configura-tion.

disable Global program preview disable command.

no igmp preview package <1-32> Delets IGMP preview package by preview package index.

<1-32> Program preview index

no igmp preview subscriber ((<1-17> <1-72> <1-8>) |BRIDGEPORT)

Negate a command or set its defaults:Remove package from subscriber port.


igmp Configure IGMP

preview Program preview function configura-tion

subscriber Subscriber

<1-17> Slot index

<1-72> Port index

<1-8> Vcc index

BRIDGEPORT Bridgeport specified by slot/port/vcc

no igmp source <1-100> Deletes source IP.

<1-100>: Source Index number


294

Operate CLI

Id:0900d805805de17f

IGMP configuration

To display IGMP package of multicast group, use the following command.


show igmp package (<1-100> | PACKAGENAME | )

Privileged, Global

Shows running system information,- Configure IGMP- List of created multicast packages.

1-100 Package index.

PACKAGE-NAME

Package name.

show igmp group (<1-1000> | CHANNELNAME | )

Show running system information,- configure IGMP- show list of created multicast groups.

1-1000 Group-channel index

CHANNEL-NAME

Group-channel name

show igmp group ip A.B.C.D A.B.C.D Show information of given groups.

ip IP

A.B.C.D Multicast Group IP address (224.0.0.0 - 239.255.255.255)

A.B.C.D Source IP

show igmp vlan Shows a list of VLANs with multicast permission.

show igmp default-chan-bw(<1-10> | PROVNAME|)

Shows default bandwidth for non premium channel.


igmp Configure IGMP

default-chan-bw

Default channel bandwidth

<1-10> Provider index (optional)


show igmp delay-leave (<1-1000>|GROUPNAME|)

Global Shows delay leave time of channel.(it is only applicable for IU-ADSL (CNX)).


igmp Configure IGMP

delay-leave Delay leave configuration

<1-1000> Group-channel index

GROUPNAME Group name

show igmp double-tagging Shows igmp double tagging mode.

show igmp ether-access enable Shows Ethernet access configuration.

show igmp group ip A.B.C.D A.B.C.D Shows IGMP channel info by group IP and source IP.

IP IP

A.B.C.D Multicast Group IP address (224.0.0.0 - 239.255.255.255)

A.B.C.D Source IP.

295


Id:0900d805805de17f

show igmp log cdr-recognition-time Global Shows CDR recognition Time.

show igmp log enable Shows IGMP log configuration.

show igmp log long-time-online-time Shows the long-time-on-line-time of the log.

show igmp packet-limit Shows the limit igmp package number.(it is only applicable for IU-ADSL (CNX)).


show igmp preview Privileged, Global

Shows igmp preview information.

show igmp preview auto-reset-time Shows igmp preview auto reset time.

show igmp preview package-all Shows all the igmp preview pakcage information.

show igmp preview package-group (<1-32> | PACKNAME)

Global Shows the igmp preview group information of package.


igmp Configure IGMP

preview Program preview function config-uration

package-group

Package-group



show igmp preview parameter(<1-32> | PACKNAME)

Shows the IGMP preview parameter of package.


igmp Configure IGMP

preview Program preview function config-uration

parameter Preview parameter



show igmp preview remain-number((<1-17> <1-72> <1-8>) | BRIDGEPORT)

Shows subscriber preview remain number.

<1-17> Slot index

<1-72> Port index

<1-8> VCC index

BRIDGEPORT Bridgeport specified by slot/port/VCC.

show igmp preview subscriber all Shows all preview subscriber.

show igmp preview subscriber individual((<1-17> <1-72> <1-8>) | BRIDGEPORT)

Shows igmp preview subscriber information.

subscriber subscriber

individual individual subscriber that config-ured preview package

<1-17> slot index

<1-72> port index

<1-8> vcc index



296

Operate CLI

Id:0900d805805de17f

IGMP configuration

9.4.1 Configuration of IGMP leavemode and ehtmodeTo configure IGMP to leavemode or ehtmode, use the following commands.

show igmp provider-remain-bw BRIDGEPORT <1-4094>

GlobalPriviledged

Shows igmp provider remain bandwidth.


igmp Configure IGMP

provider-remain-bw

Port remain bandwidth and accept status

BRIDGEPORT Bridgeport

<1-4094> Provider vlan

show igmp source (<1-100> | ) Shows the IGMP source information.

<1-100> Source Index (optional)

show igmp statistics ( INDEX | ) Shows the statistics of IGMP message for DSLAM , subscriber or provider.

INDEX Bridgeport specified by slot/port/vcc or provider index(default: statistics for DSLAM)

show igmp subscriber (all | ) Shows igmp subscribers.

all: Shows IGMP subscirbers in detailed info.

show igmp upload enable Shows igmp upload log function.

show igmp upload ftp Shows igmp upload log ftp server.

show igmp upload info Shows igmp upload log information.

show igmp upload interval Shows igmp upload intervla time.

show igmp vlan-translation Shows igmp vlan translation mode.

show igmp xlation-tableBRIDGEPORT ( <1-4093>|)

Shows igmp vlan translation table.

BRIDGE-PORT:

Bridgeport specified by slot/port/VCC.

<1-4093>: Provider VLAN ID (1-4093).



bridgeport PORTS leavemode(fast | normal | ehtmode)

Bridge Bridgeport configuration;- Bridgeport leave mode configuration.

PORTS Subscriber bridgeports:(e.g. 1/1/1-1/72/1,2/1/1).

fast Switch leave mode to fast (ehtmode disabled).

normal Switch leave mode to normal.

ehtmode Switch leave mode to ehtmode (ehtmode enabled, leavemode fast).

297


Id:0900d805805de17f

9.5 IGMP subscriberTo create/delete an IGMP subscriber, use the following command.

To display the configured IGMP subscriber, use the following command.


igmp subscriber((<1-17> <1-72> <1-8>) |BRIDGEPORT) (<1-100>|PACKNAME)

Global Creates an IGMP subscriber.

igmp Configure IGMP

subscriber Create IGMP subscriber

<1-17> IU slot 1..17

<1-72> IU port 1..72

<1-8> ADSL VCC 1..8


<1-100> Package index

PACKNAME Package name(not support the name whose first character is digital)

igmp subscriber((<1-17> <1-72> <1-8>) | BRIDGEPORT) name PACKNAME

Creates an IGMP subscriber.

igmp Configure IGMP

subscriber Create IGMP subscriber

<1-17> IU slot 1..17

<1-72> IU port 1..72

<1-8> ADSL VCC 1..8


name Name

PACKNAME Package name

no igmp subscriber{<1-17> <1-72> <1-8> | BRIDGEPORT} <1-100>

Deletes an IGMP subscriber

<1-17> IU slot 1 to 17.

<1-72> IU port 1 to 72.

<1-8> ADSL VCC 1 to 8.

BRIDGEPORT: Bridgeport specified by slot/port/vcc

<1-100> Package index.


show igmp subscriber Privileged Global

Shows a list of enabled IGMP subscribers.

298

Operate CLI

Id:0900d805805de17f

IGMP configuration

9.6 Max number of active channels on CXUTo set max number of active channels on CXU, use the following command.

9.7 Enabling/disabling IGMPTo enable/disable global IGMP, use the following command.

9.8 Displaying IGMP informationTo display global IGMP, use the following command.


igmp traffic max-joined-groups <1-1000>

Global Sets the number of max allowed joined groups at the same time.

traffic Traffic settings

max-joined-groups

Sets number of maximum allowed joined groups at the same time

<1-1000> Number of maximum allowed joined groups at the same time


igmp {enable | disable} Global Enables/disables IGMP.

enable Global IGMP enable command

disable Global IGMP disable command


show igmp PrivilegedGlobal

Shows IGMP.

show igmp version (<1-10> | PROVNAME)

Shows the IGMP version currently running.


igmp Configure IGMP

version IGMP version currently running



show igmp traffic max-joined-groups Shows the number of maximum joined groups at the same time. Configures IGMP traffic settings.

show igmp joined-ports-list<1-17> A.B.C.D A.B.C.D <1-4093>

Shows a list of joined ports.

<1-17> IU slot

A.B.C.D Channel group IP (224.0.0.0 - 239.255.255.255)

A.B.C.D Channel source IP (0.0.0.0 - 223.255.255.255)

<1-4093 VLAN ID (1-4093)

299


Id:0900d805805de17f

To clear statistics of IGMP message, use the following command.

g Conexant chip provides IGMP Snooping function to learn about ports belonging to a multicast Group address and to populate the multicast forwarding table with that

show igmp joined-ports-listA.B.C.D A.B.C.D <1-4093>

PrivilegedGlobal

Shows a list of joined ports.

A.B.C.D Channel group IP (224.0.0.0 - 239.255.255.255)

A.B.C.D Channel source IP (0.0.0.0 - 223.255.255.255)

<1-4093 VLAN ID (1-4093)

show igmp port-groupsBRIDGEPORT

Show running system information

– Configure IGMP– Joined multicast group list per subscriber.


show igmp v1router-vaild-time(<1-10> | PROVNAME | )

Shows the vaild time for version1 Router.


igmp Configure IGMP

v1router-vaild-time

Show vaild time for version1 Router

<1-10> Provider index (default 1)


show router-id Show running system information

– Router ID

show igmp statistics ( INDEX |) Shows statistics of IGMP messages for DSLAM or per subscriber.

INDEX Bridgeport specified by slot/ port/ vcc or provider index (default: statistics for DSLAM

show igmp subscriber Shows a list of enabled IGMP subscribers.

show igmp port-groupsBRIDGEPORT

Show running system information of configured IGMP.

port-groups Joined multicast group list per subscriber.

BRIDGEPORT Bridgeport specified by slot/port/vcc.

show igmp active-group Shows all IGMP groups which currently have joined subscribers.


igmp clear statistics(BRIDGEPORT|)

Global Clears statistics of IGMP message for DSLAM or per subscriber.

BRIDGEPORT Bridgeport specified by slot/port/vcc (default: clear statistics for DSLAM).


300

Operate CLI

Id:0900d805805de17f

IGMP configuration

information. (IGMP Snooping is the process of listening to IGMP conversations between hosts and routers.)

When there are some multicast groups, 239.0.0.1, 238.0.0.1, 237.0.0.1, and so on (the last 24 bits are the same), their multicast MAC addresses are the same 01:00:5e:00:00:01. While Conexant chip does Layer 2 switches for multicast packages based on multicast MAC address, that means only the 1st joined multicast group, port and vlan info can be recorded, other multicast groups' packages will be forwarded based on that record. This defect is caused by current Conexant chip Solution.

As a result, when subscriber under CNX IU joined these groups, it can receive this multicast traffic. But DSLAM system can only display the info of the first joined group's.

9.9 IGMP settings in single tagged scenariosRequired commands for single tagged scenario

Optional commands for single tagged scenario:

g Corresponding command for IU is: Switch(bridge)# bridgeport x/x/x max-mcast-channel (MAXJOINED | no | unlimited)

Switch(config)# igmp provider <ip> <prov-vid> <name> (unlimited)--> create IGMP providerSwitch(config)# igmp package 'Name' --> defined Name of PackageSwitch(config)# igmp group '1-10''MC-IP''SRC-IP''name' '1-1000' --> create group with following values:'provider index' 'multicast IP address''index''source index''group-channel name''group-channel index'Switch(config)# igmp group-to-package '1-1000' '1-32' --> assign group to package with the following values:'group index''preview package index'Switch(config)# igmp subscriber x/x/x '1-100' --> assign package to bridgeport Switch(config)# igmp enable --> enable IGMP Proxy

Switch(config)# igmp query '1-255' '10-250' 1-255' '1-65535' '1-255' '1-255' '1-255' '1-400' '1-10'--> set IGMP Query parameters:robustness ('1-255')query-interval ('10-250sec') query-response interval ('1-255 1/10sec')startup query interval ('1-65535sec')startup query count ('1-255')

last member query interval ('1-255')

last member query count ('1-255')version 1 Router present timeout ('1-400')provider index('1-10')Switch(config) igmp traffic max-joined-groups '1-1000' --> set number of maximum allowed joined groups at the same time

301


Id:0900d805805de17f

9.10 IGMP settings in double tagged scenariosg Multicast permission for the vlan must have been set.

Required commands for double tagged scenario:

Optional commands for double tagged scenario:

g Corresponding command for IU is: Switch(bridge)# bridgeport x/x/x max-mcast-channel (MAXJOINED | no | unlimited)

Switch(config)# igmp host '1-65535' --> set unsolicited report intervalSwitch(config)# igmp clear statistics x/x/x --> clear igmp statistics for a specific bridgeportSwitch(config)# igmp clear statistics--> clear all igmp statistics

Switch(config)# igmp provider '8' A.B.C.D '1-4094''Name' ['inner VID'|'outer VID']--> create IGMP providerSwitch(config)# igmp package 'Name' --> defined Name of PackageSwitch(config)# igmp group '1-10' 'MC-IP' 'Source-Index-IP' 'Name' '1-1000' --> create group with following values:'provider index' 'multicast IP address''index''source index''group-channel name''group-channel index'Switch(config)# igmp preview group-to-package '1-1000' '1-32' --> assign group to package with the following values:'group index''preview package index'Switch(config)# igmp subscriber x/x/x '1-100' --> assign package to bridgeport Switch(config)# igmp enable --> enable IGMP Proxy

Switch(config)# igmp query '1-255' '10-250' 1-255' '1-65535' '1-255' '1-255' '1-255' '1-400' '1-10'--> set IGMP Query parameters:robustness ('1-255')query-interval ('10-250sec') query-response interval ('1-255 1/10sec')startup query interval ('1-65535sec')startup query count ('1-255')

last member query interval ('1-255')

last member query count ('1-255')version 1 Router present timeout ('1-400')provider index('1-5')Switch(config) igmp traffic max-joined-groups '1-1000' --> set number of maximum allowed joined groups at the same time

Switch(config)# igmp host '1-65535' --> set unsolicited report intervalSwitch(config)# igmp clear statistics x/x/x --> clear igmp statistics for a specific bridgeportSwitch(config)# igmp clear statistics--> clear all igmp statistics

302

Operate CLI

Id:0900d805805de181

DHCP configuration

10 DHCP configurationDynamic Host Configuration Protocol (DHCP) makes DHCP server assign IP address to DHCP clients automatically and manages the IP addresses. In the environment where all PCs may be not connected to network at the same time, all of them do not need to have IP addresses. When some of them need an IP address, it can be automat-ically assigned. In this case, DHCP server is the one that assigns IP address automati-cally and DHCP clients are those PCs which get IP address from the DHCP server when connected to network. DHCP provides the following benefits.

– Saving CostWith limited IP address space, many users can be connected to the Internet and therefore the use of DHCP can reduce operational costs.

– Effective Network ManagementA DHCP Server and also the DHCP Clients are easy to set up and configure and can be administered with minimal effort. No additional professional TCP/IP knowl-edge is required.

The hiX 5622/25/30/35 R2.8 can be the DHCP relay agent according to user’s configu-ration. The DHCP relay agent’s function is to connect the DHCP server to the DHCP client. You need to know the following functions.

– DHCP/PPPoE provider– Showing DHCP provider of VLAN– DHCP relay agent– DHCP flood– DHCP/PPPoE option 82/option 105– Verifying DHCP configuration– DHCP statistics– Displaying DHCP configuration– Changing destination MAC– DHCP settings in single tagged scenarios– DHCP settings in double tagged scenarios– Example of PPPoA configuration

10.1 DHCP/PPPoE providerTo configure a DHCP/PPPoE provider, use the following command.


ip dhcp provider NAME Global Create DHCP provider pool, enter the provider name.

ip pppoe provider NAME Create PPPoE provider pool, enter the provider name.

ip pppoe use-inner-tag(on | off)

Use inner tag to select the provider.

on On

off Off

303

Operate CLI DHCP configuration

Id:0900d805805de181

To set DHCP/PPPoE mode to snoop or relay, use the following commands.

To enable/disable IP station move, use the following command.

To show IP DHCP station move, use the following command.

ip dhcp use-provider VLANS PROVIDERNAME

Global IP information.- Dynamic Host Configuration Protocol- Sets the DHCP provider of a VLAN.

VLANS Select VLAN IDs (e.g. 101-148,1000)

PROVIDERNAME Provider name

no ip dhcp use-provider VLANS

Negate a command or set its defaults:

– IP information – Dynamic Host Configuration Protocol – Set the DHCP provider of a VLAN


ip pppoe use-provider VLANS PROVIDERNAME

IP information.- Point-to-Point over Ethernet- Sets the PPPoE provider of a VLAN.


PROVIDERNAME Provider name

no ip pppoe use-provider VLANS


– IP information,– Point-to-Point over Ethernet,– Set the PPPoE provider of a VLAN.



ip dhcp mode(snoop | relay)

Global IP information;- Dynamic Host Configuration Protocol,- Sets DHCP mode.

snoop Snoop mode selection.

relay Relay mode selection.

ip pppoe mode(snoop | relay)

IP information;- PPPoE,- Sets PPPoE mode.

snoop Snoop mode selection.

relay Relay mode selection.


ip dhcp station-move(enable | disable)

Global Allow IP station move.

enable Enables IP station move

disable Disables IP station move


show ip dhcp station-move Global Shows IP DHCP station-move.


304

Operate CLI

Id:0900d805805de181

DHCP configuration

To delete a configured DHCP/PPPoE provider, use the following command.

To display a configured DHCP/PPPoE provider, use the following command.

If you configure a DHCP/PPPoE provider with the ip dhcp provider or ip pppoe provider command, DHCP/PPPoE Configuration mode will be opened. You can configure all the DHCP/PPPoE functions in DHCP/PPPoE Configuration mode.

To exit DHCP/PPPoE Configuration mode, use the following command.

10.1.1 IP address for DHCP providerTo specify an IP address for VLAN of DHCP provider, use the following command.


no ip dhcp providerNAME

Global Deletes DHCP provider pool entry, enter the provider name.

no ip pppoe provider NAME

Deletes PPPoE provider pool entry, enter the provider name.

ip dhcp-snoop deleteBRIDGEPORT A.B.C.D VLAN

From DHCP snoop table ADMIN delete.

BRIDGEPORT Bridge port index by slot/port/vcc

A.B.C.D IP ADDRESS

VLAN <1-4093>


show ip [dhcp | pppoe] provider[NAME | index]

Global Shows DHCP/PPPoE provider pool.

NAME Provider pool name.

index Sorted by index.Note: not yet provided

show ip provider[NAME | index]


– IP information– DHCP/PPPoE provider pool

NAME Provider pool name

index Sorted by index


commit [exit | end ] DHCPPPPoE

Save values after having verified them successfully.

exit Commits data and leave DHCP/PPPoE provider mode to Global mode.

end Commits data and leave DHCP/PPPoE provider mode to Privileged EXEC mode.

exit Exits DHCP/PPPoE Configuration mode.

305


Id:0900d805805de181

10.1.2 DHCP server for DHCP providerTo specify/delete a DHCP server address for DHCP provider, use the following command.

10.1.3 DHCP providers access node IDTo set a DHCP provider’s access node ID, use the following command.

10.1.4 Simplified DHCP providerTo select a DHCP provider’s type, use the following command.


ip address A.B.C.D/M DHCP Set the IP address of an interface.

A.B.C.D/M IP address (e.g. 10.0.0.1/8).

ip ((address A.B.C.D) |A.B.C.D/M|(netmask (A.B.C.D|<1-31>) ) )

Specifies an IP address with a netmask.

ip Configures DHCP relay IP address and netmask.

address Configures DHCP relay IP address (optional).

A.B.C.D IP address.

A.B.C.D/M IP address plus netmask (netmask not evalu-ated).

netmask Configures DHCP relay IP netmask (netmask not evaluated).

A.B.C.D IP netmask (not evaluated).

<1-31> IP netmask as length (not evaluated).


server A.B.C.D ((A.B.C.D (A.B.C.D(A.B.C.D | ) | )) | )

DHCP Configures new DHCP server IP address(es)

A.B.C.D First DHCP server's IP address.

A.B.C.D Second DHCP server's IP address

A.B.C.D Third DHCP server's IP address.

A.B.C.D Forth DHCP server's IP address

no server [A.B.C.D | all ] Negate a command or set its defaults;- Deletes DHCP server IP address(es).

A.B.C.D Deletes this DHCP server IP address.

all Deletes all DHCP server IP addresses (default).


access-node-idACCESS_NODE_ID

PPPOE_PROVIDERDHCP_PROVIDER

Configures DHCP provider’s access node ID.

ACCESS_NODE_ID Access node ID.

306

Operate CLI

Id:0900d805805de181

DHCP configuration

10.1.5 Activating the relay agent for a VLANTo activate the relay agent for a VLAN, use the following commands.

To show the use of inner-tag in IP DHCP/PPPoE, use the following commands.

To show the DHCP/PPPoE provider related configuration, use the following commands.


simplified {on | off} DHCP Select a DHCP provider’s type.

on Simplified DHCP

off Normal DHCP


ip dhcp use-inner-tag(on | off)

Global Sets the DHCP used inner tag to select the provider.

on On

off Off


show ip dhcp use-inner-tag Global Shows use inner tag to select the provider.

show ip pppoe use-inner-tag Shows running system information;

- IP information,- Point-to-Point over Ethernet,- Use inner tag to select the provider.


show ip pppoe relay Global Shows running system information;- IP information,- PPPoE,- Shows PPPoE relay agent's state.

show ip pppoe provider [NAME|index ]

Shows running system information;- IP information- PPPoE provider pool- Provider related configuration


index Sorted by index.

show ip dhcp relay Shows running system information;- IP information,- Dynamic Host Configuration Protocol,- Shows DHCP relay agent's state.

show ip dhcp provider [NAME|index]

Shows running system information;- IP information- DHCP provider pool- Provider related configuration



307


Id:0900d805805de181

10.1.6 Displaying DHCP provider configurationTo display all the configured values of a DHCP/PPPoE provider, use the following command.

10.2 Showing DHCP provider of VLANTo show the DHCP provider of a VLAN, use the following command.

10.3 DHCP relay agentTo display a configured DHCP/PPPoE relay, use the following command.


print{name | option82 | server | all}

DHCP Shows actual values

name provider’s name

option82 option 82 flag

server DHCP server IP address

all all (default).

print{name | option105 | all}

PPPoE Shows actual values.

name provider’s name

option105 option 105 flag

all all (default).


ip dhcp release A.B.C.D Global Forced release of DHCP session data for an IP address.

A.B.C.D Subscriber IP address.

show ip dhcp provider [NAME | index ]

Show running system information:

– IP information,– DHCP provider pool,– Provider related configuration.



show ip dhcp-pppoe use-provider VLANS


– IP information,– DHCP and PPPoE,– Set the dhcp provider of a VLAN.

VLANS Select vlan ids (e.g. 101-148,1000).


show ip dhcp relay Global Shows DHCP relay agent configuration.

show ip pppoe relay Shows running system information;- IP information,- PPPoE,- Shows PPPoE relay agent's state.

308

Operate CLI

Id:0900d805805de181

DHCP configuration

To configure DHCP relay agent for management interface towards uplink, use the fol-lowing command.

To show management interface towards uplink, use the following command.


mgmt-uplink-dhcp-relayUPLINK_IF A.B.C.D

Global Enables DHCP-relay agent for mgmt interface towards uplink

UPLINK Bridge device (brxxx) on the uplink interface

A.B.C.D. IP address of DHCP server

no mgmt-uplink-dhcp-relay Disables DHCP-relay agent for mgmt interface towards uplink.


show mgmt-uplink-dhcp-relay Global Shows configuration of DHCP-relay agent for mgmt inter-face towards uplink.

309


Id:0900d805805de181

10.4 DHCP floodTo enable flooding of DHCP, use the following command.

g If flooding and usage of DHCP Relay agent is configured for the same VLAN, the flooding has higher priority. The Convergate D and Geminax based linecard doesn’t support this feature.

To disable flooding of DHCP, use the following command.

To show status of DHCP flood of all VLANs, use the following command.


ip dhcp vlan-flood VLANID Global Enables flooding of DHCP.

ip IP information.

dhcp Dynamic Host Configuration Protocol.

vlan-flood Enables flooding of DHCP.

VLANID Select Vlan-ID (2-4093).

no ip dhcp vlan-flood VLANID

Global Negate a command or set its defaults:Enables flooding of DHCP.


ip IP information.


vlan-flood Disables flooding of DHCP.

VLANID Select Vlan-id(2-4093).


no ip dhcp flood VLANID Global Disables flooding of DHCP.

VLANID Input VLAN id (2-4093).


show ip dhcp flood ( | VLANID) Global List status of DHCP flood of all VLANs.


ip IP information.


flood List all VLANs.

VLANID Select Vlan-id(2-4093).

310

Operate CLI

Id:0900d805805de181

DHCP configuration

10.5 PPPoE floodTo enable flooding of PPPoE, use the following command.

To disable flooding of PPPoE, use the following command.

To show status of PPPoE flood of VLANs, use the following command.


ip pppoe vlan-flood VLANID Global Enables flooding of PPPoE.

ip IP information

pppoe Point-to-Point over Ethernet

vlan-flood Enables flooding of PPPoE

VLANID Select Vlan-id (2-4093)


no ip pppoe vlan-flood VLANID Global Negate a command or set its defaults:Enables flooding of PPPoE.


ip IP information

pppoe Point-to-Point over Ethernet

vlan-flood Disables flooding of PPPoE

VLANID Select Vlan-id (2-4093)


showip pppoe flood (VLANID | ) Global List status of PPPoE flood of all VLANs.


ip IP information.

pppoe Point-to-Point over Ethernet.

flood List all VLANs.

VLANID Select VLAN-ID (2-4093).

311


Id:0900d805805de181

10.6 DHCP/PPPoE option 82/option 105In some networks, it is necessary to use additional information to further determine which IP addresses to allocate. By using the DHCP option 82, a DHCP relay agent can include additional information about itself when forwarding client-originated DHCP packets to a DHCP server. The DHCP relay agent will automatically add the circuit ID and the remote ID to the option 82 field in the DHCP packets and forward them to the DHCP server.

The DHCP option 82 resolves the following issues in an environment in which untrusted hosts access the internet via a circuit based public network:

Broadcast forwardingThe DHCP option 82 allows a DHCP relay agent to reduce unnecessary broadcast flooding by forwarding the normally broadcasted DHCP response only on the circuit indi-cated in the circuit ID.

DHCP address exhaustionIn general, a DHCP server may be extended to maintain a DHCP lease database with an IP address, hardware address and remote ID. The DHCP server should implement policies that restrict the number of IP addresses to be assigned to a single remote ID.

Static AssignmentA DHCP server may use the remote ID to select the IP address to be assigned. It may permit static assignment of IP addresses to particular remote IDs, and disallow an address request from an unauthorized remote ID.

IP spoofingA DHCP client may associate the IP address assigned by a DHCP server in a forwarded DHCP_ACK message with the circuit to which it was forwarded. The circuit access device may prevent forwarding of IP packets with source IP addresses, other than, those it has associated with the receiving circuit. This prevents simple IP spoofing attacks on the central LAN, and IP spoofing of other hosts.

MAC address spoofingBy associating a MAC address with a remote ID, a DHCP server can prevent offering an IP address to an attacker spoofing the same MAC address on a different remote ID.

Client identifier spoofingBy using the agent-supplied remote ID option, the untrusted and as-yet unstandardized client identifier field need not be used by the DHCP server.

Figure 40 shows how the DHCP relay agent with the DHCP option 82 operates.

312

Operate CLI

Id:0900d805805de181

DHCP configuration

Figure 40 DHCP option 82 operation

10.6.1 Enabling option 82/option 105To enable or disable DHCP option 82, use the following command.

To enable PPPoE option 105, use the following command.


option82{none | remote-id | circuit-id |line-parameters |all}

DHCP Configures DHCP provider’s option 82 flags.

none Using no suboption.

remote-id Enables using remote ID suboption.

circuit-id Enables using circuit ID suboption.

line-parameters Enables using line parameters.

all Enables flags for all suboptions.

no option82 DHCP Disables DHCP provider's option82


option105{none | remote-id | circuit-id | line-parameters | all}

PPPoE Configures PPPoE provider’s option 105 flags.

none Using no suboption.

remote-id Using remote ID suboption.

circuit-id Using circuit ID suboption.

line-parameters Enables using line parameters.

all Using all suboptions.

no option105 Negate a command or set its defaults;- Disables using suboptions at all.

313


Id:0900d805805de181

10.6.2 Option 82 packet policyYou can configure how to process the packets when DHCP option 82 packets come to DHCP server or DHCP relay agent.

To configure a policy for option 82 packet, use the following command.

g A rule for option 82 packet can be configured when the hiX 5622/25/30/35 R2.8 operates as DHCP relay agent.

10.7 Verifying DHCP configurationTo verify that all the values for DHCP/PPPoE are configured correctly, use the following command. If there is any incorrect configuration, a failure message will be displayed.


ip dhcp option82 policy{replace | keep | drop}

Global Configures a policy of option 82 packet.

replace Replace the existing option with option82 informa-tion of relay or server.

keep Keep the option 82 information.

drop Drop the option 82 packet (default).


verify DHCPPPPoE

Shows if the provider entry’s values are consistent.

314

Operate CLI

Id:0900d805805de181

DHCP configuration

10.8 DHCP statisticsTo display DHCP packet statistics, use the following command.

The following is an example of displaying a DHCP packet statistics.

SWITCH(config)# show ip dhcp statisticsReceived 0Sent 0 Received errors 0Sent errors 0 Received BOOTP requests 0Received BOOTP replies 0 Sent BOOTP requests 0Sent BOOTP replies 0 received DISCOVER 0received OFFER 0received REQUEST 0received DECLINE 0received ACK 0received NAK 0received RELEASE 0received INFORM 0 SWITCH(config)#

10.9 Displaying DHCP configurationTo display a current DHCP configuration, use the following command.

10.10 Changing destination MACTo change destination MAC of reply to unicast from broadcast, use the following command.


show ip dhcp statistics Global Shows DHCP packet sent/received statistics.

ip dhcp clear statistics Clears DHCP status (packet sent/received statistics).


show ip dhcp config Global Shows a current DHCP configuration.

show ip dhcp-snoop (BRIDGEPORT|)

Show running system information,- IP information- DHCP snoop table.

BRIDGEPORT Bridgeport by slot/port/vcc or slot by s+slotnumber (eg. s1).

Show all

show ip dhcp-snoop session IP information,- Show running system information- DHCP snoop table- DHCP session count table.

315


Id:0900d805805de181

10.11 DHCP settings in single tagged scenariosRequired commands for single Tagged scenario

g Now the configuration has been finished, but the relay agent still can not work. The reasons are the missing interface and the missing assignment to a dedicated VLAN. This behavior might be different from other releases.

Optional commands for single Tagged scenario


unicast-xlation (on|off) DHCP Change the dst-mac of reply to unicast from bcast, default status is Off,

Switch(config)# ip dhcp provider 'Name'

--> create a DHCP Relay agent (Provider)

Switch(dhcp-provider)# ip A.B.C.D/M

--> set ip address of DHCP Relay Agent (used address)

Switch(dhcp-provider)# simplified off

--> create normal DHCP Relay Agent

Switch(dhcp-provider)# server E.F.G.H

--> set DHCP server IP

Switch(dhcp-provider)# commit

--> apply settings

Switch(dhcp-provider)# exit

--> leave the dhcp-provider mode

Switch(config)# ip dhcp mode relay

--> activate DHCP relay

Switch(config)# ip dhcp use-provider '1-4093' 'Name'

--> activate the DHCP relay agent for the selected VLAN

Switch(config)# netdevice 'A.B.C.D/24' 'DESCRIPTION' 'Outer-VLAN'

--> create interface, vlan must exist.

Switch(config)# netif-route 'DESCRITPION' 'E.D.F.G'/M ‘GATEWAY IP’

--> Sets gateway.

316

Operate CLI

Id:0900d805805de181

DHCP configuration

Switch(dhcp-provider)# verify

--> check if all values are correct

Switch(dhcp-provider)# print

--> shows actual values

Switch(dhcp-provider)# option82 all

--> enable option remote id and circuit id and line parameters

Switch(dhcp-provider)# option82 circuit-id

--> enable only suboption circuit id

Switch(dhcp-provider)# option82 remote-id

--> enable suboption remote id

Switch(dhcp-provider)# option82 line-parameters

--> enable line parameters

Switch(dhcp-provider)# option82 none

--> disable option remote id, circuit id and line-parameters

Switch(dhcp-provider)# unicast-xlation off

--> disable broadcast to unicast translation

Switch(dhcp-provider)# unicast-xlation on

--> enable broadcast to unicast translation

Switch(dhcp-provider)# cebs mac-translation

--> enable cebs also for higher layer

Switch(config) ip dhcp-snoop delete x/x/x VLANID -

-> deletes entries of DHCP-IP-TABLE

317


Id:0900d805805de181

10.12 DHCP settings in double tagged scenariosThe required command for DHCP relay agent of double tagged scenarios:

g Now the configuration has been finished, but the relay agent still can not work. The reasons are the missing interface and the missing assignment to a dedicated VLAN. This behavior might be different from other releases.

Optional commands for double Tagged scenario:

Switch(config)# ip dhcp provider 'Name'

--> create a DHCP Relay agent (Provider)

Switch(dhcp-provider)# ip A.B.C.D/M

--> set ip address of DHCP Relay Agent (used address)

Switch(dhcp-provider)# simplified off

--> create normal DHCP Relay Agent.

Switch(dhcp-provider)# server E.F.G.H

--> set DHCP server IP

Switch(dhcp-provider)# commit

--> apply settings

Switch(dhcp-provider)# exit

-->exit dhcp provider mode

Switch(config)# ip dhcp mode relay

--> activate DHCP relay

Switch(config)# ip dhcp use-provider 1-4093 'Name'

--> activate the DHCP ralay agent for the selected VLAN

Switch(config)# netdevice 'A.B.C.D/24' 'DESCRIPTION' 'Outer-VLAN'

--> create interface, vlan must exist.

Switch(config)# netif-route 'DESCRITPION' 'E.D.F.G'/M ‘GATEWAY IP’

-> Sets gateway.

Switch(dhcp-provider)# verify

--> check if all values are correct

Switch(dhcp-provider)# print

--> shows actual values

Switch(dhcp-provider)# option82 all

--> enable option remote and circuit id

Switch(dhcp-provider)# option82 circuit-id

--> enable only suboption circuit id

Switch(dhcp-provider)# option82 remote-id

--> enable suboption remote id

318

Operate CLI

Id:0900d805805de181

DHCP configuration

10.13 Example of PPPoA configurationFollowing example shows how to configure PPPoA.

1. Configure VLAN and PVIDSWITCH(bridge)#vlan create 500SWITCH(bridge)#vlan add 500 9/2/1 untaggedSWITCH(bridge)#vlan add 500 0/1 untaggedSWITCH(bridge)#bridgeport PORT(9/2/1) pvid 500SWITCH(bridge)#bridgeport PORT(0/1) pvid 500

2. Configure PPPoA relatedSWITCH(bridge)#bridgeport 9/2/1 host-protocol dhcp-pppoe(or, you can configure "host-protocol" into "pppoe" here)SWITCH(bridge)#bridgeport 9/2/1 mode pppoa(or, you can configure "mode" into "auto" here)

3. Check related configurationSWITCH(bridge)#show vlan 500

| Vlan ID | Ports (u: untagged port, t: tagged port) |----------------------------------------------------------- 500 | 0/1u,9/2/1u

SWITCH(bridge)#show port

============================================================================S/P PVID LINK NEGO DUP SPEED FC ROLE RED-CFG============================================================================SLOT 9 (ACTIVE)----------------------------------------------------------------------------0/1 500 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Uplk -0/2 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Uplk -0/3 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Uplk -0/4 1 Up/Dwn Auto Full/Full 1000/0 Dis/Dis Uplk -----------------------------------------------------------------------------SLOT 10 (STANDBY)----------------------------------------------------------------------------%standby CXU not available----------------------------------------------------------------------------LAG

Switch(dhcp-provider)# option82 none

--> disable option remote id, circuit id and line-parameters

Switch(dhcp-provider)# unicast-xlation off

--> disable broadcast to unicast translation

Switch(dhcp-provider)# unicast-xlation on

--> enable broadcast to unicast translation

Switch(dhcp-provider)# cebs mac-translation

--> enable cebs also for higher layer

Switch(dhcp-provider)# index ‘1-30’

-->define index manually, else it is automatically calculated

Switch(config) ip dhcp-snoop delete x/x/x A.B.C.D

--> deletes entries of DHCP-IP-TABLE

319


Id:0900d805805de181

----------------------------------------------------------------------------0/5 1 Dwn/Dwn - -/- -/0 -/- Elect Uplk - 0/6 1 Dwn/Dwn - -/- -/0 -/- Elect Uplk -

SWITCH(bridge)#show bridgeport 9/2/1

Port | PVIDs(o/i) .1p(o/i) -mode(o/i) TaggingMode ReplaceVID | VCC-Aggr IPMode DSCP-Prof HostProto SrcMacAddress | Etype-Prof MAT----------------------------------------------------------------------------9/2/1 | 500/1 0/(0) set/def tagged (7) ( 1021) | - auto off pppoe <none> | none off | CircuitId=default(00:0f:bb:26:f9:54) RemoteId=default(00:0f:bb:26:f9:5 |>4) MulticastPackageGroups=<none> EHTMode=on LeaveMode=fast maxJoinedGr |>oups=10 maxNonPremiumChannels=10 maxMCBandwidth=unlimit minUCBandwidth |>=0kbps IpoaProviderRouterIpAddress=none----------------------------------------------------------------------------

4. After PPPoA session is established, the PPPoE Session ID can be found.SWITCH(bridge)#show bridgeport 9/2/1 pppoa-session-status

Port | PPPoA Session ID | OperStatus---------------------------------------9/2/1 1 UP

If the relay agent will be used for PPPoA, a provider should be configured. Following example shows how to configure a provider and apply it to a specific VLAN.

SWITCH(config)# ip pppoe provider pppoa1

SWITCH(pppoe-provider)#

Switch(pppoe-provider)# exit

SWITCH(config)#

PPPoE PROVIDER TABLE

pppoa1

index: 1

access node id: SWITCH

suboption105: none

320

Operate CLI

Id:0900d805805de183

CEBS configuration

11 CEBS configurationThe Carrier Ethernet Border Switch (CEBS) instead of the existing BRAS is to support the effective delivery of triple play application on a multi service provider environment. Features to deal with scalability, security, availability and reliability, authentication, authorization, accounting and service selection have been introduced in the platform.

In this concept, the hiX 5622/25/30/35 R2.8still stays with Layer 2 functionality, whose the basic traffic switching is done on Layer 2 with the higher layer data processing in addition. This keeps the network cost-effective and technically as simple as possible in regard to provisioning and protocol transparency.

One of the key features for CEBS implementation is N:1 MAC address translation which is that all the end users MACs are replaced by the MAC address of the DSLAM.

11.1 CEBS configurationConfiguring a gatewayTo specify the IP address of the gateway, use the following command.

To display the specified IP address of the gateway, use the following command.

Configuring a portTo specify a subscriber port, use the following command.

To display the port status of CEBS, use the following command.

!When configuring the DSLAM with CEBS MAC address translation (N:1), for proper DHCP operation, you need to use the cebs mac-translation command. For more infor-mation, see Section 11.2 CEBS MAC address translation.


cebs gateway VID A.B.C.D Global Specifies the IP address of the gateway.

VID VLAN ID of subscriber

A.B.C.D IP address of the next hop in the upstream direc-tion.

no cebs gateway VID Deletes a specified IP address.


show cebs gateway dynamic Global Shows the dynamic gateway created by DHCP.

show cebs gateway static Shows the static gateway created by operator.


cebs port PORTS Global Specifies a subscriber port.

PORTS Port number, e.g. 1/1/1-1/72/1, 2/1/1

no cebs port PORTS Deletes a specified port.

321

Operate CLI CEBS configuration

Id:0900d805805de183

Configuring a virtual MAC addressTo specify a virtual MAC address, use the following command.

To display a specified virtual MAC address, use the following command.

Displaying subscriber’s informationTo display subscriber’s information, use the following command.

11.2 CEBS MAC address translationOne of the key features for CEBS implementation is N:1 MAC address translation which is that all the end users MACs are replaced by the MAC address of the DSLAM. For proper DHCP operation with this feature, an additional DHCP process is needed.

To enable/disable CEBS MAC address translation with DHCP, use the following command.


show cebs port{PORTS | enabled}

Global Shows the port status of CEBS.

PORTS Port number, e.g. 1/1/1-1/72/1, 2/1/1

enabled Shows the enabled ports.


cebs virtual-mac{MAC-ADDR | dslam}

Global Specifies a virtual MAC address.

MAC-ADDR Virtual MAC address.

dslam System’s MAC address.

no cebs virtual-mac Deletes a specified MAC address.


show cebs virtual-mac Global Shows a specified MAC address.


show cebs subscribers all Global Shows the information of all subscribers.

show cebs subscribers bridgeport PORTS

Shows the information of the specified bridge ports.

PORTS Port number, e.g 1/1/1-1/48/1

show cebs subscribers ip A.B.C.D Shows the information of the IP address of the subscrib-ers.

A.B.C.D IP address of subscriber


cebs mac-translation DHCP Enables CEBS MAC address translation with DHCP.

no cebs mac-translation Disables CEBS MAC address translation with DHCP.

322

Operate CLI

Id:0900d805805de185

L2CP configuration

12 L2CP configurationSURPASS hiX 5622/25/30/35 R2.8 supports the Layer 2 Control Protocol (L2CP) for high speed internet access via xDSL subscriber lines and uplink interfaces of CXU.

L2CP is used in hiX 5622/25/30/35 R2.8 to deliver information about the type of DSL subscriber line as well as upstream and downstream bit rates to the broadband remote access server (BRAS). Without this information, BRAS has to adjust its shaping func-tions to the maximum configured rate values. However, traffic losses can occur in the DSLAM and incorrect billing may ensue if the actual rate is lower than the maximum rate.

The name of the L2CP is now changed to Access Node Control Protocol (ANCP).

To create/delete a new L2CP interface, use the following commands, see also 14.3.8 Use case: L2CP.


(l2cp | ancp) create A.B.C.D ACCESS_NODE_IDENTIFIER <0-25> <0-10> <0-60> ((<0-255> | no-partitioning) (<1-10> | ) | )

Global L2CP (ANCP) configuration. L2CP (Layer 2 Control Proto-col) is a protocol betwenn the IP-DSLAM and the BRASS. Its main task is to inform the BRASS about line parameters of the DSL lines. The implementation is according the DRAFT from December 27, 2005 with corrected error codes. The name of the protocol was changed to ANCP (Access Node Control Protocol) later.Creates a new L2CP (ANCP) interface.

A.B.C.D IP address of the controller to connect with Access Node Identifier (the DSLAM identifies itself by this name)

ACCESS_NODE_IDENTIFIER

Access Node Identifier (the DSLAM identifies itself by this name, a part of the port).

0-25 Timer T1 - Time in seconds between periodic adjacency protocol message. 0 = use default value of 10 seconds

0-10 Timer T2 - Minimum time in seconds between two DSL state changes which are reported to the controller.

0-60 Timer T3 - Time in second before all active ports are reported to the controller after the connection was established.

0-255 The partition ID which is handled by this interface.

no-partitioning Partitioning is not enabled for this inter-face. This is the default value of this parameter is not given.

1-10 The alarm severity profile used by this interface. Alarm profile 1 is used if this parameter is not given.

(l2cp | ancp) delete <1-8> Deletes an L2CP (ANCP) interface.

1-8 L2CP (ANCP) interface number

323

Operate CLI L2CP configuration

Id:0900d805805de185

To modify the L2CP interface and port parameters, use the following commands.


(l2cp | ancp) modify interface <1-8> access-node-identifier ACCESS_NODE_IDENTIFIER

Global Modifies L2CP (ANCP) interface parameters.

1-8 Index of the L2CP (ANCP) interface to be modified

access-node-identi-fier

Modifies access node identifier.

ACCESS_NODE_IDENTIFIER

Access Node Identifier (the DSLAM identifies itself by this name).

(l2cp | ancp) modify interface <1-8> alarm-severity-profile <1-10>

Modifies L2CP (ANCP) interface parameters.

1-8 Index of the L2CP (ANCP) interface to be modified.

alarm-severity-profile

Modifies alarm severity profile used by the L2CP (ANCP) interface.

1-10 The alarm severity profile.

(l2cp | ancp) modify interface <1-8> ip-addressA.B.C.D



ip-address Modifies IP address.

A.B.C.D IP address of the controller to connect with.

(l2cp | ancp) modify interface <1-8> partition-id <0-255>



partition-id Modifies IP address.

0-255 The partition ID which is handled by this interface.

(l2cp | ancp) modify interface <1-8> no-partitioning



no-partitioning Disables partitioning.

(l2cp | ancp) modify interface <1-8> t1 <0-25>



t1 Modifies T1.

0-255 Timer T1 - Time in seconds between periodic adjacency protocol message. 0 = use default value of 10 seconds.

324

Operate CLI

Id:0900d805805de185

L2CP configuration

To show the L2CP interface and port parameters, use the following commands.

(l2cp | ancp) modify interface<1-8> t2 <0-10>

Global Modifies L2CP (ANCP) interface parameters.


t2 Modifies T2.

0-10 Timer T2 - Minimum time in seconds between two DSL state changes which are reported to the controller.

(l2cp | ancp) modify interface <1-8> t3 <0-60>



t2 Modifies T3.

0-10 Timer T3 - Time in second before all active ports are reported to the control-ler after the connection was estab-lished.

(l2cp | ancp) modify port(<0-255> | no-partition | unassigned) SLOT (PORT | )

Modifies L2CP (ANCP) port parameters.

0-255 The new partition ID.

no-partition The port will be assigned to no partition.

unassigned The port will be not assigned to any par-tition (not managed by L2CP/ANCP).

SLOT The slot where the port is located.

PORT The port number(s). A list of ports can be given with 1, 2, 10, .. . If no port is given, all ports of the slot are used.


show (l2cp | ancp) interface(<1-8> | )

Global Shows information about L2CP interfaces.

l2cp Shows L2CP (ANCP) information

ancp Shows L2CP (ANCP) information

<1-8> The ID of the L2CP (ANCP) interface.

show (l2cp | ancp) port partition-id (SLOT | )

Shows information about assigned partitions.



SLOT The slot number where the ports are located.

show (l2cp | ancp) port state (SLOT | )

Shows information about current port state.



SLOT The slot number where the ports are located.


325

Operate CLI IP routing protocols

Id:0900d805805d456c

13 IP routing protocolsThe hiX 5622/25/30/35 R2.8 system uses the routing protocols BGP and IS-IS. Both are covered in this manual.

13.1 BGP routing protocolBGP (Border Gateway Protocol) is, as defined in RFC 1163, 1267, EGP (Exterior Gateway Protocol) to connect to exterior Network. BGP manages routing information in network so that an autonomous system (AS) can transmit and receive routing informa-tion. BGP consists of network number, which packet is passed through and autonomous system number. The system supports BGP version 4 defined in RFC 1771. BGP version 4 provides Aggregate route by using CIDR (classless inter-domain routing) to reduce size of routing table. CIDR provides IP prefix, which is network address instead of IP address on BGP network. OSPF and RIP can also transmit CIDR path.

The hiX 5622/25/30/35 R2.8 system, which uses the BGP protocol, is intended to exchange AS and path reaching to AS between BGP equipment. By doing it, user can prevent routing Loop and take the most effective AS information.

User can configure MED (multi exit discriminator) by using route map. When new routing information is transmitted to neighbor BGP, MED is passed without any change. Thus, BGP routers located in same AS can select path with same standard.

13.1.1 Basic configurationBGP configuration is roughly divided into basic configuration and advanced configura-tion. Basic configuration includes the following.

• Activating BGP routing • Configuring BGP neighbor router • Changing routing policy • Configuring BGP weights • BGP route filtering • AS route filtering • BGP filtering through prefix lists • Blocking information transmission to next destination • Configuring BGP version

13.1.1.1 Activating BGP routingIn order to activate the BGP router, use the following command.

AS number is an identification of autonomous system used for detecting the BGP con-nection. AS number 65512 through 65535 are defined as private AS numbers. Private number cannot be advertised on the config Internet.


router bgp <1-65535> Config Assigns AS number to configure BGP routing, enter the AS number.

326

Operate CLI

Id:0900d805805d456c

IP routing protocols

13.1.1.2 Configuring BGP neighbor routerLike other Exterior Gateway Protocols (EGPs), BGP must completely understand the relationships it has with its neighbors.

In order to specify a BGP neighbor router, use the following command.


neighbor {A.B.C.D I WORD} activate

Router Enable the address family for this neighbor.

A.B.C.D Neighbor IPv4 address.

WORD Neighbor tag.

neighbor {A.B.C.D I WORD} advertisement-interval <0-600>

Configure minimum interval between sending BGP routing updates.

<0-600> time in seconds


WORD Neighbor tag.

neighbor {A.B.C.D I WORD} allowas-in[<1-10>]

Configure accept as-path with my AS present in it.


WORD Neighbor tag.

<1-10> Number of occurrences of AS number

neighbor {A.B.C.D I WORD} attribute-unchanged(as-path I next-hop I med}

Configure BGP attribute is propagated unchanged to this neighbor.


WORD Neighbor tag.

as-path As-path attribute.

med Med attribute.

next-hop Next hop attribute.

neighbor {A.B.C.D I WORD} attribute-unchanged as-path{next-hop I med}



WORD Neighbor tag.

as-path As-path attribute.med: Med attribute.next-hop: Next hop attribute.

neighbor {A.B.C.D I WORD} attribute-unchanged as-path med next-hop


neighbor {A.B.C.D I WORD} attribute-unchanged as-path next-hop med


neighbor {A.B.C.D I WORD} attribute-unchanged med{as-path I next-hop}


neighbor {A.B.C.D I WORD} attribute-unchanged med as-path next-hop


327


Id:0900d805805d456c

neighbor {A.B.C.D I WORD} attribute-unchanged next-hop{as-path I med}

Router Configure BGP attribute is propagated unchanged to this neighbor.

neighbor {A.B.C.D I WORD} attribute-unchanged next-hop as-path med



WORD Neighbor tag.

as-path As-path attribute.med: Med attribute.next-hop: Next hop attribute.

neighbor {A.B.C.D I WORD} attribute-unchanged next-hop med as-path


neighbor {A.B.C.D I WORD} capability dynamic

Configure to advertising dynamic capability to this neighbor.

neighbor {A.B.C.D I WORD} capability orf prefix-list{both I receive I send}

Configure to advertising prefix list ORF capa-bility to the peer.

Prefix-list: Advertise prefix list.

ORF Capability to this neighbor.

both Capability to SEND and RECEIVE the ORF to/from this neighbor.

receive Capability to RECEIVE the ORF from this neighbor.

send Capability to SEND the ORF to this neighbor.

neighbor {A.B.C.D I WORD} capability route-refresh

Configure to advertising route-refresh capa-bility to this neighbor.

route-refresh

Advertise route-refresh capabil-ity to this neighbor.

neighbor {A.B.C.D I WORD} collide-established

Configure to include neighbor in established state for collision detection.

neighbor {A.B.C.D I WORD} default-originate [route-map WORD | ]

Configure to originate default route to this neighbor.


WORD Neighbor tag.

route-map Route-map to specify criteria to originate default

WORD Route-map name.

neighbor {A.B.C.D I WORD} description LINE

Configure specific description.

LINE Up to 80 characters describing this neighbor.

neighbor {A.B.C.D I WORD} dont-capability-negotiate

Router Configure not to perform capability negotia-tion.


WORD Neighbor tag.


328

Operate CLI

Id:0900d805805d456c


neighbor {A.B.C.D I WORD} ebgp-multihop [<1-255> | ]

Router Allow EBGP neighbors not on directly con-nected networks.


WORD Neighbor tag.

<1-255> maximum hop count.

neighbor {A.B.C.D I WORD} enforce-multihop

Enforce EBGP neighbors to perform multi-hop.

neighbor {A.B.C.D I WORD} filter-list WORD {in I out}

Establish BGP filters.


WORD Neighbor tag.

WORD: AS path access-list name.

in Filter incoming routes

out Filter outgoing routes

neighbor A.B.C.D interface WORD Configure neighbor interface information.


WORD Interface name.

neighbor {A.B.C.D I WORD} maximum-prefix<1-4294967295> [<1-100]| warning-only | ]

Configure the maximum number of prefix accept from this peer.


WORD Neighbor tag.

<1-4294967295>

Maximum no. of prefix limit.

<1-100> Threshold-value, 1 to 100 percent

warning-only

Only give warning message when limit is exceeded.

neighbor {A.B.C.D I WORD} maximum-prefix <1-4294967295> {warning-only | }

Configure the maximum number of prefix accept from this peer, and only give warning message when limit is exceeded.

warning-only

Only give warning message when limit is exceeded.

neighbor {A.B.C.D I WORD}next-hop-self

Disable the next hop calculation for this neigh-bor.

neighbor {A.B.C.D I WORD}override-capability

Override capability negotiation result.

neighbor {A.B.C.D I WORD}passive

Configure not to send open messages to this neighbor.

neighbor A.B.C.D peer-groupWORD

Configure the member of the peer-group.


WORD Peer-group name.


329


Id:0900d805805d456c

neighbor {A.B.C.D I WORD}port <0-65535>

Router Configure neighbor 's BGP port.

<0-65535> TCP port number

neighbor {A.B.C.D I WORD} prefix-list WORD {in I out}

Filter updates to/from this neighbor.


WORD Neighbor tag.

WORD Name of a prefix list.

in Filter incoming updates

out Filter outgoing updates

neighbor {A.B.C.D I WORD} remote-as <1-65535>

Specify AS number of BGP neighbor.


WORD Neighbor tag.

<1-65535> AS number

neighbor {A.B.C.D I WORD}remove-private-AS

Remove private AS number from outbound updates.


WORD Neighbor tag.

neighbor {A.B.C.D I WORD} route-reflector-client

Configure neighbor router to transmit routing information.

neighbor {A.B.C.D I WORD} route-server-client

Configure a neighbor as Route Server client.

neighbor {A.B.C.D I WORD} send-commu-nity [{both I extended I standard | }]

Send Community attribute to this neighbor.

both Send Standard and Extended Community attributes.

extended Send Extended Community attributes.

standard Send Standard Community attributes

neighbor {A.B.C.D I WORD} shutdown Administratively shut down this neighbor.

neighbor {A.B.C.D I WORD} soft-reconfiguration inbound

Configure per neighbor soft reconfiguration.

neighbor {A.B.C.D I WORD} strict-capability-match

Configure strict capability negotiation match.

neighbor {A.B.C.D I WORD} timers <0-65535> <0-65535>

Configure BGP per neighbor timers.


WORD Neighbor tag.

<0-65535> Keep alive interval

<0-65535> Hold time.

neighbor {A.B.C.D I WORD} timers connect <0-65535>

Configure neighbor router to transmit routing information.

<0-65535> Connect timer.

neighbor {A.B.C.D I WORD} transparent-as

Configure not appending my AS number even when peer is EBGP.


330

Operate CLI

Id:0900d805805d456c


You can block routing information to specific interface by using passive-interface command.

Configuration of BGP pathsIn order to configure BGP paths, use the following commands.

neighbor {A.B.C.D I WORD} transparent-nexthop

Router Configure not changing next hop even when peer is EBGP.

neighbor {A.B.C.D I WORD} unsuppress-mapWORD

Configure Route-map to selectively unsup-press suppressed routes.


WORD Neighbor tag.

WORD Name of route map.

neighbor {A.B.C.D I WORD} update-sourceWORD

Configure the source of routing updates.


WORD Neighbor tag.

WORD Interface name or address


bgp always-compare-med BGP BGP specific commands.Allow comparing MED from different neighbors.

bgp bestpath as-path ignore BGP specific command.

bestpath Change the default bestpath selection

as-path AS-path attribute

ignore Ignore as-path length in selecting a route

bgp bestpath compare-confed-aspath

BGP specific command.

bestpath Change the default bestpath selection.

compare-confed

Allow comparing confederation.

aspath AS path length.

bgp bestpath compare-routerid



compare-routerid

Compare router-id for identical EBGP paths.

bgp bestpath med(confed | missing-as-worst)



med MED attribute.

confed Compare MED among confederation paths.

missing-as-worst

Treat missing MED as the least preferred one.


331


Id:0900d805805d456c

bgp bestpath med confed missing-as-worst

BGP BGP specific command.


med MED attribute.


missing-as-worst


bgp bestpath med missing-as-worst confed



med MED attribute.

missing-as-worst



bgp client-to-client reflection BGP specific command.

client-to-client Configure client to client route reflection.

reflection Reflection of routes allowed.

bgp cluster-id<1-4294967295>

BGP information.

cluster-id Configure Route-Reflector Cluster-ID.

1-4294967295 Route-Reflector Cluster-id as 32 bit quantity.

bgp cluster-id A.B.C.D BGP information.

cluster-id Configure Route-Reflector Cluster-ID

A.B.C.D Route-Reflector Cluster-id in IP address format

bgp confederation identifier<1-65535>


confederation AS confederation parameters

identifier AS number

1-65535 Set routing domain confederation AS

bgp confederation peers .<1-65535>


confederation AS confederation parameters.

peers Peer ASs in BGP confederation.

1-65535 AS number.


332

Operate CLI

Id:0900d805805d456c


bgp dampenin BGP

BGP_IPV4 BGP_IPV4M BGP_VPNV4

BGP specific command.Enables route-flap dampening.

bgp dampening <1-45> BGP specific command.Enables route-flap dampening.

1-45 Reachability Half-life time for the pen-alty(minutes).

bgp dampening<1-45> <1-20000> <1-20000> <1-255>



1-20000 Value to start reusing a route.

1-20000 Value to start suppressing a route.

1-255 Maximum duration to suppress a stable route(minutes).

bgp dampening<1-45> <1-20000> <1-20000> <1-255> <1-45>



1-20000 Value to start reusing a route.

1-20000 Value to start suppressing a route.

1-255 Maximum duration to suppress a stable route(minutes).

1-45 Un-reachability Half-life time for the pen-alty(minutes).

bgp dampening route-map WORD


route-map Route-map to specify criteria for damp-ening.

1-45 Route-map name.

bgp default ipv4-unicast BGP BGP specific command.

default Configure BGP defaults.

ipv4-unicast Activate ipv4-unicast for a peer by default.

bgp default local-preference <0-4294967295>


default Configure BGP defaults.

local-prefer-ence

local preference (higher=more pre-ferred).

0-4294967295 Configure default local preference value.

bgp deterministic-med BGP specific command.

deterministic-med

Pick the best-MED path among paths advertised from the neighboring AS.

bgp enforce-first-as BGP information.

enforce-first-as

Enforce the first AS for EBGP routes.


333


Id:0900d805805d456c

Configuration of the address-familyIn order to configure address-family, use the following commands.

bgp fast-external-failover BGP BGP information.

fast-external-failover

Immediately reset session if a link to a directly connected external peer goes down.

bgp log-neighbor-changes BGP information.

fast-external-failover

Log neighbor up/down and reset reason.

bgp network import-check BGP specific command.

network BGP network command.

import-check Check BGP network route exists in IGP.

bgp router-id A.B.C.D BGP information.

router-id Override current router identifier (peers will reset).

A.B.C.D Manually configured router identifier.

bgp scan-time <0-60> BGP specific command.

scan-time Configure background scan interval.

0-60 Scan interval (sec) Default: 60; Disable: 0

bgp config-type(standard | zebos)

Global BGP information.

config-type Configuration type.

standard Standard

zebos ZebOS

bgp rfc1771-path-select BGP information.

rfc1771-path-select

RFC1771 path selection mechanism.

bgp rfc1771-strict BGP information.

rfc1771-strict Strict RFC1771 behavior.

bgp aggregate-nexthop-check BGP information.Perform aggregation only when next hop is the same.


334

Operate CLI

Id:0900d805805d456c


Aggregation of routesAggregations are used to minimize the size of routing tables. Aggregation combines the characteristics of several different routes and advertises a single route. This reduces the amount of information that BGP must store and exchange with other BGP systems.


address-family ipv4 BGP Enter address family command mode.

ipv4 Address family.

address-family ipv4 multicast Enter Address Family command mode.


multicast Address Family modifier.

address-family ipv4 unicast Enter Address Family command mode.


unicast Address Family modifier.

address-family vpnv4 Enter Address Family command mode.

vpnv4 Address family.

address-family vpnv4 unicast Enter Address Family command mode.


unicast Address Family modifier.

adjacency-check ISIS Check ISIS neighbor protocol support.


aggregate-address A.B.C.D/M BGP Configure BGP aggregate entries.

A.B.C.D/M Aggregate prefix.

aggregate-address A.B.C.D/M as-set Configure BGP aggregate entries.


as-set Generate AS set path information.

aggregate-address A.B.C.D/M as-set summary-only

Configure BGP aggregate entries.



summary-only

Filter more specific routes from updates.

aggregate-address A.B.C.D/M summary-only



summary-only


aggregate-address A.B.C.D/M summary-only as-set



summary-only



335


Id:0900d805805d456c

13.1.1.3 Changing routing policyBy default, all routing protocols place their routes into the routing table.

You can control the routes that a protocol places into each table and the routes from that table that the protocol advertises. You do this by defining one or more routing policies and then applying them to the specific routing protocol.

Routing policies applied when the routing protocol places routes into the routing table are referred to as import policies because the routes are being imported into the routing table.

Policies applied when the routing protocol is advertising routes that are in the routing table are referred to as export policies because the routes are being exported from the routing table. In other words, the terms import and export are used with respect to the routing table.

On both the inbound and the outbound updates, hiX 5622/25/30/35 R2.8 supports matching based on autonomous system path, community, and network numbers. Auton-omous system path matching requires the as-path access-list command, community based matching requires the community-list command and network-based matching requires the access-list command.

In order to configure routing policy, use the following command.

Access-list is used in BGP for the creation of route maps, forming the “what if” logic of the route map.

Prefix-list filter based on the prefix of the address.

Route-map is a complicated access list that defines criteria upon which a router acts when a match is found for the stated criteria. It is used in BGP-4 for setting the attributes that determine the basis for selecting the best path to a destination.

Configuring Route-map examplesIn the following example, the route map called DSLAM is applied to outbound updates to the neighbor 200.1.1.1. The route map will prepend the autonomous system path “100 100” to routes that pass access list 1. The second part of the route map is to permit the advertisement of other routes.

SWITCH>enableSWITCH#configure terminalSWITCH(config)#router bgp 222SWITCH(config-router)#network 161.60.0.0/16SWITCH(config-router)#network 162.60.0.0/16SWITCH(config-router)#neighbor 200.1.1.1 remote-as 200SWITCH(config-router)#neighbor 200.1.1.1 route-map DSLAM outSWITCH(config-router)#exit


neighbor {A.B.C.D I WORD} route-map WORD {in | out}

Router Apply route map to this neighbor.

A.B.C.D: Neighbor IPv4 address.

WORD Neighbor tag.

WORD Name of route map.

in: Apply route map to incoming routes.

out: Apply route map to outbound routes.

336

Operate CLI

Id:0900d805805d456c


SWITCH(config)#route-map DSLAM permit 10SWITCH(config-route-map)#match ip address 1SWITCH(config-route-map)#set as-path prepend 100 100SWITCH(config-route-map)#exitSWITCH(config)#route-map DSLAM permit 20SWITCH(config-route-map)#match ip address 2SWITCH(config-route-map)#exitSWITCH(config)#access-list 1 permit 161.60.0.0 0.0.255.255SWITCH(config)#access-list 1 permit 162.60.0.0 0.0.255.255SWITCH(config)#access-list 2 permit 0.0.0.0 255.255.255.255

13.1.1.4 Configuring BGP weightsA BGP weight is a number that you assign to a path so that you can control the path selection process. The weight is local to the router. A weight can be a number from 0 to 65535.

In order to configure BGP weights, use the following command.

13.1.1.5 BGP route filteringTo restrict the routing information, you can filer BGP routing updates to and from partic-ular neighbors. To do this, define an access list and apply it to the updates. Distribute list filters are applied to network numbers and not autonomous system paths.

In order to configure BGP route filtering, use the following command.

13.1.1.6 AS route filteringAs filtering information with network address on BGP network, it is possible to filter information going through AS. Policies applied to decide route are registered in access


neighbor {A.B.C.D I WORD} weight <0-65535>}

Router Set default weight for routes from this neighbor.


WORD Neighbor tag.

<0-65535> Default weight.


neighbor {A.B.C.D I WORD} distribute-list{<1-199> I <1300-2699> I WORD} {in I out}

Router Filter BGP updates to/from this neighbor.


WORD Neighbor tag.

<1-199> IP access-list number.

<1300-2699> IP access-list number (expanded range).

WORD IP Access-list name.

in Filter incoming updates.

out Filter outgoing updates.

337


Id:0900d805805d456c

list. In order to filter routing information with AS standard, configure filtering policy in access list and apply the policy to neighbor router.

Define specific AS in access list.

13.1.1.7 BGP filtering through prefix listsWhen you restrict BGP route, prefix list is preferred than access list because of the fol-lowing reasons;

• saves time to search and apply data in case of massive filter lists. • unlimited registration in filter lists. • easy to use.

Before applying prefix list, user should configure prefix list. User can assign number to each policy registered in prefix list.

Traffic filtering operation through prefix listsFiltering through prefix list processes routing information in specific order by applying policy defined in filter list. It is similar to access list but there are more detail rules as follow.

• Allows all network information if there is no defined policy in prefix list. • Rejects specified network information unless policy applied to network is defined in

prefix list. • Distinguishes each policy with the assigned number and applies policy which has

the lowest number when there are more than one policy applied to one network.

Routers search policy in prefix list from the Privileged in order. When they find required policy, they Privileged searching. For faster operation, user can make quick search list on the Privileged of the list by using seq provided from ip prefix-list. In order to view assigned number to policy, use the command, show ip prefix-list.

Policies configured by user are automatically assigned number. If you do not configure it, you should assign number to each policy by using the command, ip prefix-list SEQ-VALUE.

Making prefix listIn order to create prefix list, use one of the following commands.


ip as-path access-listWORD{permit | deny} LINE

Global Defines specific AS in access list:

WORD Enter the access list number.

permit Specify packets to reject.

deny Specify packets to forward.

LINE Enter a regular expression.

show access-list standby-available Global Exec


access-list CLI_ACCESS_STR.

standby-available Standby available state.

338

Operate CLI

Id:0900d805805d456c


g In order to create prefix list, you should select permit or deny.

Creating prefix list policyYou can add policy to prefix list one by one. Use the following command.


ip prefix-list WORD (deny | permit) A.B.C.D/M le <0-32> ge <0-32>

Global IP information:- Build a prefix list,- Specify packets to reject- Specify packets to forward.

WORD Name of a prefix list

deny Specify packets to reject.

permit Specify packets to forward.

A.B.C.D/M IP prefix <network>/<length>, e.g., 35.0.0.0/8

ge Maximum prefix length to be matched

<0-32> Maximum prefix length

le Minimum prefix length to be matched

<0-32> Minimum prefix length

ip prefix-list WORD seq <1-4294967295> (deny | permit) A.B.C.D/M ge <0-32> le <0-32>

Global IP information:- Build a prefix list,- Specify packets to reject- Specify packets to forward.




seq Sequence number of an entry

<1-4294967295> Sequence number


ge Minimum prefix length to be matched

<0-32> Minimum prefix length

le Maximum prefix length to be matched

<0-32> Maximum prefix length

ip prefix-list WORD (deny | permit) (A.B.C.D/M | any)

IP information:- Build a prefix list.





any Any prefix match. Same as

ip prefix-list WORD description LINE

IP information:- Build a prefix list- Makes additional description to prefix list.


description Prefix-list specific description

LINE Up to 80 characters describing this prefix-list

339


Id:0900d805805d456c

You can input ge and le optionally, and they are used when you configure more than one network. If you do use neither ge nor le, network range is more clearly configured. When only ge attribute us configured, network range is configured from ge value, and when only le attribute is configured, network range is configured from netmask to le value.

Viewing prefix list policyIn order to check information about prefix table, use one of the following commands.

Deleting number of inquiring prefix listBy default system records number how many times prefix list is inquired. In order to delete the number, use the following command.


ip prefix-list NAMEseq <1-4294967295> {deny | permit}{A.B.C.D/M I any}

Config Configures policy of prefix list and assigns number to the policy.

ip prefix-list NAMEseq <1-4294967295> {deny | permit} A.B.C.D/M ge <0-32> [le <0-32>]

Configures policy of prefix list and assigns number to the policy.

ip prefix-list NAMEseq <1-4294967295> {deny | permit} A.B.C.D/M le <0-32> [ge <0-32>]

Configures policy of prefix list and assigns number to the policy.


show ip prefix-list[detail | summary]

Privileged /Config

Shows prefix lists in detail or briefly.

show ip prefix-list[detail | summary] WORD

Shows prefix list of specified name.

show ip prefix-list WORD [seq number]

Shows policy of specified number.

show ip prefix-list WORD A.B.C.D/M

Shows policy applied to specified network.

show ip prefix-list WORDA.B.C.D/M longer

Shows all policies of prefix list applied to specified network.

show ip prefix-list WORD A.B.C.D/M first-match

Shows policy first applied to specified network.


clear ip prefix-listWORD[A.B.C.D/(M]

Privileged Deletes the number how many times prefix list is inquired.

340

Operate CLI

Id:0900d805805d456c


13.1.1.8 Blocking information transmission to next destinationIf you want to restrict the routing information that the router advertises, you can block BGP routing updates to particular neighbors. To do this, define an access list and apply it to the updates. Distribute-list filters are applied to network numbers and not autono-mous system paths.

In order to block information transmission to the next destination, use the following command.

13.1.1.9 Configuring BGP versionIn order to specify the BGP version when communicating with a neighbor, use the fol-lowing command.

13.1.2 Advanced configurationAfter finishing basic configuration, it is possible to do advanced configuration. It contains the following Sections.

• Configuring BGP community filtering • Checking and managing BGP

13.1.2.1 Configuring BGP community filteringBGP supports transmit policy distributing routing information. Distributing routing infor-mation is operated based on not only community list but also IP address and AS route. Community list makes community according to each destination and routing policy is applied based on community standard.

It helps configure BGP speaker that distributes routing information.

Community is destination group that shares some common attributes. One destination can belonged to more than one community. An administrator can configure to which


neighbor {A.B.C.D I WORD}distribute-list(<1-199> | <1300-2699> | WORD) {in | out}

Router Filter updates to/from this neighbor.


WORD Neighbor tag.

<1-199> IP access-list number.

<1300-2699> IP access-list number (expanded range).

WORD IP Access-list name.

in Apply map to incoming routes.

out Apply map to outbound route.


neighbor {A.B.C.D I WORD} version {4}

Router Set the BGP version to match a neighbor.


WORD Neighbor tag.

4 Neighbor’s BGP version.

341


Id:0900d805805d456c

community the destination belongs to. By default, all destinations are configured to be in internet community.

The other defined and well-known communities are as the below.

• no-export:Do not distribute this route to exterior BGP neighbor router

• no-advertise: (either exterior or interior) Do not distribute this route to neighbor router.

• local-as:Distribute this information to neighbor routers of low level AS located on BGP united network. Do not distribute it to exterior router.

In order to create community list, use the following commands. The prefix no negates the commands.

community is notated with a form, AA:NN as defined in RFC. AA is AS number and NN is number of 2 bytes.

13.1.2.2 Checking and managing BGPUser can delete all factors of cache, table and database. Also it is possible to display specific statistics.

1. Deleting cache, table and databaseYou can delete all contents of specific cache, table, and database when some factors are invalid or unreliable. In order to delete cache, table or database, use the following command.


ip community-list WORD (deny | permit) LINE

Global IP information:- Add a community list entry.

WORD Community list name.

deny Specify community to accept.

permit Specify community to accept.

LINE Community number in aa:nn format or inter-net|local-AS|no-advertise|no-export.

ip community-list <1-99> (deny | permit) LINE

IP information:- Add a community list entry.

<1-99> Community list number (standard).



LINE Community number in aa:nn format or inter-net|local-AS|no-advertise|no-export.

ip community-list<100-199> (deny | permit) LINE

IP information:- Add a community list entry.

<100-199>

Community list number (expanded).



LINE An ordered list as a regular-expression.

342

Operate CLI

Id:0900d805805d456c


2. Displaying system and network statisticsYou can display specific statistics such as contents of BGP routing table, cache, and database. Information provided can be used to determine resource utilization and solve network problems.

You also can display information according the ability to reach a node and discover the routing path your device's packets are taking through the network. In order to display various routing statistics, use one of the following commands.


clear ip bgp{ * I <1-65535> I A.B.C.D | X:X::X:X | dampening {A.B.C.D | A.B.C.D/M} | external | flap-statistics |ap-statisitc {A.B.C.D. | A.B.C.D/M} | ipv4 | peer-group {WORD} | view {WORD}} [in | out I ipv4 {multicast | unicast} | vpnv4 | soft [in I out] | ]

PrivilegedConfig

Reconfigures information about BGP neighbor router, AS group, all (*) BGP connections.

* Clear all peers.

<1-65535> Clear peers with the AS number.

A.B.C.D BGP neighbor address to clear.

X:X::X:X BGP IPv6 neighbor to clear.

dampening Clear route flap dampening information.

external Clear all external peers.

flap-statistics Clear route flap statistics.


peer-group Clear all members of peer-group.

view BGP view.

in Soft reconfiguration inbound update.

out Soft reconfiguration outbound update.



soft Soft reconfiguration.

343


Id:0900d805805d456c

13.2 IS-IS routing managementIS-IS (Intermediate System to Intermediate System) routing can be used inside the routing domain to form adjacencies between all L3 nodes of the same domain. The implementation of IS-IS routing is dedicated to IP routing (Integrated IS-IS), according to RFC1142 and RFC1195. Connectionless network routing and End System-IS discovery are not supported.

• Router configuration • Password • Packet type parameters • Metrics • Mesh groups • Checking current configuration


show ip bgp prefix-list NAME Privileged /Config

Shows peers to which the prefix has been advertised.

show ip bgp cidr-only Displays all BGP routes including subnetwork and upper network.

show ip bgp community[AA:NN | local-AS | no-advertise | no-export]

Displays route belonged in specific community. Commu-nity Number is formed as AA:NN.

show ip bgp community-listWORD [exact-match|]

Shows all routes that are permitted by the community list.

WORD Enter the name of the list.

show ip bgp community-info Displays all information of BGP community.

show ip bgp filter-list WORD Shows routes that are matched by the specified autono-mous system route in access list, enter the name of the list.

show ip bgp regexp LINE Shows routes that match the specified regular expres-sion entered on the command line, enter a regular expression for LINE.

show ip bgp attribute-info Shows all information of BGP attributes.

show ip bgp neighbors[A.B.C.D]

Shows detail information on TCP and BGP connections to individual neighbors.

A.B.C.D Neighbor to display information about.

show ip bgp neighborsip-address [advertised-routes | received prefix-filter | received-routes | routes]

Shows information about the TCP and BGP connections to neighbors.

advertised-routes Displays all the routes the router has advertised to the neighbor.

received prefix-filter Displays the prefixlist filter.

received-routes Displays all received routes (both accepted and rejected) from the specified neighbor.

routes Displays all routes that are received and accepted.

show ip bgp paths Shows all BGP routes in database.

show ip bgp summary Shows all BGP connections.

344

Operate CLI

Id:0900d805805d456c


13.2.1 Router configurationThe system makes use of Level 1 IS-IS routing:

• Level 1 (L1) routers know the topology inside their area, including all routers and hosts. They forward all traffic for destinations outside by using a Level 2 (L2) router within their area which knows the domain (level 2) topology. All L1 routers and hosts in an area must have a Network Service Access Point (NSAP) with the same area address.

• Level 2 (L2) routers connect all areas within a routing domain. They advertise their own area addresses (NSAP) to the other L2 routers in the backbone.

L1 and L2 routers have two link-state databases: a level 1 link-state database for intra area routing and a level 2 link-state database for inter-area routing. The routing tables are builded calculating the shortest path tree (SPT) by each IS.

g On the point-to-point interface IS-IS Hello will be sent regardless of the circuit-type.


router isis (WORD | ) Global Initiates IS-IS routing instance and enters router configura-tion mode.

WORD: ISO instance tag (e.g. symbolic router name excluding spaces).

ip router isis (WORD | ) Global/Interface

Interface Internet Protocol config commands;- IP router interface command- IS-IS routing for IP- Routing process tag.This command is mandatory to IS-IS configuration!

WORD: Routing process tag (excluding spaces).

Disable IS-IS routing on the interface with the no command (To clear the database, delete the IS-IS routing instance.)

isis priority <0-127> {level-1 | level-2 | }

Config/Interface

Set priority for designated router election.

<0-127>: Priority value (default priority is 64 for both level-1 and level-2)

level-1: Specify priority for level-1 routing

level-2: Specify priority for level-2 routing

isis circuit-type{level-1 | level-1-2 | level-2-only}

Interface Configure circuit type for the interface.

level-1: Level-1 only adjacencies are formed

level-1-2: Level-1-2 adjacencies are formed (this is the default circuit type)

level-2-only: Level-2 only adjacencies are formed

summary-address A.B.C.D/M (not-advertise | tag <0-4294967295> | )

OSPF Configure IP address summaries:- IP summary prefix- Set tag.

not-advertise Suppress routes that match the prefix.

<0-4294967295> 32-bit tag value

345


Id:0900d805805d456c

13.2.2 PasswordIS-IS specifies an authentication mechanism to prevent unauthorized routers from forming adjacencies or injecting TLVs (Table-length-value). The authentication can only be activated globally but can be configured independently for L1 and L2 Hello PDUs (Protocol Data Unit). By default no password is used.

g On point-to-point interfaces for both L1 and L2 the same password must be config-ured.

13.2.3 Packet type parametersIS-IS is used to periodically send out link state information across the network, so that each router can maintain a current picture of network topology. For messages four packet types are used:

• Hello-packets are used for functions capability announcement and neighbor discov-ery

• LSP-packets (Link state PDU) are used to distribute routing information between the IS-IS notes, e.g. network topology information and IP addresses.

• CSNP-packets (Complete Sequence Number PDU) contains a list of all LSPs from the current link state database, using to be ensure that all routers of LSPs have the same information and are synchronized.

• PSNP-packets (Partial Sequence Number PDU) are used to request one or more LSPs and acknowledge their reception.

Use the following commands to configure the message intervals and attributes:

summary-address A.B.C.D/M (level-1 | level-1-2 | level-2 | )

ISIS Configure IP address summaries:- IP network prefix.

A.B.C.D: IPv4 address.

M: Subnet mask.

level-1: Summarize into level-1 area.

level-1-2: Summarize into both area and sub-domain.

level-2: Summarize into level-2 sub-domain.

The no parameter with this command is deleting the summary.



isis password WORD {level-1 | level-2 | }

Config/Interface

Configure the authentication password for interface.

WORD: plain-text password (excluding spaces).

level-1: Specify password for level-1 PDUs (Intra area)

level-2: Specify password for level-2 PDUs (Domain)

Use the no parameter to clear the password.

346

Operate CLI

Id:0900d805805d456c


Following commands sets the LSB parameter:


isis hello-interval {minimal | <1-65535>} {level-1 | level-2 | }

Interface Set Hello interval in seconds. The interval is set with the hello-mul-tiplier. The Hello interval is calculated by dividing by the hello-mul-tiplier.

minimal: Holdtime 1 second, interval depends on mul-tiplier,

<1-65535>: Hello interval value

level-1: Specify hello-interval for level-1 IIHs.

level-2: Specify hello-interval for level-2 IIHs.

The no parameter with this command sets the default value 10 sec. for both level-1 and level-2.

isis hello-multiplier<3-1000> {level-1 | level-2 | }

Interface Set multiplier for Hello holding time.

<3-1000>: Hello multiplier value.

level-1: Specify hello multiplier for level-1 IIHs.

level-2: Specify hello multiplier for level-2 IIHs.

The no parameter sets the default value 3 to both level-1 and level-2.

isis hello padding Interface Add padding to IS-IS hello packets IS-IS pads the Hello packet by default to notice neighbors the supported MTU size.

The no parameter disable the padding.

isis lsp-interval <1-4294967295>

Interface Set LSP transmission interval.

<1-4294967295>: LSP interval in milliseconds.

The no parameter sets the default value 33 ms for the interval.

isis retransmit-interval<0-65535>

Interface Set per-LSP retransmission interval

<0-65535>: Interval between retransmissions of the same LSP in seconds.

The no parameter sets the default value 5 Sec. for the interval.

isis csnp-interval<0-65535>{level-1 | level-2 | }

Interface Set CSNP interval. This parameter is only valid on broadcast inter-face.

<0-65535>: CSNP interval in seconds.

level-1: Specify interval for level-1 CSNPs only.

level-2: Specify interval for level-2 CSNPs only.

The no parameter sets the default value 10 Sec. for the interval to both level-1 and level-2.


max-lsp-lifetime <1-65535> ISIS Set the maximum LSP lifetime.

<1-65535>: Max. LSP lifetime in sec.

The no parameter sets the default value 1200 Sec. for the LSP lifetime.

347


Id:0900d805805d456c

Configuration of the areaUse the following commands to configure the OSPF area parameters:

set-overload-bit { {suppress [external | interlevel | external interlevel | interlevel external] | on-startup <5-86400>} | }

ISIS Set the overload-bit in self-LSPs.

Suppress: The router suppresses the redistri-bution of specified types of reach-ability information during overload state.

suppress external: Suppress to redistribute external reachability

suppress interlevel: Suppress to redistribute interlevel reachability

on-startup: The router sets overload bit at startup only, then clears the bit after specified interval has elapsed.

<5-86400>: Interval in seconds after which the overload state is exited.

The no parameter clears the overload-bit from self-LSPs.

ignore-lsp-errors ISIS Use to ignore LSPs' checksum error. By default LSP checksum is checked on receipt.

The no parameter turns off this function.

max-area-addresses <3-254> ISIS Specify the number of max area addresses.

ISIS <3-254>: Max. addresses range

The no parameter set the number to the default value 3.

default-information originate OSPFISIS, RIP

Originates reachability information to default destination into LSP (Level-2 domain).


area (A.B.C.D | <0-4294967295>) authentication

OSPF OSPF area parameters.

A.B.C.D OSPF area ID in IP address format.

0-4294967295 OSPF area ID as a decimal value.

authentication Enable authentication.

area (A.B.C.D|<0-4294967295>) authentication message-digest

OSPF area parameters.




message-digest Use message-digest authentication

area (A.B.C.D|<0-4294967295>) default-cost <0-16777215>




default-cost Set the summary-default cost of a NSSA or stub area.

0-16777215 Stub's advertised default summary cost.


348

Operate CLI

Id:0900d805805d456c


area (A.B.C.D | <0-4294967295>) filter-list access WORD (in | out)




filter-list access Filter networks by access-list.

WORD Name of an access-list.

in Filter networks sent to this area.

out Filter networks sent from this area.

area (A.B.C.D | <0-4294967295>) filter-list prefix WORD (in | out)




filter-list prefix Filter networks between OSPF areas.

WORD Name of an IP prefix-list.

in Filter networks sent to this area.

out Filter networks sent from this area.

area (A.B.C.D | <0-4294967295>) nssa




nssa Specify a NSSA area.

area (A.B.C.D | <0-4294967295>) range A.B.C.D/M




range Summarize routes matching address/mask (border routers only).

A.B.C.D/M Area range prefix.

area (A.B.C.D | <0-4294967295>) range A.B.C.D/M advertise






advertise Advertise this range (default).

area (A.B.C.D|<0-4294967295>) range A.B.C.D/M not-advertise






not-advertise DoNotAdvertise this range.


349


Id:0900d805805d456c

area (A.B.C.D | <0-4294967295>) nssa {translator-role (candidate | never | always) | no-redistribution | default-information-originate (metric <0-16777214> | metric-type <1-2> | metric <0-16777214> metric-type <1-2> | metric-type <1-2>metric <0-16777214> | ) | no-summary}




nssa Specify a NSSA area.

translator-role NSSA-ABR Translator role.

candidate Candidate for translator (default).

never Do not translate.

always Translate always.

no-redistribution No redistribution into this NSSA area.

default-informa-tion-originate

Originate Type 7 default into NSSA area.

metric OSPF default metric.

0-16777214 OSPF metric.

metric-type OSPF metric type for default routes.

1-2 OSPF Link State type.









no-summary Do not send summary LSA into NSSA.

area (A.B.C.D | <0-4294967295>) range A.B.C.D/M substitute A.B.C.D/M






substitute Announce area range as another prefix.

A.B.C.D/M Network prefix to be announced instead of range.

area (A.B.C.D | <0-4294967295>) shortcut (default | enable | disable)




shortcut Configure the area's shortcutting mode.

default Set default shortcutting behavior.

enable Enable shortcutting through the area.

disable Disable shortcutting through the area.


350

Operate CLI

Id:0900d805805d456c


area (A.B.C.D | <0-4294967295>) stub




stub Configure OSPF area as stub.

area (A.B.C.D | <0-4294967295>) stub no-summary




stub Configure OSPF area as stub.

no-summary Do not inject inter-area routes into stub.

area (A.B.C.D | <0-4294967295>) virtual-link A.B.C.D




virtual-link Define a virtual link and its parameters.

A.B.C.D ID (IP addr) associated with virtual link neighbor.

area (A.B.C.D | <0-4294967295>) virtual-link A.B.C.D{authentication (message-digest | null | ) | authentication-key LINE | message-digest-key <1-255> md5 LINE | dead-interval <1-65535> | hello-interval <1-65535> | retransmit-interval <1-65535> | transmit-delay <1-65535>}




virtual-link Define a virtual link and its parameters.

A.B.C.D ID (IP addr) associated with virtual link neighbor.


message-digest Use message-digest authentication.

null Use null authentication.

authentication-key Set authentication key.

LINE Authentication key (8 chars).

message-digest-key

Set message digest key.

1-255 Key ID.

md5 Use MD5 algorithm.

LINE Authentication key (16 chars).

dead-interval Dead router detection time.

1-65535 Seconds

hello-interval Hello packet interval.

1-65535 Second

retransmit-interval LSA retransmit interva.

1-65535 Seconds

transmit-delay LSA transmission delay.

1-65535 Seconds

area-password WORD ISIS Configure the authentication password for an area.

WORD Area password


351


Id:0900d805805d456c

13.2.4 MetricsRunning integrated IS-IS, a default IP route will automatically be installed in the level 1 routers pointing toward the nearest L1/L2 router that originally set the attached bit in its level 1 LSP. If there are multiple level 2-capable routers in the area, the closest L1/L2 router is selected based on the cost.

The cost metric (narrow-metric) is used by default, measuring the cost of the complete link. The interface default metric is put into IP reachability information TLVs and IS reachability information TLVs in LSPs.

13.2.5 Mesh groupsMesh groups are a mechanism to reduce redundant packet transmissions for the IS-IS protocol.

g If an interface is configured as "mesh group blocked", the standard LSP database synchronization process is applied if the interface receives CSNP (Complete Sequence Number PDU) or PSNP (Partial Sequence Number PDU).

13.2.6 Checking current configurationIn order to check the current configuration use the following commands:

g To modify the lines displayed, use the | (output modifier token) and to save the output to a file use the > (output redirection token).


isis metric<1-63>{level-1 | level-2 | }

Interface Configure the default metric (metric-style narrow) for the interface

<1-63>: Range of calculation

level-1: Apply metric to level-1 links

level-2: Apply metric to level-2 links

The no parameter with this command sets default metric to the default value = 10 to both, level-1 and level-2.


isis mesh-group{blocked | <1-4294967295>}

Config/Interface

Set IS-IS mesh group ID on the current interface.

<1-4294967295>: Mesh-group Number.

blocked: Blocked LSPs on the current interface.

The no parameter disables / unblocked mesh group on the current interface.


show running-config router isis All Shows current IS-IS router information.

352

Operate CLI

Id:0900d805805d456c


show isis topology{l1 | l2 | level-1 | level-2 | }

GlobalPriviledged

Command displays data about IS-IS topology.IS-IS paths to intermediate systems.

l 1, level-1

Path to all level-1 routers in the area (inter area topology).

l 2, level-2

Path to all level-2 routers in the domain (intra area topology).

show isis counter IS-IS isisSystemCounterEntry MIBs.

show isis WORD database (detail | verbose) (l1 | l2 | level-1 | level-2) WORD

show isis WORD database (detail | verbose) WORD (l1 | l2 | level-1 | level-2)

show isis WORD database (l1 | l2 | level-1 | level-2) (detail | verbose) WORD

show isis WORD database (l1 | l2 | level-1 | level-2) WORD (detail | verbose)

show isis WORD database WORD (detail | verbose) (l1 | l2 | level-1 | level-2)

show isis WORD database WORD (l1 | l2 | level-1 | level-2) (detail | verbose)

Show running system information:- IS-IS information,- IS-IS link state database.

WORD Routing area tag.

detail Detailed link state database information.

verbose Verbose database information.

l 1, level-1

IS-IS Level-1 routing link state database

l 2, level-2


WORD LSPID in the form of xxxx.xxxx.xxxx.xx-xx

show isis database WORD (detail | verbose) (l1 | l2 | level-1 | level-2)

show isis database(detail | verbose) (l1 | l2 | level-1 | level-2)

show isis database(l1 | l2 | level-1 | level-2) WORD (detail | verbose)

show isis database(l1 | l2 | level-1 | level-2) (detail | verbose) WORD

show isis database(detail | verbose) WORD (l1 | l2 | level-1 | level-2)

show isis database(detail | verbose) (l1 | l2 | level-1 | level-2) WORD

GlobalPriviledged

Show running system information:- IS-IS information,- IS-IS link state database.

WORD Routing area tag.

detail Detailed link state database information.

verbose Verbose database information.

l 1, level-1


l 2, level-2


WORD LSPID in the form of xxxx.xxxx.xxxx.xx-xx

show isis interface counter Show running system information:- IS-IS interface status and configuration,- Interface information.

Counter Interface counters.

show isis interface IFNAME Show running system information:- IS-IS interface status and configuration,- Interface information.

IFNAME Enter interface name.

show memory isis Show running system information:- Memory information,- ISIS memory.


353

Operate CLI Scenarios and configuration examples

Id:0900d805805de187

14 Scenarios and configuration examplesThis Chapter provides some scenarios, configuration examples and use cases.

14.1 Global single taggedThe Global Single tagged scenario is one of the simple scenarios. The configuration include only one vlan which is used by all subscriber ports and all uplink ports. The bridgeport uses only one PVC. The whole scenario based on untagged subscriber traffic and single tagged network traffic.

– Global single tagged-untagged– Global single tagged-tagged– Global single tagged-tagged replace– Global single tagged-special: Multicast handling– Global single tagged-untagged Multiple PVC’s– Global single tagged-tagged Multiple PVC’s– Global single tagged-tagged Replace multiple PVC’s

354

Operate CLI

Id:0900d805805de187

Scenarios and configuration examples

14.1.1 Global single tagged-untagged

Configuration finished.

Switch> enableSwitch# configure terminalSwitch(config)# bridgeSwitch(bridge)# bridgeport 1/1/1 pvid 1000Switch(bridge)# bridgeport 1/1/1 taggingmode untaggedSwitch(bridge)# vlan create 1000Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 untaggedSwitch(bridge)# exit

355


Id:0900d805805de187

14.1.2 Global single tagged-tagged


Switch> enableSwitch# configure terminalSwitch(config)# bridgeSwitch(bridge)# bridgeport 1/1/1 pvid 1000Switch(bridge)# bridgeport 1/1/1 taggingmode offSwitch(bridge)# bridgeport 1/1/1 host-protocol dhcp-pppoe --> DHCP and PPPoE host protocol

Switch(bridge)# vlan create 1000Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 taggedSwitch(bridge)# exit

356

Operate CLI

Id:0900d805805de187


14.1.3 Global single tagged-tagged replace


Switch> enableSwitch# configure terminalSwitch(config)# bridgeSwitch(bridge)# bridgeport 1/1/1 taggingmode taggedSwitch(bridge)# bridgeport 1/1/1 replace-vlantag 7 --> 7 is VLAN ID for tag replacementSwitch(bridge)# bridgeport 1/1/1 pvid 1000Switch(bridge)# bridgeport 1/1/1 host-protocol dhcp-pppoe --> DHCP and PPPoE host protocol

Switch(bridge)# vlan create 1000Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 taggedSwitch(bridge)# exit

357


Id:0900d805805de187

14.1.4 Global single tagged-special: Multicast handling


Switch> enableSwitch# connect terminalSwitch(config)# bridgeSwitch(bridge)# bridgeport 1/1/1 replace-vlantag off --> switch off tag replacementSwitch(bridge)# bridgeport 1/1/1 pvid 1000Switch(bridge)# bridgeport 1/1/1 taggingmode untaggedSwitch(bridge)# bridgeport 1/1/1 host-protocol dhcp-pppoe --> DHCP and PPPoE host protocol

Switch(bridge)# vlan create 1000Switch(bridge)# vlan create 2000Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 untaggedSwitch(bridge)# vlan add 2000 0/1 taggedSwitch(bridge)# vlan add 2000 1/1/1 untaggedSwitch(bridge)# exit

358

Operate CLI

Id:0900d805805de187


14.1.5 Global single tagged-untagged Multiple PVC’s

Switch> enableSwitch# configure terminalSwitch(config)# bridgeSwitch(bridge)# port lre 1/1 disable--> CG based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 xdsl atm vc create vpi 6 vpi 32Switch(bridge)# lre 1/1 xdsl atm vc create vpi 8 vpi 32--> Wintegra and CNX based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 atm vc create vpi 3 vci 32Switch(bridge)# lre 1/1 atm vc create vpi 4 vci 32

Switch(bridge)# port lre 1/1 enable

Switch(bridge)# bridgeport 1/1/1 taggingmode untaggedSwitch(bridge)# bridgeport 1/1/2 taggingmode untaggedSwitch(bridge)# bridgeport 1/1/3 taggingmode untagged

Switch(bridge)# bridgeport 1/1/1 pvid 1000Switch(bridge)# bridgeport 1/1/2 pvid 2000Switch(bridge)# bridgeport 1/1/3 pvid 3000

Switch(bridge)# bridgeport 1/1/1 host-protocol pppoe Switch(bridge)# bridgeport 1/1/2 host-protocol dhcpSwitch(bridge)# bridgeport 1/1/3 host-protocol dhcp

359


Id:0900d805805de187


Switch(bridge)# vlan create 1000Switch(bridge)# vlan create 2000Switch(bridge)# vlan create 3000

Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 untagged

Switch(bridge)# vlan add 2000 0/1 taggedSwitch(bridge)# vlan add 2000 1/1/2 untagged

Switch(bridge)# vlan add 3000 0/1 taggedSwitch(bridge)# vlan add 3000 1/1/3 untaggedSwitch(bridge)# exit

360

Operate CLI

Id:0900d805805de187


14.1.6 Global single tagged-tagged Multiple PVC’s

Switch>enableSwitch# configure terminalSwitch(config)# bridge

Switch(bridge)# port lre 1/1 disable

--> CG based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 xdsl atm vc create vpi 6 vpi 32Switch(bridge)# lre 1/1 xdsl atm vc create vpi 8 vpi 32

--> Wintegra and CNX based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 atm vc create vpi 3 vci 32Switch(bridge)# lre 1/1 atm vc create vpi 4 vci 32


Switch(bridge)# bridgeport 1/1/1 replace-vlantag offSwitch(bridge)# bridgeport 1/1/2 replace-vlantag offSwitch(bridge)# bridgeport 1/1/3 replace-vlantag off

Switch(bridge)# bridgeport 1/1/1 taggingmode offSwitch(bridge)# bridgeport 1/1/2 taggingmode offSwitch(bridge)# bridgeport 1/1/3 taggingmode off

Switch(bridge)# bridgeport 1/1/1 host-protocol pppoeSwitch(bridge)# bridgeport 1/1/2 host-protocol dhcpSwitch(bridge)# bridgeport 1/1/3 host-protocol dhcp

361


Id:0900d805805de187



Switch(bridge)# vlan add 1000 0/1 taggedSwitch(bridge)# vlan add 1000 1/1/1 tagged


Switch(bridge)# vlan add 3000 0/1 taggedSwitch(bridge)# vlan add 3000 1/1/3 taggedSwitch(bridge)# exit

362

Operate CLI

Id:0900d805805de187


14.1.7 Global single tagged-tagged Replace multiple PVC’s


14.2 Global Double TaggedThe Global Double tagged scenarios are more complex than the single tagged ones. The figure shows some possibilities of configuration. All these configuration can be used in parallel on one linecard, but partly not in parallel on a bridgeport (PVC). The descrip-tion afterward should be read carefully. It describes which parameters from a single tagged scenario are not longer needed in double tagged scenario. Basically it is possible

Switch>enableSwitch# configure terminalSwitch(config)# bridge

Switch(bridge)# port lre 1/1 disable

--> CG based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 xdsl atm vc create vpi 6 vpi 32Switch(bridge)# lre 1/1 xdsl atm vc create vpi 8 vpi 32

--> Wintegra and CNX based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 atm vc create vpi 3 vci 32Switch(bridge)# lre 1/1 atm vc create vpi 4 vci 32


Switch(bridge)# bridgeport 1/1/1 tagging mode taggedSwitch(bridge)# bridgeport 1/1/2 tagging mode taggedSwitch(bridge)# bridgeport 1/1/3 tagging mode tagged

Switch(bridge)# bridgeport 1/1/1 replace-vlantag 7Switch(bridge)# bridgeport 1/1/2 replace-vlantag 7Switch(bridge)# bridgeport 1/1/3 replace-vlantag 7







363


Id:0900d805805de187

to switch between single and double tagged scenarios, if the network environment will be ready to handle double and single tagged frames at the same time.

g An additional important point: It is possible to configure or enable global double tagged, but still the single tagged scenarios are running without any interruption.

– Global Double Tagged-Double tagged untagged– Global double tagged double tagged untagged cross connect– Global double tagged-stacked tagged– Global double tagged stacked tagged cross connect– Global double tagged-stacked untagged– Global double tagged stacked untagged cross connect

364

Operate CLI

Id:0900d805805de187


14.2.1 Global Double Tagged-Double tagged untagged

Switch> enableSwitch# configure terminalSwitch(config)# bridgeSwitch(bridge)# port lre 1/1 disable--> CG based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 xdsl atm vc create vpi 6 vpi 32Switch(bridge)# lre 1/1 xdsl atm vc create vpi 8 vpi 32--> Wintegra and CNX based linecardslre PORTS xdsl atm vcc 1 vpi 25 vci 32 Switch(bridge)# lre 1/1 atm vc create vpi 3 vci 32Switch(bridge)# lre 1/1 atm vc create vpi 4 vci 32


Switch(bridge)# bridgebase taggingmode double

Switch(bridge)# bridgeport 1/1/1 replace-vlantag 7--> Command can be executedSwitch(bridge)# bridgeport 1/1/2 replace-vlantag 7Switch(bridge)# bridgeport 1/1/3 replace-vlantag 7


Switch(bridge)# bridgeport 1/1/1 taggingmode taggedSwitch(bridge)# bridgeport 1/1/2 taggingmode taggedSwitch(bridge)# bridgeport 1/1/3 taggingmode tagged


365


Id:0900d805805de187




Switch(bridge)# vlan add 2000 0/1 tagged

Switch(bridge)# vlan add 2000 1/1/2 tagged


366

Operate CLI

Id:0900d805805de187


14.2.2 Global double tagged double tagged untagged cross connect

14.2.3 Global double tagged-stacked tagged

14.2.4 Global double tagged stacked tagged cross connect

367


Id:0900d805805de187

14.2.5 Global double tagged-stacked untagged

14.2.6 Global double tagged stacked untagged cross connect

368

Operate CLI

Id:0900d805805de187


14.3 Use cases

14.3.1 Use case: ADSL configuration

14.3.1.1 Configure ADSL port using profile copy

Brief descriptionThis example shows how to configure an ADSL port with a complete ADSL profile by using the copy command, see also 6.3.4.1 Configuring xDSL line-config profile.

Preconditions

• The IU card supports ADSL-, ADSL2-, ADSL2+ over POTS profiles for each port, e.g. IU_ADSL72A_CG (M1499-C1). In this example slot#7 is configured to support card type “m_iuadsl_72a_cg”.

• Admin state of port needs to be configured is disabled (e.g. port#7/2).

1. Copy line and channel profile contain default values to specific profiles

g ADSL linecards from type Convergate D (”*_cg” or ”*_cgf”) are to configure with xdsl commands.

Additional configuration of line profile parameters possible but not necessary.

2. Assign profiles to port

SWITCH(bridge)# xdsl copy line-config-profile DEFVAL_ADSL_A MY_ADSL_POTSSWITCH(bridge)# xdsl copy chan-config-profile DEFVAL_ADSL MY_ADSL_CHANNEL

SWITCH(bridge)# lre 7/2 xdsl line-config MY_ADSL_POTSSWITCH(bridge)# lre 7/2 xdsl chan-config channel1 MY_ADSL_CHANNEL

369


Id:0900d805805de187

3. Activate DSL line and wait for modem has been trained

4. Verify profile configuration

5. Verify DSL line information and data rates

6. Sets VPI/VCI of VCC and create second VccTp

7. Verify VCC information

8. Verify statistics / packet counters per ATM PVC

9. Reset statistics / packet counters for ATM PVC 1 and 2

14.3.1.2 Configure ADSL J port using profile copy

Brief descriptionThis example shows how to configure an ADSL Annex J port with a complete ADSL profile by using the copy command.


SWITCH(bridge)# show xdsl line-config-profile MY_ADSL_POTSSWITCH(bridge)# show xdsl line-config-info MY_ADSL_POTSSWITCH(bridge)# show xdsl chan-config-profile MY_ADSL_CHANNELSWITCH(bridge)# show xdsl chan-config-info MY_ADSL_CHANNEL

SWITCH(bridge)# show lre 7/2 xdsl line-confSWITCH(bridge)# show lre 7/2 xdsl phys-table linerates

SWITCH(bridge)# port lre 7/2 disableSWITCH(bridge)# lre 7/2 xdsl atm vcc 1 vpi 0 vci 32SWITCH(bridge)# lre 7/2 xdsl atm vc create vpi 1 vci 33SWITCH(bridge)# port lre 7/2 enable

SWITCH(bridge)# show lre 7/2 xdsl atm vcctp-infoSWITCH(bridge)# show lre 7/2 xdsl atm vcctp-overview

SWITCH(bridge)# show lre 7/2 xdsl atm vcctp-perfdataSWITCH(bridge)# show port statistics pvc xdsl 7/2

--------------------------------------------------------------------------------------------Ingress Egress

PORT VCC Bytes Packets Dropped P. Bytes Packets Dropped P.--------------------------------------------------------------------------------------------07/02 1 0 0 0 0 0 0

2 0 0 0 0 0 0 ============================================================================================

SWITCH(bridge)# lre 7/2/1-7/2/2 xdsl atm reset-perf-data

370

Operate CLI

Id:0900d805805de187


Preconditions

• The IU card supports ADSL2 and ADSL2+ Annex J profiles for each port, e.g. IU_ADSL72J_CGH. In this example slot#7 is configured to support card type “m_iuadsl_72j_cgh”.


1. Copy line and channel profile contain default values to specific profiles

2. Assign ADSL J profiles to port

g See 14.3.1.1 Configure ADSL port using profile copy for the further configuration steps.

14.3.1.3 Configure specific ADSL line profile

Brief descriptionThis example shows how to configure a Convergate ADSL port with a complete ADSL line profile.

Preconditions

• The IU card supports ADSL-, ADSL2-, ADSL2+ over POTS profiles for each port, e.g. IU_ADSL72A_CG (M1499-C1). In this example slot#7 is configured to support card type “m_iuadsl_72a_cg”.


1. Create line configuration profile with ADSL profiles

2. Configure line profile parameters (according to DEFVAL_ADSL_A)

g It is recommended to modify line profile parameters before assigning the profile to a line.

SWITCH(bridge)# xdsl copy line-config-profile DEFVAL_ADSL_J MY_ADSL_JSWITCH(bridge)# xdsl copy chan-config-profile DEFVAL_ADSL MY_ADSL_CHANNEL

SWITCH(bridge)# lre 4/2 xdsl line-config MY_ADSL_JSWITCH(bridge)# lre 4/2 xdsl chan-config channel1 MY_ADSL_CHANNEL

SWITCH(bridge)# xdsl add line-config-profile MY_ADSL_POTSSWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS profile-gs-standard adsl-pots adsl2-pots adsl2plus-pots

371


Id:0900d805805de187

2. Assign specific line profile and default channel profile to port


14.3.1.4 Configure dynamic ADSL line profile

Brief descriptionThis example shows how to configure a Wintegra or Conexant ADSL port with a complete dynamic ADSL profile.

SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-max-pwr 199SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS up-max-pwr 125SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS max-up-rx-pwr 125SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-tgt-snr-mgn 60SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS up-tgt-snr-mgn 60SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtuc-down-snr-mgn 30SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtur-down-snr-mgn 30SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtuc-up-snr-mgn 120SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtur-up-snr-mgn 120SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtuc-down-snr-time 10SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtuc-up-snr-time 60SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtur-down-snr-time 10SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS vtur-up-snr-time 60SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-mus 190SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-fmax 511SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-fmin 33SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS pwr-mgmt-l0time 180SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS pwr-mgmt-l2time 60SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS pwr-mgmt-l2atpr 6SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS pwr-mgmt-l2atprt 18SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-escma 305SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-escmb 409SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-pbo-escmc 309SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS down-max-nom-psd -400SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS up-max-nom-psd -380SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd del subcarrier 59SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd del subcarrier 314SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd del subcarrier 376SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd del subcarrier 499SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd add 33 73SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd add 376 93SWITCH(bridge)# xdsl line-config-profile MY_ADSL_POTS dpbo-epsd add 511 96

SWITCH(bridge)# lre 7/2 xdsl line-config MY_ADSL_POTSSWITCH(bridge)# lre 7/2 xdsl chan-config channel1 DEFVAL_ADSL

372

Operate CLI

Id:0900d805805de187


Preconditions

• The IU card supports ADSL-, ADSL2-, ADSL2+ over ISDN profiles for each port, e.g. IU_ADSL72I_IFX. In this example slot#2 is configured to support card type “m_iuadsl_72i_ifx”.


1. Create dynamic line configuration profile

2. Assign specific line profile to port


Optional configuration steps

g Note: They are only possible if the port was disabled before.

Create and assign DPBO profile (values are example only):

14.3.2 Use case: DELT for ADSL

Brief descriptionThis example shows how to configure DELT function for ADSL subscriber port, see also 6.3.2.2 ADSL DELT.

1. Disabling subscriber port needs to be tested

2. Setting subscriber port to DELT mode

3. Enabling port

SWITCH(bridge)# adsl add line-config-profile MY_ADSL_DYNAMIC dynamic

SWITCH(bridge)# lre 2/1 adsl line-config profile MY_ADSL_DYNAMIC

SWITCH(bridge)# adsl line-config-profile MY_ADSL_DYNAMIC atur inp 2SWITCH(bridge)# adsl line-config-profile MY_ADSL_DYNAMIC atuc inp 2

SWITCH(bridge)# adsl add dpbo-config-profile MY_ADSL_DPBO_PROFILESWITCH(bridge)# adsl dpbo-config-profile MY_ADSL_DPBO_PROFILE dpbo-epsd add 64 73SWITCH(bridge)# adsl dpbo-config-profile MY_ADSL_DPBO_PROFILE dpbo-epsd add 376 93SWITCH(bridge)# adsl dpbo-config-profile MY_ADSL_DPBO_PROFILE dpbo-epsd add 511 96SWITCH(bridge)# lre 2/1 adsl dpbo profile MY_ADSL_DPBO_PROFILE


SWITCH(bridge)# lre 2/1 adsl line-config delt force


373


Id:0900d805805de187

4. Complete DELT and recover subscriber port configuration

5. Check results of DELT

14.3.3 Use case: Ethernet Ring Protection (ERP)

Brief descriptionThis example explains how to configure an ERP domain on one ring with two ERP nodes (DSLAM A and DSLAM B).

Preconditions

• Both DSLAMs A and B are with disabled STP/RSTP/MSTP function, • A physical loop exists between DSLAM A and B (connected uplinks 1 and 3), • DSLAM A is determined as RM node, DSLAM B is determined as NN node, • ERP on RM node is activated before NN node, • For this ERP domain: VLAN 50 is the control VLAN, VLAN 100 is the traffic VLAN.

g Following commands have to be executed on both DSLAMs A and B, see also 6.2.4 ERP configuration.

1. Create control VLAN and traffic VLAN

2. Create and configure ERP domain

3. Verify ERP domain

14.3.4 Use case: EtherType-based forwarding

Brief descriptionThis example shows how untagged packets arriving the subscriber port can be tagged with specific Ethertype and PVID, see also 7.1.2 Configuring bridge port.

SWITCH(bridge)# port lre 2/1 disableSWITCH(bridge)# lre 2/1 adsl line-config delt inhibitSWITCH(bridge)# port lre 2/1 enable

SWITCH(bridge)# show lre 2/1 adsl physical atuc delt hlog

SWITCH(bridge)# vlan create 50,100SWITCH(bridge)# vlan add 50,100 0/1,0/3 tagged

SWITCH(config)# erp domain 1 createSWITCH(config)# erp domain 1 control-vlan 50SWITCH(config)# erp traffic-vlan-add 100 1SWITCH(config)# erp domain 1 primary-port uplink 1SWITCH(config)# erp domain 1 secondary-port uplink 3SWITCH(config)# erp domain 1 mode rm (nn)SWITCH(config)# erp domain 1 activation activate

SWITCH(config)# show erp domain 1

374

Operate CLI

Id:0900d805805de187


Requirements

• VLAN mode is single-tagged • VCCs (VPI/VCI) are configured • IGMP configuration is out of scope.

LimitationCG based IU cards support only up to two different 2 VLANs. This means that VLANs configured for EtherType-based VLAN setting must be identical for one Bridgeport.

1. Create VLANs for residential services and assign ports

2. Setting the EtherType for VLAN Tag

14.3.5 Use case: Port in IPoA mode

Brief descriptionThe examples show how to configure IPoA mode to be used for double-tagged and single-tagged VLAN scenarios, see also 7.1.2 Configuring bridge port.

14.3.5.1 Double-tagged VLAN scenario

Brief descriptionThis example shows how to configure IPoA mode for scenarios using double-tagged VLAN service type.

Preconditions

SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan create 200SWITCH(bridge)# bridgeport 2/10/1 replace-vlantag offSWITCH(bridge)# bridgeport 2/10/1 taggingmode untaggedSWITCH(bridge)# bridgeport 2/10/1 pvid 100SWITCH(bridge)# vlan add 100,200 2/10/1 untaggedSWITCH(bridge)# vlan add 100,200 0/3 untagged

SWITCH(bridge)# ethertype-based-vlan-tagging-profile 1 0800,0806 200 2SWITCH(bridge)# bridgeport 2/10/1 ethertype-based-vlan-tagging-profile 1SWITCH(bridge)# show ethertype-based-vlan-tagging-profile

VLAN mode: Double-tagging

Uplink port used: 0/1 working at tagged mode

Bridge port used: 1/1/1, 1/2/1, 1/3/1 working at untagged mode

s-VLAN used: VLAN200

c-VLANs used: VLAN100, VLAN101, VLAN102

375


Id:0900d805805de187

1. Setting VLAN mode and create VLAN

2. Configure VLAN information for port

3. Setting IPoA mode for port

4. Configure IP address of router for port

5. Configure IP address of CPE for port

14.3.5.2 Single-tagged VLAN scenario

Brief descriptionThis example shows how to configure IPoA mode for scenarios using single-tagged VLAN service type.

Preconditions

SWITCH(bridge)# bridgebase taggingmode doubleSWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 1/1/1,1/2/1,1/3/1 untaggedSWITCH(bridge)# vlan add 200 0/1 tagged

SWITCH(bridge)# bridgeport 1/1/1,1/2/1,1/3/1 pvid 200 SWITCH(bridge)# bridgeport 1/1/1 inner-pvid 100SWITCH(bridge)# bridgeport 1/2/1 inner-pvid 101SWITCH(bridge)# bridgeport 1/3/1 inner-pvid 102

SWITCH(bridge)# bridgeport 1/1/1 mode ipoaSWITCH(bridge)# bridgeport 1/2/1 mode ipoaSWITCH(bridge)# bridgeport 1/3/1 mode ipoa

SWITCH(bridge)#bridgeport 1/1/1 ipoa-router-ipaddr 172.18.10.254SWITCH(bridge)#bridgeport 1/2/1 ipoa-router-ipaddr 172.18.10.254SWITCH(bridge)#bridgeport 1/3/1 ipoa-router-ipaddr 172.18.10.254

SWITCH(config)# ip arp-reply fixed 1/1/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/2/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/3/1 172.18.10.1

VLAN mode: Single-tagging

Uplink port used: 0/1 working at tagged mode

Bridge port used: 1/1/1, 1/2/1, 1/3/1 working at untagged mode

VLANs used: VLAN100, VLAN101, VLAN102

376

Operate CLI

Id:0900d805805de187


1. Configure VLAN information for port

2. Setting IPoA mode for port

3. Configure IP address of router for port

4. Configure IP address of CPE for port

14.3.6 Use case: Rate limiting for port

Brief descriptionThis example shows how to create an IRL (input rate limit) profile and assign it to par-ticular subscriber port. There are also following commands enabling irl downstream con-figuration, see also 6.3.2.14 Profile configuration:

Preconditions

g Rate limiting per physical port for ARP, DHCP and IGMP is implemented for CG based IU cards, but downstream policing isn't supported by CG-based cards.




SWITCH(bridge)# bridgeport 1/1/1 mode ipoaSWITCH(bridge)# bridgeport 1/2/1 mode ipoaSWITCH(bridge)# bridgeport 1/3/1 mode ipoa

SWITCH(bridge)# bridgeport 1/1/1 ipoa-router-ipaddr 172.18.10.2SWITCH(bridge)# bridgeport 1/2/1 ipoa-router-ipaddr 172.18.10.6SWITCH(bridge)# bridgeport 1/3/1 ipoa-router-ipaddr 172.18.10.10

SWITCH(config)# ip arp-reply fixed 1/1/1 172.18.10.1SWITCH(config)# ip arp-reply fixed 1/2/1 172.18.10.5SWITCH(config)# ip arp-reply fixed 1/3/1 172.18.10.9

irl set profile dscbs Xirl set profile dscir Yirl set profile dspbs Zirl set profile dspir W

377


Id:0900d805805de187

Wintegra based IU cards support only the configuration of rate limiting for the entire card.

• CG-based IU card in slot#3 • Wintegra based IU card in slot#5

1. Create IRL profile for policing upstream and sets the rates

2. Assign IRL profile to dsl port

g This feature is currently not implemented/supported.

14.3.7 Use case: IRL with .1p priority

Brief descriptionThis example shows how to configure a .1p prioritized input rate limitation for subscriber port, see also 6.3.2.16 Port mapping.

g An IRL profile can be assigned to .1p priority value only if the particular IU card bases on CG.

1. Create an IRL profile for upstream and sets rates

2. Assign IRL profile to bridge port with .1p priority

3. Assign IRL profile to bridge port without priority

SWITCH(config)# irl create profile RATELIMIT1SWITCH(config)# irl set profile cbs 100 SWITCH(config)# irl set profile cir 10 SWITCH(config)# irl set profile pbs 200 SWITCH(config)# irl set profile pir 40 SWITCH(config)# irl apply profile

SWITCH(config)# irl create ifmap 3/1 protocol arp RATELIMIT1SWITCH(config)# irl create ifmap 3/1 protocol dhcp RATELIMIT1SWITCH(config)# irl create ifmap 3/1 protocol igmp RATELIMIT1SWITCH(config)# irl create ifmap s5 protocol igmp RATELIMIT1

SWITCH(config)# irl create profile POLPROF1SWITCH(config)# irl set profile cbs 1000 SWITCH(config)# irl set profile cir 300SWITCH(config)# irl set profile pbs 2000 SWITCH(config)# irl set profile pir 400SWITCH(config)# irl set profile policingds 0SWITCH(config)# irl apply profile

SWITCH(config)# irl create ifmap 3/1/1 dot1p 0 POLPROF1

SWITCH(config)# irl create ifmap 3/2/1 POLPROF1

378

Operate CLI

Id:0900d805805de187


4. Verify mapping of IRL profile

-----------+-------------+----------------- Key 1 | Key 2 | Profile Name-----------+-------------+----------------- 3/1/1 | dot1p 0 | POLPROF1 3/2/1 | - | POLPROF1

5. Verify IRL profile information

14.3.8 Use case: L2CP

Brief descriptionThis example shows how to configure Layer-2 Control Protocol, see also 12 L2CP con-figuration.

1. Create an L2CP profile and assign it to interface (auto-index #1)

2. Configure specific L2CP parameters of interface (index #1)

SWITCH(config)# show irl ifmap

SWITCH(config)# show irl profile info-------------------------+-++-------------------------+-++------+---------------upstream | || downstream | ||policing |u|| policing |u||------+-----+------+-----|s||------+-----+------+-----|s||------+---------------CIR | CBS | PIR | PBS |e|| CIR | CBS | PIR | PBS |e||SNMP- | Profile Namekbps |bytes| kbps |bytes| || kbps |bytes| kbps |bytes| ||index |------+-----+------+-----+-++------+-----+------+-----+-++------+---------------

300| 1000| 400| 2000|1|| 1000| 7500| 1000|10000|0|| 1 | POLPROF1

SWITCH(config)# l2cp create 192.168.0.1 DSLAM_1 10 10 10 no-partitioning 5

SWITCH(config)# l2cp modify interface 1 access-node-identifier DSLAM_1SWITCH(config)# l2cp modify interface 1 alarm-severity-profile 5SWITCH(config)# l2cp modify interface 1 ip-address 192.168.0.1SWITCH(config)# l2cp modify interface 1 partition-id 100SWITCH(config)# l2cp modify interface 1 no-partitioningSWITCH(config)# l2cp modify interface 1 t1 10SWITCH(config)# l2cp modify interface 1 t2 10SWITCH(config)# l2cp modify interface 1 t3 10

379


Id:0900d805805de187

3. Display information about L2CP running configuration and L2CP interface

4. Delete L2CP profile from interface (index #1)

14.3.9 Use case: Search for MAC address

Brief descriptionThis example shows how to search for information of an existing MAC address inside forwarding database, see also 16.3 MAC table.

Execute specific show command

SWITCH(config)# show running-config l2cp! --- L2CP - BEGIN ---@l2cp-db-version 2l2cp create 192.168.0.1 DSLAM_1 10 10 10 no-partitioning 5! --- L2CP - END ---

SWITCH(config)# show l2cp interface 1---------------------- L2CP interface # 1 -----------------------------------------IP Address of Controller = 192.168.0.1 Access Node Identifier = DSLAM_1 Partition ID = >>> partitioning disabled <<<T1 (adjacency periodic timer) = 10 secondsT2 (DSL line toggle timer) = 10 secondsT3 (startup delay timer) = 10 secondsAlarm severity profile = 5Adjacency State = RESETPeer Sender Instance = 0Peer Sender Name = 00:00:00:00:00:00Peer adjacency timer = 0.0 secondsTCP connection = downTCP last connect = ---TCP last disconnect = ---No. of TCP (re-)connects = 0Transmitted frames/bytes = 0/0Received frames/bytes = 0/0

SWITCH(config)# l2cp delete 1

SWITCH(bridge)# show mac address 00:00:xx:xx:xx:xx================================================================================port vlan mac addr permission status in use================================================================================SWITCH(bridge)#

380

Operate CLI

Id:0900d805805de187


14.3.10 Use case: MAC Address Translation (MAT)

Brief descriptionThe following example shows how to configure MAT based on THS mode for subscriber port and VLAN, and THS anymode, see 7.1.1 Configuring of bridge base.

14.3.10.1 MAT per portg Firstly make sure, that there is no per-VLAN configuration in the DSLAM.

1. Sets MAT per port

2. Configure PPPoE and DHCP for bridge portMAT 1:1 for PPPoE and DHCP sessions replace subscriber's MAC address with port ID.

3. Enabling MAT for bridge port

14.3.10.2 MAT per VLANg First, make sure there is no per-port configuration in the DSLAM.

1. Sets MAT per VLAN

2. Create VLAN and assign port needs to be enabled for MAT

3. Configure PPPoE and DHCP for bridge port

4. Enabling MAT for VLAN

14.3.10.3 MAT any-L2-mode

PreconditionDSLAM runs in double-tagged mode.

SWITCH(bridge)# mat translation-mode thsSWITCH(bridge)# mat dslamid 1000SWITCH(bridge)# mat mode per-port


SWITCH(bridge)# mat 1/20/1 enable

SWITCH(bridge)# mat translation-mode thsSWITCH(bridge)# mat dslamid 1000SWITCH(bridge)# mat mode per-vlan

SWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 1/20/1,0/1 untagged


SWITCH(bridge)# vlan mac-address-trans 200 on

381


Id:0900d805805de187

1. Sets MAT Mode

2. Sets Port tagging mode OFFIncoming tagged and double tagged packets are allowed, untagged packets are tagged with PVID.

3. Create VLANs to be translated

14.3.11 Use case: Metallic Test Access (MTA)

Brief descriptionThis example shows how to configure MTA, see also 5.7 Configure MTA.

Preconditions

• IU card is plugged in slot#2 • One card is plugged in slot#2 of the splitter shelf.

1. Enter the MTA command mode and setting mapping mode

g If the slot number of DSLAM is the same as the slot number of the splitter, the “standard” mode (default) may be adopted. Otherwise, the “dynamic” mode has to be used.

2. Dynamic mapping DSLAM cable to target splitter slot cable

3. Setting cable1 to be conneted to slot2 of shelf1 and slot2 of splitter

SWITCH(bridge)# mat translation-mode ths-anymode

SWITCH(bridge)# bridgeport 3/1/1 taggingmode off

SWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 3/1/1 taggedSWITCH(bridge)# bridgeport 3/1/1 pvid 200SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan servicetype 100 vlanstackedSWITCH(bridge)# vlan add 100 3/1/1 taggedSWITCH(bridge)# bridgeport 3/1/1 inner-pvid 100

SWITCH(config) # mtaSWITCH(config-mta) # mta set mappingmode standard

SWITCH(config-mta) # mta set mappingmode dynamic

SWITCH(config-mta) # mta connectcable dslam 2 1 splitter 1 2

382

Operate CLI

Id:0900d805805de187


4. Cancel dynamic mappingSlot#2 cable of DSLAM disconnects from the splitter shelf.

5. Verify all active MAT connect cables of dynamic mapping

14.3.12 Use case: PMDR

Brief descriptionThis example shows how to configure Performance Monitoring Data Retrieval (PMDR) and upload its data to FTP server, see also 17.2.7 PMDR feature.

g Conexant-D line cards support this feature but not Wintegra based line cards.

Preconditions

• Slot#5 is equipped with 48-Port ADSL2+ board. • Admin state of the board is enabled. • FTP server with IP address 172.18.122.11 is running, an FTP user “testpmdr” with

password “testpmdr” is configured.

1. Enter PMDR mode

2. Setting PMDR work mode

3. Setting PMDR FTP parameters

SWITCH(config-mta) # show mta connectcable

MTA is working in Dynamic Mapping Mode now.There are 1 active MTA dynamic mapping connect cables.========================

Active MTA dynamic mapping connect cable commands:mta connectcable dslam 2 1 splitter 1 2

SWITCH(config-mta) # mta disconnectcable dslam 2 1

SWITCH(config-mta) # show mta connectcable

MTA is working in Dynamic Mapping Mode now. There is no active MTA dynamic mapping connect cable.

SWITCH(config)# pmdr

SWITCH(config-pmdr)# set pmdr workmode enable

SWITCH(config-pmdr)# set pmdr ftpconfig ipaddress 172.18.122.11 username testpmdr password testpmdr rootpath /pmdr/ interval 1

383


Id:0900d805805de187

4. Verify PMDR configuration

14.3.13 Use case: Inner and outer priority

Requirements

g • Only CG based IU cards support all commands used in examples listed below. • The mode described in example Copy inner priority to outer priority is not sup-

ported by Wintegra based IU cards. In addition, the mode for the inner and outer tag must always be the same.

14.3.13.1 Map outer priority to DSCP

Brief descriptionThis example shows how to set .1p outer priority according DSCP to classify untagged packets incoming at subcriber port, see also 7.1.2 Configuring bridge port.

Preconditions

• VLAN service type: single-tagged • Untagged packets on DSL line.

1. Setting global and port tagging mode

2. Create VLAN and add port

3. Setting inner priority for non-IP packets

4. Create/modify DSCP-to-dot1p mapping profile

SWITCH(config-pmdr)# show pmdr configinfoWorking mode:Enable.FTP server ip: 172.18.122.11.FTP Username: testpmdr.FTP User password: ******.FTP root path: pmdr.Upload interval: 1.

SWITCH(bridge)# bridgebase taggingmode singleSWITCH(bridge)# bridgeport 3/1/1 taggingmode untagged

SWITCH(bridge)# vlan create 111SWITCH(bridge)# bridgeport 3/1/1 pvid 111SWITCH(bridge)# vlan add 111 3/1/1 untagged

SWITCH(bridge)# bridgeport 3/1/1 inner-priority 0

SWITCH(bridge)# dscp-dot1p-map-profile create 1 SWITCH(bridge)# dscp-dot1p-map-profile modify 1 0 112270123SWITCH(bridge)# iubridgeprofile s1 dscp-to-dot1p-profile 1--> profile is defined globally per IU

384

Operate CLI

Id:0900d805805de187


5. Setting port to handle outer priority according DSCP-to-dot1p mapping profile

14.3.13.2 Default/pre-configured outer priority

Brief descriptionThis example shows how to set default/pre-defined values for outer priority.

Preconditions

• VLAN service type: single-tagged • Tagged packets on DSL line.


2. Create VLAN and add port

3. Setting port to handle outer priority as default / pre-configured

14.3.13.3 Default/pre-configured inner and outer priority

Brief descriptionThis example shows how to set default/pre-defined values for inner and outer priority.

Preconditions

• VLAN service type: double-tagged • Tagged packets on DSL line.


SWITCH(bridge)# bridgeport 3/1/1 outer-priority-option dscp 1

SWITCH(bridge)# bridgebase taggingmode singleSWITCH(bridge)# bridgeport 3/1/1 taggingmode tagged

SWITCH(bridge)# vlan create 111SWITCH(bridge)# bridgeport 3/1/1 pvid 111SWITCH(bridge)# vlan add 111 3/1/1 tagged

SWITCH(bridge)# bridgeport 3/1/1 priority 0SWITCH(bridge)# bridgeport 3/1/1 outer-priority-option set

SWITCH(bridge)# bridgeport x/y/z inner-priority-option dscp profil--> inner-vlan's prior is inserted - taken from 'dscp to .1p' profileSWITCH(bridge)# bridgeport x/y/z inner-priority-option set--> the inner-vlan-pror is replaced by the default priorSWITCH(bridge)# bridgeport x/y/z inner-priority-option default--> inner-vlan-prior isn't touched

SWITCH(bridge)# bridgebase taggingmode doubleSWITCH(bridge)# bridgeport 3/1/1 taggingmode tagged

385


Id:0900d805805de187

2. Create C-VLAN and add port

3. Setting port to handle outer priority as default / pre-configured

4. Create S-VLAN and add port

5. Setting port to handle inner priority as default / pre-configured

14.3.13.4 Copy inner priority to outer priority

Preconditions

• VLAN service type: double-tagged • Tagged packets on DSL line.

Brief descriptionThis example shows how to copy C-VLAN priority to S-VLAN priority.


2. Create C-VLAN and add port

3. Setting port to copy inner priority to outer priority

4. Create S-VLAN and add port

SWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 3/1/1 taggedSWITCH(bridge)# bridgeport 3/1/1 pvid 200

SWITCH(bridge)# bridgeport 3/1/1 priority 0SWITCH(bridge)# bridgeport 3/1/1 outer-priority-option set

SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan servicetype 100 vlanstackedSWITCH(bridge)# vlan add 100 3/1/1 untagged

SWITCH(bridge)# bridgeport 3/1/1 inner-priority 0SWITCH(bridge)# bridgeport 3/1/1 inner-priority-option set

SWITCH(bridge)# bridgebase taggingmode doubleSWITCH(bridge)# bridgeport 3/1/1 taggingmode untagged

SWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 3/1/1 taggedSWITCH(bridge)# bridgeport 3/1/1 pvid 200

SWITCH(bridge)# bridgeport 3/1/1 outer-priority-option copy

SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan servicetype 100 vlanstackedSWITCH(bridge)# vlan add 100 3/1/1 untagged

386

Operate CLI

Id:0900d805805de187


5. Setting port to handle inner priority according default .1p

14.3.14 Use case: Global queue-priority mapping

Brief descriptionThe example illustrate how to configure the CoS-to-priority mapping. The priority mapping is possible on global level. There exists no card specific configuration. A detailed description of the commands is in Chapter 15.4 QoS configuration. The default values as defined in Table 32 Default 802.1p priory-to-queue mapping are rec-ommended values and can be changed by the following commands:

Map CoS number to queue (8 Queues)

Map CoS number to reduced queue (4 queues)

Setting default map for CXU fixed

g See the right column of the following table for the default value for CXU queue mapping “fixed”:

SWITCH(bridge)# bridgeport 3/1/1 inner-priority-option default

SWITCH(config)# qos map 0 1SWITCH(config)# qos map 1 2SWITCH(config)# qos map 2 3SWITCH(config)# qos map 3 4SWITCH(config)# qos map 4 5SWITCH(config)# qos map 5 6SWITCH(config)# qos map 6 7SWITCH(config)# qos map 7 8

SWITCH(config)# qos map-reduced 0 1SWITCH(config)# qos map-reduced 1 1SWITCH(config)# qos map-reduced 2 2SWITCH(config)# qos map-reduced 3 2SWITCH(config)# qos map-reduced 4 3SWITCH(config)# qos map-reduced 5 3SWITCH(config)# qos map-reduced 6 4SWITCH(config)# qos map-reduced 7 4

SWITCH(config)# qos cxu-map fixed

387


Id:0900d805805de187

Setting default map for CXU configurable

g See the right column of the following table for the default value for CXU queue mapping “configurable”:

14.3.15 Use case: Global QoS queue configuration

Brief descriptionThe examples make clear how to configure the global QoS queue functionality.A detailed description of the commands is in Chapter 15.4 QoS configuration.

Setting queueing modes: Weighted for downlink, strict priority for uplink and cascaded link

g If a card-specific configuration exists, the global QoS scheduling mode will not be used for this card.

CXU queue mapping: 'fixed' mapping----------------------------------------------------------Priority | Queue | Reduced queue | CXU----------------------------------------------------------0 be (Best Effort ) | 3 | 2 | 11 bg (Background ) | 1 | 1 | 12 spare (Spare ) | 2 | 1 | 13 ee (Excellent Effort) | 4 | 2 | 14 cl (Contolled Load ) | 5 | 3 | 15 video (Video ) | 6 | 3 | 16 voice (Voice ) | 7 | 4 | 17 ctrl (Network Control ) | 8 | 4 | 2

SWITCH(config)# qos cxu-map configurable

CXU queue mapping: 'configurable' mapping----------------------------------------------------------Priority | Queue | Reduced queue | CXU----------------------------------------------------------0 be (Best Effort ) | 3 | 2 | 31 bg (Background ) | 1 | 1 | 12 spare (Spare ) | 2 | 1 | 23 ee (Excellent Effort) | 4 | 2 | 44 cl (Contolled Load ) | 5 | 3 | 55 video (Video ) | 6 | 3 | 66 voice (Voice ) | 7 | 4 | 77 ctrl (Network Control ) | 8 | 4 | 8

SWITCH(config)# qos scheduling-mode cascading strictSWITCH(config)# qos scheduling-mode uplink strictSWITCH(config)# qos scheduling-mode downlink weighted

388

Operate CLI

Id:0900d805805de187


Setting global scheduling mode to strict for uplink and downlink

g Global values for weights are ignored - weights are set to unlimited.

Setting queueing mode weighted for all interfaces

Setting global scheduling mode to strict for uplink and weighted for downlink

g The scheduling mode “weighted” can be “weighted round robin” (wrr) or “weighted fair queueing” (wfq) and depends on the individual HW restrictions of the used board's.

Set watermarks and weights as on the following page.

g Global watermarks are only relevant for the uplink side.

Setting strict priority queueing for all interfaces (default) and queue weights unlimited (100%)

SWITCH(config)# qos scheduling-mode all strict

SWITCH(config)# qos scheduling-mode all weighted

SWITCH(config)# qos scheduling-mode uplink strictSWITCH(config)# qos scheduling-mode downlink weighted

SWITCH(config)# qos scheduling-mode all strict

SWITCH(config)# qos weight 1 unlimited SWITCH(config)# qos weight 2 unlimited SWITCH(config)# qos weight 3 unlimited SWITCH(config)# qos weight 4 unlimited SWITCH(config)# qos weight 5 unlimited SWITCH(config)# qos weight 6 unlimited SWITCH(config)# qos weight 7 unlimited SWITCH(config)# qos weight 8 unlimited

389


Id:0900d805805de187

Setting weighted queueing, configure queue weights and watermark values

14.3.16 Use case: Card specific QOS queue configuration

Brief descriptionThis example shows how to create, modify, display and delete configuration of card-specific QoS scheduling functionality.

Remarks

g • Card-specific configurations may be set for both CXU and IU cards. • There is no global parameter to enable the queue modes “8queue-flat” and

”hqs”. • For all card-specific QoS parameters/values are not specified, the global

defaults will be applied. • For the parameter SLOTS may be entered a single slot, slot list (e.g. s1, s2, s3)

or range of slots (s1-s4) in all card-specific QoS commands.

A detailed description of the commands is in Chapter 15.4 QoS configuration.

Example 1: DSL 4 queue mode, scheduling weighted (e.g. uniformly distributed 25 % on each queue 1 to 4)

SWITCH(config)# qos scheduling-mode all weighted

SWITCH(config)# qos weight 1 10 SWITCH(config)# qos weight 2 10 SWITCH(config)# qos weight 3 20 SWITCH(config)# qos weight 4 10SWITCH(config)# qos weight 5 10 SWITCH(config)# qos weight 6 20 SWITCH(config)# qos weight 7 10 SWITCH(config)# qos weight 8 10SWITCH(config)# qos watermark 1 10 20SWITCH(config)# qos watermark 2 10 20SWITCH(config)# qos watermark 3 10 20SWITCH(config)# qos watermark 4 10 20SWITCH(config)# qos watermark 5 10 20SWITCH(config)# qos watermark 6 10 20SWITCH(config)# qos watermark 7 10 20SWITCH(config)# qos watermark 8 10 20

390

Operate CLI

Id:0900d805805de187


Example 2: DSL 8 queue mode, scheduling weighted(e.g. uniformly distributed 12.5% on each queue 1 to 8)

Example 3:

– DSL HQS mode,– Scheduling “SP” for 1st level queues 5 to 8,– “Weighted” for 2nd level queues 1 to 4, – First level output rate e.g. about 2*video bandwidth + overhead control traffic,

it follows from the above: 15 Mbps, MBS relatively high.

SWITCH(config)# qos card-config create s7 downlinkSWITCH(config-qoscardconfigcreate[s7 downlink])# set scheduling-mode weightedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 1 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 2 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 3 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 4 25SWITCH(config-qoscardconfigcreate[s7 downlink])# apply SWITCH(config-qoscardconfigcreate[s7 downlink])# exitSWITCH(config)#

SWITCH(config)# qos card-config create s7 downlinkSWITCH(config-qoscardconfigcreate[s7 downlink])# set scheduling-mode weightedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 1 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 2 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 3 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 4 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 5 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 6 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 7 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 8 12.5SWITCH(config-qoscardconfigcreate[s7 downlink])# apply SWITCH(config-qoscardconfigcreate[s7 downlink])# exitSWITCH(config)#

391


Id:0900d805805de187

Example 4:

– As Example 3, but with watermarks,– High Watermark (queue 4) = 50%,– High Watermark (queue 3) = 100% (for video streaming)– High Watermark (queue 2) = 50%– High Watermark (queue 1) = 50%– Low watermark equals the high watermark then no specific low watermark reaction

SWITCH(config)# qos card-config create s7 downlinkSWITCH(config-qoscardconfigcreate[s7 downlink])# set queue-mode hqsSWITCH(config-qoscardconfigcreate[s7 downlink])# set scheduling-mode weightedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 1 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 2 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 3 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 4 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 5 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 6 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 7 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 8 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set queue-mode hqsSWITCH(config-qoscardconfigcreate[s7 downlink])# set hqs_parameters 5 15000 16000SWITCH(config-qoscardconfigcreate[s7 downlink])# apply SWITCH(config-qoscardconfigcreate[s7 downlink])# exitSWITCH(config)#

SWITCH(config)# qos card-config create s7 downlinkSWITCH(config-qoscardconfigcreate[s7 downlink])# set queue-mode hqsSWITCH(config-qoscardconfigcreate[s7 downlink])# set scheduling-mode weightedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 1 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 2 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 3 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 4 25SWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 5 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 6 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 7 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set weight 8 unlimitedSWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 1 50 50 SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 2 50 50SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 3 100 100SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 4 50 50SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 5 100 100SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 6 100 100SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 7 100 100SWITCH(config-qoscardconfigcreate[s7 downlink])# set watermark 8 100 100SWITCH(config-qoscardconfigcreate[s7 downlink])# set queue-mode hqsSWITCH(config-qoscardconfigcreate[s7 downlink])# set hqs_parameters 5 15000 16000SWITCH(config-qoscardconfigcreate[s7 downlink])# apply SWITCH(config-qoscardconfigcreate[s7 downlink])# exitSWITCH(config)#

392

Operate CLI

Id:0900d805805de187


Example 5:

– Uplink configuration,– Only watermark settings (“SP”, 4 queues 1 to 4), – To offer enough bandwidth for all bridge ports, the trafic shall be policed per bridge

port,– To get an useful frame drop according setting policing und priority, the distance

between low and high watermark must be quite big, (however, the low watermark should not be to small, default was (from low to high prio queue 8 to 1)

– Change Watermarks: – High watermark from default (30, 30, 40, 20) to user specific (50, 50, 80, 20),– Low watermark from default (20, 20, 30, 15) to user specific (20, 20, 30, 10).

14.3.17 Use case: Card-specific QoS configuration

Remarks

g • Card-specific configurations may be set for both CXU and IU cards. • There is no global parameter to enable the queue modes “8queue-flat” and

”hqs”. • For all card-specific QoS parameters/values are not specified, the global

defaults will be applied. • For the parameter SLOTS may be entered a single slot, slot list (e.g. s1, s2, s3)

or range of slots (s1-s4) in all card-specific QoS commands.

A detailed description of the commands is in Chapter 15.4 QoS configuration.

Create a new QoS configuration for specific card (Slot#7) for uplink and downlink

SWITCH(config)# qos card-config create s7 uplinkSWITCH(config-qoscardconfigcreate[s7 uplink])# set watermark 1 20 50 SWITCH(config-qoscardconfigcreate[s7 uplink])# set watermark 2 20 50SWITCH(config-qoscardconfigcreate[s7 uplink])# set watermark 3 30 80SWITCH(config-qoscardconfigcreate[s7 uplink])# set watermark 4 10 20SWITCH(config-qoscardconfigcreate[s7 uplink])# apply SWITCH(config-qoscardconfigcreate[s7 uplink])# exitSWITCH(config)# irl set profile policingds 1SWITCH(config)# exitSWITCH(config)#

SWITCH(config)# qos card-config create s7 all

393


Id:0900d805805de187

Setting QoS parameters and values for specific card configuration

Modify QoS configuration of specific card for uplink and downlink

SWITCH(config-qoscardconfigcreate[s7 all])# set scheduling-mode weightedSWITCH(config-qoscardconfigcreate[s7 all])# set queue-mode hqsSWITCH(config-qoscardconfigcreate[s7 all])# set hqs_parameters 5 200 400SWITCH(config-qoscardconfigcreate[s7 all])# set weight 1 10 SWITCH(config-qoscardconfigcreate[s7 all])# set weight 2 10SWITCH(config-qoscardconfigcreate[s7 all])# set weight 3 10...SWITCH(config-qoscardconfigcreate[s7 all])# set weight 8 10SWITCH(config-qoscardconfigcreate[s7 all])# set watermark 1 15 30 SWITCH(config-qoscardconfigcreate[s7 all])# set watermark 2 15 30SWITCH(config-qoscardconfigcreate[s7 all])# set watermark 3 15 30...SWITCH(config-qoscardconfigcreate[s7 all])# set watermark 8 15 30SWITCH(config-qoscardconfigcreate[s7 all])# apply SWITCH(config-qoscardconfigcreate[s7 all])# exitSWITCH(config)#

SWITCH(config)# qos card-config modify s7 allSWITCH(config-qoscardconfigmodify[s7 all])# set set queue-mode hqsSWITCH(config-qoscardconfigmodify[s7 all])# set hqs_parameters 5 100 400SWITCH(config-qoscardconfigmodify[s7 all])# set weight 3 20SWITCH(config-qoscardconfigmodify[s7 all])# applySWITCH(config-qoscardconfigmodify[s7 all])# exitSWITCH(config)#

394

Operate CLI

Id:0900d805805de187


Display QoS configuration of specific card

Delete QoS configuration of specific card and display result

SWITCH(config)# show qos card-config s7 all---------------------------------------------------------------------QOS Card Configuration Slot: s7 Interface Type: uplink---------------------------------------------------------------------Scheduling Mode: wfq (weighted queueing)Queue Mode: hqs (8 queues hierarchical queuing scheduling)Queue 1: Weight 10, Watermarks low: 15 % high: 30 %Queue 2: Weight 10, Watermarks low: 15 % high: 30 %Queue 3: Weight 10, Watermarks low: 15 % high: 30 %Queue 4: Weight 20, Watermarks low: 15 % high: 30 %Queue 5: Weight 10, Watermarks low: 15 % high: 30 %Queue 6: Weight 10, Watermarks low: 15 % high: 30 %Queue 7: Weight 10, Watermarks low: 15 % high: 30 %Queue 8: Weight 10, Watermarks low: 15 % high: 30 %HQS Second Stage Input Queue: 5-8,HQS First Stage Peak Information Rate: 100,HQS Second Stage Peak Burst Size: 400,---------------------------------------------------------------------QOS Card Configuration Slot: s7 Interface Type: downlink---------------------------------------------------------------------Scheduling Mode: wfq (weighted queueing)Queue Mode: hqs (8 queues hierarchical queuing scheduling)Queue 1: Weight 10, Watermarks low: 15 % high: 30 %Queue 2: Weight 10, Watermarks low: 15 % high: 30 %Queue 3: Weight 10, Watermarks low: 15 % high: 30 %Queue 4: Weight 20, Watermarks low: 15 % high: 30 %Queue 5: Weight 10, Watermarks low: 15 % high: 30 %Queue 6: Weight 10, Watermarks low: 15 % high: 30 %Queue 7: Weight 10, Watermarks low: 15 % high: 30 %Queue 8: Weight 10, Watermarks low: 15 % high: 30 %HQS Second Stage Input Queue: 5-8,HQS First Stage Peak Information Rate: 100,HQS Second Stage Peak Burst Size: 400,

SWITCH(config)# qos card-config delete s7 allSWITCH(config)# show qos card-config s7 all---------------------------------------------------------------------QOS Card Configuration Slot: s7 Interface Type: uplink---------------------------------------------------------------------no card configuration available enter 'show qos' for global values---------------------------------------------------------------------QOS Card Configuration Slot: s7 Interface Type: downlink---------------------------------------------------------------------no card configuration available enter 'show qos' for global values

395


Id:0900d805805de187

14.3.18 Use case: QoS shaping

Brief descriptionThis example shows how to configure QoS shaping functionality for port, queue group and queue. A detailed description of the commands is in Chapter 15.4 QoS configura-tion.

1. Create new QoS shaping profile

For this task, the qos shaping profile fastcreate command may be used, too.

2. Assign QoS shaping profile to port, queue group and queue

3. Modify rate parameters of QoS profile and apply changes

4. Cancel the port/queue group/queue assignment of QoS shaping profile

5. Delete a QoS shaping profile

g A QoS shaping profile needs to be deleted, may not be assigned to any port, queue group or queue, otherwise the delete command will be rejected.

SWITCH(config)# qos shaping profile create QShap_1SWITCH(config-qosshapingprofilecreate[QShap_1])# set cir 1024SWITCH(config-qosshapingprofilecreate[QShap_1])# set cbs 2048SWITCH(config-qosshapingprofilecreate[QShap_1])# applySWITCH(config-qosshapingprofilecreate[QShap_1])# exitSWITCH(config)#

SWITCH(config)# qos shaping assign 7/1 no-queue QShap_1--> no-queue means the profile is valid for the whole DSL port

g For CG cards it is only possible to configure queues 5-8 in the 8queue mode.

SWITCH(config)# qos shaping assign 7/2 1-4 QShap_1--> only possible if queue-mode 8queueSWITCH(config)# qos shaping assign 7/2 1 QShap_1SWITCH(config)# qos shaping assign 7/2 2 QShap_1SWITCH(config)# qos shaping assign 7/2 3 QShap_1

SWITCH(config)# qos shaping profile modify QShap_1SWITCH(config-qosshapingprofilemodify[QShap_1])# set cir 1234SWITCH(config-qosshapingprofilemodify[QShap_1])# set cbs 6789SWITCH(config-qosshapingprofilemodify[QShap_1])# applySWITCH(config-qosshapingprofilemodify[QShap_1])# exitSWITCH(config)#

SWITCH(config)# qos shaping unassign 7/1 no-queueSWITCH(config)# qos shaping unassign 7/2 1-4SWITCH(config)# qos shaping unassign 7/2 1 SWITCH(config)# qos shaping unassign 7/2 2 SWITCH(config)# qos shaping unassign 7/2 3

SWITCH(config)# qos shaping profile delete QShap_1

396

Operate CLI

Id:0900d805805de187


5. Show the assignments of QoS shaping

14.3.19 Use case: Shaping and policing on port

Brief descriptionThis example shows how to configure egress shaping and ingress policing on particular subscriber port, see also 6.3.2.11 ATM service category.

Preconditions

• Egress shaping and ingress policing are only supported per bridge port of Wintegra/CNX based IU cards

• An IRL (Input Rate Limit) profile is configured.

1. Enabling shaping for port and set a rate

2. Enabling policing for port and set rates

3. Verify port configuration

14.3.20 Use case: SHDSL port configuration

14.3.20.1 Ethernet over SHDSL

Brief descriptionThis example shows how to configure EoSHDSL port with TC-Layer operates EFM(64/65 octet) or HDLC framing. A detailed description of the commands is in Chapter 6.3.3.3 Configuring SHDSL span-config profile.

SWITCH(config)# show qos shaping assign QShap_1

SWITCH(bridge)# port lre 3/1 disableSWITCH(bridge)# lre 3/1 atm vcc 1 egress-shaping service-category cbr pcr 1000

SWITCH(config)# lre 3/1 atm vcc 1 ingress-policing scr 3000 mbs 1000SWITCH(config)# port lre 3/1 enable

SWITCH(bridge)# show lre 3/1 atm shaping-conf ==========================================================================slot port vcc atm_service trf_desc weight pcr scr mbs --------------------------------------------------------------------------3 1 1 cbr pcr unused 1000 unused unused3 1 2 best effort unshaped 1 unused unused unused==============================================================================

SWITCH(bridge)# show lre 3/1 atm policing-conf ========================================================================slot port vcc atm_service trf_desc pcr scr mbs ------------------------------------------------------------------------3 1 1 rtvbr gfr unused 3000 1000 3 1 2 rtvbr gfr unused 2359 100 =============================================================================

397


Id:0900d805805de187

Precondition

• The IU card supports ATM-, EFM- and HDLC, e.g. IU_SHDSL48E (Q2029-A2). In this example slot#3 is configured to support card type “m_iushdsl_48e_e”.

• Admin state of the port have to be configured to disabled (e.g. port#3/2).

1. Create a span configuration profile and set TC-layer to EFM

2. Assign span configuration profile to port




14.3.20.2 Wire mode

Brief descriptionThis example shows how to configure a SHDSL port for 2-wire up to 8-wire mode.

Preconditions

• The IU_SHDSL48B (Q2029-A1) supports 2-, 4- and 3 proprietary 4-wire mode for each port. The IU_SHDSL48E (Q2029-A2) supports 2-, 4-, 6-, 8-wire mode for each port (proprietary 4-wire mode is accepted and converted to simple 4-wire mode by CXU before sending to IU). In this example slot#1 is configured to support card type “m_iushdsl_48b_e” and slot#3 is configured to support “m_iushdsl_48e_e”.

• Admin state of the ports have to be configured to disabled.

g The wire mode may be changed only if the span profile is not assigned to any port.

1. Create span profile with 2-wire mode (default)

SWITCH(bridge)# shdsl add span-config-profile MY_SHDSL2SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 tc-layer efm

Alternative:

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 tc-layer hdlc

SWITCH(bridge)# lre 3/2 shdsl span-config MY_SHDSL2

SWITCH(bridge)# show shdsl span-config-infoSWITCH(bridge)# show shdsl span-config-profile MY_SHDSL2


SWITCH(bridge)# show lre 3/2 shdsl span-statusSWITCH(bridge)# show lre 3/2 shdsl bis-tcpam-mode

SWITCH(bridge)# shdsl add span-config-profile MY_SHDSL1SWITCH(bridge)# shdsl add span-config-profile MY_SHDSL2

398

Operate CLI

Id:0900d805805de187


3. Assign span profile to port

Optional: Change wire mode

Optional: Modify profile parameters



SWITCH(bridge)# lre 1/1 shdsl span-config MY_SHDSL1SWITCH(bridge)# lre 3/1 shdsl span-config MY_SHDSL2

SWITCH(bridge)# lre 1/1,3/1 shdsl span-config DEFVALSWITCH(bridge)# shdsl span-config-profile MY_SHDSL1 wireinterface fourwire minlinerate 400 maxlinerate 11408

or

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL1 wireinterface fourwirebitinterleaved minlinerate 400 maxlinerate 11408

or

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL1 wireinterface fourwirebitinterleaveenhanced minlinerate 400 maxlinerate 11408

or

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL1 wireinterface fourwirebyteinterleaveenhanced minlinerate 400 maxlinerate 11408SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 wireinterface fourwire minlinerate 400 maxlinerate 11408

or

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 wireinterface sixwire minlinerate 600 maxlinerate 17112

or

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 wireinterface eightwire minlinerate 800 maxlinerate 21792

SWITCH(bridge)# lre 1/1 shdsl span-config MY_SHDSL1SWITCH(bridge)# lre 3/1 shdsl span-config MY_SHDSL2

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL1 minlinerate 528SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 minlinerate 832 maxlinerate 11408

--> Set pam-mode by line configuration for legacy card type IU_SHDSL48B:

SWITCH(bridge)# lre 1/1 shdsl bis-tcpam-mode 32tcpam

---> Set pam-mode by profile configuration for new card type IU_SHDSL48E (this setting will be ignored when profile is assign to a legacy card):

SWITCH(bridge)# shdsl span-config-profile MY_SHDSL2 pam-constellation 32tcpam

SWITCH(bridge)# show shdsl span-config-infoSWITCH(bridge)# show shdsl span-config-profile MY_SHDSL1SWITCH(bridge)# show shdsl span-config-profile MY_SHDSL2

SWITCH(bridge)# port lre 1/1 enableSWITCH(bridge)# port lre 3/1 enable

399


Id:0900d805805de187


14.3.20.3 Clock synchronization with reference clock from CXU

Brief descriptionThis example shows how to configure SHDSL to select reference clock from CXU.

Preconditions

• The IU card supports synchronization via NTR, e.g. IU_SHDSL48E (Q2029-A2). In this example slot#3 is configured to support card type “m_iushdsl_48e_e”.

• Admin state of port have to be configured to disabled (e.g. port#3/2).

g The refrence clock parameter may be modified only if the span profile is not assigned to any port.

1. Create a span configuration profile and change reference clock (localclk)

2. Assign span configuration profile to port



14.3.21 Use case: TSSM

Brief descriptionThe following examples shows how to configure Training Speed Statistic Monitoring (TSSM), see also 17.2.6 TSSM feature.

SWITCH(bridge)# show lre 1/1,3/1-3/4 shdsl span-status

----------------------------------------------------------------------------

State Num | LineRate | Capabil. TxMode 4Wire

Port Admin Oper. Rep.| Attain. Actual PmmsMax | Region Region HsMode

----------------------------------------------------------------------------

01/03 Down Down 0 0 0 0 - 2 - 2 -

03/01 Up Up 0 11408 11408 11392 - 2 - 2 -

03/02 Slaveline

03/03 Down Down 0 0 0 0 - 2 - 2 -

03/04 Down Down 0 0 0 0 - 2 - 2 -

============================================================================

SWITCH(bridge)# show lre 1/1,3/1 shdsl bis-tcpam-mode

SWITCH(bridge)# shdsl add span-config-profile MY_SHDSLSWITCH(bridge)# shdsl span-config-profile MY_SHDSL referenceclock netclk

SWITCH(bridge)# lre 3/2 shdsl span-config MY_SHDSL

SWITCH(bridge)# show shdsl span-config-infoSWITCH(bridge)# show shdsl span-config-profile MY_SHDSL


400

Operate CLI

Id:0900d805805de187


14.3.21.1 TSSM data transfer to FTP server

Preconditions

• The mgmt interface has been brought up • Default IP route via mgmt interface is configured • Bridge port 7/1 has been enable, and a modem is connected to 7/1 • FTP server IP address is 10.0.0.1 • IP address of mgmt interface is 172.18.122.10 • FTP user account is ”test”, password is “test”.

NE sends upload performance data of subscriber line periodically to FTP server

Verify TSSM FTP information

14.3.21.2 Port configuration for TSSM

Preconditions

• The mgmt interface has been brought up, • Default IP route via mgmt interface is configured, • Bridge port 7/1 has been enable, and a modem is connected to 7/1, • SNMP community and trap host is configured, • Subscriber link up after alarm enabled, • Threshold rate is higher than current available rate.

NE sends an alarm trap for missing target rate when subscriber links-up

g There may be no non-cleared alarm before since there will be only one time alarm before it is cleared.

SWITCH(config)# tssmSWITCH(config-tssm)# tssm set ftp rootdir 172.18.122.10 ipaddress 10.0.01 user test password test

SWITCH(config-tssm)# tssm set transfer interval 1SWITCH(config-tssm)# tssm set transfer enable

SWITCH(config-tssm)# show tssm ftp

SWITCH(config)# tssmSWITCH(config-tssm)# tssm set miss target rate criteria upSWITCH(config-tssm)# tssm set threshold value up unit kbps 2000 slot 7 port 1

SWITCH(config-tssm)# tssm set threshold unit kbps slot 7 port 1SWITCH(config-tssm)# tssm set alarm enable slot 7 port 1

401


Id:0900d805805de187

NE sends clear alarm trap for meeting target rate when subscriber links-up

14.3.22 Use case: Dynamic UMAS for PPPoE

Brief descriptionThis example shows how to protect NE’s next hop against uplink MAC spoofing, see also 16.7 Uplink MAC address anti-spoofing.

1. Configure a static entry for uplink MAC anti-spoofing (UMAS)This entry of UMAS table is valid at NE’s run-time and cannot aging out until it is manual deleted.

2. Enabling the learning of gateway/DHCP server address for UMAS

3. Configure PPPoE server for UMAS

14.3.23 Use case: VDSL2 to ADSL2+ fallback

Brief descriptionThis example shows how to configure fallback of VDSL2 port to legacy ADSL2+ opera-tion, see also 6.3.2.4 Configuring ADSL line-config profile and 6.3.4.1 Configuring xDSL line-config profile.

Preconditions

• IU card supports ADSL2+ over ISDN profiles for each port, e.g. IU_VDSL24 (Q2028-A3). In this example, slot#7 is configured to support card type “m_iuvdsl_24d2_ifx”.


1. Create a line configuration profile with the ADSL profile must be fulfilled

SWITCH(config)# tssmSWITCH(config-tssm)# tssm set miss target rate criteria upSWITCH(config-tssm)# tssm set threshold value up unit kbps 100 slot 7 port 1SWITCH(config-tssm)# tssm set threshold unit kbps slot 7 port 1SWITCH(config-tssm)# tssm set alarm enable slot 7 port 1

SWITCH(bridge)# umas static 00:0F:1F:7A:3C:96

SWITCH(bridge)# umas dhcp-nexthop-addr

SWITCH(bridge)# umas pppoe-aging-time 3600

SWITCH(bridge)# umas pppoe-nexthop-addr

SWITCH(bridge)# xdsl add line-config-profile MY_VDSL_ADSLSWITCH(bridge)# xdsl line-config-profile MY_VDSL_ADSL profile-gs-standard adsl2plus-isdn

402

Operate CLI

Id:0900d805805de187


2. Assign line configuration profile to subscriber port

3. Assign ADSL channel configuration profile contains default values to port

If necessary, configure an own channel profile and assign it to port, for example:



6. Setting VPI/VCI of VCC

14.3.24 Use case: IGMP multicast

14.3.24.1 Double-tagged multicast stream

Brief descriptionThis example shows how to configure IGMP if the MC stream of channel is double-tagged, see also 9.10 IGMP settings in double tagged scenarios.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx” • System is in double-tagging mode • Service type of VLAN 10 is double-tagged • MC stream of channel (239.1.1.1, 16.1.1.1) is double-tagged with inner VLAN 30

and outer VLAN 10 • Uplink port 0/1 is in VLAN 10 and is attached to the MC router

SWITCH(bridge)# lre 7/2 xdsl line-config MY_VDSL_ADSL

SWITCH(bridge)# lre 7/2 xdsl chan-config channel1 DEFVAL_ADSL

SWITCH(bridge)# xdsl add chan-config-profile MY_ADSL_CHAN1SWITCH(bridge)# xdsl chan-config-profile MY_ADSL_CHAN1 datarate-max-ds 8000

SWITCH(bridge)# xdsl chan-config-profile MY_ADSL_CHAN1 datarate-max-us 800

SWITCH(bridge)# lre 7/2 xdsl chan-config channel1 MY_ADSL_CHAN1


SWITCH(bridge)# show lre 7/2 xdsl line-conf

SWITCH(bridge)# show lre 7/2 xdsl phys-table linerates

SWITCH(bridge)# port lre 7/2 disableSWITCH(bridge)# lre 7/2 xdsl atm vcc 1 vpi 0 vci 32SWITCH(bridge)# port lre 7/2 enable

403


Id:0900d805805de187

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is enable • Port uses IGMPv2 and is enabled to receive MC channel (239.1.1.1, 16.1.1.1) from

VLAN 10 • The max channel number port can access is 8, and the max non premium channel

number that port can access is 5 • Port sends untagged IGMP packets • PVID is 20

1. Create VLANs and assign uplink and subscriber port

2. Create an IGMP provider

3. Create an MC group (channel)

4. Create an MC package and add channel

--> Add channel l (239.1.1.3, 16.1.1.1) to Pack_1

5. Enabling IGMP for subscriber port and assign MC packages

6. Configure the VLAN translation mode

7. Configure the IGMP provider VLAN tagging-mode

SWITCH(bridge)# vlan create 10SWITCH(bridge)# vlan create 20SWITCH(bridge)# vlan create 30SWITCH(bridge)# vlan add 10 0/1 taggedSWITCH(bridge)# vlan add 30 0/1 taggedSWITCH(bridge)# vlan add 10 4/2/1 untaggedSWITCH(bridge)# vlan add 20 4/2/1 untaggedSWITCH(bridge)# vlan add 30 4/2/1 untaggedSWITCH(bridge)# bridgeport 4/2/1 pvid 20SWITCH(bridge)# bridgeport 4/2/1 taggingmode offSWITCH(bridge)# bridgeport 4/2/1 replace-vlantag offSWITCH(bridge)# vlan servicetype 20 doubletagged SWITCH(bridge)# bridgeport 4/2/1 inner pvid 20

SWITCH(config)# igmp provider 1 12.1.1.1 10 Prov_1 30 10

SWITCH(config)# igmp group 1 239.1.1.3 16.1.1.1 Chan_1 1

SWITCH(config)# igmp package Pack_1 1

SWITCH(config)# igmp group-to-package 1 1

SWITCH(config)# igmp subscriber 4/2/1 1

SWITCH(config)# igmp vlan-translation inner

SWITCH(config)# igmp double-tagging outer

404

Operate CLI

Id:0900d805805de187


8. Enabling IGMP

9. Configure the port’s translation table entry

10. Verify the configuration of the IGMP VLAN’s translation

14.3.24.2 Global- and port parameters of multicast channel

Brief descriptionThis example shows how to configure default channel bandwidth, max channel and max non premium channel that a subscriber can access, see also 9 IGMP configuration.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • Uplink port 0/1 is in VLAN 10 and VLAN 30 and is attached to the MC router, • Bandwidth of MC channel (235.1.1.3, 19.1.1.1) is 3M and bandwidth of any MC

channel (*. *) is 5M, • MC stream of channels (*, *) and (235.1.1.3, 19.1.1.1) are tagged.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is enable, • Port uses IGMPv2 and is enabled to receive any MC channel (*, *) in VLAN 10, and

MC channel (235.1.1.3, 19.1.1.1) in VLAN 30, • The max channel number port can access is 8, and the max non premium channel

number that port can access is 5 , • Port sends untagged IGMP packets, • PVID is 20, • Port is enabled for AC and max MC bandwidth that port can consume is 10M.

SWITCH(config)# igmp enable

SWITCH(bridge)# bridgeport 4/2/1 igmp-vlan-translation add 10 20 30

SWITCH(config)# show igmp providerSWITCH(config)# show igmp vlan-translationSWITCH(config)# show igmp double-taggingSWITCH(bridge)# show bridgeport 4/2/1

405


Id:0900d805805de187


2. Create IGMP providers and setting default channel bandwidth

3. Create MC groups (channels)

4. Setting MC bandwidth for channels

5. Create MC packages and add channels

Add channel (*, *) to Pack_1 and channel (235.1.1.3, 19.1.1.1) to Pack_2

6. Enabling IGMP for the subscriber port and assign MC packages

7. Enabling IGMP

SWITCH(bridge)# vlan create 10SWITCH(bridge)# vlan create 20SWITCH(bridge)# vlan create 30SWITCH(bridge)# vlan add 10 0/1 taggedSWITCH(bridge)# vlan add 30 0/1 taggedSWITCH(bridge)# vlan add 10 4/2/1 untaggedSWITCH(bridge)# vlan add 20 4/2/1 untaggedSWITCH(bridge)# vlan add 30 4/2/1 untaggedSWITCH(bridge)# bridgeport 4/2/1 pvid 20SWITCH(bridge)# bridgeport 4/2/1 taggingmode offSWITCH(bridge)# bridgeport 4/2/1 replace-vlantag off

SWITCH(config)# igmp provider 1 12.1.1.1 10 Prov_1

SWITCH(config)# igmp default-chan-bw 1 50


SWITCH(config)# igmp group 1 0.0.0.0 0.0.0.0 Chan_1 1SWITCH(config)# igmp group 2 235.1.1.3 19.1.1.1 Chan_2 2

SWITCH(config)# igmp chan-bw Chan_1 50SWITCH(config)# igmp chan-bw Chan_2 30

SWITCH(config)# igmp package Pack_1 1SWITCH(config)# igmp package Pack_2 2

SWITCH(config)# igmp group-to-package 1 1 SWITCH(config)# igmp group-to-package 2 2

SWITCH(config)# igmp subscriber 4/2/1 1SWITCH(config)# igmp subscriber 4/2/1 2


406

Operate CLI

Id:0900d805805de187


8. Setting MC limitations for the subscriber port

Optional: Without MC Limitations for the Subscriber Port

Optional: Without MC Access Permission for the Subscriber Port

9. Verify the IGMP configuration

14.3.24.3 IGMP log files

Brief descriptionThis example shows how to upload the IGMP log files (report of membership time, mem-bership leave of joined channels of all users) to FTP server, see 9 IGMP configuration.

Preconditions

• IP address of FTP server is 169.2.1.3 • FTP server’s user is “jose”, and the password is “123456” • FTP root directory is /igmplog/ • Upload every 1 hours

1. Configure FTP parameters

2. Enabling the IGMP log function

3. Enabling the IGMP log upload function

g If upload is not enabled, the IGMP logs will be only stored in the system memory but not uploaded to the FTP server.

SWITCH(bridge)# bridgeport 4/2/1 max-mcast-bw 60SWITCH(bridge)# bridgeport 4/2/1 max-mcast-channel 8SWITCH(bridge)# bridgeport 4/2/1 max-non-premium-channel 5SWITCH(bridge)# bridgeport 4/2/1 min-unicast-bw 5

SWITCH(bridge)# bridgeport 4/2/1 max-mcast-channel unlimitedSWITCH(bridge)# bridgeport 4/2/1 max-non-premium-channel unlimited

SWITCH(bridge)# bridgeport 4/2/1 max-mcast-channel 0SWITCH(bridge)# bridgeport 4/2/1 max-non-premium-channel 0

SWITCH(config)# show igmp providerSWITCH(config)# show igmp groupSWITCH(bridge)# show bridgeport 4/2/1SWITCH(bridge)# show remain-mcbw 4/2/1

SWITCH(config)# igmp upload ftp ip 169.2.1.3 user jose 123456 dir igmplog SWITCH(config)# igmp upload interval 60

SWITCH(config)# igmp log enable

SWITCH(config)# igmp upload enable

407


Id:0900d805805de187

4. Configure the CDR time intervalIn order to prevent logging of messages, which are caused by subscribers that have joined a channel a very short time (e.g. 5 seconds), a CDR (Call Detail Record) recog-nition time can be configured. Then, the system will only log “join” and “leave” messages if the channel membership is longer than the configured time interval.

5. Configure the online time intervalConfigure the log function to send a log entry for those subscribers who have joined an MC channel for longer than the CDR time interval (e.g. 5 minutes).

14.3.24.4 Modify IGMP parameters

Brief descriptionThis example shows how to modify IGMP provider’s robustness value to 3 and query interval to 120 seconds, see also 9.2 IGMP queries.

PreconditionExisting VLAN10.


2. Modify IGMP parameters

3. Verify the IGMP query parameter

14.3.24.5 Static/non-static multicast channel

Brief descriptionThis example shows how to configure an MC channel as static/non static, see also 9 IGMP configuration.



2. Setting the IGMP MC source address

SWITCH(config)# igmp log cdr-recognition-time 5

SWITCH(config)# igmp log long-time-online-time 5


SWITCH(config)# igmp query-parameter 3 120 100 15 2 10 2 400 4

SWITCH(config)# show igmp query-parameter


SWITCH(config)# igmp source 10.1.1.3. 1

408

Operate CLI

Id:0900d805805de187


3. Configure a static MC group

4. Change the static MC group to be non-static

14.3.24.6 IGMP leave delay

Brief descriptionThis example shows how to configure the channel (239.1.1.1, 10.1.1.3) as delay channel, that when all subscribers had joined this channel and leave it afterwards, the system will not immediately send the leave message for this channel. After a waiting time of a definite time interval (for example 10 seconds) it will be sent, see also 9.4.1 Configuration of IGMP leavemode and ehtmode.

PreconditionExisting IGMP provider and VLAN configuration.

1. Configure the delay interval for channel (index 1)

g Execute the command with interval value 0 to cancel the leave delay for the channel.

2. Verify the leave delay for channel

14.3.24.7 Multicast admission limit of a bridge port

Brief descriptionThis example shows how to enable/disable MC admission limit of a bridge port and shows the MC channel bandwidth configuration, see also 9.4 IGMP multicast package.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • Uplink port 0/1 is in VLAN 10 and VLAN 30 and is attached to the MC router, • Bandwidth of MC channel (238.1.1.2, 16.1.1.1) is 3M and bandwidth of MC channel

(239.1.1.1, *) is 4M, • MC stream of channels (239.1.1.1, *) and (238.1.1.2, 16.1.1.1) are tagged.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv2 and is enabled to receive MC channel (239.1.1.1, *) in VLAN 10,

and MC channel (238.1.1.2, 16.1.1.1) in VLAN 30, • Port sends untagged IGMP packets , • PVID is 20, • Port is enabled for AC and max MC bandwidth that the port can consume is 6M.

SWITCH(config)# igmp group 1 239.1.1.1 1 Group_1 1 static-join

SWITCH(config)# igmp static-group 1 non-static

SWITCH(config)# igmp delay-leave 1 10

SWITCH(config)# show igmp delay-leave

409


Id:0900d805805de187


2. Create IGMP providers


4. Setting the value of MC bandwidth for channels

5. Create MC packages and add channels

--> Add channel (239.1.1.1, *) to Pack_1 and channel (238.1.1.2, 16.1.1.1) to Pack_2

6. Enabling IGMP for subscriber port and assign mc packages

7. Enabling IGMP

8. Setting maximum value of MC bandwidth for subscriber port

SWITCH(bridge)# vlan create 10SWITCH(bridge)# vlan create 20SWITCH(bridge)# vlan create 30SWITCH(bridge)# vlan add 10 0/1 taggedSWITCH(bridge)# vlan add 30 0/1 taggedSWITCH(bridge)# vlan add 10 4/2/1 untaggedSWITCH(bridge)# vlan add 20 4/2/1 untaggedSWITCH(bridge)# vlan add 30 4/2/1 untaggedSWITCH(bridge)# bridgeport 4/2/1 pvid 20SWITCH(bridge)# bridgeport 4/2/1 taggingmode offSWITCH(bridge)# bridgeport 4/2/1 replace-vlantag off




SWITCH(config)# igmp chan-bw Chan_1 40SWITCH(config)# igmp chan-bw Chan_2 30

SWITCH(config)# igmp package Pack_1 1SWITCH(config)# igmp package Pack_2 2

SWITCH(config)# igmp group-to-package 1 1 SWITCH(config)# igmp group-to-package 2 2

SWITCH(config)# igmp subscriber 4/2/1 1SWITCH(config)# igmp subscriber 4/2/1 2


SWITCH(bridge)# bridgeport 4/2/1 max-mcast-bw 60

410

Operate CLI

Id:0900d805805de187


14.3.24.8 Maximum value of IGMP provider’s multicast bandwidth

Brief descriptionThis example shows how to configure the maximum MC bandwidth (300M) for a certain IGMP provider, see also 9.1 IGMP provider.


1. Create IGMP provider

2. Setting maximum multicast bandwidth

14.3.24.9 IGMP packet limitation

Brief descriptionThis example shows how to configure IGMP packet limitation. This function shall limit IGMP packets received from an uplink port to be not faster than 10 packets per second, and the IGMP packets received from subscriber to be not faster than 20 packets per second, see also 9.2 IGMP queries.

PreconditionExisting IGMP provider and VLAN configuration.

1. Configure the transmission rate of packets on the uplink

2. Configure the transmission rate of packets over subscriber port

3. Verify packet rates

14.3.24.10 Associate all provided multicast streams with VLAN

Brief descriptionThis example shows how to configure all possible MC addresses for IGMP on a per VLAN basis, see also 9 IGMP configuration.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • MC stream of channel (239.1.1.1) is tagged, • Uplink port 0/1 is in VLAN 10 and is attached to the MC router.


SWITCH(config)# igmp provider-max-bw 1 3000

SWITCH(config)# igmp igmp-packet-limit uplink 10

SWITCH(config)# igmp igmp-packet-limit subscriber 20

SWITCH(config)# show igmp igmp-packet-limit

411


Id:0900d805805de187

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv2 and is enabled to receive MC channel (239.1.1.1) in VLAN 10, • Port sends untagged IGMP packets , • PVID is 20.

1. Create VLANs and assign to subscriber port

2. Create an IGMP provider with unlimited VLAN and inner tag priority is 0

3. Enabling IGMP

g For further configuration steps, see the other examples.

Optional: Verify the IGMP configuration

14.3.24.11 IGMPv2 multicast stream with any source address

Brief descriptionThis example shows how to enable an IGMPv2 MC stream with any source IP address for a subscriber, see also 9 IGMP configuration.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • MC stream of channel (239.1.1.1) is tagged, • Uplink port 0/1 is in VLAN 10 and is attached to the MC router.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv2 and is enabled to receive MC channel (239.1.1.1) in VLAN 10, • Port sends untagged IGMP packets, • PVID is 20.

SWITCH(bridge)# vlan create 10SWITCH(bridge)# vlan create 20SWITCH(bridge)# vlan add 10 0/1 taggedSWITCH(bridge)# vlan add 10 4/2/1 untaggedSWITCH(bridge)# vlan add 20 4/2/1 untaggedSWITCH(bridge)# bridgeport 4/2/1 pvid 20SWITCH(bridge)# bridgeport 4/2/1 taggingmode offSWITCH(bridge)# bridgeport 4/2/1 replace-vlantag off

SWITCH(config)# igmp provider 1 12.1.1.1 10 Prov_1 unlimited 0


SWITCH(config)# show igmp providerSWITCH(config)# show igmp groupSWITCH(config)# show igmp sourceSWITCH(config)# show igmp packageSWITCH(config)# show igmp subscriber

412

Operate CLI

Id:0900d805805de187



2. Create an IGMP provider that uses IGMP version 2

3. Create an MC group source for any source

4. Create an MC group

Alternativ without Step 3:

5. Create an MC package and add the channel

---> Add group Chan_1 (239.1.1.1, 0.0.0.0) to Pack_1

6. Enabling IGMP


14.3.24.12 Disable/enable CXU snooping

Brief descriptionThis example shows how to configure an IGMP provider (index 2) with enabled/disabled CXU snooping mode. When a new IGMP provider is created, its CXU snooping mode is disabled by default, see also 9.2 IGMP queries.


SWITCH(config)# igmp provider 1 12.1.1.1 10 Prov_1SWITCH(config)# igmp version 1 v2

SWITCH(config)# igmp source 0.0.0.0 1

SWITCH(config)# igmp group 2 239.1.1.1 1 Chan_1 1






413


Id:0900d805805de187

Precondition Existing VLAN10.


2. Enabling the CXU snooping mode for an IGMP provider

3. Disabling the CXU snooping mode for an IGMP provide

14.3.24.13 Mixed IGMPv2 and IGMPv3 multicast streams

Brief descriptionThis example shows how to enable both IGMPv3 and IGMPv2 MC streams for a sub-scriber, see also 9.2 IGMP queries.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • MC stream of 239.1.1.1 from any source and MC stream of 239.1.1.2 from source

10.1.1.3 are tagged, • Uplink port 0/1 is in VLAN 10 and is attached to the MC router.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv3 or IGMPv2 to receive MC stream of 239.1.1.1 from any source

and IGMPv3 to receive MC stream of 239.1.1.2 from source 10.1.1.3 in VLAN 10, • Port sends untagged IGMP packets, • PVID is 20.


2. Create an IGMP provider that is IGMP version 3 compatible


SWITCH(config)# igmp cxu-snooping 2 enable

SWITCH(config)# igmp cxu-snooping 2 disable


SWITCH(config)# igmp provider 3 12.1.1.1 10 Prov_3SWITCH(config)# igmp version 3 v3-compatible

414

Operate CLI

Id:0900d805805de187



4. Create an MC package and add channels

--> Add channel (239.1.1.1, *) and channel (239.1.1.2, 10.1.1.3) to Pack_2

5. Enabling IGMP for subscriber port and assign the MC package


14.3.24.14 IGMPv3 multicast stream from a certain source address

Brief descriptionThis example shows how to enable an IGMPv3 MC stream with a certain source IP address for a subscriber, see also 9.2 IGMP queries.

Preconditions

• Slot#4 is configured to support IU card type “m_iuadsl_72p_ifx”, • MC stream of channel (239.1.1.1, 10.1.1.3) is tagged, • Uplink port 0/1 is in VLAN 10 and is attached to the MC router.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv3 and is enabled to receive MC channel (239.1.1.1, 10.1.1.3) in

VLAN 10, • Port sends tagged IGMP packets, • PVID is 10.

1. Create a VLAN and assign to subscriber port



SWITCH(config)# igmp group-to-package 1 2SWITCH(config)# igmp group-to-package 2 2

SWITCH(config)# igmp subscriber 4/2/1 2


SWITCH(bridge)# vlan create 10SWITCH(bridge)# vlan add 10 0/1 untaggedSWITCH(bridge)# vlan add 10 4/2/1 taggedSWITCH(bridge)# bridgeport 0/1 pvid 10SWITCH(bridge)# bridgeport 4/2/1 replace-vlantag off

415


Id:0900d805805de187

2. Create an IGMP provider that uses IGMP version 3 only

3. Create an MC group source for certain IP address

4. Create an MC group


Add group Chan_1 (239.1.1.1, 10.0.0.3) to Pack_1

6. Enabling IGMP


14.3.24.15 IGMPv3 - multicast stream from any source address

Brief descriptionThis example shows how to disable/enable the any source multicast (ASM) mode for certain IGMP provider (IGMPv3). By default, a new created IGMP provider has an enabled ASM mode, see also 9 IGMP configuration.

Precondition Existing VLAN10.


2. Disabling the IGMP provider’s ASM mode

3. Enabling the IGMP provider’s ASM mode

SWITCH(config)# igmp provider 2 12.1.1.1 10 Prov_2SWITCH(config)# igmp version 1 v3-only

SWITCH(config)# igmp source 10.0.0.3 1

SWITCH(config)# igmp group 2 239.1.1.1 1 Chan_1 1






SWITCH(config)# igmp asm 2 disable

SWITCH(config)# igmp asm 2 enable

416

Operate CLI

Id:0900d805805de187


14.3.24.16 IGMPv3 - preview function for multicast channel

Brief descriptionThis example shows how to configure the preview function for MC channels. The sub-scriber can only receive the MC group (channel) with the streams 239.1.1.1, 10.1.1.3 as preview channel. He can preview this channel only 5 times, the preview time duration is 4 minutes, and the time interval between each preview is 3 minutes, see also 9 IGMP configuration.

Preconditions

• Slot#4 is configured to support IU card type “m_iushdsl_48b_e”, • The MC stream of channel (239.1.1.1, 10.1.1.3) is tagged, • The uplink port 0/1 is in VLAN 10 and is attached to the MC router.

Attributes of bridge port 4/2/1 are: • Admin state of port 4/2 is “unlocked”, • Port uses IGMPv3 and is enabled to receive the MC channel (239.1.1.1, 10.1.1.3)

in VLAN 10, • Port sends untagged IGMP packets, • PVID is 20.


2. Create an IGMP provider for IGMP version 3 only

3. Create an MC group (channel)


--> Add group Chan_1 (239.1.1.1, 10.1.1.3) to Pack_2

5. Create an MC preview package and add the channel

Add group Chan_1 (239.1.1.1, 10.1.1.3) to preview package (index 1).


SWITCH(config)# igmp provider 2 12.1.1.1 10 Prov_2 SWITCH(config)# igmp version 2 v3-only




SWITCH(config)# igmp preview package create 1 4 3 5

417


Id:0900d805805de187

6. Enabling IGMP for the port and assign MC package and MC preview package

7. Enabling IGMP and MC preview function

8. Verify the IGMP preview configuration

Optional: After previewing the MC stream of channel (239.1.1.1, 10.1.1.3) 5 times, the subscriber cannot preview the channel any more. The following commands may be used to allow a single subscriber or all subscribers to preview the channel again 5 times.

Subscriber 4/2/1 may preview channel (239.1.1.1, 10.1.1.3) 5 times within a definite time duration, e.g. a week if the following command is executed. In the below example, the preview times of all subscribers will be reset automatically every week starting from May 6th, 2008, time 00:00:00.

14.3.25 Use case: IP-anti-spoofing

Brief descriptionIP anti-spoofing is a basic L3 security function and means to check the user's srcIP address to be identical with the IP address used/provided by DHCP process, i.e. bind DHCP relay agent (assigned IP address) to ACL for corresponding port, see also 16.7 Uplink MAC address anti-spoofing.

Requirements

g • DHCP Relay Agent netdevice is configured. • DHCP Relay Agent netinterface route is created. • DHCP Relay Agent is assigned to Vlan.

SWITCH(config)# igmp preview add-group2package 1 1

SWITCH(config)# igmp subscriber 4/2/1 1SWITCH(config)# igmp preview subscriber-add-package 4/2/1 1


SWITCH(config)# igmp preview enable

SWITCH(config)# show igmp previewSWITCH(config)# show igmp preview subscriber allSWITCH(config)# show igmp preview package-allSWITCH(config)# show igmp preview package-groupSWITCH(config)# show igmp preview parameter 1SWITCH(config)# show igmp preview remain-number 4/2/1SWITCH(config)# show igmp preview auto-reset-time

SWITCH(config)# igmp preview reset number-individual 4/2/1SWITCH(config)# igmp preview reset number-all

SWITCH(config)# igmp preview auto-reset-time enable starttime 2008-05-06 00:00:00 unit W time 1

418

Operate CLI

Id:0900d805805de187


Preconditions

• IP-antispoofing grace-period has been expired.

1. Create a VLAN ID

2. Replace the VLAN tag and set the tagging mode

3. Setting PVID to bridgeport

4. Setting tagging mode for ports

5. Setting the anti-spoofing mode

5. Apply the anti-spoofing mode to inner and outer VLAN check

14.3.26 Use case: Fix trunk setting

Brief descriptionThe example shows basic trunk configuration and interworking between fix trunk and VLAN, see also 6.2.2.1 Fix trunk.

Requirements

• Uplinks that should be used are operational and share the same speed.

LimitationOnly applicable for uplink ports.

1. Nothing is configured

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)--------------------------------------------------------------0/1 | 1 |0/2 | 1 |0/3 | 1 |


SWITCH(bridge)# bridgeport 2/1/1 replace-vlantag offSWITCH(bridge)# bridgeport 2/1/1 taggingmode untagged

SWITCH(bridge)# bridgeport 2/1/1 pvid 100

SWITCH(bridge)# vlan add 100 2/1/1 untaggedSWITCH(bridge)# vlan add 100 0/3 tagged

SWITCH(bridge)# ip anti-spoofing disableSWITCH(bridge)# ip anti-spoofing grace-period 60SWITCH(bridge)# ip anti-spoofing enable

SWITCH(bridge)# bridgeport 2/1/1 ip-antispoofing on both

SWITCH(bridge)# show port-in-vlan s0

419


Id:0900d805805de187

0/4 | 1 |0/5 | 1 |0/6 | 1 |

Trunk Group 0 : srcdstmac : InactiveTrunk Group 1 : srcdstmac : Inactive

2. VLANs+PVIDs will be created and assigned to logical aggregator port (!)

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)--------------------------------------------------------------0/1 | 1 |0/2 | 1 |0/3 | 1 |0/4 | 1 |0/5 | 100 | 100u0/6 | 1 |

(3) Add physical ports to trunk group -> finished

Trunk Group 0 : srcdstmac : 1(o) 2(o)Trunk Group 1 : srcdstmac : Inactive

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)--------------------------------------------------------------0/1 | 100 |0/2 | 100 |0/3 | 1 |0/4 | 1 |0/5 | 100 | 100u0/6 | 1 |

(4) Assign another VLAN to logical aggregator port

SWITCH(bridge)# show trunk

SWITCH(bridge)# bridgeport 0/5 pvid 100


SWITCH(bridge)# vlan add 100 0/5 untagged


SWITCH(bridge)# trunk port 0 0/1-0/2



SWITCH(bridge)# vlan add 200 0/5 untagged


420

Operate CLI

Id:0900d805805de187


port | pvid | in vlan (u: untagged vlan, t: tagged vlan)--------------------------------------------------------------0/1 | 100 |0/2 | 100 |0/3 | 1 |0/4 | 1 |0/5 | 100 | 100u,200u0/6 | 1 |

(5) Remove the members from trunk group

Trunk Group 0 : srcdstmac : InactiveTrunk Group 1 : srcdstmac : Inactive

(6) Note that the former member ports inherit the VLAN properties from logical port

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)--------------------------------------------------------------0/1 | 100 | 100u,200u0/2 | 100 | 100u,200u0/3 | 1 |0/4 | 1 |0/5 | 100 | 100u,200u0/6 | 1 |

SWITCH(bridge)# no trunk port 0 0/1-0/2



421


Id:0900d805805de187

14.3.27 Use case: LACP configuration (normal mode)

Brief descriptionExample shows basic LACP configuration and interworking between LACP and VLAN in case of normal LACP mode, see also 6.2.2.2 LACP configuration.

Requirements

• Uplink ports that should be used are operational and share the same speed. • Uplink ports that should be used are configured with the same VLAN properties (see

example). • LACP port admin keys of links that should be aggregated are equal.

LimitationOnly applicable for uplink ports.


port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-----------------------------------------------------------0/1 | 1 |0/2 | 1 |0/3 | 1 |0/4 | 1 |0/5 | 1 |0/6 | 1 |

lacp mode: normal

AGGR ACTOR SYSTEM PARTNER SYSTEM MEMBER---- ------------- -------------- ------

lacp mode: normal

PORT AGGR (A) KEY (P) PORT (P) KEY (A)-(P) ACTIVITY---- ---- ------- -------- ------- --------------


SWITCH(bridge)# show lacp aggregator

SWITCH(bridge)# show lacp port

422

Operate CLI

Id:0900d805805de187


2. Configure LACP mode

g VLAN configuration has to be made on each physical port instead on trunk port.

lacp mode: normal


3. VLANs and PVIDs will be created and assigned to member ports

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 100 | 100u0/2 | 100 | 100u0/3 | 1 |0/4 | 1 |0/5 | 1 |0/6 | 1 |

4. Aggregator will be configured for LACP, designated members assigned to LACPSWITCH(bridge)# lacp aggregator 0SWITCH(bridge)# lacp port 0/1-0/2

– Everything is up and running. – LACP aggregated equally configured ports.– Operational key is the same as VLAN properties are equal.

lacp mode: normal

AGGR ACTOR SYSTEM PARTNER SYSTEM MEMBER---- ------------- -------------- ------0 8000.080006-261d5c 8000.000fbb-23be82 1 2

SWITCH(bridge)# lacp mode normal


SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan add 100 0/1-0/2 untaggedSWITCH(bridge)# bridgeport 0/1-0/2 pvid 100SWITCH(bridge)# show port-in-vlan s0


423


Id:0900d805805de187

lacp mode: normal

PORT AGGR (A)KEY (P)PORT (P)KEY (A)-(P) ACTIVITY---- ---- ------ -------- ------ ----------------01 0 1013 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 100 | 100u0/2 | 100 | 100u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |

5. Assign another VLAN to single aggregated memberSWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 0/1 untagged

– Aggregator looses member because its VLAN properties has been changed.– Port 0/1 has different VLAN set.

lacp mode: normal

AGGR ACTOR SYSTEM PARTNER SYSTEM MEMBER---- ------------- -------------- ------0 8000.080006-261d5c 8000.000fbb-23be82 2

lacp mode: normal

PORT AGGR (A)KEY (P)PORT (P)KEY (A)-(P) ACTIVITY---- ---- ------ -------- ------ ----------------01 - 1023 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE





424

Operate CLI

Id:0900d805805de187


port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-------------------------------------------------------------0/1 | 100 | 100u,200u0/2 | 100 | 100u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |

6. Delete VLAN of non-aggregated LACP portSWITCH(bridge)# vlan del 200 0/1

– Operational key of all LACP ports is equal again.– Port 0/1 is aggregated again.

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-------------------------------------------------------------0/1 | 100 | 100u0/2 | 100 | 100u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |

lacp mode: normal


lacp mode: normal






425


Id:0900d805805de187

7. Add another port to LACP with different VLAN properties

– New port is not aggregated as VLAN properties are different.

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-------------------------------------------------------------0/1 | 100 | 100u0/2 | 100 | 100u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |

lacp mode: normal


lacp mode: normal

PORT AGGR (A)KEY (P)PORT (P)KEY (A)-(P) ACTIVITY---- ---- ------ -------- ------ ---------------01 0 1013 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE03 - 1023 000000-000000(P 3) 1000 ACTIVE - PASSIVE

8. Assign VLAN to all aggregated membersSWITCH(bridge)# vlan add 200 0/5 untagged

– Operational key of aggregated ports remains the same (1013).– Aggregation remains established.– VLAN properties of aggregated ports updated.– VLAN properties of non-aggregated ports (0/3) are not affected.

SWITCH(bridge)# lacp port 0/3




426

Operate CLI

Id:0900d805805de187


port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-------------------------------------------------------------0/1 | 100 | 100u,200u0/2 | 100 | 100u,200u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |

lacp mode: normal


lacp mode: normal

PORT AGGR (A)KEY (P)PORT (P)KEY (A)-(P) ACTIVITY---- ---- ------ -------- ----- ----------------01 0 1013 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE03 - 1023 000000-000000(P 3) 1000 ACTIVE - PASSIVE

9. Remove member ports from LACP, delete LACP aggregatorSWITCH(bridge)# no lacp port 0/1-0/3SWITCH(bridge)# no lacp aggregator 0

– Former member ports keep VLAN properties.

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-------------------------------------------------------------0/1 | 100 | 100u,200u0/2 | 100 | 100u,200u0/3 | 1 |0/4 | 1 |0/5 | 100 |0/6 | 1 |





427


Id:0900d805805de187

lacp mode: normal


lacp mode: normal

PORT AGGR (A) KEY (P) PORT (P) KEY (A)-(P) ACTIVITY---- ---- ------- -------- ------- ----------------

14.3.28 Use case: LACP configuration (trunk-like mode)

Brief descriptionExample shows basic LACP configuration and interworking between LACP and VLAN in case of trunk-like mode, see also 6.2.2.2 LACP configuration.

Requirements

• Uplinks that should be used are operational and share the same speed. • Trunk port that should be used should be configured with the desired VLAN

properties (see example) before add LACP ports. • LACP port admin keys of ports that should be aggregated are equal.

Limitation

• Only applicable for uplink ports. • Only a single LACP aggregator is allowed.


port | pvid | in vlan (u: untagged vlan, t: tagged vlan)-----------------------------------------------------------0/1 | 1 |0/2 | 1 |0/3 | 1 |0/4 | 1 |0/5 | 1 |0/6 | 1 |

lacp mode: normal







428

Operate CLI

Id:0900d805805de187


lacp mode: normal

PORT AGGR (A) KEY (P) PORT (P) KEY (A)-(P) ACTIVITY---- ---- ------- -------- ------- ----------------

2. Configure LACP mode

– VLAN configuration has to be made on aggregators logical port instead of on each uplink port.

lacp mode: trunk-like


3. VLANs and PVIDs will be created and assigned to logical port of aggregator

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 1 |0/2 | 1 |0/3 | 1 |0/4 | 1 |0/5 | 100 | 100u0/6 | 1 |

4. Aggregator will be configured for LACP, designated members will be assigned to LACPSWITCH(bridge)# lacp aggregator 0SWITCH(bridge)# lacp port 0/1-0/2

– Everything is up and running.– Ports assigned to LACP use VLAN properties from aggregator.– Operational key is the same as VLAN properties are always equal for all LACP ports.


SWITCH(bridge)# lacp mode trunk-like


SWITCH(bridge)# vlan create 100SWITCH(bridge)# vlan add 100 0/5 untaggedSWITCH(bridge)# bridgeport 0/5 pvid 100SWITCH(bridge)# show port-in-vlan s0


429


Id:0900d805805de187





5. Add another port to LACP (which can not be aggregated, e. g. down, no partner)SWITCH(bridge)# vlan create 200SWITCH(bridge)# vlan add 200 0/3 untaggedSWITCH(bridge)# bridgeport 0/3 pvid 200SWITCH(bridge)# show port-in-vlan s0

port | pvid | in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 100 |0/2 | 100 |0/3 | 200 | 200u0/4 | 1 |0/5 | 100 | 100u0/6 | 1 |

– Port is not aggregated (e.g. link is not connected).– Port loses original VLAN properties and uses the properties from aggregator.




SWITCH(bridge)# lacp port 0/3


430

Operate CLI

Id:0900d805805de187




PORT AGGR (A)KEY (P)PORT (P)KEY (A)-(P)ACTIVITY---- ---- ------ -------- ----- ----------------01 0 1013 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE03 - 1010 000000-000000(P 3) 1000 ACTIVE - PASSIVE



6. Assign VLAN to all LACP portsSWITCH(bridge)# vlan add 200 0/5 untagged

– Operational key remains the same.– Aggregation remains established.– VLAN properties of aggregator updated.– VLAN properties of LACP ports (independent of aggregated or not) updated (use

aggregators properties).

AGGR ACTOR SYSTEM PARTNER SYSTEM MEMBER---- ------------- -------------- ------0 8000.080006-2655e1 8000.000fbb-23be82 1 2


PORT AGGR (A) KEY (P) PORT (P) KEY (A)-(P)ACTIVITY---- ---- ------- -------- ------- ---------------01 0 1013 000fbb-23be82(P 1) 1013 ACTIVE - ACTIVE




431


Id:0900d805805de187

02 0 1013 000fbb-23be82(P 2) 1013 ACTIVE - ACTIVE03 - 1010 000000-000000(P 3) 1000 ACTIVE - PASSIVE


port | pvid| in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 100 |0/2 | 100 |0/3 | 100 |0/4 | 1 |0/5 | 100 | 100u,200u0/6 | 1 |

7. Remove member ports from LACP, delete LACP aggregatorSWITCH(bridge)# no lacp port 0/1-0/3SWITCH(bridge)# no lacp aggregator 0

– Former member ports keep VLAN properties.

port | pvid| in vlan (u: untagged vlan, t: tagged vlan)------------------------------------------------------------0/1 | 100 | 100u,200u0/2 | 100 | 100u,200u0/3 | 100 | 100u,200u0/4 | 1 |0/5 | 100 | 100u,200u0/6 | 1 |


432

Operate CLI

Id:0900d805805de189

Rule and QoS

15 Rule and QoShiX 5622/25/30/35 R2.8 provides a rule and QoS feature for traffic management. The rule classifies incoming traffic, and then processes the traffic according to user-defined policies. You can use the physical port, 802.1p priority (CoS), VLAN ID, DSCP, and so on to classify incoming packets.

You can configure the policy in order to change some data fields within a packet or to relay packets to a mirror monitor by a rule. Quality of Service (QoS) is one of useful func-tions to provide more reliable service for traffic flow control. It is very serviceable to prevent overloading and delaying or failing of sending traffic by giving priority to traffic.

QoS can give priority to specific traffic by basically offering higher priority to the traffic or lower priority to the others.

When processing traffic, the traffic is usually supposed to be processed in time-order like first in, first out. This way, not processing specific traffic first, might cause undesired traffic loss in case of traffic overloading. However, in case of overloading traffics QoS can apply processing order to traffic by reorganizing priorities according to its impor-tance. By favor of QoS, you can predict network performance in advance and manage bandwidth more efficiently.

15.1 General aspects and restrictionsThe queue and shaping configuration is not supported by all cards and interface direc-tions. The supported functionality is implemented in the line cards. The CXU sends a command without checking the line cards for supporting the functionality. As a result the command will be rejected or ignored if it is not supported. The following table contains a rough overview of some restrictions for the new features “card specific configuration” and the new queue modes.

Object Uplink (upstream) Downlink (downstream)

InterfaceTypeIndex (1) - for central board means uplink,- for IU means interlink to CXU.

(2) - for central board means interlink to IU's, - for IU means subscriber.

SchedulingMode On CXU:– strict or weigthed,– on "legacy" CXUs (CXU-B1/C1)

"weigthed" works like "wfq" (weigthed fair queing),

– on "new generation" CXUs (CXUB2, C2, B21, B3..) "weigthed" works like "wrr" (weigthed round robin.

On IU:– only strict.

On CXU:– strict or weigthed,– on "legacy" CXUs (CXU-B1/C1) "weigthed" works

like "wfq" (weigthed fair queing),– on "new generation" CXUs (CXUB2, C2, B21, B3..)

"weigthed" works like "wrr" (weigthed round robin.

On IU:– strict or weigthed,– on CG based IU's "weigthed" works like "wfq"

(weigthed fair queing),– on non-CG-based IU's "weigthed" works like "wrr"

(weigthed round robin).

Queue (1 to 8) Weight According scheduling mode weighted values or for SP 100%

According scheduling mode weighted values or for SP 100%

Table 29 Restrictions for card specific configuration

433

Operate CLI Rule and QoS

Id:0900d805805de189

15.2 How to operate rule and QoS This section includes the following conents:

• How to operate rule • How to operate QoS

15.2.1 How to operate ruleFor hiX 5622/25/30/35 R2.8, rules operate as the follows.

– Rule creationTo classify the packets according to the specific basis, configure the policies about them first. The basis used to classify the packets is 802.1p priority (CoS), VLAN ID, DSCP and port number. Additionally, a unique name needs to be assigned to each rule.

– Rule typeAssigns a type to a rule. The rule type in general classifies the rule and determines the set of allowed rule matches and actions.

– Rule priorityAssigns a priority to a rule (precedence to other rules).

– Rule matchConfigures the policy to adjust how and what is to be analyzed within transmitted packets. Some rule types support combinations of two or more rule matches (e.g. generic rule). Such rules only match if all of their matches are true. Otherwise the rule does not match at all.

– Rule actionConfigures the policy classifying the action(s) to be performed if the configured rule match its transmitted packet(s).– mirror transmits the classified traffic to the monitor port.– redirect transmits the classified traffic to the specified port.– permit allows traffic matching given characteristics.– deny blocks traffic matching given characteristics.– untag strips the outer tag from tagged frames.

Queue(1 to 8) Watermarks Supported on CNX cards,Not supported on Wintegra cards,Not supported on CG cards,

Not supported on CXU cards.

Supported on CNX cards,Not supported on Wintegra cards,Supported on CG cards (global always 100% or card specific only high watermarks are relevant).

QueueMode (only for IU, not CXU) Mode 4QueueFlat(1) Mode 4QueueFlat(1)

Mode 8QueueFlat(2) - not supported

Mode 8QueueFlat(2)-> only for VDSL2 and SHDSL2 Cards

modeHQS(3) - not supported

Mode HQS(3) -> only for CG cards

QueueHqsSecondStageInputQueue Not supported Only valid for queuemode 'modeHQS' (CG cards)

QueueHqsFirstStagePir Not supported Only valid for queuemode 'modeHQS' (CG cards)

QueueHqsFirstStagePbs Not supported Only valid for queuemode 'modeHQS' (CG cards)

Object Uplink (upstream) Downlink (downstream)

Table 29 Restrictions for card specific configuration (Cont.)

434

Operate CLI

Id:0900d805805de189

Rule and QoS

– count records how often the rule matches– bandwidth adjusts a maximum bandwidth– copy-to-cpu copies matching packets to the cpu portAdditionally, there are several actions, which can be used to change certain values within matching packets (e.g. DSCP, CoS, ToS, VLAN).Some rule types support combinations of two or more rule actions (e.g. generic rule). All these actions will be performed at once if such a rule matches. If some actions of one and the same rule conflict, then an internal logic of the switch circuit determines the actual result.

– Rule applyApplies a configured rule. The configured values will be checked and the rule becomes activated within the system. Note: if some of the rule parameters are not set correctly, ‘apply’ will fail.

– Rule deleteCancels an existing rule and removes it from the system.

– Rule displayDisplays information about the rule currently being configured (so called a rule-pro-file), one rule selected by its name, all rules of a certain type, or even all rules at once.

g An already applied rule cannot be modified. It needs to be deleted and then created again with changed values.

g Some rule types will correctly operate only in single tagging mode, others only in double tagging mode. Nevertheless it is possible and allowed to create and apply all rule types in both tagging modes. hiX 5622/25/30/35 R2.8 internally activates only the rules which fit the currently running tagging mode.

15.2.2 How to operate QoSFor hiX 5622/25/30/35 R2.8, QoS operates as follows.

– Class-of-service (802.1p priority) mapping to queuesTwo different CoS mapping tables can be managed in the hiX 5622/25/30/35 R2.8:– a table that maps 802.1p priorities to ports having 8 queues (the command,

map)– a table that maps 802.1p priorities to ports having 4 queues only (the command,

map-reduced).These mapping schemes will be applied on all ports within the system, that means in both uplink and downlink interfaces.

– Scheduling algorithmTo handle overloading of traffic, you need to configure differently processing orders of the traffic by using scheduling algorithms. hiX 5622/25/30/35 R2.8 provides:– Strict Priority Queuing (SPQ)– Weighted Round Robin (WRR)– Weighted Fair Queuing (WFQ).Each scheduling algorithm can be separately assigned to the following interface types:– uplink interfaces (non-cascaded uplink ports)– downlink interfaces (subscriber ports), and– interfaces in cascading mode (cascaded uplink ports).

435


Id:0900d805805de189

– Queue weights and watermarksQueue weights can be used to additionally adjust the scheduling mode per queue (becomes effective internally only for interfaces in mode WRR and WFQ).– Queue weights control the scheduling precedence of the internal packet queues.

The higher the weight value is, the higher the scheduling precedence of this queue is.

– The real size of the queue is defined by high watermark (and so the drop-feasi-bility dependent of the queue load).The ratio of high to low watermark is to understand as follows:Queue watermarks configure the packet drop precedence by means of a given fill level (percentage value of the queue size). First, the queue scheduler drops the packets having a lower precedence if the low watermark is reached. If the high watermark is reached then also packets having higher precedence will be dropped.- The watermark function for CG cards is only relevant for the IU uplink.- The watermark function for Wintegra cards is not supported.- The watermark function for CNX cards is supported.

436

Operate CLI

Id:0900d805805de189

Rule and QoS

15.3 Rule configuration

15.3.1 Creating ruleFor hiX 5622/25/30/35 R2.8, you need to enter Rule Configuration mode first. To enter Rule Configuration mode, use the following command.

After entering Rule Configuration mode, the prompt changes from SWITCH(config)# to SWITCH(config-rule[name])#.

In the following example, a rule is to be created. It matches VLAN ID 100 (in downstream direction) and sets the 802.1p priority value (class of service, CoS value) to value 4 within this VLAN tag.

SWITCH(config)# rule nsn1 createSWITCH(config-rule[nsn1])# type cxu-genericSWITCH(config-rule[nsn1])# match flow downstreamSWITCH(config-rule[nsn1])# match vlan 100SWITCH(config-rule[nsn1])# action cos 4 overwriteSWITCH(config-rule[nsn1])# applySWITCH(config-rule[nsn1])# exitSWITCH(config)# show rule name nsn1

-----------------------------------------------------------RULE TYPE 50: Generic CXU rule (cxu-generic)----------------------------------------------------------- rule nsn1 type cxu-generic (Generic CXU rule) prio 0 match vlan 100 match flow downstream action cos 4 Activation state: activated

SWITCH(config)#

After entering Rule Configuration mode, a rule can be configured by user. The rule type, rule priority, rule match, rule action, and action parameter(s) can be configured for each rule.

g 1. The rule name must be unique. Its size is limited to 63 significant characters.2. The order in which the following configuration commands are entered is arbi-

trary, but the rule type must always be selected first.3. The configuration of a rule being configured can be changed as often as you

want (inclusive rule type) until the apply command is entered.4. Use the show rule-profile command to display the configuration entered up to

now.


ruleNAMEcreate Global Open Rule Configuration mode, enter rule name.

437


Id:0900d805805de189

15.3.2 Rule typeEach rule must be of a certain type. The rule type classifies a rule and determines the allowed rule matches, rule actions, and required action parameters.

g New CXU types in IPD version 2.8 only support rule type "cxu-generic" and "cxu-admin".

To set a rule type, use the following command.

To delete all existing rules corresponding to a specified rule type at once, use the follow-ing command.

To display all existing rules corresponding to a specified rule type, use the following command.

Table 30 shows the description for each rule type.


type{cos-dt-cos | cos-dt-tag | cos-dt-vlan | cos-trans | cxu-admin | cxu-generic | dscp-cos | dscp-deny | dscp-dt-tag | dscp-dt-vlan | dscp-tag | dscp-trans | eth-trans | eth-vlan | isp-dt-tag | isp-dt-vlan | isp-tag | isp-vlan | mirror | port-cos | vlan-cos |vlan-trans }

Rule Sets a rule type, see Table 30 and Table 31


no rule-type{cos-dt-cos | cos-dt-tag | cos-dt-vlan | cos-trans | cxu-admin | cxu-generic | dscp-cos | dscp-deny | dscp-dt-tag | dscp-dt-vlan | dscp-tag | dscp-trans | eth-trans | eth-vlan | isp-dt-tag | isp-dt-vlan | isp-tag | isp-vlan | mirror | port-cos | vlan-cos |vlan-trans }

Global Deletes all existing rules corresponding to a speci-fied rule type at once.


show rule type{cos-dt-cos | cos-dt-tag | cos-dt-vlan | cos-trans | cxu-admin | cxu-generic | dscp-cos | dscp-deny | dscp-dt-tag | dscp-dt-vlan | dscp-tag | dscp-trans | eth-trans | eth-vlan | isp-dt-tag | isp-dt-vlan | isp-tag | isp-vlan | mirror | port-cos | vlan-cos |vlan-trans }

PrivilegedGlobalRule

Shows all existing rules corresponding to a specified rule type.

Rule Type Description Tagging Mode

vlan-cos Change the 802.1p priority in downstream frames having a given VLAN ID.

Single tagging

dscp-cos Change the 802.1p priority in downstream frames having a given DSCP value.

Single tagging

Table 30 Rule type

438

Operate CLI

Id:0900d805805de189

Rule and QoS

Table 31 shows a rule type matching allowed rule match.

dscp-tag Change the 802.1p priority and VLAN ID in downstream frames having a given DSCP value.

Single tagging

port-cos Change the 802.1p priority in upstream frames having a given subscriber port.

Both

isp-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given VLAN-ID inner tag.

Double tagging

cos-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given 802.1p priority in inner tag.

Double tagging

dscp-dt-vlan Change the VLAN ID in outer tag in upstream frames having a given DSCP value.

Double tagging

isp-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given VLAN-ID in inner tag.

Double tagging

cos-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given 802.1p priority in inner tag.

Double tagging

dscp-dt-tag Change the 802.1p priority and VLAN ID in outer tag in upstream frames having a given DSCP value.

Double tagging

mirror Mirror upstream frames having a given VLAN ID to the mirror monitoring port.

Both

dscp-deny Block incoming traffic at given subscriber port having a given DSCP value. Both

isp-vlan Change the VLAN-ID in upstream frames having a given VLAN ID tag and makes an entry in the provider-VLAN lookup table.

Single tagging

isp-tag Change the 802.1p priority and VLAN ID in upstream frames having a given VLAN ID and makes an entry in the provider-VLAN lookup table.

Single tagging

eth-vlan Change VLAN-ID in upstream frames having a given Ethertype. Single tagging

cos-trans Translate the 802.1p priority in upstream frames. Single tagging

eth-trans Translate the Ethertype in upstream frames. Single tagging

vlan-trans Translate the VLAN-ID in upstream frames. Single tagging

dscp-trans Translate the DSCP value in upstream frames. Single tagging

cxu-generic Sets a generic rule for CXU. Both

cxu-admin Sets an admin access rule for CXU. Both

cos-dt-cos Sets inner COS to outer COS double tag rule (rule 23, qosDoubleTagPriority03)

Both

Rule Type Match Type Match Value Action Type Action Parameter(s)

vlan-cos exact vlan VLAN set-iprio cos <0-7>

dscp-cos exact dscp <0-63> set-iprio cos <0-7>

dscp-tag exact dscp <0-63> set-itag cos <0-7> vlan VLAN

port-cos exact port PORTS set-iprio cos <0-7>

isp-dt-vlan exact vlan VLAN set-ovid vlan VLAN

cos-dt-vlan exact cos <0-7> set-ovid vlan VLAN

Table 31 Rule type with allowed rule match

Rule Type Description Tagging Mode

Table 30 Rule type (Cont.)

439


Id:0900d805805de189

15.3.3 Rule priorityIf two or more rules match the same packet then the rule having a higher priority will be processed first.

To set a priority for the rule, use the following command.

15.3.4 Rule matchTo specify a rule match type, use the following command. Default is “exact“.

To configure one or more rule match pattern(s), use the following commands.

dscp-dt-vlan exact dscp <0-63> set-ovid vlan VLAN

isp-dt-tag exact vlan VLAN set-otag cos <0-7> vlan VLAN

cos-dt-tag exact cos <0-7> set-otag cos <0-7> vlan VLAN

dscp-dt-tag exact dscp <0-63> set-otag cos <0-7> vlan VLAN

mirror exact vlan VLAN mirror None

cos-dt-cos exact cos <0-7> set-iprio cos <0-7>

Rule Type Match Type Match Value Action Type Action Parameter(s)

Table 31 Rule type with allowed rule match (Cont.)


prio <0-7> Rule Sets the priority for the new rule.

0-7 Value of priority (default: 0).


match {exact | exclude} Rule Specifies the match type:

exact Match exactly the given value(s) (default).

exclude Match all values except given value(s).(Only the cxu-generic and cxu-admin rule type can use exclude option, refer to Table 31.)

440

Operate CLI

Id:0900d805805de189

Rule and QoS


match port (PORT | cpu | any) Rule Classifies a rule:

– Matches a CXU (uplink or CPU) port.

PORT Enter CXU or IU PORT number.

cpu CPU port.

any Match any PORT (ignore).

match egress port{PORT | cpu | any}

Match an egress port (CXU).

PORT Enter the port number.

cpu CPU port

any Match any port (ignore).

match ingress port{PORT | any | default}

Match an ingress port (CXU).


any Sets to default.

default Sets to default.

match ingress slot{SLOT | any | default}

Match an ingress slot (IU):

SLOT Enter the slot number.

match vlan {VLAN | any} Match a VLAN.

VLAN Enter a VLAN ID.

any Match any VLAN (ignore).

match inner-vlan {VLAN | any} Match an inner-vlan.

match dscp {DSCP | any} Match a DSCP value:

DSCP Enter a DSCP value 0 to 63 (hex, decimal, octal, or binary, e.g. 100110b).

any Match any DSCP (ignore).

match cos {<0-7> | any} Match the IEEE 802.1p priority.

0-7 Enter an 802.1p priority value.

any Match any 802.1p priority value (ignore).

match inner-cos {<0-7> | any} Match the IEEE 802.1p priority in inner tag.

0-7 Enter an 802.1p priority value.

any Match any 802.1p priority value (ignore).

match tos {<0-255> | any} Match all ToS field.

0-255 Enter ToS value.

any Match any ToS value (ignore).

match ip-prec {<0-7> | any} Match an IP precedence.

0-7 Enter IP precedence value.

any Match any IP precedence value (ignore).

441


Id:0900d805805de189

match mac{MAC-ADDRESS | {MAC-ADDRESS/M | any}{MAC-ADDRESS | MAC-ADDRESS/M I any}

Rule Match MAC address.

MAC-ADDRESS Source/destination MAC address (mask default: 48)

MAC-ADDRESS/M source/destination MAC address with mask

any Any source/destination MAC address (ignore)

match flow{upstream | downstream | bidirectional | default | any}

Match an packet flow direction.

upstream Only upstream packets (all IU slots)

downstream only downstream packets (all CXU uplink)

bidirectional Upstream and downstream packets

default set to default.

any Match any flow direction (ignore).

match ethtype{TYPE-NUM | arp | ip | ppp-disc | ppp-sess | any}

Match an Ethernet type.

TYPE-NUM Ethernet type field (hex, e.g. 0800 for IPv4)

arp Address resolution protocol

ip IP protocol

ppp-disc PPPoE discovery

ppp-sess PPPoE session

any Match any Ethertype (ignore).


match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any}

Rule Configure an IP address.

A.B.C.D Source/destination IP address

A.B.C.D/M Source/destination IP address with mask

any Any source/destination IP address

match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D I A.B.C.D/M | any} icmp

Configure an IP protocol.

icmp ICMP

match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} icmp <0-255>


0-255 ICMP message type number


442

Operate CLI

Id:0900d805805de189

Rule and QoS

g – If a match being entered conflicts one or more already configured matches then the latest command wins and automatically invalidates (revokes) all conflicting matches. The system displays an information message in this case.

– The value “any” for a match parameter means that this match command will be revoked.

– If a rule has two or more joined matches then each of the match commands needs to be entered by a separate match command. The order does no matter.

match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} icmp <0-255> <0-255>

Rule Configure an IP protocol.

A.B.C.D Source/destination IP address

A.B.C.D/M Source/destination IP address with mask

any Any source/destination IP address

icmp ICMP

0-255 ICMP message type number

0-255 ICMP message code number

match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {igmp | pim | <0-255> | any}


igmp IGMP

pim PIM

0-255 IP protocol number

any Any IP protocol

match ip{A.B.C.D | A.B.C.D/M | any} {A.B.C.D | A.B.C.D/M | any} {tcp | udp} {<0-65535> | any} {<0-65535> | any}


tcp TCP

udp UDP

0-65535 TCP/UDP source/destination port number

any Any TCP/UDP source/destination port


443


Id:0900d805805de189

DSCP to CoS mapping

There is an example for DSCP to CoS Mapping in Section 14.3.13 Use case: Inner and outer priority.

Restirction for next generation CXUs

g A rule that is configured to match on an IP packet with ICMP as specified IP protocol can't match on ICMP parameters. This rule will match on all ICMP packets regard-less what ICMP message type and message code was configured, they are ignored. The restriction is only valid for next generation CXUs.

Following restrictions are valid for CXU-B2, CXU-B21, CXU-C2 and CXU-B3:

No match commandsTo configure one or more rule no match pattern(s), use the following commands:


dscp-dot1p-map-profile create((PROFILEID | auto-id) ((DSCPPOS DSCPFIELD) | ) | )

Bridge Create a new profile.

PROFILEID Profile id of dscp-dot1p-map-profile (0 means looking for next free entry.

auto-id auto-generated profile ID.

DSCPPOS Start index in map table for next parameter (undeclared .1p elements have prio 0).

DSCPFIELD Character string with characters between '0' and '7' (e.g. 112270123).

dscp-dot1p-map-profile deletePROFILEID

Deletes profile.

PROFILEID Profile ID of DSCP-dot1p-map-profile.

dscp-dot1p-map-profile modifyPROFILEID DSCPPOS DSCP-FIELD

Modifies profile.

PROFILEID Profile ID of DSCP-dot1p-map-profile.

DSCPPOS Start index in map table for next parameter (undeclared .1p elements have prio 0).

DSCPFIELD Character string with characters between '0' and '7' (e.g. 112270123).

show dscp-dot1p-map-profile (PROFILEID | )

BridgePriviledged Global

Shows the DSCP-dot1p-map-profile of a specified profile ID.

PROFILEID Profile index.

match ip (A.B.C.D|A.B.C.D/M|any) (A.B.C.D|A.B.C.D/M|any) icmp match ip (A.B.C.D|A.B.C.D/M|any) (A.B.C.D|A.B.C.D/M|any) icmp <0-255> match ip (A.B.C.D|A.B.C.D/M|any) (A.B.C.D|A.B.C.D/M|any) icmp <0-255> <0-255>

444

Operate CLI

Id:0900d805805de189

Rule and QoS


no match as-path (WORD | ) Rmap Negate a command or set its defaults:

– Match values from routing table,– Match BGP AS path list.

WORD AS path access-list name

no match community(<1-99> | <100-199> | WORD | ) (exact-match | )


– Match values from routing table,– Match BGP community list.

1-99 Community-list number (standard)

100-199 Community-list number (expanded)

WORD Community-list name

exact-match Do exact matching of communities

no match interface (IFNAME | ) Negate a command or set its defaults:

– Match values from routing table,– Match first hop interface of route.

IFNAME Interface name

no match ip address(<1-199> | <1300-2699> | WORD | )


– Match values from routing table– IP information– Match address of route

1-199 IP access-list number.

1300-2699 IP access-list number (expanded range).

WORD IP access-list name.

no match ip address prefix-list (WORD | )

Negate a command or set its defaults

– Match values from routing table– IP information– Match address of route– Match entries of prefix-lists

WORD IP prefix-list name

no match ip next-hop(<1-199> | <1300-2699> | WORD | )


– Match values from routing table– IP information– Match next-hop address of route

1-199 IP access-list number

1300-2699 IP access-list number (expanded range)

WORD IP Access-list name

445


Id:0900d805805de189

15.3.5 Rule actionTo specify a rule action (action) for the packets matching the configured match patterns, use the following commands.

no match ip next-hop prefix-list (WORD | )

Rmap Negate a command or set its defaults.

– Match values from routing table,– IP information,– Match next-hop address of route,– Match entries of prefix-lists.

WORD IP prefix-list name.

no match metric(<0-4294967295> | )

Negate a command or set its defaults.

– Match values from routing table,– Match metric of route.

0-4294967295 Metric value.

no match origin(egp | igp | incomplete | )


– Match values from routing table,– BGP origin code,– BGP origin code.

egp remote EGP

igp local IGP

incomplete unknown heritage

no match route-type external(type-1 | type2 | )


– Match values from routing table,– Match route type,– External route type.

type-1 Match OSPF External Type 1 metrics

type-2 Match OSPF External Type 2 metrics

no match tag (<0-4294967295> | ) Negate a command or set its defaults.

– Match values from routing table,– Match tag.

0-4294967295 Tag value



action deny Rule Match action: Deny access.

action {allow | permit} Match action: Permit access.

action redirect {PORT | cpu} Match action: Redirect to specified egress port.

PORT CXU uplink port number (e.g. 0/1).

cpu CPU port.

action mirror Match action: Send a copy to mirror monitoring port.

action dscp <0-63> Match action: Change DiffServ field, enter DiffServ field value.

446

Operate CLI

Id:0900d805805de189

Rule and QoS

g If user specifies "action copy-to-cpu" when creating a rule, it may lead to CXU over-load. This may result in the recovery of CXU when it works abnormally.

To specify a rule action (no action) for the packets not matching the configured match patterns, use the following commands:

action cos <0-7> Rule Match action: Change 802.1p class of service, enter CoS value.

action cos <0-7> overwrite Match action: Overwrite 802.1p CoS field in the packet, enter CoS value.

action cos same-as-tos overwrite Match action: Overwrite 802.1p CoS field in the packet same as IP ToS precedence bits.

action ip-prec <0-7> Match action: Change IP ToS precedence bits in the packet, enter the ToS precedence value.

action ip-prec same-as-cos Match action: Change IP ToS precedence bits in the packet, same as 802.1p CoS value.

action bandwidthBANDWIDTH Match action: Determine maximum allowed bandwidth (Mbps).

action vlan <1-4093> Match action: Specifies matched-packet VLAN ID, enter the VLAN ID value.

action copy-to-cpu Match action: Copy to CPU.

action counter Match action: counter.

action untag Match action: untag.

Note: "action untag" is working when "action redirect {PORT | cpu}" is set. It determined whether the packets at the redirect port are tagged or untagged. This action is only working on "old" CXU types.


no action cos Rule Negate a command or set its defaults:

– Match action– Change 802.1p class-of-service

no action (allow | permit) Negate a command or set its defaults:

– Match action

allow Permit access

permit Permit access

no action bandwidth Negate a command or set its defaults:

– Match action,– Maximum allowed bandwidth.

no action copy-to-cpu Negate a command or set its defaults:

– Match action– copy-to-CPU

no action cos Negate a command or set its defaults:

– Match action,– Change 802.1p class-of-service.

no action counter Negate a command or set its defaults:

– Match action,– Counter.


447


Id:0900d805805de189

g The current hiX 5622/25/30/35 R2.8 version only supports the combination of commands shown in Table 31 Rule type with allowed rule match. The exceptions are the rule types “cxu-generic” and “cxu-admin”, which are so-called “expert rules”.

These types support complex sets of matches and actions and their combinations (Example: Rule type “cxu-generic“ with “match cos 3“ + “match dscp 20“ + “match ip any any udp“ with “action vlan 2000“ + “action mirror“ + “action dscp 17“ + “action counter“).

To delete a specified rule action (no action), use the following commands.

no action deny Rule Negate a command or set its defaults:

– Match action,– Deny access.

no action dscp Negate a command or set its defaults:

– Match action,– Change DiffServ field.

no action ip-prec Negate a command or set its defaults:

– Match action,– Change IP ToS precedence bits in the packet.

no action mirror Negate a command or set its defaults:

– Match action,– Send a copy to Mirror Monitoring port.

no action redirect Negate a command or set its defaults:

– Match action,– Redirect to specified egress port.

no action untag Negate a command or set its defaults:

– Match action,– Untag.

no action vlan Negate a command or set its defaults:

– Match action,– Specify matched-packet VLAN-ID.


448

Operate CLI

Id:0900d805805de189

Rule and QoS

g – If an action being entered conflicts one or more already configured actions then the latest command wins and automatically invalidates (revokes) all conflicting actions. The system does not show an information message in this case.

– If a rule has two or more joined actions then each of the action commands needs to be entered by a separate action command. The order does no matter.

15.3.6 Applying a ruleAfter configuring the rule using the above commands, apply it to the system with the fol-lowing command. If you do not apply the rule to the system, all specified rules will be lost.

To save and apply a rule, use the following command.

g 1. The switch performs a detailed plausibility check and rejects the rule if the con-figuration is incomplete, contains bad or unsupported values, or conflicts to other rules. In this case, the switch informs about the reason and the operator may correct the values


no no-action deny Rule Negate a command or set its defaults. No-Match action: Deny access.

no no-action{allow | permit}

Negate a command or set its defaults. No-Match action: Permit access.

no no-action redirect Negate a command or set its defaults. No-Match action: Redirect to specified egress port.

no no-action mirror Negate a command or set its defaults. No-Match action: Sending a copy to mirror monitoring port.

no no-action dscp Negate a command or set its defaults. No-Match action: Change of DiffServ field.

no no-action cos Negate a command or set its defaults. No-Match action: Changes of 802.1p class of service.

no no-action ip-prec Negate a command or set its defaults. No-Match action: Change of IP ToS precedence bits in the packet.

no no-action bandwidth Negate a command or set its defaults. No-Match action: Maximum allowed bandwidth.

no no-action vlan Negate a command or set its defaults. No-Match action: Specifying of matched-packet VLAN ID.

no no-action copy-to-cpu Negate a command or set its defaults. No-Match action: Copy to CPU.

no no-action counter Negate a command or set its defaults. No-Match action: Counter

no no-action untag Negate a command or set its defaults. No-Match action: Untag


apply RuleQOS_card_modifyQOS_card_createQOS_shap_modifyQOS_shap_create

Apply previously set card configuration (s).

449


Id:0900d805805de189

2. The switch may reject a rule with the message “A rule having the same NAME already exists” although the name is not listed by the show rule command. Unfortunately, the entered name in this case interferes with the name of an inter-nally managed rule.Remedy: Select another name for the rule (e.g. add a prefix).

3. All previously entered values are kept in the editor’s memory if the apply command fails. The system remains in the current rule node and the operator can display the configuration of the rule being edited (command: show rule profile) and can directly correct the values (match and/or actions) and can try again to apply the rule or can exit the rule mode.

The following example shows how to define a rule (IGMP messages) to mirror IGMP-messages.

SWITCH(config)# rule IGMPmessages createSWITCH(config-rule[IGMPmessages])# type cxu-genericSWITCH(config-rule[IGMPmessages])# prio 0SWITCH(config-rule[IGMPmessages])# match vlan 90SWITCH(config-rule[IGMPmessages])# match flow bidirectionalSWITCH(config-rule[IGMPmessages])# match ip any any igmp--> configure a mirror port before you can use it. SWITCH(config-rule[IGMPmessages])# action mirrorSWITCH(config-rule[IGMPmessages])# apply

15.3.7 Displaying a ruleThe following command can be used to show a certain rule by its name, all rules of a certain type, or all rules at once sorted by the rule type.

The following example shows a configured rule.

SWITCH(config)# show rule

--------------------------------------------------RULE TYPE 50: Generic CXU rule (cxu-generic)--------------------------------------------------rule IGMPmessagestype cxu-generic (Generic CXU rule)prio 0match vlan 90match ip any any igmpmatch flow bidirectionalaction mirrorActivation state: activated


show rule nameNAME PrivilegedGlobalRule

Shows a rule, enter a rule name.

show rule Shows all rules sorted by type.

show rule all The same as “show rule“ (alias).

show rule type {type} Shows all rules of given type (see Table 31 for a list of possible rule types).

show rule cxu Shows all active user rules and admin access rules at CXU in a condensed format.

show rule-profile Rule Shows current configuration of a rule.

450

Operate CLI

Id:0900d805805de189

Rule and QoS

15.3.8 Deleting a ruleThe following command can be used to delete a certain rule by its name, all rules of a certain type, or all rules at once.

15.3.9 Example of configuring telnet blocking if SSH is preferredThe following is an example of setting a rule to prevent access via Telnet protocol:

SWITCH(config)# rule telnet-deny createSWITCH(config-rule[telnet-deny])# type cxu-adminSWITCH(config-rule[telnet-deny])# prio 0SWITCH(config-rule[telnet-deny])# match ip any any tcp any 23SWITCH(config-rule[telnet-deny])# match flow downstreamSWITCH(config-rule[telnet-deny])# action denySWITCH(config-rule[telnet-deny])# applySWITCH(config-rule[telnet-deny])# exit

Following example shows how to allow an IP address to access the system via Telnet:

SWITCH(config)# rule telnet-allow createSWITCH(config-rule[telnet-deny])# type cxu-adminSWITCH(config-rule[telnet-deny])# prio 5SWITCH(config-rule[telnet-deny])# match ip 192.169.1.15 any tcp any 23SWITCH(config-rule[telnet-deny])# match flow downstreamSWITCH(config-rule[telnet-deny])# action permitSWITCH(config-rule[telnet-deny])# applySWITCH(config-rule[telnet-deny])# exit


no ruleNAME Global Deletes a rule, enter a rule name.

no rule Deletes all rules at once (be careful!).

no rule-type{cos-dt-cos | cos-dt-tag | cos-dt-vlan | cos-trans | cxu-admin | cxu-generic | dscp-cos | dscp-deny | dscp-dt-tag | dscp-dt-vlan | dscp-tag | dscp-trans | eth-trans | eth-vlan | isp-dt-tag | isp-dt-vlan | isp-tag | isp-vlan | mirror | port-cos | vlan-cos |vlan-trans }

Deletes all rules of given type (see Table 31 for a list of possible rule types).

451


Id:0900d805805de189

15.3.10 IRL profileTo configure card specific QoS settings, use the following commands.

To create/modify/apply Input/Output Rate Limit (IRL) profile, use the following com-mands.


qos card-config create SLOTS (uplink|downlink|all)

Global Configure card specific qos settings.- Create existing card configuration(s).

SLOTS SLOT number or slot list for card specific configuration.

uplink Interfaces in usage unlink

downlink Interfaces in usage downlink.

downlink Uplink and downlink interfaces in usage.

qos card-config delete SLOTS(uplink|downlink|all)

Configure card specific qos settings.- Deletes existing card configuration(s).


uplink Interfaces in usage unlink.



qos card-config modify SLOTS(uplink|downlink|all)

Quality of service, configure card specific QoS settings. - Modifies existing card configuration(s).


uplink Interfaces in usage uplink



qos card-config modify SLOTS (uplink|downlink|all)

Configure card specific qos settings.- Modifies existing card configuration(s).


uplink Interfaces in usage uplink.



452

Operate CLI

Id:0900d805805de189

Rule and QoS

To delete IRL profile, use the following command.

To display IRL profile, use the following commands.


irl create profilePROFILENAME

Global Create a new Input/Output Rate Limiting (IRL) configuration profile.

PROFILENAME Profile name.

irl modify profilePROFILENAME

Modifies Input/Output Rate Limiting (IRL) profile.

irl set profile{cir | cbs | pir | pbs | dscir | dscbs | dspir | dspbs | policingds} VALUE

Configure Input/Output Rate Limiting (IRL) profile. Sets IRL profile data.

cir Committed information rate for upstream policing <0 - 100000> (kbps)

cbs Committed burst size for upstream policing <96 - 10000> (bytes)

pir Peak information rate for upstream policing <0 - 100000> (kbps)

pbs Peak burst size for upstream policing <96 - 15000> (bytes)

dscir Committed information rate for downstream policing <0 - 100000> (kbps)

dscbs Committed burst size for downstream policing <96 - 10000> (bytes)

dspir Peak information rate for downstream policing <0 - 100000> (kbps)

dspbs Peak burst size for downstream policing <96 - 15000> (bytes)

policingds Using the meterprofile parameter settings for policing downstream <0 - 1> (off - on)

VALUE Value.

irl apply profile Applies profile configuration.


irl delete profilePROFILENAME

Global Deletes IRL configuration.

PROFILENAME Profile name.


show irl profile info Global Shows Input/Output Rate Limiting (IRL) profile.

show irl profile infoPROFILENAME

Shows Input/Output Rate Limiting (IRL) profile.

PROFILENAME Profile name

show irl profile editor Shows Input/Output Rate Limiting (IRL) profile when the profile is being created or modified.

453


Id:0900d805805de189

15.3.11 IRL port mappingTo create IRL port mapping, use the following commands. (IRL:Input/Output Rate Limit)

An example for policing per protocol you can find here: 14.3.6 Use case: Rate limiting for port.

To delete IRL port mapping, use the following command.


irl create ifmap PORTS dot1p DOT1P PROFILE-NAME

Global Configure Input/Output Rate Limiting (IRL) port



PORTS Enter subscriber port number.

dot1p IRL port mapping with subscriber port and .1p value.

DOT1P .1p priority (0 to 7).


irl create ifmap PORTS PROFILENAME






irl create ifmap PORTS protocol (arp | dhcp | igmp) PROFILENAME

Configure Input/Output Rate Limiting (IRL) port



PORTS Enter subscriber dsl port number.

protocol Protocol-based IRL mapping.






irl delete ifmap PORTS Global Configure Input/Output Rate Limiting (IRL) port

delete Deletes IRL configuration


PORTS Enter subscriber port number

454

Operate CLI

Id:0900d805805de189

Rule and QoS

To display IRL port mapping, use the following commands.

irl delete ifmap PORTS dot1p DOT1P

Global Configure Input/Output Rate Limiting (IRL) port.

delete Deletes IRL configuration.



dot1p IRL port mapping with subscriber port and .1p value.

DOT1P .1p priority (0 to 7).

irl delete ifmap PORTS protocol (arp | dhcp | igmp)




PORTS Enter subscriber dsl port number.





irl delete ifmap slot SLOT protocol (arp | dhcp | igmp)




slot Slot-based IRL mapping.

SLOT Enter slot.






show irl ifmap Global, Privileged

Shows running system information

irl Input/Output Rate Limiting (IRL).

ifmap Port information.

show irl ifmap bridgeport PORT Shows running system information.



bridgeport Port information.

PORT Enter subscriber bridgeport number.


455


Id:0900d805805de189

15.4 QoS configurationFor the hiX 5622/25/30/35 R2.8, it is possible to use Strict Priority Queuing, Weighted Fair Queuing, and Weighted Round Robin for packet scheduling.

There are global parameters for qos that can be overwritten by a card specific configu-ration for a certain card.

The following steps explain how QoS can be configured.

– 15.4.2 802.1p priory-to-queue mapping– 15.4.3 Scheduling algorithm– 15.4.4 Weights and watermarks– 15.4.5 QoS packet counter– 15.4.7 Displaying QoS

15.4.1 QueueMode configuration For hiX 5622/25/30/35 R2.8, it is possible to configure the QueueMode on card level.

To set queue mode on card level, use the following command.

show irl ifmap dslport PORT Global,Privileged

Shows running system information.



dslport Port information.

PORT Enter subscriber dsl port number.

show irl ifmap profile PROFILENAME Shows running system information

irl Input/Output Rate Limiting (IRL)


profile All ports mapped to an IRL profile

PROFILENAME Enter profile name

show irl ifmap slot SLOT Shows running system information

irl Input/Output Rate Limiting (IRL)


slot Slot information

SLOT Enter LIU slot number



set queue-mode(4queue-flat|8queue-flat|hqs)

QoS card create mode, QoS card modify mode

Sets card specific parameters,- Sets queue mode on card level.

4queue-flat 4 queue flat mode.

8queue-flat 8 queue flat mode.

hqs Hierarchical queuing and scheduling.

456

Operate CLI

Id:0900d805805de189

Rule and QoS

15.4.2 802.1p priory-to-queue mappingFor hiX 5622/25/30/35 R2.8, it is possible to configure how packets having a certain 802.1p priority will be stored into which queue. Default mapping is shown as below (default values).

To define an 802.1p priory-to-queue map for 8 queues, use the following commands.

To define an 802.1p priory-to-queue map for 4 queues, use the following commands.

CoS(802.1p Priority)

Description Queue Mapping(8 Queues)

Reduced Queue Mapping

(4 Queues)

0 Lowest: Best Effort IP (be) 3 2

1 Background (bg) 1 1

2 Spare (spare) 2 1

3 Excellent Effort (ee) 4 2

4 Controlled Load (cl) 5 3

5 Video (video) 6 3

6 Voice (voice) 7 4

7 Highest: Network Control (ctrl) 8 4

Table 32 Default 802.1p priory-to-queue mapping


qos map <0-7> <1-8> Global Priority to queue number mapping, priority value (0-7) according to 802.1p.

qos map{be | bg | spare | ee | cl | video | voice | ctrl } <1-8>

Priority to queue number mapping, priority value (0-7) according to 802.1p.

Priority value 0: Best effort IP (be), (0=lowest)1: Background (bg)2: Spare (spare)3: Excellent effort (ee)4: Controlled load (cl)5: Video (video)6: Voice (voice)7: Network control (ctrl), (7=highest)

1-8 Queue number.

457


Id:0900d805805de189

To define an 802.1p priory-to-queue map for CXU, use the following command.

15.4.3 Scheduling algorithmTo process incoming packets by the queue scheduler, the hiX 5622/25/30/35 R2.8 provides the scheduling algorithm as Strict Priority Queuing (SPQ), Weighted Round Robin (WRR) and Weighted Fair Queuing (WFQ).

– Strict Priority Queuing (SPQ)Strict Priority Queuing is used to process firstly more important data than the others. Since all data are processed by their priorities, data with high priorities can be pro-cessed fast but data without low priorities might be delayed and piled up. This method has a strong point of providing the distinguished service with a simple way.


qos map <0-7> <1-4> Global Priority to queue number mapping, priority value (0-7) according to 802.1p.

qos map-reduced{<0-7>|be | bg | spare | ee | cl | video | voice | ctrl} <1-4>

Priority to queue number mapping, priority value (0-7) according to 802.1p.

Priority value 0: Best effort IP (be), (0=lowest)1: Background (bg)2: Spare (spare)3: Excellent effort (ee)4: Controlled load (cl)5: Video (video)6: Voice (voice)7: Network control (ctrl), (7=highest)

1-4 Queue number for interfaces having only four queues.


qos cxu-map{fixed | configurable}

Global Priority to queue number mapping for CXU.

fixed Fixed mapping (default).

configurable Configurable mapping.

458

Operate CLI

Id:0900d805805de189

Rule and QoS

However, if the packets having higher priority enter, the packets having lower priority are not processed.

– Weighted Round Robin (WRR)Weighted round robin is a best-effort connection scheduling order. Processing of packets with higher priority has the same operational sequence as strict priority queuing. Each packet flow or connection has its own packet queue in a network interface card. WRR serves a number of packets for each nonempty queue (number = normalized (weight / mean packet size) ).

– Weighted Fair Queuing (WFQ)WFQ brings the best points of strict priority queuing and WRR together. If the band-width is configured for all queues, the packets of appropriate queue can be pro-cessed in the assigned bandwidth. If a queue does not use its bandwidth, other queues can allocate it.

High Priority

Medium Priority

Low Priority

IF_IN_1

IF_IN_2

IF_IN_3

IF_IN_4

IF_IN_5

IF_OUT

IF_IN = Interface_IncomingIF_OUT=Interface_Outgoing

Cla

ssifi

er

Sch

edul

er

Transporting

459


Id:0900d805805de189

Figure 41 The packet based round robin scheduler

To select a packet scheduling mode, use the following commands.

g Scheduling-mode “strict” is enabled by default, “weighted” must be enabled explic-itly.

g It is possible to assign a different scheduling mode to each interface usage. Inter-face usage can be: uplink (non-cascaded), downlink, and cascading (uplink in cascaded mode).

Here is an example for setting the scheduling mode for all interfaces which operate as uplink to weightet (WRR or WFQ according to individual HW restrictions of the used board).


qos scheduling-mode(uplink | downlink | cascading | all) (strict | weighted)

Global Select a packet scheduling mode for interfaces.

uplink Interfaces in usage uplink

downlink Interface in usage downlink

cascading Interfaces in usage cascading

all All interfaces will get the following mode at once

The mode of the selected interface(s).

strict Strict priority-based queueing.

weighted Weighted round robin' (wrr) or weighted fair queueing (wfq) acc. to indi-vidual HW restrictions of the used board's.

set scheduling-mode(strict | weighted)

QoS card create mode, QoS card modify mode

Sets card specific parameters, - Sets scheduling mode.

strict Strict priority-based queueing.

weighted Weighted round robin' (wrr) or weighted fair queueing (wfq) acc. to indi-vidual HW restrictions of the used board's.

The command qos card-config create is the precondition for all commands in QoS card create mode and QoS card modify mode.Closing the apply command will finish the card configuration and with exit command the mode will be changed to the global mode.

Queue 1 (50% b/w)

Queue 2 (25% b/w)

Queue 3 (25% b/w)

Last bit (Queue 3)

Last bit (Queue 1)

Last bit (Queue 2)

IF_OUTPacket

Reassembler

WeightedBit-By-Bit

Round RobinScheduler

460

Operate CLI

Id:0900d805805de189

Rule and QoS

SWITCH(config)# qos scheduling-mode uplink weightedSWITCH(config)# show qos scheduling-mode

-------------------------------------------------

Interface type | Scheduling mode

-------------------------------------------------

uplink | weighted (weighted queueing)

downlink | weighted (weighted queueing)

cascading | strict (strict priority)

SWITCH(config)#

15.4.4 Weights and watermarksIn WRR and WFQ, the packets are processed by means of queue weights. You can con-figure the queue weights and watermark values for each queue.

g The default for weight is 100 for all queues. The default values for watermarks depend on the queue number.

To set hqs parameters, use the following command. To see how hqs parameters are to configure, see 14.3.17 Use case: Card-specific QoS configuration.

g There is also an apply command in modes QOS_CARD_* to finish the card specific configuration.

To show QoS card configuration, use the following commands.

Queue Number Low Watermark High Watermark

1 20 30

2 20 30

3 20 30

4 20 30

5 30 40

6 30 40

7 15 20

8 15 20

Table 33 Watermark default value


set hqs_parameters <5-8> <0-32760><0-16000>

QOS_card_createQOS_card_modify

Sets HQS parameter (only for queue mode HQS).

set Set card specific parameters.

hqs_parameters

Set hqs parameter (only for queue mode hqs).

5-8 HQS second stage input queue (5 to 8).

0-32760 HQS first stage peek information rate (pir) (0 to 32760).

0-16000 HQS first stage peek burst size (pbs) (0 to 16000).

461


Id:0900d805805de189

To set the queue specific weight/watermark, use the following commands.

g 1. Queue weights and queue watermarks can be configured in any case indepen-dent on the current scheduling mode. The switch automatically applies weights and watermarks only for those queues which operate in an appropriate sched-uling mode.

2. Some parts of hiX 5622/25/30/35 R2.8 hardware do not actually support WFQ and/or WRR. In this case the configured weight values will be used automatically (if possible) to emulate these scheduling modes.


show qos card-config SLOTS (uplink|downlink|all)

Global, Priviledged

Shows QoS card configuration.

SLOTS SLOT number or slot list for card specific configura-tion.

uplink Shows uplink card configuration.

downlink Shows downlink card configuration

all Uplink and downlink interfaces in usage


set weight <1-8> (<1-100>|unlimited)

QoS card create, QoS card modify

Sets card specific parameters, set queue weight.

1-8 Queue number

1-100 Weight value (percent)

unlim-ited

Unlimited weight : strict priority based queuing

set watermark<1-8> <0-100> <0-100>

Sets card specific parameters, set queue watermark.

1-8 Queue number.

0-100 Low watermark value in percent, less then or equal high watermark.

0-100 High watermark value in percent.

qos weight <1-8>{<1-100> | unlimited}

Global QoS with queue weights.

1-8 Queue number.

1-100 Weight value in percent.

unlim-ited

Strict priority based queuing (the same as weight value = 100).

qos watermarks<1-8> <0-100> <0-100>

QoS with queue watermarks.

1-8 Queue number.

0-100 Low watermark value in percent, less then or equal high watermark.

0-100 High watermark value in percent.

462

Operate CLI

Id:0900d805805de189

Rule and QoS

Here is an example for setting the low watermark value of queue 4 to 15 percent and high watermark to 25 percent:

SWITCH(config)# qos watermark 4 15 25SWITCH(config)# show qos watermark

--------------------------------Queue| Low water| High water--------------------------------1 | 6 % | 6 %2 | 6 % | 6 %3 | 12 % | 12 %4 | 6 % | 6 %5 | 15 % | 25 %6 | 3 % | 3 %7 | 3 % | 3 %8 | 3 % | 3 %

SWITCH(config)#

15.4.5 QoS packet counterThe hiX 5622/25/30/35 R2.8 manages a set of packet counters for each of the four gigabit uplink interfaces. One packet counter per queue (that is, eight counters) and one dropped counter can be read-out or cleared for each uplink interface. The counters have 64-bit width values.

To show statistic data of QoS, use the following command.

To clear (reset to 0) all packet counters and the dropped counter of one or more inter-face(s), use the following command.


show qos stat PORT <1-8> GlobalPriviledged

Shows running system information,- Quality of service- Statistic data QoS

PORT Brigde Port (non CG based cards) or physical port (CG based cards).

<1-8> Queue number 1 to 8.


qos clear-pm-countersPORT Global Clears CXU packet and dropped counters, enter port number or port range of CXU uplink port(s).

463


Id:0900d805805de189

15.4.6 QoS shapingThe IP-DSLAM supports downstream queue based shaping. This feature can also be used as “protocol independent rate limitation for dedicated priorities” or output rate lim-iting.

To create/modify/apply shaping profile, use the following commands, see also Section 14.3.19 Use case: Shaping and policing on port.


qos shaping profile createPROFILENAME

Global Quality of service, configure shaping profile, create a new shaping configuration.

PROFILENAME Enter a profile name.

qos shaping profile fastcreate PROFILENAME <0-102400> <96-333000> (<0-300>|)

Creates a new shaping configuration.

qos Quality of service

shaping Configure shaping

profile Profile

fastcreate Create a new shaping configura-tion

PROFILENAME profile name

<0-102400> (kBit/s)CIR: Committed Information Rate for downstream shaping

<96-333000> (bytes) CBS: Committed Burst Size for downstream shaping <cr>

<0-300> snmp index only for internal pro-cessing FLASH config file

qos shaping profile modifyPROFILENAME

Quality of service, configure a shaping profile, modifies an existing shaping profile.

qos shaping assign PORT (QUEUE | no-queue) PROFILENAME

Quality of service.- Configure shaping profile to port queue,- Shaping port mapping.

PORT Enter subscriber LIU physical slot/port.

QUEUE Enter queue 1 - 8, 1 - 4 (lower queue group).

no-queue Assignment on port level.


qos shaping unassign PORT (QUEUE | no-queue)

Quality of service, configure shaping profile to port/queue, unassignment shaping profile configura-tion.

PORT Enter subscriber LIU physical slot/port.

QUEUE Enter queue 1 - 8, 1-4 (lower queue group).

no-queue Unassignment on port level.

464

Operate CLI

Id:0900d805805de189

Rule and QoS

To set the cbs and cir parameter as shaping profile data, use the following command.

To delete shaping profile, use the following command.

To display shaping profile, use the following commands.

qos shaping profile set ((cbs <96-333000>) |(cir <0-102400>) ) (print|)

QOS_SHAP_MODIFY

QOS_SHAP_CREATE

Sets shaping profile data.

qos Quality of service.

shaping Configure shaping.

profile Profile

set Set shaping profile data.

cbs Committed Burst Size for down-stream shaping <96 - 333000> (bytes).

<96-333000> (bytes) CBS.

cir Committed Information Rate for downstream shaping <0 - 102400> (kBit/s).

<0-102400> (kBit/s) CIR.

print print CIR and CBS.

qos shaping profile apply QOS_SHAP_MODIFY

QOS_SHAP_CREATE

Apply profile configuration.

qos Quality of service

shaping Configure shaping

profile Profile

apply Enter Applies profile configuration

It is possible to enter only "set..." or "apply" in this modes. For compatibilty reasons the "old" variant is still supported.


set ((cbs <96-333000>) | (cir <0-102400>)) (print | )

QoS shap modifyQoS shap create

Sets shaping profile data.

96-333000 Setting the Committed Burst Size (CBS) for downstream shaping in bytes.

0-102400 Setting the Committed Information Rate (CIR) for downstream shaping in kBit/s.

print Print the CIR and CBS configuration.


qos shaping profile delete PROFILENAME

Global Deletes shaping profile configuration.

qos Quality of service.

shaping Configure shaping.

profile Profile.

delete Delete shaping profile configuration.

PROFILENAME Enter profile name.


465


Id:0900d805805de189

To set the the shaping SNMP index, use the following command.

15.4.7 Displaying QoSTo display the configuration of QoS, use the following commands.


show qos shaping profile Global Shows shaping profile information.

show qos shaping profile name PROFILENAME

Shows shaping profile information.

show qos shaping profile editor Shows shaping profile information, when the profile is being created or modified.

show qos shaping assign port PORT

Shows port information of shaping-port mapping, (profile to LIU logical slot and port and queue) .

PORT Subscriber only one LIU physical slot/port.

show qos shaping assign slot SLOT

Shows physical slot information of shaping-port mapping (profile to LIU logical slot and port and queue).

SLOT Subscriber physical slot.

show qos shaping assign profile PROFILENAME

Shows all ports mapped to an shaping profile.

show qos shaping assign Shows shaping port mapping, profile to LIU logical slot and port and queue.


set snmp-index <0-300> QoS shap create mode

Sets the shaping SNMP index to restore SNMP database.

0-300 Index, enter a value.


show qos (map | map-reduced | cxu-map | scheduling-mode | weight | watermark | shaping | all | )

PrivilegedGlobal

Shows the configuration of QoS.

map Priority to queue mapping.

map-reduced Priority to reduced queue mapping.

cxu-map Priority to queue mapping of CXU.

scheduling-mode Scheduling algorithm.

weight Queue weights.

watermark Queue watermarks.

shaping Slot/port/queue shaping.

all Shows all global configuration.

show qos factory-defaults Shows factory default values.

466

Operate CLI

Id:0900d805805de18b

System security management

16 System security managementSystem security function includes ARP table, MAC table, authentication,

IP anti-spoofing etc. This chpater introduces how to manage system security.

16.1 ARP introductionDevices connected to IP network have two addresses, LAN address and network address. LAN address is sometimes called as a data link address because it is used in Layer 2 level, but more commonly the address is known as a MAC address. A switch on Ethernet needs a 48-bit-MAC address to transmit packets. In this case, the process of finding a proper MAC address from the IP address is called an address resolution.

On the other hand, the progress of finding the proper IP address from the MAC address is called reverse address resolution. NSN switches and DSLAMs find their MAC addresses from the IP addresses through Address Resolution Protocol (ARP). ARP saves these addresses in ARP table for quick search. Referring to the IP addresses in ARP table, the packets containing the IP address are transmitted to network. When con-figuring the ARP table, it is possible to do it only in some specific interfaces.

16.1.1 Configuring ARP tableThe contents of an ARP table are automatically registered when a MAC address corre-sponds to its IP address is found.

To make a specific IP address to be accorded with a MAC address, use the following command.

Following example shows how to set a static ARP entry:

SWITCH(config)# arp 10.2.2.1 00:00:cd:01:82:d0 mgmt

To delete a registered IP address and MAC address or change all the contents of the ARP table, use the following command.


arp A.B.C.D XX:XX:XX:XX:XX:XX

Global Sets a static ARP entry, enter the IP address and the MAC address.

MAC-ADDR MAC address


A.B.C.D IP address.

XX:XX:XX:XX:XX:XX Hardware address : (e.g. 00:d0:XX:XX:XX:XX).

arp A.B.C.D XX:XX:XX:XX:XX:XX IFNAME

Sets a static ARP entry, enter the IP address, the MAC address and enter an interface name.


A.B.C.D IP address.

XX:XX:XX:XX:XX:XX Hardware address : (e.g. 00:d0:XX:XX:XX:XX).

IFNAME Interface name.

467

Operate CLI System security management

Id:0900d805805de18b

To display the current ARP table registered in the DSLAM, use the following command.

The following is an example of displaying the current ARP table for all interfaces.

16.2 Setting MAC address limitationFor the hiX 5622/25/30/35 R2.8, it is possible to filter packets which transmit to the sub-scriber’s port by using a MAC address. The MAC address registered by user is not accepted as deny.The function of global entry is to deny the packets with the same source MAC address as the defined global ACL entry. The function of port entry is to allow only the packets with the same source MAC address as the defined port ACL entry. If both the global and port ACL entries define a same MAC address, the priority of the global entry is higher than that of the port entry, i.e., the packets with the same source MAC address will be denied.

To configure an access control list, use the following command.


no arp A.B.C.D Global Deletes a static ARP entry, enter the IP address.

no arp A.B.C.D IFNAME Deletes a static ARP entry, enter the IP address and the inter-face name.

clear arp Deletes all the dynamic contents of ARP table.

clear arp IFNAME Deletes all the dynamic contents of ARP table, enter the inter-face name.


show arp PrivilegedGlobal

Shows ARP table.

show arp IFNAME Shows ARP table for specified interface, enter the interface name.

SWITCH(config)# show arp

------------------------------------------------------------

Address HWaddress Type Interface

------------------------------------------------------------

10.254.254.105 00:bb:cc:dd:ee:05 DYNAMIC br4094

10.2.2.1 00:00:cd:01:82:d0 DYNAMIC mgmt

SWITCH(config)#

468

Operate CLI

Id:0900d805805de18b


g First of all, configure the global policy, and then the policy of specified port.

To display the access control list, use the following command.

Following example shows how to configure an access control list


acl {create | delete} global MAC-ADDR

Bridge Configure a global access control list (MAC ACL) entries:

create Creates a new ACL entry.

delete Deletes an ACL entry.

MAC-ADDR Enter the value for MAC address. (XX:XX:XX:XX:XX:XX)

acl {create | delete} port PORTS MAC-ADDR

Configure port access control list (MAC acl) entries:

create Creates a new ACL entry.

delete Deletes an ACL entry.

PORTS Enter the port number.

MAC-ADDR Enter the value for MAC address. (XX:XX:XX:XX:XX:XX)


show acl global PrivilegedGlobalBridge

Shows the global access control list (MAC acl) entries.

show acl global MACADDR

Shows the global access control list (MAC acl) entries, enter the MAC address value.

show acl port Shows port access control list (MAC acl) entries.

show acl port PORT Shows port access control list (MAC acl) entries, enter the port number.

show acl port PORT MACADDR

Shows port access control list (MAC acl) allowed entries:(not for CG cards)


MAC-ADDR Enter the value for MAC address.(XX:XX:XX:XX:XX:XX)

469


Id:0900d805805de18b

16.3 MAC tableA dynamic MAC address is automatically registered in the MAC table, and it is removed if there is no access to/from the network element corresponding to the MAC address during the specified MAC aging time. On the other hand, a static MAC address is manually registered by user. This will not be removed regardless of the MAC aging time before removing it manually.

To manage a MAC table in the DSLAM, use the following command, see also 14.3.9 Use case: Search for MAC address.

To remove the registered dynamic MAC addresses from the MAC table, use the follow-ing command.

SWITCH (bridge)# acl create global 00:00:00:00:11:11

SWITCH (bridge)# acl create port 4/1/1 00:00:00:00:00:01

SWITCH (bridge)# show acl global

----------------------------

MAC address Deny

----------------------------

00:00:00:00:11:11 enable

SWITCH (bridge)# show acl port

-------------------------

Port MAC address

-------------------------

4/1/1 00:00:00:00:00:01

SWITCH (bridge)#


mac VLANID PORT XX:XX:XX:XX:XX:XX

Bridge Specifies a static MAC address in the MAC table.

VLANID VLAN name.

PORT Port number.

XX:XX:XX:XX:XX:XX MAC address.

mac learning-uplink {enable | disable}

Enable/disable MAC learning option (only uplinks affected).

mac aging-time<10-100000>

Sets aging time:

10-100000 Aging time.

show mac learning-uplink PrivilegedGlobalBridge

Shows MAC learning configuration.

show mac aging-time Shows aging time.

mac fdb-events (on | off) MAC configuration,- for MAC learning events (learned or aged out).

on Switches MAC learning events on.

off Switches MAC learning events off.

470

Operate CLI

Id:0900d805805de18b


To remove the static MAC addresses manually registered by user from the MAC table, use the following commands.


clear mac Bridge Reset function,- Manage dynamic MAC address.

clear mac (VLANIDS|all) Reset functions:

– Manage dynamic MAC address

VLANIDS Vlan IDs (e.g. 10,101-172)

all All vlans

clear mac (VLANIDS|all) (PORTS|all)

Reset functions

– Manage dynamic MAC address


all All vlans

PORTS Bridgeports (e.g. 1/1/1,1/10/1-1/20/1)

all All bridgeports

clear mac (VLANIDS | all) (PORTS | all) MACS

Reset function,- Manage dynamic MAC address.


all All vlans


all All bridgeports

MACS MAC address

471


Id:0900d805805de18b

To display the MAC table in the DSLAM, use the following command.

In case of one port is added to multiple VLANs, the corresponding MAC address learned in one VLAN could be shared to other VLANs.


no mac Bridge Negate a command or set its defaults

– Manage static MAC address

no mac (VLANIDS|all) Negate a command or set its defaults

– Manage static MAC address– Vlan IDs (e.g. 10,101-172)– All vlans

no mac (VLANIDS|all) (PORTS|all)


– Manage static MAC address– Vlan IDs (e.g. 10,101-172)– All vlans– Bridgeports (e.g. 1/1/1,1/10/1-1/20/1)– All bridgeports

no mac (VLANIDS|all) (PORTS|all) MACS


– Manage static MAC address


all All vlans


all All bridgeports

MACS MAC address

no mac fdb-events Negate a command or set its defaults

– MAC configuration– for MAC learning events (learned or aged out)


show mac port PORT PrivilegedGlobalBridge

Shows switch MAC address, selection by port number (subscriber port only).

PORT Port number.

show mac address MACS Shows MAC address.

MACS Select MAC adresses (comma-separated, 'x' and '_' marks allow), e.g. 00:11:22:__:__:__,80:81:82:81:83:xx,0800

show mac vlan VLANID (PORT|)

Shows the MAC address of the switch, selection by VLAN (MAC address learned at IU only are invisible).


mac Switch MAC address.

vlan Selection by Vlan (mac addresses learned at IU only are invisible).

VLANID Vlan ID.


472

Operate CLI

Id:0900d805805de18b


To share the MAC address between VLANs, use the following command.

g There are more than a thousand of MAC addresses in MAC table. And it is difficult to find information you need at one sight. So, the system shows a certain amount of addresses displaying –more– on standby status. Press any key to search more. After you find the information, you can go back to the system prompt without display-ing the other table by pressing <q>

Following example shows how to specify a static MAC address in the MAC table and how to delete static MAC addresses.

SWITCH(bridge)# mac 10 1/1/1 00:00:00:00:00:01

SWITCH(bridge)# show mac vlan 10

================================================================port vlan mac addr permission status in use=================================================================1/1/1 10 00:00:00:00:00:01 PERMIT STATIC N/A

SWITCH(bridge)# no mac 10

SWITCH(bridge)# show mac vlan 10

================================================================port vlan mac addr permission status in use================================================================

SWITCH(bridge)#

16.4 System authenticationFor enhancing system security, hiX 5622/25/30/35 R2.8 provides two authentication methods to access the DSLAM using Remote Authentication Dial-In User Service (RADIUS) and Terminal Access Controller Access Control System Plus (TACACS+).

RADIUS: An authentication and accounting system used by many Internet Service Pro-viders (ISPs). When you dial in to the ISP you must enter your user name and password. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access to the ISP system.

TACACS+ : an authentication protocol that was commonly used in UNIX networks. TACACS allows a remote access server to communicate with an authentication server in order to determine if the user has access to the network.

16.4.1 Authentication methodTo set the system authentication method, use the following command.


shared-vlan-learning Bridge Enables shared vlan learning function.

no shared-vlan-learning Disables shared vlan learning function.

show shared-vlan-learning PrivilegedGlobalBridge

Display shared vlan learning status.

473


Id:0900d805805de18b

For blocking remote login via SSH and Telnet:

Switch(config)# login remote radius enable

For blocking local login via serial interface:

Switch(config)# login local radius enableSwitch(config)# login local host disable

16.4.2 Authentication interface to access RADIUS or TACACS serverIf more than 2 interfaces are specified to the hiX 5622/25/30/35 R2.8, you can designate one specific interface to access RADIUS or TACACS server.

To designate an authentication interface, use the following command.


login (local|remote) (radius|tacacs|host|all) (enable|disable)

Global Sets the system authentication method.

local Authentication for console access.

remote Authentication for telnet access.

radius Select RADIUS authentication.

tacacs Select TACACS+ authentication.

host Select nominal system authentication (default).

all Select all the authentication methods.

enable Enables a configured system authentication method.

disable Disables a configured system authentication method.

login local Line Enable password checking

– Local password checking

no login local Negate a command or set its defaults

– Enable password checking– Local password checking

Table 34 Setting authentication method and password checking


login tacacs interface NAME

Global Configure login Authentication & Authorization:

– Configure TACACS protocol,– Set auth interface

NAME Interface name

login tacacs interface NAME A.B.C.D

Configure login Authentication & Authorization:

– Configure TACACS protocol,– Set auth interface

NAME Interface name.

A.B.C.D Source IP address (out-going packet).

Table 35 Setting authentication interface

474

Operate CLI

Id:0900d805805de18b


Example:

SWITCH(config)# login radius interface IFname

16.4.3 Primary authentication methodYou can set the order of the authentication method by giving the priority to each authen-tication method.

To set the primary authentication method, use the following command.

16.4.4 RADIUS serverTo add a RADIUS server for system authentication, use the following command.

login radius interface NAME

Global Configure login Authentication & Authorization:

– Configure RADIUS protocol,– Set auth interface


login radius interface NAME A.B.C.D

Configure login Authentication & Authorization:

– Configure RADIUS protocol,– Set auth interface


A.B.C.D Source IP address (out-going packet).


Table 35 Setting authentication interface (Cont.)


login (local|remote) (radius|tacacs|host) primary

Global Sets the system authentication method.

local Authentication for console access.

remote Authentication for telnet access.

radius Select RADIUS authentication.

tacacs Select TACACS+ authentication.

host Select nominal system authentication (default).

primary Set primary protocols.

Table 36 Setting primary authentication method

475


Id:0900d805805de18b

g You can add up to five RADIUS servers.

To delete an added RADIUS server for system authentication, use the following command.

Following example shows how to use radius to login via serial, SSH or Telnet.

Switch(config)# login radius server add 172.18.10.12 authentica-tionkeySwitch(config)# login radius interface br100Switch(config)# login local radius enableSwitch(config)# login local radius primarySwitch(config)# login local host disable --> optional for complete radius authenticationSwitch(config)# login remote radius enableSwitch(config)# login remote radius primarySwitch(config)# login remote host disable--> optional for complete radius authentication


login radius server addA.B.C.D KEY

Global Configure login authentication & authorization;- configure RADIUS protocol.

radius server RADIUS server.

add Add a RADIUS server with its information.

A.B.C.D RADIUS server address.

KEY RADIUS encryption key.

login radius server addA.B.C.DKEYauth_port AUTHacct_port ACCT

Global Configure login authentication & authorization;- configure RADIUS protocol.

radius server RADIUS server.

add Add a RADIUS server with its information.

A.B.C.D RADIUS server address.

KEY RADIUS encryption key.

auth_port RADIUS server authentication port (optional).

AUTH Authentication port number.

acct_port RADIUS server accounting port (optional).

ACCT Accounting port number.

Table 37 Adding RADIUS server


login radius server del A.B.C.D Global Deletes an added RADIUS server.Configure login authentication & authorization, configure RADIUS protocol for RADIUS server.

A.B.C.D RADIUS server IP address.

Table 38 Deleting RADIUS server

476

Operate CLI

Id:0900d805805de18b


g Please make sure that the Radius Server is available and configured when you try this example, otherwise some combinations may cause login failure.

16.4.4.1 Setting timeout of authentication requestAfter an authentication request, the hiX 5622/25/30/35 R2.8 waits for a response from a RADIUS server for specified time.

To specify a timeout value, use the following command.

16.4.4.2 Setting frequency of retransmitIn case of no response from a RADIUS server, the hiX 5622/25/30/35 R2.8 is supposed to retransmit an authentication request.

To set the frequency of retransmitting an authentication request, use the following command.

16.4.4.3 Example of setting RADIUS serverThe following example shows how to add a RADIUS server for system authentication; setting timeout value for a response from the RADIUS server, setting the time of retrans-mitting an authentication request; then set the system authentication method to RADIUS, and set RADIUS authentication as the primary method. Last, it displays the current system authentication.

SWITCH(config)# login radius server add 10.1.158.158 authentica-tionkey

SWITCH(config)# login radius timeout 8

SWITCH(config)# login radius retransmit 5

SWITCH(config)# login remote radius enable

SWITCH(config)# login remote radius primary

SWITCH(config)# show login


login radius timeout TIME Global Specifies a timeout value.

TIME Timeout value for a response (default: 5).

Table 39 Setting timeout of authentication request


login radius retransmit COUNT Global Sets the frequency of retransmit.

COUNT Frequency count (default: 3).

Table 40 Setting frequency of retransmit

477


Id:0900d805805de18b

16.4.5 TACACS+ serverTo add the TACACS+ server for system authentication, use the following command.

g You can add up to five TACACS+ servers.

To delete an added TACACS+ server for system authentication, use the following command.

16.4.5.1 Timeout of authentication requestAfter the authentication request, the hiX 5622/25/30/35 R2.8 waits for the response from the TACACS+ server for specified time.

To specify a timeout value, use the following command.

Additional TACACS+ configurationThe hiX 5622/25/30/35 R2.8 provides several additional options to configure the system authentication via TACACS+ server.

– TCP port for the authenticationTo specify TCP port for the system authentication, use the following command.


login tacacs server addA.B.C.DKEY

Global Add the TACACS+ server with its information.

A.B.C.D IP address.

KEY Authentication key value.

Table 41 Adding TACACS+ server


login tacacs server delA.B.C.D

Global Deletes an added TACACS server.

A.B.C.D IP address.

Table 42 Deleting TACACS+ server


login tacacs timeout TIME Global Specifies a timeout value.

TIME Timeout value for the response, range 1-100 sec. (default: 5).

478

Operate CLI

Id:0900d805805de18b


– Authentication typeTo select the authentication type for TACACS+, use the following command.

– Priority levelYou can define a priority level of user. According to the defined priority level, the user has different authorization to access the DSLAM. This priority should be defined in the TACACS+ server in the same way.To define the priority level of user, use the following command.

g The order of priority is root = max > user > min.

Example of setting TACACS+ serverThe following example shows how to add a TACACS+ server for system authentica-tion;setting timeout value for a response from the TACACS+ server; then setting the system authentication method to TACACS+, and setting TACACS+ authentication as the primary method.

SWITCH(config)# login tacacs server add 10.1.158.158 authentica-tionkey

SWITCH(config)# login tacacs timeout 8

SWITCH(config)# login tacacs socket-port PORT

SWITCH(config)# login tacacs auth-type ascii

SWITCH(config)# login remote tacacs enable

SWITCH(config)# login remote tacacs primary


login tacacs socket-port PORT Global Specifies TCP port for the authentication.

PORT TCP port.

Table 43 TCP Port for authentication


login tacacs auth-type{ascii | pap | chap}

Global Select the authentication type for TACACS+.

ascii Plain text.

pap Password authentication protocol.

chap Challenge handshake authentication protocol.

Table 44 Selecting authentication type for TACACS+


login tacacs priority-level{min | user | max | root}

Global Define the priority level of user, see the below information for the order of priority.

Table 45 Defining user’s priority level

479


Id:0900d805805de18b

16.4.6 Accounting modeThe hiX 5622/25/30/35 R2.8 provides the accounting function of AAA (Authentication, Authorization, and Accounting). Accounting is the process of measuring the resources a user has consumed. Typically, accounting measures the amount of system time a user has used or the amount of data a user has sent and received.

To set an accounting mode, use the following command.

16.4.7 Displaying system authenticationTo display a configured system authentication, use the following command.


login accounting-mode{none | start | stop | both}

Global Sets an accounting mode.

none Disables an accounting function.

start Measure start point only.

stop Measure stop point only.

both Measure start and stop point both.

Table 46 Setting Accounting Mode


show login PrivilegedGlobal

Shows a configured system authentication.

Table 47 Displaying system authentication

480

Operate CLI

Id:0900d805805de18b


16.5 Displaying max hostTo display the max host, use the following command.

The following is an example of displaying a configured max host.

SWITCH(config)# sho max-hosts

0/1 0/Unlimited (current/max)0/2 0/Unlimited (current/max)0/3 0/Unlimited (current/max)0/4 0/Unlimited (current/max)0/5 0/Unlimited (current/max)0/6 0/Unlimited (current/max)5/1/1 0/16 (current Static & Dynamic / max Dynamic allowed)5/2/1 0/16 (current Static & Dynamic / max Dynamic allowed)5/3/1 0/16 (current Static & Dynamic / max Dynamic allowed)5/4/1 0/16 (current Static & Dynamic / max Dynamic allowed)

SWITCH(bridge)#

16.6 IP anti-spoofingMany computer viruses or worms attack the target system using DoS (Denial of Service) or scan the network. In this case, that software usually changes its source IP address to hide itself. Sometimes, some hacking software tries to change its source IP address to pretend the target system. By preventing this kind of attack, it solves security problems as well as traffic problems.

In order to prevent IP spoofing, reliable information about IP address of a subscriber is needed. This information can be acquired by:

– using DHCP information– static configuration

To enable/disable IP anti-spoofing, use the following command, see also 14.3.25 Use case: IP-anti-spoofing.

To set the time to enable IP anti-spoofing when the entries in the DHCP snooping table are lost, use the following command.


show max-hosts PrivilegedGlobalBridge

Shows a configured max host.

show max-hosts PORT Shows a configured max host for a specified port, enter port number.

Table 48 Displaying configured max host


ip anti-spoofing (enable|disable) Global Enable/disable IP anti-spoofing.

481


Id:0900d805805de18b

To show the remaining time to enable IP anti-spoofing when the entries in the DHCP snooping table are lost, use the following command.

16.7 Uplink MAC address anti-spoofingIn order to prevent uplink MAC address spoofing, reliable information about MAC address of a subscriber is needed. This information can be acquired by:

– using DHCP information– static configuration

To enable uplink MAC anti-spoofing, use the following command, see also 14.3.22 Use case: Dynamic UMAS for PPPoE.

Example:

Switch(bridge)#umas dhcp-nexthop-addrSwitch(bridge)#umas static XX:XX:XX:XX:XX:XX

The first command enables UMAS to learn the gateway MAC address based on gateway option in DHCP OFFER. The second one allows the administrator to set fixed MAC addresses to protect it against MAC spoofing.

To disable uplink MAC anti-spoofing, use the following commands.


ip anti-spoofing grace-period<0-65536>

Global Sets the time to enable IP anti-spoofing.(unit: second)


show ip anti-spoofing remainingtime Global Shows Remaining Time to end waiting for Grace Period.


umas static XX:XX:XX:XX:XX:XX Bridge Sets fixed MAC addresses to protect it against MAC spoofing.

umas dhcp-nexthop-addr Enables UMAS to learn the gateway MAC address based on Gateway Option in DHCP offer.

umas pppoe-aging-time<600-4294967295>

Uplink MAC address anti-spoofing, set when UMAS delete uplink MAC address from table.

600-4294967295 Aging-time, deafult = 3600 sec.

umas pppoe-nexthop-addr Uplink MAC address anti-spoofing, set if UMAS extract uplink MAC address through PPPoE.

show running-config umas Bridge, Privileged

Shows current operating configuration, gateway MAC anti-spoofing.

482

Operate CLI

Id:0900d805805de18b


To show MAC anti-spoofing, use the following command.

16.8 Storm controlThe hiX 5635 provides storm control feature for mass broadcast, multicast, and Destina-tion Lookup Failure (DLF) traffic. Generally, wrong network configuration, hardware mal-function, virus and so on cause these kinds of mass traffic. Packet storm occupies most of the bandwidth of the network, and that causes the network very unstable.

To enable/disable storm control for CXU, use the following command.

To display a configuration of storm control, use the following command.


no umas static XX:XX:XX:XX:XX:XX Bridge Disables uplink MAC anti-spoofing, using static config-uration.

no umas dhcp-nexthop-addr Disables uplink MAC anti-spoofing, using DHCP infor-mation.

no umas pppoe-aging-time Uplink MAC address anti-spoofing;- Set when UMAS delete Uplink Mac address from table.

no umas pppoe-nexthop-addr Uplink MAC address anti-spoofing.- Set if UMAS extract Uplink Mac address through PPPoE.


show umas BridgeGlobalPrivileged

show Gateway MAC anti-spoofing.


storm-control{broadcast | multicast | dlf} RATE PORTS

Bridge Enables broadcast, multicast, or DLF storm control respectively in a port with a user defined rate. Rate value is from 1 to 262142 for FE, and from 1 to 2097150 for GE, select the port number.

dlf Destination Lookup Failure.

RATE [1] Uplink port of CXU: unit:Packet/s;[2] Subscriber port of CNX: unit:Packet/s;[3] Subscriber port of IFX: unit:kbytes/s.

PORTS Select port number

no storm-control{broadcast | multicast | dlf} PORTS

Disables broadcast, multicast, or DLF storm control respec-tively, select the port number.


show storm-control [PORT]


Shows a configuration of storm control, select the port number.

483


Id:0900d805805de18b

Example:

SWITCH(bridge)# storm-control broadcast 500 0/1SWITCH(bridge)# show storm-control

----------------------------------------+Slot/Port/Vcc| Packet Type| Rate |-------------+--------------------------+ 0/1 broadcast 500

16.9 BandwidthRouting protocol uses bandwidth information to measure routing distance value. To con-figure bandwidth of interface, use the following command.

g This bandwidth is only for routing information implement and it does not concern physical bandwidth.

16.10 MTUMaximum value for the length of the data payload can be transmitted. You can set a Maximum Transmission Unit (MTU) with below command.

16.11 Enabling/blocking static IP addressIn the hiX 5622/25/30/35 R2.8, it is possible to block the use of IP pool resources as fixed by using the assigned IP addresses without renewing them.

The following commands block the user uses static IP addresses.


bandwidth <1-10000000> Interface Configure bandwidth of interface, enter the value of bandwidth.

BANDWIDTH Bandwidth <1-10000000 kbytes> (usable units : m, g) (default : 100m)

no bandwidth Deletes configured bandwidth of interface.


mtu <64-17940> Interface Sets MTU value to an interface.

<64-17940> MTU in bytes.

no mtu Negates a command or set its defaults:- Sets default MTU value to the interface.

484

Operate CLI

Id:0900d805805de18b


To delete a configured value, use the following command.

You can display the information of valid and invalid IP address using the following command.


ip arp-reply flood Global Enables ARP reply flood.

ip arp-reply fixed <1-18000> A.B.C.D (( OVID ( IVID |))|)

Handle a static IP address entry.- IP information.- Address resolution protocol.- Handles a fixed IP entry

1-18000 Bridge port index.

A.B.C.D Fixed IP.

OVID Outer VID for IPoE.

IVID Inner VID for IPoE.

ip arp-reply fixed BRIDGEPORT A.B.C.D ((OVID (IVID|))|)

Handle a static IP address entry.- IP information.- Address resolution protocol.- Handles a fixed IP entry

BRIDGE-PORT

Bridge port index by slot/port/vcc.

A.B.C.D Fixed IP.

OVID Outer VID for IPoE.

IVID Inner VID for IPoE.

ip arp-reply vlan-forward<1-4093> (enable|disable)

Enables/disables forward policy for VLAN configuration of ARP forward.

vlan-forward VLAN configuration of ARP forward.

<1-4093> Input VLAN id, e.g. 100.

enable To enable forward policy.

disable To disable forward policy.

g This command cannot be used in order to forward any arp-request to a DSL subscriber port.


no ip arp-reply flood Global Disables ARP reply flood.

no ip arp-reply fixed{<1-18000> | all}

Deletes a static IP address table.

1-18000 Bridge port index.

all deletes all static IP address entries.

no ip arp-reply fixedBRIDGEPORT

Deletes a static IP address entry.

BRIDGE-PORT

Bridge port index by slot/port/vcc.

no ip arp-reply vlan-forward<1-4094>

Deletes the forward policy for vlan configuration of arp forward.

vlan-forward VLAN configuration of arp forward.

<1-4094> Input vlan id, e.g. 100.

485


Id:0900d805805de18b


show ip arp-reply flood Global Shows ARP reply’s flooding state.

show ip arp-reply fixed-ip Shows a static IP address entry.

show ip arp-reply vlan-forward Shows forward policy for vlan configuration of arp forward.

vlan-forward: vlan configuration of arp forward.

486

Operate CLI

Id:0900d805805de18d

Performance data management

17 Performance data managementThis chapter indroduces the performance data mangement of ADSL and xDSL port.

17.1 Performance data of ADSL portsg The following is applicable for Wintegra WinArrow 117 based Interface Units.

For the hiX 5622/25/30/35 R2.8, you can check how many times CRC error, frame loss and signal loss happened.

An error is counted every 15 minutes after the system starts. After the time is over, the number is reset to 0 and error is counted again. In addition, the error is counted by each day. It is also reset to 0 after the day.

You can check the error count at present time from the latest 15 minutes beginning moment (Curr.15min). Also you can check the number of times an error occurred for the previous 15 minutes, whole 1day, previous day, or total time from now that are all on the 15 minutes interval basis.

Figure 42 shows the units of error count in the hiX 5622/25/30/35 R2.8.

Figure 42 Counting times of error

17.1.1 15 minutes performance intervalTo display the 15min performance interval, use the following command.


show lre PORTS adsl intv atuc line<1-96>


Shows 15 minutes performance interval of ADSL line (ATU-C performance data).

PORTS LRE port or slot number (1/1|8/72).

1-96 Shows intervals 1 to MAX (1-24 by pressing return).

Table 49 Displaying 15 min performance interval

487

Operate CLI Performance data management

Id:0900d805805de18d

show lre PORTS adsl intv atur line<1-96>


Shows 15 minutes performance interval of ADSL line (ATU-R performance data).



show lre PORTSadsl intv atuc chan<1-96>

Shows 15 minutes performance interval of ADSL channel (ATU-C performance data).



show lre PORTSadsl intv atur chan<1-96>

Shows 15 minutes performance interval of ADSL channel (ATU-R performance data).



show adsl intv valid-no Show running system information:

– ADSL information, – Performance intervals, – Shows number of valid 15min intervals for all ports.

show lre PORTSadsl perf-intv atuc chan (<1-96>|)


– LRE port information,– ADSL information,– 15min performance interval,– ATUC performance data,– 15min interval of ADSL channel.



show lre PORTSadsl perf-intv atuc line (<1-96>|)


– LRE port information,– ADSL information,– 15min performance interval,– ATUC performance data,– 15min interval of ADSL line.



show lre PORTS adsl perf-intv atur chan (<1-96>|)


– LRE port information,– ADSL information,– 15min performance interval,– ATUR performance data,– 15min interval of ADSL channel.




Table 49 Displaying 15 min performance interval (Cont.)

488

Operate CLI

Id:0900d805805de18d


17.1.2 Performance data of ATU-CTo display performance data of ATU-C, use the following command.

show lre PORTS adsl perf-intv atur line (<1-96>|)



– LRE port information– ADSL information– 15min performance interval– ATUR performance data– 15min interval of ADSL line

PORTS LRE port number



Table 49 Displaying 15 min performance interval (Cont.)


show lre PORTSadsl perf-data atuc line


Shows ATU-C performance and line performance data.


show lre PORTSadsl perf-data atuc channel

Shows ATU-C performance and channel perfor-mance data.

show lre PORTSadsl perf-data atuc-es

Shows count of the number of errored second since agent was reset.

show lre PORTSadsl perf-data atuc-failedfastretrains

Shows count of failed fast retrain.

show lre PORTSadsl perf-data atuc-fastretrains

Shows count of fast retrain.

show lre PORTSadsl perf-data atuc-fecsl

Shows count of 1-second intervals with one or more FEC.

show lre PORTSadsl perf-data atuc-inits

Shows count of line initialization attempts since agent was reset.

show lre PORTSadsl perf-data atuc-lofs

Shows count of the number of loss of framing failure since agent was reset.

show lre PORTSadsl perf-data atuc-lols

Shows count of the number of loss of link second encountered by an ADSL interface since agent was reset.

show lre PORTSadsl perf-data atuc-lossl

Shows count of 1-second intervals with one or more LOS.

Table 50 Displaying performance data of ATU-C

489


Id:0900d805805de18d

17.1.3 Performance data of ATU-RTo display performance data of ATU-R, use the following command.

17.1.4 Channel performance dataTo display channel performance data of ATU-C/R, use the following command.

The following is an example of displaying channel performance data of ATU-C for slot 1.

show lre PORTSadsl perf-data atuc-loss


Shows count of the number of loss of signal failure since agent was reset.

show lre PORTSadsl perf-data atuc-lprs

Shows count of the number of loss of power failure since agent was reset.

show lre PORTSadsl perf-data atuc-ses

Shows count of severely errored second line.

show lre PORTSadsl perf-data atuc-uas

Shows count of unavailable errored seconds.


Table 50 Displaying performance data of ATU-C (Cont.)


show lre PORTSadsl perf-data atur line


Shows ATU-R performance and line performance data.


show lre PORTSadsl perf-data atur channel

Shows ATU-R performance and channel performance data.

show lre PORTSadsl perf-data atur-es

Shows count of the number of errored second since agent was reset.

show lre PORTSadsl perf-data atur-ses

Shows count of severely errored seconds.

show lre PORTSadsl perf-data atur-uas

Shows count of unavailable errored seconds.

show lre PORTSadsl perf-data atur-lofs

Shows count of the number of loss of framing failure since agent was reset.

show lre PORTSadsl perf-data atur-loss

Shows count of the number of loss of signal failure since agent was reset.

show lre PORTSadsl perf-data atur-lprs

Shows count of the number of loss of power failure since agent was reset.

Table 51 Displaying ADSL-performance data of ATU-R


show lre PORTSadsl chanperf-data{atuc | atur}


Shows channel performance data of ATU-C/R.


atuc ADSL ATUC physical table, ADSL IU side.

atur ADSL ATUR physical table, ADSL modem (CPE) side.

Table 52 Displaying channel performance data of ATU-C/R

490

Operate CLI

Id:0900d805805de18d


SWITCH(bridge)# show lre s1 adsl chanperf-data atuc

-----------------------------------------------------------Port Received Transmitted Corrected Uncorrected Blocks Blocks Blocks Blocks-----------------------------------------------------------8/1 724350 691425 10711

SWITCH(bridge)#

17.1.5 Clearing performance dataTo clear all performance data of ADSL port, use the following command.


clear lre PORTSadsl perf-data [all]

Bridge Clears port performance data on specified port, enter the LRE port number to be cleared.


all Clears all ADSL performance counters from ADSL ATUC physical table.

clear lre PORTSadsl perf-data{atuc | atur} [total | 15min | 1day]

Clears port performance data of ATU-C/R on specified port with the specific option.


atuc ADSL ATUC physical table, ADSL IU side.

atur ADSL ATUR physical table, ADSL modem (CPE) side.

total Clears total performance data.

15min Clears 15 Min (current and previous) performance data from ADSL ATUC physical table.

1day Clears 1 Say (current and previous) performance data from ADSL ATUR physical table.

Table 53 Clearing all performance data of ADSL port

491


Id:0900d805805de18d

17.2 Performance data of xDSL portg The following is applicable for Infineon ConverGate-D based Interface Units.

Error is counted every 15 minutes after booting. After the time is over, the number is reset to "0" and error is counted again. In addition, error is counted by each day. It is also reset to "0" after the day.

Consequently, you can check times of error (Curr15m) at present time from beginning of the 15 minutes and time of error (Prev15m) of previous 15 minutes. Also, you can check times of error (Curr1Day) at present time from starting today, times of error (Prev1day) of yesterday, and total times of error (Total) from booting.

17.2.1 IntervalIn order to display the number of valid intervals for all ports, use the following command.

17.2.2 15 Minutes performance intervalIn order to check the 15min performance data of XTU-C/XTU-R, use one of the following commands.


show xdsl valid-intv-no{15min I 1day} {chan1 | chan2 | line}

Privileged/Config/Bridge

Displays number of valid intervals for all ports.

15min 15 min interval numbers from ADSL ATUC physical table.

1day 1 day interval numbers from ADSL ATUR physical table.

chan1 Fast channel performance intervals, channel 1 perfor-mance intervals.

chan2 Interleaved channel performance intervals, channel 2 performance intervals..

line Line performance intervals.

Table 54 Shows Number of Valid Intervals


show lre PORTSxdsl perf-intv 15min{xtuc I xtur} line{<1-96> I}


Displays 15min line performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number


xtuc xDSL XTU-C physical table, xDSL IU side.

xtur xDSL XTU-R physical table, xDSL modem (CPE) side.

1-96 1 interval of 1-96.

Table 55 Displaying 15 minutes-performance data of ATU-R

492

Operate CLI

Id:0900d805805de18d


17.2.3 1 day performance intervalIn order to check the 1day performance data of XTU-C/XTU-R, use one of the following commands.

show lre PORTSxdsl perf-intv 15min{xtuc I xtur} chan(1|2) {<1-96> I}


Displays 15min channel performance intervals (XTU-C/XTU-R per-formance data of xDSL line), enter the port number.




1 Channel 1 data.

2 Channel 2 data.

1-96 1 interval of 1-96.

show lre PORTSxdsl perf-intvls 15min{xtuc I xtur} line

Displays 15min line performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number.




show lre PORTSxdsl perf-intvls 15min{xtuc I xtur} chan(1|2)

Displays 15min channel performance intervals (XTU-C/XTU-R per-formance data of xDSL line), enter the port number.




1 Channel 1 data.

2 Channel 2 data.


Table 55 Displaying 15 minutes-performance data of ATU-R (Cont.)


show lre PORTSxdsl perf-intv 1day(xtuc|xtur) line (<1-7>|)


Displays 1day line performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number




1-7 One interval of 1-7 (show intvl 1 with CR)

Table 56 Displaying 1-Day Performance Data of ATU-R

493


Id:0900d805805de18d

17.2.4 Performance data of XTU-C/XTU-RIn order to check the performance data of XTU-C/XTU-R, use one of the following com-mands.

show lre PORTSxdsl perf-intv 1day(xtuc|xtur) chan(1|2) (<1-7>|)


Displays 1day channel performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number.




1 Channel 1 data.

2 Channel 2 data.


show lre PORTSxdsl perf-intvls 1day{xtuc I xtur} line

Displays 1day line performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number.




show lre PORTSxdsl perf-intvls 1day{xtuc I xtur} chan(1|2)

Displays 1day channel performance intervals (XTU-C/XTU-R perfor-mance data of xDSL line), enter the port number.




1 Channel 1 data.

2 Channel 2 data.


Table 56 Displaying 1-Day Performance Data of ATU-R (Cont.)


show lre PORTSxdsl perf-data line{xtuc I xtur}


Displays XTU-C/XTU-R line performance data for a specified port, enter the port number.




Table 57 Displaying performance data of XTU-C and XTU-R

494

Operate CLI

Id:0900d805805de18d


17.2.5 Performance data of xDSLTo configure performance data of ATM/xDSL, use the following command.

show lre PORTSxdsl perf-data single{lofs I loss I lprs I lols I ess Isess I uass I inits}


Displays single line performance data for a specified port, enter the port number.


lofs Loss of framing.

loss Loss of signall.

prs Loss of power.

lols Loss of link.

ess Errored seconds.

sess Severlely errored seconds.

uass Unavailable errored seconds.

inits Line initialization attempts (successful + failed).

show lre PORTSxdsl perf-data chan{xtuc I xtur}

Displays XTU-C/XTU-R channel performance data.





Table 57 Displaying performance data of XTU-C and XTU-R (Cont.)


lre PORTS atm reset-perf-data

Bridge ATM configuration of LRE portsReset performance data of VCCs (1/1/2-1/8/2|1/1-1/8|s1|s1-s3)

PORTS LRE port or slot number (1/1-1/8|s1).

Command for IUs controlled by ADSL-(notxDSL)-controller.

lre PORTSxdsl atm reset-perf-data

Bridge xDSL ATM reset-perf-data.Reset performance data of VCCs (1/1/2-1/8/2|1/1-1/8|s1|s1-s3).


lre PORTS xdsl (perfdata-15min-history | perfdata-1day-history) (true|false)

Configure storage of history performance entries for xdsl line.

perfdata-15min-history

Configure storage of counted 15 min history per-formance entries for that line.

perfdata-1day-history

Configure storage of counted 1 day history perfor-mance entries for that line.

true Performance data storage enabled.

false Performance data storage disabled.

Table 58 Configuring performance data of xDSL

495


Id:0900d805805de18d

To show the performance data of xDSL, use the following command.

lre PORTS xdsl atm vcc <1-8> perfcounters (enable | disable)

Bridge LRE port information

– xDSL configuration– ATM configuration– VCC configuration– performance counters of VCCs


1-8 VCC TP value (1...n)

enable Enable performance counters

disable Disable performance counters


show xdsl perf-intvl-enabling (1day | 15min)

Privileged/Global/Bridge

Show all ports with enabled performance interval history state.

1day Enabling of 1day performance interval collection.

15min Enabling of 15min performance interval collec-tion.

show lre PORTSxdsl perf-intvl-ena (1day | 15min | both)

Shows the performance interval history enabling state.


1day Enabling of 1day performance interval collection.

15min Enabling of 15min performance interval collec-tion.

show lre PORTSxdsl atm vcctp-perfdata

Shows VCC TP performance data.


show lre PORTSxdsl perf-intv 1day(xtuc|xtur) line(<1-7>|)

Shows 1day intervals of xDSL line, Line performance inter-val.





show lre PORTSxdsl perf-intv 1day(xtuc|xtur) chan(1|2) (<1-7>|)

Shows 1day intervals of xDSL line, Channel performance intervals. 1: Channel 1 data, 2: Channel 2 data.




1 Channel 1 data.

2 Channel 2 data.


Table 59 Displaying performance data of xDSL


Table 58 Configuring performance data of xDSL (Cont.)

496

Operate CLI

Id:0900d805805de18d


17.2.6 TSSM featureTSSM (Training Speed Statistic Monitoring) feature includes two topics: • Transfer subscriber line performance data by FTP periodically, • Send alarm trap when subscriber line performance meet or miss target.

In order to set tssm configurations, use one of the following commands, se also 14.3.21 Use case: TSSM.

show lre PORTS atm vcctp-perfdata

Privileged/Global/Bridge

Shows LRE port information, ATM information and VCCTP performance data.

PORTS LRE port number

Command for IUs controlled by ADSL-(not xDSL)-controller


Table 59 Displaying performance data of xDSL (Cont.)


tssm Global Changing to TSSM mode.

tssm set alarm (enable|disable) slot <1-17> port <1-72>

Tssm Tssm CLI command, set alarm functionality.

enable Enables alarm functionality

disable Disables alarm functionality

1-17 Slot; input slot NO.

1-72 Port; input port NO.

tssm set ftp rootdir DIR ipaddress A.B.C.D user USER password PASSWORD

Setting the FTP configuration.

tssm Tssm cli command

set Set something

ftp ftp configuration

rootdir Root directory

DIR Input the root directory, we recommend the DSLAM IP

ipaddress Server IP

A.B.C.D input IP address

user User name

USER Input user name

password Password

PASSWORD Input password

tssm set miss target rate criteria (upanddown|up|down)

Setting/Missing the target configured rate standard.

upanddown Use up and down stream rate to judge.

up Only use up stream rate to judge.

down Only use down stream rate to judge.

497


Id:0900d805805de18d

In order to show tssm configurations, use one of the following commands.

tssm set threshold unit(kbps|percentage) slot <1-17> port <1-72>

Threshold configuration setting; threshold unit.

kbps Kbps

percentage Percentage

1-17 Slot number; input slot number.

1-72 Port number; input port number.

tssm set threshold value(up|down) unit (kbps|percentage) THRESHOLD slot <1-17> port <1-72>

Config-tssm

Sets threshold configuration; threshold value.

up Upstream configuration.

down Downstream configuration.

kbps Unit of threshold value; Kbps.

percentage Unit of threshold value; percentage.

THRESH-OLD

Input threshold value. If unit is percentage, then the value must be between 80 and 100.

1-17 Slot number; input slot number.

1-72 Port number; input port number.

tssm set transfer(enable|disable)

Setting the Upload functionality.

enable Enables transfer

disable Disables transfer

tssm set transfer interval<1-24>

Setting the Upload configuration.

1-24 Interval; input the interval.


show tssm configuration Global -tssm

Shows the TSSM configuration.

show tssm linkdown slot <1-17> port <1-72>

Shows TSSM linkdown per slot/per port.

1-17 Slot number, input slot number.

1-72 Port number, input port number.

show tssm linkup slot <1-17> port <1-72>

Shows TSSM linkup per slot/per port.



show tssm portinfo slot <1-17> port <1-72>

Shows Tssm portinfo per slot/per port.



show tssm configuration slot <1-17>

Shows the running config of slot TSSM configuration.

show Show running config of slot

tssm Tssm

configuration Configuration

slot slot number

<1-17> input slot number


498

Operate CLI

Id:0900d805805de18d


17.2.7 PMDR featureTo set the PM Data Retrieval configuration mode, use the following command.

To set the PMDR workmode, use the following command, see 14.3.12 Use case: PMDR.

To set PMDR parameters in the FTP configuration, use the following command.See also 14.3.12.

To show the PMDR parameters, use the following command.

show tssm ftp TSSM Shows the TSSM FTP configuration.

show Show something

tssm Tssm

ftp Tssm ftp configuration



pmdr Glogal Changes to PM Data Retrieval configuration mode.


set pmdr workmode(enable | disable)

Config PMDR Sets the PMDR workmode.

– Set key word,– PM Data Retrieval information.

enable Enables the PM Data Retrieval.

disable Disables the PM Data Retrieval.


set pmdr ftpconfig ipadress A.B.C.D username WORD_u password WORD_p rootpath WORD_r interval <1-96>

Config-pmdr Sets ftp configuration,- PMDR parameters.

A.B.C.D IP adress

WORD_u Username

WORD_p Password

WORD_r Rootpath

1-96 Interval


show pmdr configinfo Config-pmdrGlobal

Shows the PMDR configuration.

499

Operate CLI Network management

Id:0900d805805de18f

18 Network managementBesides CLI, the hiX 5622/25/30/35 R2.8 can be configured by Simple Network Man-agement Protocol (SNMP) and Reomte Monitoring (RMON).

18.1 SNMP configurationSNMP is an application-layer protocol designed to facilitate the exchange of manage-ment information between network devices. SNMP system consists of three parts: an SNMP manager, an SNMP agent and a managed device. SNMP allows SNMP manager and SNMP agent to communicate with each other. SNMP provides a message format for sending information between SNMP manager and SNMP agent. The agent and MIB reside on the switch. In configuring SNMP on the switch, you define the relationship between the manager and the agent. According to community, you can give right only to read or right both to read and to write. The SNMP agent has MIB variables to reply to request from SNMP administrator. And SNMP administrator can obtain data from the agent and save data in the agent. The SNMP agent gets data from MIB, which saves information on system and network.

SNMP agent sends trap to administrator for specific cases. Trap is a warning message to alert network status to SNMP administrator.

The hiX 5622/25/30/35 R2.8 enhances access management of SNMP agent and limit the range of OID opened to agents.

The following is how to configure SNMP.

– SNMP community– Information of SNMP agent– SNMP com2sec– SNMP group– SNMP view record– Permission to access SNMP view record– SNMP version 3 user– SNMP trap– Displaying SNMP configuration– Disabling SNMP

18.1.1 SNMP communityOnly an authorized person can access an SNMP agent by configuring SNMP commu-nity with a community name and additional information.

To configure an SNMP community to allow an authorized person to access, use the fol-lowing command.

500

Operate CLI

Id:0900d805805de18f

Network management

To display a configured SNMP community, use the following command.

The following is an example of creating 2 SNMP communities.

SWITCH(config)# snmp community ro publicSWITCH(config)# snmp community rw privateSWITCH(config)# show snmp community

Community ListCommunity Source OID------------------------------------------community ro publiccommunity rw private

18.1.2 Information of SNMP agentYou can specify basic information of SNMP agent such as administrator, location, and address that identify the agent.

To set basic information of SNMP agent, use the following command.


snmp community (rw | ro) COMMUNITY ((A.B.C.D (OID | )) | )

Global Creates an SNMP community.

ro Sets SNMP read-only community

rw Sets SNMP read/write community

IP-ADDRESS Accessible IP address.

COMMUNITY Community name.

OID Object identity.

no snmp community COMMUNITY

Negate a command or set its defaults;- SNMP configuration- Sets SNMP community

COMMUNITY Community string.


show snmp community PrivilegedGlobal

Shows a created SNMP community.

501


Id:0900d805805de18f

The following is an example of specifying basic information of SNMP agent.

SWITCH(config)# snmp contact BradSWITCH(config)# snmp location GermanySWITCH(config)#

To display basic information of SNMP agent, use the following command.

18.1.3 SNMP com2secSNMP v2 authorizes the host to access the agent according to the identity of the host and community name. The command, com2sec, specifies the mapping from the identity of the host and community name to security name.

To configure an SNMP security name, use the following command.


snmp contact CONTACTS Global Sets a name of contact.

snmp location LOCATION Sets a location of SNMP agent.

no snmp location Negate a command or set its defaults

– SNMP configuration– Set SNMP system location

snmp agent-address ADDRESS Sets an address of SNMP agent.

snmp engineid{default | STRING}

Configure engine ID.

default Use MAC address to generate engineID.

STRING Use speficed string to generate engineID.

no snmp contact Deletes specified basic information for each item.

no snmp agent-address Deletes SNMP agent address.


show snmp contact PrivilegedGlobal

Shows a name of administrator.

show snmp location Shows a location of SNMP agent.

show snmp engineid Shows SNMP engineID configuration.

show snmp engine-boots Shows SNMP engine boots.

show snmp agent-address Shows an address of SNMP agent.

show snmp nsap Shows SNMP nsap information.

502

Operate CLI

Id:0900d805805de18f

Network management

The following is an example of configuring SNMP com2sec.

SWITCH(config)# snmp com2sec TEST 10.1.1.1 PUBLICSWITCH(config)# show snmp com2sec

SecName Source Community---------------------------------------com2secTEST 10.1.1.1 PUBLIC

SWITCH(config)#

18.1.4 SNMP groupYou can create an SNMP group that can access SNMP agent and its community that belongs to a group.

To create/delete/show an SNMP group, use the following command.


snmp com2secSECURITY{IP-ADDRESS | IP-ADDRESS/M} COMMUNITY

Global Specifies the mapping from the identity of the host and community name to security name, enter security and community name.

SECURITY Security name.

IP-ADDRESS Host address.

IP-ADDRESS/M Host address.


no snmp com2secSECURITY

Deletes a specified security name, enter the security name.

show snmp com2sec PrivilegedGlobal

Shows a specified security name.


snmp groupGROUP{v1 | v2c | v3} SECURITY

Global Creats an SNMP group, enter the group name.

GROUP Group name.

SECURITY Security name, user name for v3, com2sec name for v1 and v2.

v1 Version 1.

v2c Version 2c.

v3 Version 3.

no snmp groupGROUP[v1 | v2c | v3] (SECNAME | )

Deletes an SNMP group, enter the group name.

show snmp group PrivilegedGlobal

Shows a created SNMP group.

503


Id:0900d805805de18f

18.1.5 SNMP view recordYou can create an SNMP view record to limit access to MIB objects with object identity (OID) by an SNMP manager.

To configure an SNMP view record, use the following command.

To display a created SNMP view record, use the following command.

SWITCH(config)# snmp view TEST included 410SWITCH(config)# show snmp view View list------------------------------------------------view TEST included 410

SWITCH(config)#

18.1.6 Permission to access SNMP view recordTo grant an SNMP group the access to a specific SNMP view record, use the following command.


snmp view VIEW{included | excluded} OID[MASK]

Global Create an SNMP view record.

VIEW View record name.

included Includes sub-tree.

excluded Excludes sub-tree.

OID OID number.

MASK 0xFF, in hexadecimal.

no snmp view VIEW Deletes a created SNMP view record.


show snmp view PrivilegedGlobal

Shows a created SNMP view record.

504

Operate CLI

Id:0900d805805de18f

Network management

To display a granted SNMP group’s access to a specific SNMP view record, use the fol-lowing command.

18.1.7 SNMP version 3 userIn SNMP version 3, you can register an SNMP agent as user. If you register SNMP version 3 user, you should configure it with the authentication key.

To create/delete SNMP version 3 user, use the following command.


snmp access GROUP (v1|v2c) READ-VIEW WRITE-VIEW

Global Grant an SNMP group the access to a specific SNMP view record.

snmp SNMP configuration.

access Set SNMP accessible groups.

GROUP Accessible group name.

v1 SNMP version 1.

v2c SNMP version 2c.

READ-VIEW

Read view name (if not applied, type "none".)

WRITE-VIEW

Write view name (if not applied, type "none".)

snmp access GROUP (v3|any) (noauth|auth|priv) READ-VIEW WRITE-VIEW

Grant an SNMP version 3 group to access a specific SNMP view record.

snmp SNMP configuration.

access Set SNMP accessible groups.

GROUP Accessible group name.

v3 SNMP version 3.

any Any security model.

noauth No auth and no privacy security level.

auth Auth and no privacy security level.

priv Auth and privacy security level.

READ-VIEW

Read view name (if not applied, type "none".)

WRITE-VIEW

Write view name (if not applied, type "none".)

no snmp access GROUP Deletes a granted SNMP group to access a specific SNMP view record.


show snmp access PrivilegedGlobal

Shows a granted SNMP group’s access to a specific SNMP view record

505


Id:0900d805805de18f

To display a current SNMP version 3 user, use the following command.

18.1.8 SNMP trapSNMP trap is an alert message with that SNMP agent notifies the SNMP manager about certain problems. If you configure SNMP trap, switch transmits pertinent information to network management program. In this case, trap message receivers are called trap host.

To set an SNMP trap host, use the following command.


snmp user USER (md5|sha) AUTH_KEY ((des PRIVATE_KEY)|)

Global Creates an SNMP user for version 3.

USER User name (or user id).

md5 Authentication MD5 mode.

sha Authentication SHA mode.

AUTH_KEY Authentication passphrase (min length : 8).

des Privacy mode.

PRIVATE_KEY Privacy passphrase (min length : 8).

no snmp user USER Deletes a registered SNMP version 3 user.


show snmp user PrivilegedGlobal

Display SNMP version 3 user.

506

Operate CLI

Id:0900d805805de18f

Network management

g You have to configure an SNMP trap host with the snmp trap-host, trap2-host, or trap3-host command, if you manage the DSLAM via the ACI-E.

The kind of command is determined by used version of SNMP: SNMPv1, SNMPv2c, or SNMPv3.

To delete a specified SNMP trap host, use one of the the following commands.

g You can set maximum 16 SNMP trap hosts, inputting hosts one by one. If you try to configure more than 16 SNMP trap hosts, an error message appears.

The following is an example of setting an SNMP trap host.

SWITCH(config)# snmp trap-host 10.1.1.3SWITCH(config)# snmp trap-host 20.1.1.5


snmp trap-hostIP-ADDRESS[COMMUNITY]

Global Specifies IP address of an SNMP trap host.

snmp trap2-hostIP-ADDRESS[COMMUNITY]

IP-ADDRESS <A.B.C.D>


snmp trap3-host A.B.C.D defaultEID (md5|sha) USER AUTH_KEY ((des PRIVATE_KEY)|)

SNMP configuration for an existing user,- Sets SNMP v3 trap host.

A.B.C.D IP address.

trap3-host Set SNMP v3 trap host.

A.B.C.D IP address.

defaultEID EngineID initiated by snmpd itself.

md5 MD5 Authentication protocol.

sha SHA Authentication protocol.

USER User name.

AUTH_KEY Authentication password.

des Privacy protocol.

PRIVATE_KEY Privacy password.

snmp trap3-host A.B.C.D USER Sets SNMP v3 trap host.

snmp trap auth-fail Sets SNMP authentication fail trap

snmp trap-counter reset Reset SNMP trap counter. Reset trap counter to 0.

snmp inform-trap-host IP-ADDRESS [COMMUNITY]

Specifies IP address of an SNMP inform trap host.


no snmp trap-host IP-ADDRESS Global Deletes a specified SNMP trap host.

no snmp trap2-host IP-ADDRESS

no snmp trap3-host IP-ADDRESS

no snmp trap auth-fail

no snmp inform-trap-host IP-ADDRESS Deletes a specified SNMP inform trap host.

507


Id:0900d805805de18f

SWITCH(config)# snmp trap-host 30.1.1.2SWITCH(config)#

To display a configured SNMP trap, use the following command.

18.1.9 Displaying SNMP configurationTo display all configurations of SNMP, use the following command.

18.1.10 Setting SNMP aging timeTo set snmp-aging time for management-session, use the following command.

18.1.11 Disabling SNMPTo disable SNMP feature, use the following command.

18.2 RMON configurationRemote Monitoring (RMON) is a function to monitor communication status of devices connected to Ethernet at remote place. While SNMP can give information only about the device mounting an SNMP agent, RMON gives network status information about overall segments including devices. Thus, user can manage network more effectively. For instance, in case of SNMP it is possible to be informed traffic about certain ports but through RMON you can monitor traffics occurred in overall network, traffics of each host connected to segment, and the current status of traffic between hosts.


show snmp trap PrivilegedGlobal

Shows a configuration of SNMP trap.

show snmp trap-counter PrivilegedGlobal

Shows a configuration of SNMP trap counter.


show snmp PrivilegedGlobal

Shows all configurations of SNMP.


management-session snmp-aging<300-3600>

Global Management Session

– SNMP Aging Time

300-3600 Aging Time(in seconds)


no snmp Global Disables SNMP feature.

!When you use the no snmp command, all configurations concerning SNMP will be deleted.

508

Operate CLI

Id:0900d805805de18f

Network management

Since RMON processes quite lots of data, its processor share is very high. Therefore, administrator should take intensive care to prevent performance degradation and not to overload network transmission caused by RMON. There are nine RMON MIB groups defined in RFC 1757: Statistics, History, Alarm, Host, Host Top N, Matrix, Filter, Packet Capture, and Event. The hiX 5622/25/30/35 R2.8 supports four of them: Statistics, History, Alarm and Event.

18.2.1 RMON historyRMON history is periodical sample inquiry of statistical data about each traffic occurred in Ethernet port. Statistical data of all ports are pre-configured to be monitored at 30-minute interval, and 50 statistical data stored in one port. It also allows you to configure the time interval to take the sample and the number of samples you want to save.

The following is an example of displaying the default configuration of RMON history.

SWITCH(config)# show rmon-history config 5

RMON History configuration:===========================history index : 1data source : 0/1buckets requested : 50buckets granted : 50interval time requested (s) : 1800interval time used (s) : 1800owner : nonestatus : valid

SWITCH(config)#

To open RMON Configuration mode, use the following command.

The following is an example of opening RMON Configuration mode with index number 5.

SWITCH(config)# rmon-history 5SWITCH(config-rmonhistory[5])#

18.2.1.1 Source port of statistical dataTo specify a source port of statistical data, use the following command.


rmon-history <1-65535> Global Open RMON Configuration mode.

1-65535 Index number.


data-source PORT RMON Specifies a source port of statistical CXU uplink port.

PORT: enter the uplink port number. (e.g. slot/port for uplink port, slot/port/vcc for data port)

509


Id:0900d805805de18f

18.2.1.2 Subject of RMON historyTo identify a subject using RMON history, use the following command.

18.2.1.3 Number of sample dataTo configure the number of sample data of RMON history, use the following command.

18.2.1.4 Interval of sample inquiryTo configure the interval of sample inquiry in terms of second, use the following command.

g 1 sec is the minimum time which can be selected. But the minimum sampling interval currently is 30 sec, i.e., all intervals will be round up to a multiple of 30 seconds.

18.2.1.5 Activating RMON historyTo activate RMON history, use the following command.

18.2.1.6 Deleting configuration of RMON historyTo delete an RMON history, use the following command.

18.2.1.7 Displaying RMON historyTo display a configured RMON history, use the following command.


owner NAME RMON Identify subject using related data, enter the name (max. 127 characters).


requested-buckets <1-65535> RMON Define a bucket count for the interval, enter the number of buckets.

1-65535 Bucket number.


interval <1-3600> RMON Define the time interval for the history (in seconds, minimum interval is 30 s).


active RMON Activate RMON history.


no rmon-history <1-65535> Global Deletes the RMON history of specified number, enter the value for deleting.

510

Operate CLI

Id:0900d805805de18f

Network management

g Always the last values will be displayed but no more than the number of the granted buckets.

The following is an example of displaying RMON history.

SWITCH(config-rmonhistory[5])# show rmon-history config 5

RMON History configuration:===========================history index : 5data source : 0/1 (1)buckets requested : 25buckets granted : 25interval time used (s) : 60owner : teststatus : valid

SWITCH(config-rmonhistory[5])#


show rmon-history config<1-65535>

GlobalRMON_history

Shows the configuration of an RMON history of specified number, enter the value for specifying.

show rmon-history ether-history<1-65535> <1-100>

GlobalPrivilegedRMON_history

Shows the ether history entries (sampling values);

1-65535 enters the history index for ether history table.

1-100 enters the number of sample to be displayed.

511


Id:0900d805805de18f

18.2.2 RMON alarmYou need to open RMON Alarm Configuration mode first to configure RMON alarm.

18.2.2.1 Subject of RMON alarmYou need to configure RMON alarm and identify subject using many kinds of data from alarm. To identify subject of alarm, use the following command.

18.2.2.2 Object of sample inquiryTo assign object used for sample inquiry, use the following command.


rmon-alarm <1-65535> Global Open RMON Alarm Configuration mode.

1-65535 Index number.


owner NAME RMON Identify subject using related data, enter the name (max. 32 characters).


sample-variableMIB-OBJECT

RMON Assign MIB object used for sample inquiry, max. 255 charac-ters.

512

Operate CLI

Id:0900d805805de18f

Network management

18.2.2.3 Absolute and delta comparisonThere are two ways to compare with the threshold: absolute comparison and delta com-parison.

– Absolute comparisonComparing sample data with the threshold at configured interval, if the data is more than the threshold or less than it, alarm is occurred.

– Delta comparisonComparing difference between current data and the latest data with the threshold, if the data is more than the threshold or less than it, alarm is occurred.

To compare object selected as sample with the threshold, use the following command.

To configure delta comparison, use the following command.

sample-variable(WORD | ifInOctets | ifInUcastPkts | ifInNUcastPkts | ifInDiscards | ifInErrors | ifInUnknownProtos | ifOutOctets | ifOutUcastPkts | ifOutNUcastPkts | ifOutDiscards | ifOutErrors | ifInMulticastPkts | ifInBroadcastPkts | ifOutMulticastPkts | ifOutBroadcastPkts | ifHcInOctets | ifHcInUcastPkts | ifHcInMulticastPkts | ifHcInBroadcastPkts | ifHcOutOctets | ifHcOutUcastPkts | ifHcOutMulticastPkts | ifHcOutBroadcastPkts) (PORT | )

RMON Define the counter which is observed, MIB Object OID (max. 255 characters in form X.X...X.IFIDX)

ifInOctets RFC 1213 interface counter value.

ifInUcastPkts RFC 1213 interface counter value.

ifInNUcastPkts RFC 1213 interface counter value.

ifInDiscards RFC 1213 interface counter value.

ifInErrors RFC 1213 interface counter value.

ifInUnknownProtos RFC 1213 interface counter value.

ifOutOctets RFC 1213 interface counter value.

ifOutUcastPkts RFC 1213 interface counter value.

ifOutNUcastPkts RFC 1213 interface counter value.

ifOutDiscards RFC 1213 interface counter value.

ifOutErrors RFC 1213 interface counter value.

ifInMulticastPkts RFC 2233 interface counter value.

ifInBroadcastPkts RFC 2233 interface counter value.

ifOutMulticastPkts RFC 2233 interface counter value.

ifOutBroadcastPkts RFC 2233 interface counter value.

ifHcInOctets RFC 2233 interface counter value.

ifHcInUcastPkts RFC 2233 interface counter value.

ifHcInMulticastPkts RFC 2233 interface counter value.

ifHcInBroadcastPkts RFC 2233 interface counter value.

ifHcOutOctets RFC 2233 interface counter value.

ifHcOutUcastPkts RFC 2233 interface counter value.

ifHcOutMulticastPkts RFC 2233 interface counter value.

ifHcOutBroadcastPkts RFC 2233 interface counter value.

Port that should be observed (do not enter in case of OID)



sample-type absolute RMON Compare object with the threshold directly.

513


Id:0900d805805de18f

18.2.2.4 Upper bound of thresholdIf you need alarm occuring when object used for sample inquiry is more than upper bound of threshold, you have to configure the upper bound of threshold.

To configure upper bound of threshold, use the following command.

After configuring upper bound of threshold, configure to generate RMON event when object is more than configured threshold. Use the following command.

18.2.2.5 Lower bound of thresholdIf you need alarm occuring when object used for sample inquiry is less than lower bound of threshold, you should configure lower bound of threshold. To configure lower bound of threshold, use the following command.

After configuring lower bound of threshold, configure to generate RMON event when object is less than configured threshold. Use the following command.

18.2.2.6 Standard of the first alarmIt is possible for users to configure standard when alarm is first occurred. User can select the first point when object is more than threshold, or the first point when object is less than threshold, or the first point when object is more than threshold or less than threshold.

To configure the first RMON alarm to occur when object is less than lower bound of threshold first, use the following command.


sample-type delta RMON Compare difference between current data and the latest data with the threshold.


rising-threshold VALUE RMON Configure upper bound of threshold.

VALUE Range is 1-2147483647


rising-event <1-65535> RMON Configure to generate RMON event when object is more than con-figured threshold.

1-65535 EVENT index.


falling-threshold VALUE RMON Configure lower bound of threshold.

VALUE Range is 1-2147483647


falling-event <1-65535> RMON Configure to generate RMON alarm when object is less than con-figured threshold.

514

Operate CLI

Id:0900d805805de18f

Network management

To configure the first RMON alarm to occur when object is more than upper bound of threshold first, use the following command.

To configure the first RMON alarm to occur when object is more than threshold or less than threshold at first, use the following command.

18.2.2.7 Interval of sample inquiryThe interval of sample inquiry means time interval to compare selected sample data with upper bound of threshold or lower bound of threshold in terms of seconds.

To configure interval of sample inquiry for RMON alarm, use the following command.

18.2.2.8 Activating RMON alarmAfter finishing all configurations, you need to activate RMON alarm. To activate RMON alarm, use the following command.

18.2.2.9 Deleting configuration of RMON alarmTo delete RMON alarm, use the following command.

18.2.2.10 Displaying RMON alarmTo display a configured RMON alarm, use the following command.


startup-type falling RMON Configure the first RMON alarm to occur when object is less than lower bound of threshold at first.


startup-type rising RMON Configure the first alarm to occur when object is more than upper bound of threshold at first.


startup-type rising-and-falling RMON Configure the first alarm to occur when object is more than upper bound threshold or less than lower bound threshold at first.


sample-interval <0-65535> RMON Configure interval of sample inquiry.(unit: second)


active RMON Activate RMON alarm.


no rmon-alarm <1-65535> Global Deletes RMON history of specified number, enter the value for deleting.

515


Id:0900d805805de18f

18.2.3 RMON eventRMON event identifies all operations such as RMON alarm in the switch. You can con-figure event or trap message to be sent to SNMP management server when sending RMON alarm.

You need to open RMON Event Configuration mode to configure RMON event.

18.2.3.1 Event communityWhen RMON event happens, you need to input community to transmit SNMP trap message to host. Community means a password to give message transmission right.

To configure community for trap message transmission, use the following command.

18.2.3.2 Event descriptionIt is possible to describe event briefly when event happens. However, the description will not be automatically made. Thus administrator should make the description.

To specify a description about the current RMON event, use the following command.

18.2.3.3 Subject of RMON eventYou need to configure event and identify subject using various data from event. To identify subject of RMON event, use the following command.


show rmon-alarm config<1-65535>

GlobalRMON

Shows the configuration of an RMON alarm of specified number, enter the value for specifying.


rmon-event <1-65535> Global Open RMON Event Configuration mode.

1-65535 index number.


community WORD RMON Configure password for trap message transmission right.

WORD Community string (max. 127 characters).


description LINE RMON Specifies the description of the current RMON event.

LINE Description text (max. 127 characters)


owner NAME RMON Identify subject of event. You can use maximum 127 characters and this subject should be the same with the subject of RMON event.

516

Operate CLI

Id:0900d805805de18f

Network management

18.2.3.4 Event typeWhen RMON event happens, you need to configure event type to arrange where to send event.

To configure event type, use the following command.

18.2.3.5 Activating RMON eventAfter finishing all configurations, you should activate RMON event. To activate RMON event, use the following command.

18.2.3.6 Deleting configuration of RMON eventTo delete RMON event, use the following command.

18.2.3.7 Displaying RMON eventTo display a configured RMON event, use the following command.

18.2.3.8 Showing RMON logTo show RMON log, use the following command.


type log RMON Configure event type as log type. Event of log type is sent to the place where the log file is made.

type trap Configure event type as trap type. Event of trap type is sent to SNMP administrator and PC.

type log-and-trap Configure event type as both log type and trap type.

type none Configure none event type.


active RMON Activate RMON event.


no rmon-event <1-65535> Global Deletes RMON event of specified number.


show rmon-event config<1-65535>

GlobalRMON

Shows the configuration of an RMON event of specified number, enter the value for specifying.


show rmon-log Global Shows RMON log information.

517


Id:0900d805805de18f

18.3 Syslog configurationThe syslog is a function that allows the network element to generate the event notifica-tion and forward it to the event message collector like a syslog server. This function is enabled as default, so even though you disable this function manually, the syslog will be enabled again.

This Section contains the following contents.

– Syslog output level– Facility code– Syslog bind address– Debug message for remote terminal– Enabling/disabling syslog– Displaying syslog message– Displaying syslog configuration

18.3.1 Syslog output levelSystem output level could be set with/without a priority.

Syslog output level without a priorityTo set a syslog output level without a priority, use the following command.


syslog output(emerg | alert | crit | err | warning | notice | info | debug | event console

Global System logger,- output redirection.

console Consoletile.

syslog output(emerg | alert | crit | err | warning | notice | info | debug | event) local (volatile | non-volatile)

System logger,- output redirection.

Output redirection.

emerg Emergency(0).

alert Alert(1) or more serious.

crit Critical(2) or more serious.

err Error(3) or more serious.

warning Warning(4) or more serious.

notice Notice(5) or more serious.

info Informational(6) or more serious.

debug Debug(7) or more serious.

event Event(8) only for event.

local Local output file.

volatile Delete a syslog message after restart.

non-volatile Reserve a syslog message.

syslog output (emerg | alert | crit | err | warning | notice | info | debug | event remote A.B.C.D

System logger,- output redirection.

remote Remote host.

A.B.C.D IP address.

518

Operate CLI

Id:0900d805805de18f

Network management

To disable a specified syslog output without priority, use the following command.


no syslog output (emerg | alert | crit | err | warning | notice | info | debug | event) local (volatile | non-volatile)

Global Negate a command or set its defaults.Deletes a specified syslog output.


syslog System logger

output Output redirection

emerg Emergency(0)

alert Alert(1) or more serious

crit Critical(2) or more serious

err Error(3) or more serious

warning Warning(4) or more serious

notice Notice(5) or more serious

info Informational(6) or more serious

debug Debug(7) or more serious

event Event(8) only for event

local Local output file

volatile Volatile

non-volatile Non-volatile

no syslog output (emerg | alert | crit | err | warning | notice | info | debug | event) remote A.B.C.D





emerg Emergency(0)







debug Debug(7) or more serious

event Event(8) only for event

remote Remote host

A.B.C.D IP address

519


Id:0900d805805de18f

no syslog output priority (auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp) (emerg | alert | crit | err | warning | notice | info) console





priority Specify priority

auth Security/authorization message

authpriv Security/authorization message

cron Clock daemon

daemon System daemons without separate facility value

kern Kernel messages

local1 Reserved for local use







lpr Line printer subsystem

mail Mail subsystem

news USENET news subsystem

syslog Messages generated internally by syslogd

user Generic user-level messages

uucp UUCP subsystem

emerg Emergency(0)







console Console


520

Operate CLI

Id:0900d805805de18f

Network management

no syslog output priority (auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp) (emerg | alert | crit | err | warning | notice | info) local (volatile | non-volatile)








cron Clock daemon











mail Mail subsystem




uucp UUCP subsystem

emerg Emergency(0)







local Local output file

volatile Volatile

non-volatile Non-volatile


521


Id:0900d805805de18f

To show a specified syslog output, use the following command.

no syslog output priority (auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp) (emerg | alert | crit | err | warning | notice | info) remote A.B.C.D








cron Clock daemon











mail Mail subsystem




uucp UUCP subsystem

emerg Emergency(0)







remote Remote host

A.B.C.D IP address


522

Operate CLI

Id:0900d805805de18f

Network management

Syslog output level with a priorityTo set a user-defined syslog output level with a priority, use the following command.


show syslog local(volatile|non-volatile) NUM

GlobalPriviledged

Shows running system information,- system logger.

local Local output file.



NUM Lastest lines number.

show syslog event local(volatile | non-volatile) (igmp | dhcp-pppoe | swch | all)

Shows a specified syslog output.



igmp IGMP event.

dhcp-pppoe DHCP-PPPoE event.

swch Switch event.

all All events.

Note: The following debug command was integrated according customer request.

debug switch event Bridge Debugging functions (see also 'undebug')

– for swchd– MAC learning events


syslog output priority{auth | authpriv | cron |daemon | kern | local1 |local2 | local3 | local4 |local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} local {volatile | non-volatile}

Global Generate a user-defined syslog message with a priority in the system memory.

volatile Deletes a syslog message after restart.


syslog output priority{auth | authpriv | cron |daemon | kern | local1 |local2 | local3 | local4 |local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} remote IP-ADDRESS

Generates a user-defined syslog message with a priority and forwards it to a remote host.

523


Id:0900d805805de18f

To disable a user-defined syslog output level with priority, use the following command.

syslog output priority (auth | authpriv | cron | daemon | kern | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp) (emerg | alert | crit | err | warning | notice | info) console

Global System logger,- output redirection,- specify priority.Generate a user-defined syslog message with a priority and forwards it to the console.



cron Clock daemon











mail Mail subsystem




uucp UUCP subsystem

emerg Emergency(0)







console Console


524

Operate CLI

Id:0900d805805de18f

Network management

g The order of priority is emergency > alert > critical > error > warning > notice > info. If you set a specific level of syslog output, you will receive only a syslog message for selected level or higher. If you want receive a syslog message for all the levels, you need to set the level to info.

The following examples show how to configure syslog and display syslog configuration.

Enables syslog output on remote server.SWITCH(config)# syslog output info remote 1.1.1.1

--> Disables syslog output on remote serverSWITCH(config)# no syslog output info remote 1.1.1.1

--> Enables syslog output on local volatile memory.SWITCH(config)# syslog output info local volatile

--> Disables syslog output on local volatile memory.SWITCH(config)# no syslog output info local volatile

--> Shows syslog from local volatile memory.SWITCH(config)# show syslog local volatile

--> Enables syslog output on console.SWITCH(config)# syslog output info console

--> Disables syslog output on console.SWITCH(config)# no syslog output info console


no syslog output priority{auth | authpriv | cron |daemon | kern | local1 |local2 | local3 | local4 |local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} console

Global Deletes a specified user-defined syslog output level with a pri-ority.

no syslog output priority{auth | authpriv | cron |daemon | kern | local1 |local2 | local3 | local4 |local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} local {volatile | non-volatile}

syslog output priority{auth | authpriv | cron |daemon | kern | local1 |local2 | local3 | local4 |local5 | local6 | local7 | lpr | mail | news | syslog | user | uucp} {emerg | alert | crit | err | warning | notice | info} remote IP-ADDRESS

525


Id:0900d805805de18f

18.3.2 Facility codeYou can set a facility code of the generated syslog message. This code makes a syslog message distinguished from others, so network administrator can handle various syslog messages efficiently.

To set a facility code, use the following command.

18.3.3 Syslog bind addressYou can specify an IP address to attach to the syslog message for its identity. To specify the IP address for syslog identity, use the following command.

18.3.4 Debug message for remote terminalTo display a syslog debug message to a remote terminal, use the following command.


syslog local-code <0-7> Global Sets a facility code.

no syslog local-code Deletes a specified facility code.


syslog bind-address A.B.C.D Global Specifies an IP address for a syslog message identity.

bind-address Bind address cancel.

A.B.C.D IP Address.

no syslog bind-address Deletes a specified binding IP address.


syslog Configure syslog parameter.

bind-address Bind address cancel.


terminal monitor Privileged Set terminal line parameters

– Copy debug output to the current terminal line

terminal no monitor Disables a terminal monitor function.

526

Operate CLI

Id:0900d805805de18f

Network management

terminal length (0|<3-512>) PrivilegedIMISH

Set terminal column parameters

– Set number of lines on a screen– no pausing

<3-512> Number of lines on screen (0 for no pausing).

terminal no length Unset terminal line parameters

– Negate a command or set its defaults– Unset number of lines on a screen

terminal column <0-512> Set terminal column parameters

– Set number of columns on a screen

0-512 Number of columns on screen (0 for no pausing)

terminal no column Unset terminal line parameters

– Negate a command or set its defaults– Unset number of columns on a screen


527


Id:0900d805805de18f

18.3.5 Enabling/disabling syslogTo enable/disable the syslog, use the following command.

g The syslog is basically enabled in the system, so the command, syslog start, is nec-essary only when the function is manually disabled by user.

18.3.6 Displaying syslog messageTo display the received syslog message in the system memory, use the following command.

To delete the received syslog message from the system memory, use the following command.

18.3.7 Displaying syslog configurationTo display the configuration of the syslog, use the following command.

The following is an example of displaying the configuration of the syslog.

SWITCH(config)# show syslog

System logger on running! infolocal volatileinforemote 10.27.41.11infoconsoleemergconsole

SWITCH(config)#


syslog start Global Enables the syslog.

no syslog Disables the syslog.


show syslog local{volatile | non-volatile}[NUMBER]

PrivilegedGlobal

Shows a received syslog message.

volatile Removes a syslog message after restart.


NUMBER Shows the last N syslog messages.


clear syslog local{volatile | non-volatile}

Global Remove a received syslog message.


show syslog PrivilegedGlobal

Shows the configuration of the syslog.

528

Operate CLI

Id:0900d8058025fb7f

Abbreviations

19 AbbreviationsAAL5 ATM Adaptation Layer type 5

ACI Access Integrator

ACL Access Control List

ADSL Asymmetric Digital Subscriber Line

ADSL2+ Asymmetric Digital Subscriber Line 2+

ARP Address Resolution Protocol

ATM Asynchronous Transfer Mode

AS Autonomous System

BGP Border Gateway Protocol

BPDU Bridge Protocol Data Unit

CBS Committed Burst Size

CE Communauté européenne

CEBS Carrier Ethernet Border Switch

CIDR Classless Inter Domain Routing

CIR Committed Information Rate

CLI Command Line Interface

CoS Class of Service

CPE Customer Premises Equipment

CRC Cyclic Redundancy Check/Code

CSNP Complete Sequence Number PDU

CXU Central Switch Fabric Unit

DA Destination Address

DHCP Dynamic Host Configuration Protocol

DIN Deutsche Industrie Norm (German Standard)

DRAM Dynamic Random Access Memory

DSCP Differentiated Service Code Point

DSL Digital Subscriber Line

DSLAM Digital Subscriber Line Access Multiplexer

E1 ETSI digital signal level 1 (2.048 Mbit/s)

EGP Exterior Gateway Protocol

529

Operate CLI Abbreviations

Id:0900d8058025fb7f

EMC Electro-Magnetic Compatibility

EN European Norm

ERP Ethernet Ring Protection

FDB Filtering Data Base

FE Fast Ethernet

FTP File Transfer Protocol

G400/G400R Low density medium DSLAM G400 Shelf Variant

G600/G600R Medium density medium DSLAM G600 Shelf Variant

G1100 High density medium DSLAM G1100 Shelf Variant

GB Gigabyte

GE Gigabit Ethernet

hiX Access Products in SURPASS Product Family

HW Hardware

I2C Inter - Integrated Circuit interface

ID Identifier

IEC International Electrotechnical Commission

IEEE 802 Standards for Local and Metropolitan Area Networks

IEEE 802.1 Glossary, Network Management, MAC Bridges, and Internetworking

IEEE Institute of Electrical and Electronic Engineers

IETF Internet Engineering Task Force

IGMP Internet Group Management Protocol

IP Internet Protocol

IRL Input Rate Limit

IS Intermediate System

ISP Internet Service Provider

ITU International Telecommunication Union

ITU-T International Telecommunication Union - Telecommunications standardisation sector

IU Interface Unit

L2 Layer 2

LACP Link Aggregation Control Protocol

LAN Local Area Network

LCT Local Craft Terminal

530

Operate CLI

Id:0900d8058025fb7f

Abbreviations

LED Light Emitting Diode

L2CP Layer 2 Control Protocol

LLC Logical Link Control

LLDP Link Layer Discover Protocol

LOF Loss of Frame

LOL Loss of Link

LOS Loss of Signal

LPR Loss of Power

LSP Link state PDU

M1100 High density medium DSLAM M1100 Shelf Variant

M1200 High density medium DSLAM M1200 Shelf Variant

M400 Low density medium DSLAM M400 Shelf Variant

M600 Medium density medium DSLAM M600 Shelf Variant

MAC Medium Access Control

MIB Management Information Base

MSTP Multiple Spanning Tree Protocol

MTA Metallic Test Access

MTU Multi Tenant Unit

NBMA nonbroadcast Multi-access

NE Network Element

NTR Network Timing Reference

OAM Operation, Administration and Maintenance

ORL Output Rate Limiter

OS Operating System

OSPF Open Shortest Path First

PC Personal Computer

PDU Protocol Data Unit

PPP Point to Point Protocol

PPPoE PPP over Ethernet

PSTN Public Switched Telephone Network

PVC Permanent Virtual Connection

QoS Quality of Service

531

Operate CLI Abbreviations

Id:0900d8058025fb7f

RFC Request for Comments

RIP Routing Information Protocol

RSTP Rapid Spanning Tree Protocol

RTCP Realtime Control Protocol

RTP Real-Time Transport Protocol

SA Source Address

SFP Small Form Factor Pluggable

SHDSL Symmetrical High Bit Rate Digital Subscriber Line

SNMP Simple Network Management Protocol

SNR Signal to Noise Ratio

STP Spanning Tree Protocol

SW Software

TCP Transmission Control Protocol

TFTP Trivial FTP

TMN Telecommunication Management Network

TOS Type of Service

UDP User Datagram Protocol

UMN User Manual

VC Virtual Channel

VCI Virtual Channel Identifier

VID VLAN ID

VLAN Virtual Local Area Network

VoD Video on Demand

VoIP Voice over IP

VPI Virtual Path Identifier

VPLU VoIP over POTS Line Unit

VPN Virtual Private Network

xDSL Any form of DSL

xTU-C xDSL Terminal Unit Central

xTU-R xDSL Terminal Unit Remote

Documents

Manuale DSLAM Nokia